Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
File: a5I-FqLEzb3ZUkCJCL-COARlulE.mft (raw, json)
Hash identifier: OTf8qnx4fAAr1RCkYo58oGU7wfG3+z9Xue6dHQMVZBk=
Subject key identifier: 71:DF:7B:40:59:86:12:E0:58:C7:EB:1E:E1:4F:14:DD:76:A1:26:43
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 0199239FF21938EB4512AFC4F1516C364659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:01:48 +0000
Manifest this update: Sun 07 Sep 2025 10:01:48 +0000
Manifest next update: Mon 08 Sep 2025 10:01:48 +0000
Files and hashes: 1: MdpNEvAqweEeBxvHQjNduxcNC5o.roa (hash: 3CFotLoSJook5su+0dIfaMzyVX/dwZvzE8G3t1ZME68=)
2: a5I-FqLEzb3ZUkCJCL-COARlulE.crl (hash: +Bz7hvfXYCdh14Qb4I1Pf0f/OhIsbcN2R3GsNOqGtOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:f2:19:38:eb:45:12:af:c4:f1:51:6c:36:46:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Sep 7 10:01:48 2025 GMT
Not After : Sep 8 10:01:48 2025 GMT
Subject: CN=71df7b40598612e058c7eb1ee14f14dd76a12643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:6e:66:f0:a4:53:e8:ce:e1:40:9a:55:9f:
ae:3a:e3:e5:11:9e:2c:06:c2:13:ff:a9:83:82:61:
6d:a4:69:3c:32:1e:c5:7c:84:b3:c1:57:0b:05:eb:
ef:6c:3f:e4:a4:a3:26:16:f1:0c:6a:26:4c:24:99:
57:6d:ca:a0:b5:79:88:7f:c1:c2:9a:f9:51:00:a7:
99:d1:a8:11:30:9b:0c:6a:ad:41:07:11:bb:fe:63:
a3:db:81:69:fb:7c:2e:4c:4f:de:46:e2:45:c2:66:
2d:75:9c:5f:33:7d:c2:5a:23:eb:a2:e0:6f:96:c1:
22:6e:63:f0:ab:56:1d:b8:57:eb:42:c6:09:63:5a:
35:a1:59:c1:41:da:b9:43:cb:6f:c8:00:b5:86:64:
af:ee:d3:c2:b9:7d:cc:fa:6e:2a:b9:06:1e:41:90:
c2:5f:5c:29:6c:f7:e2:37:a2:c2:e2:d4:61:8c:5b:
0d:b7:bc:07:fe:83:8f:11:ad:b4:7f:ce:de:c1:de:
5b:d9:47:62:00:ee:bf:5f:2e:75:e8:d1:ea:76:f3:
89:b7:ef:c5:ef:bf:c5:11:20:1b:d9:76:c7:28:e5:
70:3e:b9:6e:83:3e:f9:d3:72:b5:6e:c0:10:0b:ac:
7e:62:1b:d4:6b:2b:59:e7:3c:52:8c:59:11:eb:c4:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DF:7B:40:59:86:12:E0:58:C7:EB:1E:E1:4F:14:DD:76:A1:26:43
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4e:51:7c:ce:02:7d:1b:10:70:05:59:07:9f:bf:41:8f:2c:
ef:1b:ef:f4:45:d3:71:38:20:14:48:96:6a:7f:a6:2e:d0:0e:
45:34:c8:9c:85:85:fb:fd:02:4c:1c:31:d0:50:4e:d1:41:68:
6e:04:1d:2e:4e:9d:0b:87:9b:e0:6b:ab:60:a3:22:70:d5:8e:
06:b8:b8:e7:18:59:6c:ed:93:ac:23:83:13:8b:fb:dd:aa:e7:
d1:29:81:20:b4:6c:b9:91:4d:9d:3a:51:27:13:58:df:a7:12:
68:86:09:16:c0:a0:ec:04:ea:d2:53:b2:49:84:aa:81:40:ce:
af:d0:dc:b3:0b:fa:87:ea:25:64:fa:57:75:2d:65:d2:bc:22:
bc:2e:4c:19:1b:0a:46:0d:8e:b0:65:64:66:14:b0:bc:2b:16:
a6:4d:51:c1:ca:c4:ab:80:97:30:c9:2c:b5:aa:9b:24:b2:1d:
8a:b0:02:ad:75:40:42:9c:a1:7c:82:91:2b:f7:58:67:03:62:
b7:48:0e:7f:17:60:da:c1:21:fb:c9:3e:04:24:c6:0f:bd:dc:
0e:83:d3:a8:59:93:b6:3c:96:f8:9a:ec:ae:44:e1:6a:25:2b:
c3:c3:8f:75:41:d2:ce:e5:33:86:a6:5d:b5:84:d2:4a:2f:17:
ce:d9:49:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn/IZOOtFEq/E8VFsNkZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOTIzZTE2YTJjNGNkYmRkOTUyNDA4OTA4YmY4MjM4MDQ2
NWJhNTEwHhcNMjUwOTA3MTAwMTQ4WhcNMjUwOTA4MTAwMTQ4WjAzMTEwLwYDVQQD
Eyg3MWRmN2I0MDU5ODYxMmUwNThjN2ViMWVlMTRmMTRkZDc2YTEyNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo29uZvCkU+jO4UCaVZ+uOuPlEZ4s
BsIT/6mDgmFtpGk8Mh7FfISzwVcLBevvbD/kpKMmFvEMaiZMJJlXbcqgtXmIf8HC
mvlRAKeZ0agRMJsMaq1BBxG7/mOj24Fp+3wuTE/eRuJFwmYtdZxfM33CWiProuBv
lsEibmPwq1YduFfrQsYJY1o1oVnBQdq5Q8tvyAC1hmSv7tPCuX3M+m4quQYeQZDC
X1wpbPfiN6LC4tRhjFsNt7wH/oOPEa20f87ewd5b2UdiAO6/Xy516NHqdvOJt+/F
77/FESAb2XbHKOVwPrlugz7503K1bsAQC6x+YhvUaytZ5zxSjFkR68RZ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHfe0BZhhLgWMfrHuFPFN12oSZDMB8GA1UdIwQY
MBaAFGuSPhaixM292VJAiQi/gjgEZbpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iMTdlYzMtNGQyZS00YjQ5LWEzYTct
NDA3ZTlmMzg5MDdlLzEvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iMTdlYzMtNGQyZS00YjQ5LWEzYTctNDA3ZTlmMzg5MDdl
LzEvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEU5RfM4C
fRsQcAVZB5+/QY8s7xvv9EXTcTggFEiWan+mLtAORTTInIWF+/0CTBwx0FBO0UFo
bgQdLk6dC4eb4GurYKMicNWOBri45xhZbO2TrCODE4v73arn0SmBILRsuZFNnTpR
JxNY36cSaIYJFsCg7ATq0lOySYSqgUDOr9Dcswv6h+olZPpXdS1l0rwivC5MGRsK
Rg2OsGVkZhSwvCsWpk1RwcrEq4CXMMkstaqbJLIdirACrXVAQpyhfIKRK/dYZwNi
t0gOfxdg2sEh+8k+BCTGD73cDoPTqFmTtjyW+JrsrkThaiUrw8OPdUHSzuUzhqZd
tYTSSi8XztlJfg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:51 2025 by rpki-client