Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier: yqhTPvEIqJe3GEoJgeFsy4y/CAfL+9iyQXRuv9nEd8E=
Subject key identifier: 79:93:39:26:30:86:2B:7A:23:89:18:8A:9B:DD:07:CF:12:8C:79:D1
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 019A1D9A86161230C9730FE6560530916E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number: 0539
Signing time: Sat 25 Oct 2025 23:00:57 +0000
Manifest this update: Sat 25 Oct 2025 23:00:57 +0000
Manifest next update: Sun 26 Oct 2025 23:00:57 +0000
Files and hashes: 1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: WZyLvVOCpjLv1ZjZ9LjQT4mthHm5ejzliA6v9m3Fjn0=)
2: waNULbcRhTUiNsANSLGcB4J4itI.roa (hash: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:86:16:12:30:c9:73:0f:e6:56:05:30:91:6e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: Oct 25 23:00:57 2025 GMT
Not After : Oct 26 23:00:57 2025 GMT
Subject: CN=7993392630862b7a2389188a9bdd07cf128c79d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:5c:44:d1:4f:b0:f3:78:19:8c:cc:25:10:
c6:ad:b2:e1:99:c9:b2:1b:52:41:37:e8:4e:d8:7b:
cc:60:b2:f6:e1:a1:9b:20:c5:80:3b:42:50:8d:46:
8a:31:68:2c:e4:14:9f:b1:5a:c3:1a:21:48:b3:5d:
87:10:74:cb:6b:71:4f:73:66:9c:92:cd:f6:30:c2:
dc:cf:5b:ca:cd:1a:45:97:50:ff:0c:aa:46:7f:ec:
ab:5f:31:8d:58:d0:3a:44:8e:7c:c9:26:ca:72:09:
ab:7d:7c:35:39:b5:83:53:0e:ac:85:c6:6f:ce:8d:
ab:3b:ec:f3:e6:37:0d:80:dd:42:c4:d0:0b:27:4b:
13:07:29:b1:69:48:be:30:a8:31:44:0f:99:cb:96:
0a:4c:af:53:9e:88:60:27:00:65:e2:eb:e9:06:c6:
71:d1:7d:cc:60:c9:df:6c:b5:68:52:35:1c:9f:ba:
3c:89:9f:46:f9:f3:f6:96:d5:e6:0f:2b:60:ef:97:
7a:fe:71:0b:62:ad:50:de:bb:ec:a0:97:df:43:05:
ee:90:ce:7d:3b:b8:06:fd:92:dd:b9:4e:93:7b:a8:
76:9e:28:b2:b7:fc:95:41:33:93:1d:e6:dd:dd:44:
f0:9b:6f:fa:6a:99:ab:59:ec:9f:86:ca:d1:1f:cc:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:93:39:26:30:86:2B:7A:23:89:18:8A:9B:DD:07:CF:12:8C:79:D1
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a8:23:11:c0:d4:3e:c8:1d:0c:a9:19:cb:2a:9a:7b:e8:90:
7f:e0:28:c8:b6:d5:fa:b3:6b:46:3c:08:6c:40:4a:7e:1a:fa:
b0:e5:95:e6:76:fc:d2:f2:37:85:2d:af:45:c8:b5:60:33:da:
e8:f8:c5:9c:b3:4c:ff:21:1c:60:29:e4:bf:e4:25:fa:49:82:
fb:44:a3:f5:16:a4:36:12:da:bb:7d:06:1d:8d:4b:2f:4b:c4:
84:aa:b8:68:d0:65:1d:83:6d:49:bf:d8:ea:ba:32:5d:fa:32:
08:eb:28:9f:ff:74:80:e9:85:2d:40:03:23:43:dd:8f:75:7a:
c2:99:5c:3a:87:a2:53:9d:c5:ae:e4:b0:98:72:5d:76:16:86:
f5:a0:ed:7c:9d:3f:9d:6d:fd:de:39:30:9a:3d:bb:68:71:f0:
ff:2a:cd:d1:b4:38:9a:77:4e:98:eb:1f:76:dc:d9:39:4d:3f:
c3:c4:8b:82:35:74:f7:03:7a:a3:6a:0a:6d:d2:59:91:7f:8b:
b1:12:9d:6f:d9:44:d3:fe:00:ea:c4:ce:22:1c:fb:4c:78:8e:
c9:9b:46:62:24:9f:24:9a:1b:aa:66:23:0d:d9:07:26:cb:cc:
db:0d:3a:6d:51:f4:1f:14:58:b5:1c:6c:12:4b:9e:13:ad:63:
fc:03:32:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodmoYWEjDJcw/mVgUwkW5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2
MmY4ZTgwHhcNMjUxMDI1MjMwMDU3WhcNMjUxMDI2MjMwMDU3WjAzMTEwLwYDVQQD
Eyg3OTkzMzkyNjMwODYyYjdhMjM4OTE4OGE5YmRkMDdjZjEyOGM3OWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4edcRNFPsPN4GYzMJRDGrbLhmcmy
G1JBN+hO2HvMYLL24aGbIMWAO0JQjUaKMWgs5BSfsVrDGiFIs12HEHTLa3FPc2ac
ks32MMLcz1vKzRpFl1D/DKpGf+yrXzGNWNA6RI58ySbKcgmrfXw1ObWDUw6shcZv
zo2rO+zz5jcNgN1CxNALJ0sTBymxaUi+MKgxRA+Zy5YKTK9TnohgJwBl4uvpBsZx
0X3MYMnfbLVoUjUcn7o8iZ9G+fP2ltXmDytg75d6/nELYq1Q3rvsoJffQwXukM59
O7gG/ZLduU6Te6h2niiyt/yVQTOTHebd3UTwm2/6apmrWeyfhsrRH8w9qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmTOSYwhit6I4kYipvdB88SjHnRMB8GA1UdIwQY
MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt
YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk
LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy6gjEcDU
PsgdDKkZyyqae+iQf+AoyLbV+rNrRjwIbEBKfhr6sOWV5nb80vI3hS2vRci1YDPa
6PjFnLNM/yEcYCnkv+Ql+kmC+0Sj9RakNhLau30GHY1LL0vEhKq4aNBlHYNtSb/Y
6royXfoyCOson/90gOmFLUADI0Pdj3V6wplcOoeiU53FruSwmHJddhaG9aDtfJ0/
nW393jkwmj27aHHw/yrN0bQ4mndOmOsfdtzZOU0/w8SLgjV09wN6o2oKbdJZkX+L
sRKdb9lE0/4A6sTOIhz7THiOyZtGYiSfJJobqmYjDdkHJsvM2w06bVH0HxRYtRxs
EkueE61j/AMyYg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 02:58:18 2025 by rpki-client