Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: 5+iJslJAQG+cZ0E9d/3BB1Q1JmsAc2zsWWmcKPLWNtk=
Subject key identifier: EB:DE:8B:E3:03:A2:88:8B:0C:E6:AC:25:DE:8E:F5:8F:BE:73:E6:01
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019A7113487DBA5496CC9FE8A541254563C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:20 +0000
Manifest this update: Tue 11 Nov 2025 04:01:20 +0000
Manifest next update: Wed 12 Nov 2025 04:01:20 +0000
Files and hashes: 1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=)
2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: dPgGTWLdplo8HJjeCj3V6cWcXPc60CdoRs+9CTWJtWI=)
3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=)
4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:48:7d:ba:54:96:cc:9f:e8:a5:41:25:45:63:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Nov 11 04:01:20 2025 GMT
Not After : Nov 12 04:01:20 2025 GMT
Subject: CN=ebde8be303a2888b0ce6ac25de8ef58fbe73e601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:ef:cc:bf:52:2c:82:80:91:b4:24:b8:f2:
66:ab:68:a6:35:c3:65:7b:11:ea:70:39:6b:b2:4a:
91:13:57:c5:d8:fb:45:29:fe:b9:d3:60:1a:39:5e:
25:99:11:2b:36:98:bd:f0:86:95:15:da:88:e6:e4:
57:07:3d:c6:1d:09:e6:7e:c8:ed:40:be:8c:0e:6f:
e8:75:36:ae:f0:14:cd:c5:8c:fd:31:f0:aa:13:2b:
5f:22:ac:93:44:33:b6:98:3b:e0:42:ee:ae:51:ad:
46:75:23:da:c3:7b:f6:83:16:ab:8b:db:6d:26:d0:
2a:54:63:ab:5e:cd:cc:8a:4f:bb:48:21:d3:ce:e7:
a0:00:1f:c8:b3:a9:77:37:0c:4a:14:40:50:7d:bd:
97:0f:f6:63:e4:44:49:71:29:7c:59:da:2d:b9:58:
4b:bb:d9:4a:fc:70:42:5a:c4:7e:ad:f0:b7:aa:d2:
3f:5e:b5:68:7a:2f:0a:f7:e6:c8:d7:45:3e:f3:f8:
d1:75:4c:eb:fd:06:05:40:66:ad:f1:f4:e4:94:03:
ac:fe:c9:f4:c7:14:1f:0a:04:8e:b7:7a:6e:24:e3:
85:22:a6:09:e3:af:b8:18:03:83:c7:5d:4c:c1:05:
74:cf:7f:f6:a6:45:5f:39:4e:00:ad:12:8b:46:bf:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:8B:E3:03:A2:88:8B:0C:E6:AC:25:DE:8E:F5:8F:BE:73:E6:01
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3f:02:ef:f0:98:32:f8:8e:73:ed:75:66:1c:27:81:20:6a:
59:f2:e2:43:0c:2d:e8:1b:a4:55:8a:39:b3:40:1e:37:46:86:
49:52:34:ad:c7:9b:c6:41:9a:fe:52:ef:cb:5c:d4:e5:f9:62:
d9:3f:02:bf:a9:e5:3c:40:d1:89:30:76:2e:9b:50:93:5e:e1:
78:c6:48:e6:bb:98:6f:68:66:c1:fa:d8:80:68:4e:99:98:c6:
96:24:a6:6c:1e:37:f8:de:4a:98:2b:4b:43:de:62:81:c4:09:
c9:8b:5e:5b:ea:cb:14:71:f7:f9:2a:40:9c:8c:b5:da:12:19:
24:5b:fa:13:5c:7f:b4:af:e9:3c:e0:10:1d:a4:a2:32:02:9d:
90:92:95:c5:3f:0e:b3:0a:cc:02:d4:82:bd:9a:1f:25:6c:cc:
74:ec:72:dc:4b:7a:03:d8:70:5e:e0:0b:77:9d:89:31:54:89:
76:65:16:09:f1:ff:f4:54:f9:b4:4f:ab:62:17:ef:cf:d7:eb:
f6:ca:ae:29:b8:f7:44:91:50:a0:b8:6d:77:16:50:7d:be:4a:
12:71:84:58:14:55:b2:55:f7:35:59:91:2d:40:ca:53:9a:9d:
bf:4f:16:64:6e:8d:f9:35:e7:aa:e2:79:f1:98:41:b6:1b:99:
3a:ed:d8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE0h9ulSWzJ/opUElRWPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjNmODI1OWIzMGVjMDM3MjJmOTQyMDM1YTk0ZTIwOWY4
ODI4NjEwHhcNMjUxMTExMDQwMTIwWhcNMjUxMTEyMDQwMTIwWjAzMTEwLwYDVQQD
EyhlYmRlOGJlMzAzYTI4ODhiMGNlNmFjMjVkZThlZjU4ZmJlNzNlNjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWLvzL9SLIKAkbQkuPJmq2imNcNl
exHqcDlrskqRE1fF2PtFKf6502AaOV4lmRErNpi98IaVFdqI5uRXBz3GHQnmfsjt
QL6MDm/odTau8BTNxYz9MfCqEytfIqyTRDO2mDvgQu6uUa1GdSPaw3v2gxari9tt
JtAqVGOrXs3Mik+7SCHTzuegAB/Is6l3NwxKFEBQfb2XD/Zj5ERJcSl8WdotuVhL
u9lK/HBCWsR+rfC3qtI/XrVoei8K9+bI10U+8/jRdUzr/QYFQGat8fTklAOs/sn0
xxQfCgSOt3puJOOFIqYJ46+4GAODx11MwQV0z3/2pkVfOU4ArRKLRr+Q3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvei+MDooiLDOasJd6O9Y++c+YBMB8GA1UdIwQY
MBaAFAPz+CWbMOwDci+UIDWpTiCfiChhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQt
YWIxMzM1NmU1ZmVjLzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQtYWIxMzM1NmU1ZmVj
LzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlj8C7/CY
MviOc+11ZhwngSBqWfLiQwwt6BukVYo5s0AeN0aGSVI0rcebxkGa/lLvy1zU5fli
2T8Cv6nlPEDRiTB2LptQk17heMZI5ruYb2hmwfrYgGhOmZjGliSmbB43+N5KmCtL
Q95igcQJyYteW+rLFHH3+SpAnIy12hIZJFv6E1x/tK/pPOAQHaSiMgKdkJKVxT8O
swrMAtSCvZofJWzMdOxy3Et6A9hwXuALd52JMVSJdmUWCfH/9FT5tE+rYhfvz9fr
9squKbj3RJFQoLhtdxZQfb5KEnGEWBRVslX3NVmRLUDKU5qdv08WZG6N+TXnquJ5
8ZhBthuZOu3YQg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:01 2025 by rpki-client