Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File: aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier: HCTcCH8iFKyHjqViS/dTtfPdFgFkMcEYpN+N8AAk6UU=
Subject key identifier: 80:D6:D8:A9:B0:42:BA:A9:18:15:9F:D9:C3:AD:86:82:57:15:06:24
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 019A72940900E104B96CC17BA603FF778F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number: 1469
Signing time: Tue 11 Nov 2025 11:01:35 +0000
Manifest this update: Tue 11 Nov 2025 11:01:35 +0000
Manifest next update: Wed 12 Nov 2025 11:01:35 +0000
Files and hashes: 1: HaUn7tg_GQoLwUeKln7B89E1Zus.roa (hash: UBP04zlDEuw8zGqO58s8vILU4LoszVd4p1cFKyVRANw=)
2: Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa (hash: 2ufypWC+H0u1FT85vML3Y3XXLbc7QafpFQUC4EhAO8E=)
3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: ykb7c7yjACiVWUTxK/o+VkJVk4Kl0/IHCPZbGCUUpy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:09:00:e1:04:b9:6c:c1:7b:a6:03:ff:77:8f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Nov 11 11:01:35 2025 GMT
Not After : Nov 12 11:01:35 2025 GMT
Subject: CN=80d6d8a9b042baa918159fd9c3ad868257150624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:24:92:ae:a8:22:41:b4:6f:ba:fc:e7:d0:
d2:c3:22:da:bd:2b:7e:20:b8:ad:6e:38:bc:bd:67:
90:79:fd:85:4f:e4:57:ad:c1:86:10:f6:bd:ec:28:
0a:40:e5:39:be:db:eb:5c:41:0c:49:9b:b2:08:66:
a1:18:13:1e:8f:62:da:56:1e:d3:d9:94:63:f5:c5:
14:92:cb:bc:45:c1:26:45:b6:41:d6:0d:9e:17:ac:
cb:3c:b8:f8:d7:0a:50:8a:0a:41:ea:7c:31:81:ba:
f5:f4:ec:25:0f:3c:5a:97:61:84:e5:93:0f:5b:b3:
91:8c:59:c7:f9:1d:d5:7a:ab:63:c8:80:2a:62:75:
4a:94:cc:cd:d2:af:e6:f1:12:51:05:2b:ce:f7:77:
27:60:91:7d:ee:56:22:16:8e:ce:ef:84:08:e5:15:
9c:79:bb:e6:a4:5f:f6:23:7b:8d:5b:08:22:48:61:
de:57:1e:fe:a7:4a:a1:08:6f:8c:4c:6f:f4:c6:76:
38:e3:00:59:a0:8f:e2:16:dd:c4:27:24:a1:6a:73:
f2:06:b3:4f:63:ce:52:54:cc:73:c1:20:c7:89:b9:
66:b1:b9:51:9d:04:2c:91:ac:b5:81:38:73:a9:4f:
7e:13:23:9b:e6:98:75:c9:69:f8:df:f5:d5:db:9a:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D6:D8:A9:B0:42:BA:A9:18:15:9F:D9:C3:AD:86:82:57:15:06:24
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:db:a4:eb:c3:c3:7d:03:ee:e1:e9:b1:1e:a3:42:96:07:69:
62:b7:7a:31:fe:c4:08:e5:3e:8d:6e:ba:63:98:f6:f7:d4:89:
39:40:dd:05:28:a9:21:c1:b9:9c:55:cc:4d:ef:37:4e:bd:92:
a3:85:53:65:13:6f:e4:80:06:92:b0:d1:85:52:21:31:ae:3d:
ee:43:c5:9d:b2:ba:e0:71:03:e8:1d:06:3a:c4:7a:b4:e5:33:
f8:0d:d3:fa:94:61:26:b8:b1:c4:cd:81:a4:3e:47:eb:e5:91:
9d:4e:c7:8e:de:81:da:3c:3e:76:84:9f:ec:d6:90:c9:cf:f7:
e6:7c:fb:d8:d7:f2:12:ce:db:9f:0e:44:9d:e0:25:e3:af:dc:
53:c1:38:eb:20:8a:b3:fa:e0:21:65:93:7e:19:d5:a4:ec:f5:
77:5c:8f:b2:b5:3a:69:43:1d:28:d4:64:46:db:82:da:9f:3e:
ec:ca:5e:cf:3e:79:ed:c7:02:7f:d1:7b:a2:99:29:05:cb:81:
02:d0:08:e0:2b:b9:c3:ab:89:71:1a:1d:06:2e:63:3f:6f:74:
49:82:6b:13:19:77:da:97:1f:d8:ec:4e:07:56:00:fa:48:2b:
cb:df:2b:5c:5c:3c:cf:47:d0:c4:28:75:c4:f0:61:f5:7e:9b:
29:ff:b5:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpylAkA4QS5bMF7pgP/d483MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM5YTIxNzU5Nzk2ZmUzYTFkOTE5ZjliNTczN2ViNjhk
NzA4ZTQwHhcNMjUxMTExMTEwMTM1WhcNMjUxMTEyMTEwMTM1WjAzMTEwLwYDVQQD
Eyg4MGQ2ZDhhOWIwNDJiYWE5MTgxNTlmZDljM2FkODY4MjU3MTUwNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8wkkq6oIkG0b7r859DSwyLavSt+
ILitbji8vWeQef2FT+RXrcGGEPa97CgKQOU5vtvrXEEMSZuyCGahGBMej2LaVh7T
2ZRj9cUUksu8RcEmRbZB1g2eF6zLPLj41wpQigpB6nwxgbr19OwlDzxal2GE5ZMP
W7ORjFnH+R3VeqtjyIAqYnVKlMzN0q/m8RJRBSvO93cnYJF97lYiFo7O74QI5RWc
ebvmpF/2I3uNWwgiSGHeVx7+p0qhCG+MTG/0xnY44wBZoI/iFt3EJyShanPyBrNP
Y85SVMxzwSDHiblmsblRnQQskay1gThzqU9+EyOb5ph1yWn43/XV25pOLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDW2KmwQrqpGBWf2cOthoJXFQYkMB8GA1UdIwQY
MBaAFGhjmiF1l5b+Oh2Rn5tXN+to1wjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTct
MTNkMTY4ZDU5YjExLzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTctMTNkMTY4ZDU5YjEx
LzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnduk68PD
fQPu4emxHqNClgdpYrd6Mf7ECOU+jW66Y5j299SJOUDdBSipIcG5nFXMTe83Tr2S
o4VTZRNv5IAGkrDRhVIhMa497kPFnbK64HED6B0GOsR6tOUz+A3T+pRhJrixxM2B
pD5H6+WRnU7Hjt6B2jw+doSf7NaQyc/35nz72NfyEs7bnw5EneAl46/cU8E46yCK
s/rgIWWTfhnVpOz1d1yPsrU6aUMdKNRkRtuC2p8+7Mpezz557ccCf9F7opkpBcuB
AtAI4Cu5w6uJcRodBi5jP290SYJrExl32pcf2OxOB1YA+kgry98rXFw8z0fQxCh1
xPBh9X6bKf+1Nw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:22 2025 by rpki-client