Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: lgvXeS1YQrag55/JbTu4XMJRzQy0eozI8BZMKkbcx5k=
Subject key identifier: 02:C2:29:A6:A2:75:2D:72:EA:8F:C3:2A:67:2A:B9:76:E6:9C:AE:98
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 019A714A01BDDB326A1F9D89850E53E45E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 03A2
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: 7eAkWbP4wzQHXSyulPi1WTuV/4WAeDOm+HHy1Nzh/xw=)
2: E09vqP6Dhzwi3swUd7vdKQdAZ-E.roa (hash: MzWcZL4YZkWICabmNLBtwrsQlq2zb5xWQgY5PAU+5oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:01:bd:db:32:6a:1f:9d:89:85:0e:53:e4:5e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=02c229a6a2752d72ea8fc32a672ab976e69cae98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:51:e3:97:fd:3e:63:06:c5:69:a3:49:aa:
5a:d0:0b:92:a0:15:88:78:43:d3:7c:21:5a:19:e7:
b6:82:a7:9e:56:01:44:36:03:d5:75:7e:33:71:20:
ad:42:6f:73:68:a2:87:0a:25:6c:18:28:d0:41:c8:
1e:11:3a:97:b5:8e:06:97:82:a5:dd:27:33:d9:fb:
04:0a:a6:0e:0c:4e:67:2c:47:45:d0:52:c4:4e:29:
00:cd:a6:7d:b0:c2:1b:7c:32:08:55:1b:81:3b:19:
de:50:d4:8e:d4:c7:39:52:0c:ff:11:b5:35:a9:b8:
74:49:12:5a:92:b5:98:af:b6:02:2b:4d:ea:4c:8b:
a2:c5:64:17:b3:f8:fd:0d:13:db:17:c2:8e:fb:f3:
43:63:8a:2d:ba:82:14:62:ec:67:26:96:fb:b0:1c:
6e:0c:96:c9:d7:10:47:19:69:5d:af:b0:cf:35:72:
e1:3e:d7:79:bf:20:c0:e2:27:fe:8e:46:8e:a5:01:
66:2b:29:b6:54:bc:be:c5:c9:3b:81:9c:82:41:cc:
7d:bd:7e:d2:4e:2b:7a:e2:96:7b:74:87:3a:7f:a8:
7c:b4:80:75:44:34:a8:67:c1:d3:dc:17:74:57:97:
1a:b7:56:09:76:83:8a:21:e8:51:e0:c2:7c:81:cc:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C2:29:A6:A2:75:2D:72:EA:8F:C3:2A:67:2A:B9:76:E6:9C:AE:98
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:75:3e:f3:f9:01:e2:db:50:f7:d7:bc:07:3b:c9:7e:51:70:
f3:7b:72:53:92:dd:8b:db:97:c2:6a:6d:e1:50:19:56:d3:6c:
ee:fc:ea:4f:c2:67:62:7b:4a:51:b3:29:f3:01:57:23:ec:62:
b5:5d:30:25:44:de:6b:4e:b4:0f:87:99:72:df:4b:1d:37:7d:
58:35:2a:34:2e:01:f4:b7:d5:d3:0e:26:17:75:bf:fb:6f:b2:
9b:83:fc:12:0b:30:29:83:ec:bf:2f:a3:d5:bb:b4:1d:fd:c4:
83:85:68:8d:d3:18:9a:9e:7f:b7:c1:23:be:3e:24:ed:53:b8:
a2:0a:a7:d0:6b:74:10:4f:f9:ed:44:0a:9d:d4:e3:8b:f2:5b:
b8:66:cc:c4:64:18:c7:85:65:fb:5f:eb:61:e5:f2:4b:aa:7c:
23:18:3e:c1:25:29:80:bf:59:03:76:90:65:d4:11:82:c6:35:
5e:07:74:9e:6f:84:d5:55:e5:49:78:8b:1b:14:2c:62:b6:5e:
9c:5b:82:59:55:14:9b:d1:26:04:7a:5d:fc:32:f2:e4:8c:ce:
5e:30:bb:46:18:db:c2:3d:33:d2:41:a0:9b:d1:be:22:ad:93:
3f:2b:bc:ed:29:41:03:c1:69:51:83:97:31:60:02:b4:98:bf:
2b:95:67:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSgG92zJqH52JhQ5T5F4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmIwYWQ3NzY1NjEzOTUzYjkyYjZjYmY0Y2RhOTNmOWMx
MzcyZTYwHhcNMjUxMTExMDUwMTA2WhcNMjUxMTEyMDUwMTA2WjAzMTEwLwYDVQQD
EygwMmMyMjlhNmEyNzUyZDcyZWE4ZmMzMmE2NzJhYjk3NmU2OWNhZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NpR45f9PmMGxWmjSapa0AuSoBWI
eEPTfCFaGee2gqeeVgFENgPVdX4zcSCtQm9zaKKHCiVsGCjQQcgeETqXtY4Gl4Kl
3Scz2fsECqYODE5nLEdF0FLETikAzaZ9sMIbfDIIVRuBOxneUNSO1Mc5Ugz/EbU1
qbh0SRJakrWYr7YCK03qTIuixWQXs/j9DRPbF8KO+/NDY4otuoIUYuxnJpb7sBxu
DJbJ1xBHGWldr7DPNXLhPtd5vyDA4if+jkaOpQFmKym2VLy+xck7gZyCQcx9vX7S
Tit64pZ7dIc6f6h8tIB1RDSoZ8HT3Bd0V5cat1YJdoOKIehR4MJ8gczo3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALCKaaidS1y6o/DKmcquXbmnK6YMB8GA1UdIwQY
MBaAFAO7Ctd2VhOVO5K2y/TNqT+cE3LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTIt
ZDc1ODI1ODliYjU5LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTItZDc1ODI1ODliYjU5
LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3U+8/kB
4ttQ99e8BzvJflFw83tyU5Ldi9uXwmpt4VAZVtNs7vzqT8JnYntKUbMp8wFXI+xi
tV0wJUTea060D4eZct9LHTd9WDUqNC4B9LfV0w4mF3W/+2+ym4P8EgswKYPsvy+j
1bu0Hf3Eg4VojdMYmp5/t8Ejvj4k7VO4ogqn0Gt0EE/57UQKndTji/JbuGbMxGQY
x4Vl+1/rYeXyS6p8Ixg+wSUpgL9ZA3aQZdQRgsY1Xgd0nm+E1VXlSXiLGxQsYrZe
nFuCWVUUm9EmBHpd/DLy5IzOXjC7Rhjbwj0z0kGgm9G+Iq2TPyu87SlBA8FpUYOX
MWACtJi/K5Vn7Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:00 2025 by rpki-client