Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: +RhCr7e3jfHMV1hvjptNy2q3vBZSngKEZJiXnjX8gYk=
Subject key identifier: 38:4C:A9:E9:5A:5B:42:82:58:1E:C0:68:9B:11:00:97:A0:E5:8C:9A
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019936F01F5B7557114565473CCB773815DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 04:02:10 +0000
Manifest this update: Thu 11 Sep 2025 04:02:10 +0000
Manifest next update: Fri 12 Sep 2025 04:02:10 +0000
Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: YW+I0Q3gsvTLmCIuFgjNZ/HZaFBse9yLa2/PZF93+pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:1f:5b:75:57:11:45:65:47:3c:cb:77:38:15:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Sep 11 04:02:10 2025 GMT
Not After : Sep 12 04:02:10 2025 GMT
Subject: CN=384ca9e95a5b4282581ec0689b110097a0e58c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:07:fb:a7:47:a1:54:84:54:f3:4c:1e:e0:f1:
6a:4d:dc:92:c7:6e:5e:8a:50:00:a2:2a:88:eb:a0:
21:8f:44:5e:e1:4a:65:e2:96:c2:52:58:24:11:55:
44:31:c6:ab:0b:80:e5:f0:79:9b:91:da:34:85:f8:
f0:f9:87:0e:8d:b8:29:22:2a:21:97:a2:1b:8c:53:
69:74:8f:d8:ca:96:ba:26:b7:78:91:db:e0:8e:85:
08:01:e5:b7:fd:a1:4d:87:f0:74:71:3e:97:d2:77:
b9:a6:d3:39:73:e5:c7:bf:a5:cf:86:84:a4:18:df:
3f:7e:6c:51:77:fe:b5:f3:fe:0a:4c:36:02:f1:8f:
c6:0c:5b:2d:4c:2c:cc:e3:0b:c2:5f:90:9f:5a:7f:
51:79:68:2d:cb:6f:e1:c2:c7:4f:b2:f7:31:ed:73:
7e:5e:5f:0e:a7:8b:7f:8c:0e:bb:c6:2e:cc:b8:07:
90:3c:8f:5a:e1:ee:80:34:df:4b:06:32:48:79:69:
29:ff:27:cb:3d:1f:86:d3:a7:86:b5:7b:79:8e:6f:
1d:6e:b4:2c:3b:3c:4a:ee:e2:90:7b:bb:cc:8c:77:
04:61:e7:c3:3a:e7:76:c0:4d:b5:c2:fd:07:57:b0:
9f:8f:56:25:19:71:a2:c5:5d:49:02:1a:05:f3:ed:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:A9:E9:5A:5B:42:82:58:1E:C0:68:9B:11:00:97:A0:E5:8C:9A
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:02:ab:c8:8c:13:30:e1:ce:ff:88:3d:c9:d6:41:ad:89:3f:
93:97:f0:bf:dd:c3:5e:bc:be:30:04:1f:a5:75:71:56:51:b8:
81:20:7c:f3:d2:17:9f:5a:f0:df:0b:9b:1a:65:21:60:0c:bf:
8f:60:24:a2:03:aa:03:b6:0c:87:6c:54:1b:84:6d:53:a5:57:
9c:03:68:03:9d:60:51:bc:d6:b5:49:49:b2:f9:ec:f3:50:14:
fb:bc:23:8b:ea:4d:ff:a8:49:b5:c9:ec:d7:db:b9:cb:2d:f9:
e4:ad:15:96:69:bc:92:6f:3c:20:81:8d:29:2a:9f:fe:5a:92:
7b:25:26:08:30:3e:fc:13:a1:f3:04:b4:dc:bb:8e:1f:1b:55:
5e:f2:84:77:f0:e8:f1:f9:f1:bf:cf:bf:af:bd:92:72:66:4b:
8c:26:5e:4a:d6:42:f1:3f:68:19:e5:0a:dd:c0:9f:74:e6:9a:
eb:43:2b:73:d2:49:42:7d:42:ab:7d:04:cf:a6:99:f8:b5:26:
82:ea:6f:ae:c2:f0:7f:46:c0:01:19:0f:f9:02:5b:42:95:24:
58:f1:77:f4:0c:2a:c6:56:99:49:05:dc:53:d4:da:6e:8b:bd:
de:5b:ef:d2:50:a4:f0:2f:39:39:df:e6:68:12:4d:02:0c:b4:
11:c3:e2:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk28B9bdVcRRWVHPMt3OBXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx
NjUzYWEwHhcNMjUwOTExMDQwMjEwWhcNMjUwOTEyMDQwMjEwWjAzMTEwLwYDVQQD
EygzODRjYTllOTVhNWI0MjgyNTgxZWMwNjg5YjExMDA5N2EwZTU4YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Af7p0ehVIRU80we4PFqTdySx25e
ilAAoiqI66Ahj0Re4Upl4pbCUlgkEVVEMcarC4Dl8Hmbkdo0hfjw+YcOjbgpIioh
l6IbjFNpdI/Yypa6Jrd4kdvgjoUIAeW3/aFNh/B0cT6X0ne5ptM5c+XHv6XPhoSk
GN8/fmxRd/618/4KTDYC8Y/GDFstTCzM4wvCX5CfWn9ReWgty2/hwsdPsvcx7XN+
Xl8Op4t/jA67xi7MuAeQPI9a4e6ANN9LBjJIeWkp/yfLPR+G06eGtXt5jm8dbrQs
OzxK7uKQe7vMjHcEYefDOud2wE21wv0HV7Cfj1YlGXGixV1JAhoF8+2CFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhMqelaW0KCWB7AaJsRAJeg5YyaMB8GA1UdIwQY
MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt
N2JjMjY4YTBiNTE3LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3
LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegKryIwT
MOHO/4g9ydZBrYk/k5fwv93DXry+MAQfpXVxVlG4gSB889IXn1rw3wubGmUhYAy/
j2AkogOqA7YMh2xUG4RtU6VXnANoA51gUbzWtUlJsvns81AU+7wji+pN/6hJtcns
19u5yy355K0Vlmm8km88IIGNKSqf/lqSeyUmCDA+/BOh8wS03LuOHxtVXvKEd/Do
8fnxv8+/r72ScmZLjCZeStZC8T9oGeUK3cCfdOaa60Mrc9JJQn1Cq30Ez6aZ+LUm
gupvrsLwf0bAARkP+QJbQpUkWPF39AwqxlaZSQXcU9Tabou93lvv0lCk8C85Od/m
aBJNAgy0EcPimw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 06:11:16 2025 by rpki-client