Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json)
Hash identifier: 89LvKO2vzc8A1RtrcFWf5ow3PVmQCUn378Qj9pI+NZA=
Subject key identifier: 4C:B4:99:04:A3:40:B2:D1:78:42:75:B1:21:11:F2:B9:7C:A8:B6:5E
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial: 019A706E02AC9632443967ADCA3C5C0A6058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 01:00:48 +0000
Manifest this update: Tue 11 Nov 2025 01:00:48 +0000
Manifest next update: Wed 12 Nov 2025 01:00:48 +0000
Files and hashes: 1: Al5XA-JtcwQZgxg8lrEchelWFKc.roa (hash: awq0OKEpSlRcquvq5uS+1UqeIOS4jFcQD5+W9s9X3Ag=)
2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: fHNRbN4vvC1b1sR2priOEDrCfsyuBMpyyrGLN19Hqvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:02:ac:96:32:44:39:67:ad:ca:3c:5c:0a:60:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
Validity
Not Before: Nov 11 01:00:48 2025 GMT
Not After : Nov 12 01:00:48 2025 GMT
Subject: CN=4cb49904a340b2d1784275b12111f2b97ca8b65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:4e:c3:6b:65:c0:f7:aa:b8:17:43:bb:6b:
2b:88:5a:65:f2:4f:e3:02:dd:53:f3:4b:c2:7f:a1:
55:51:64:ab:83:9d:d9:4e:67:c6:32:ef:11:06:5b:
a3:4e:18:ba:f9:50:a5:88:2b:b8:3e:09:a0:64:78:
db:cb:66:1e:ba:e1:eb:6b:4d:92:f6:c0:93:28:b2:
8d:5f:b3:68:32:e7:5b:7f:5e:6c:e3:a2:95:d2:9d:
29:8d:46:92:80:f0:7f:2e:2a:8a:81:22:1c:aa:48:
45:37:1e:21:37:6f:33:ed:78:55:77:d9:61:16:88:
bb:91:c7:83:ce:4d:02:6b:16:4c:7f:bf:c3:07:80:
7b:7f:0a:02:45:6d:fe:84:e6:e4:83:18:0d:ab:e5:
61:b0:fe:82:d4:de:2a:aa:77:c4:6b:87:7f:36:0b:
40:a3:12:3e:50:91:41:b0:4f:88:c2:98:b2:16:11:
6e:5b:d3:ed:86:22:04:e1:02:4b:5c:01:fb:fa:1f:
cb:f1:26:77:64:08:10:eb:50:43:fb:ba:0b:e1:a8:
71:c6:83:3a:2e:56:d3:de:84:09:55:f3:7f:d8:ee:
02:e6:44:76:39:49:04:aa:48:86:e3:83:0a:a6:ec:
5e:5b:9b:30:08:34:b6:03:c9:66:a1:e1:34:87:3e:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B4:99:04:A3:40:B2:D1:78:42:75:B1:21:11:F2:B9:7C:A8:B6:5E
X509v3 Authority Key Identifier:
keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:eb:b1:e2:a0:e7:76:1f:04:46:e8:8e:22:a1:ab:24:05:9e:
33:73:41:f6:ef:b9:80:50:16:23:65:a6:9a:8e:1d:dd:d7:fa:
35:e4:cf:69:90:4d:ae:fc:55:87:d1:71:f0:01:e0:ac:ac:00:
af:54:ac:c2:1d:dd:16:25:52:20:d0:e7:93:06:cc:66:1c:2c:
71:78:87:8f:ae:1e:f8:ac:ed:d5:21:14:3f:8e:de:4d:e2:da:
6e:ab:1c:d8:bf:93:70:b8:3b:b1:24:00:5d:93:d4:6e:11:91:
53:c6:14:13:cf:b9:0e:36:4c:9f:d4:fb:bf:cc:3d:27:0f:ee:
b6:8e:c0:51:45:05:86:1c:ec:e7:84:a8:5a:0e:12:38:f2:84:
a9:9f:4a:42:65:14:1c:0e:a3:ba:8f:dd:08:25:9f:62:23:ec:
3a:2b:9e:61:b7:08:56:70:07:67:e9:70:c0:b1:89:39:b9:0e:
11:32:dc:86:25:c1:07:6c:a3:3a:89:d7:f6:e6:2f:7b:02:57:
a7:22:f4:8f:34:61:89:a5:49:c7:58:bc:2c:d3:21:b3:46:1e:
d2:1f:85:be:76:29:12:e8:6f:bb:9a:03:c1:6c:3c:68:f9:9e:
d0:77:17:06:20:a9:8e:c3:b1:19:9f:40:de:f7:8a:53:df:e5:
1f:37:d5:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbgKsljJEOWetyjxcCmBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTIxMjVlM2Q1M2NjNDgxMzM2MTA1NDgzZmNmZjcwMWZk
YTFiYjMwHhcNMjUxMTExMDEwMDQ4WhcNMjUxMTEyMDEwMDQ4WjAzMTEwLwYDVQQD
Eyg0Y2I0OTkwNGEzNDBiMmQxNzg0Mjc1YjEyMTExZjJiOTdjYThiNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9tOw2tlwPequBdDu2sriFpl8k/j
At1T80vCf6FVUWSrg53ZTmfGMu8RBlujThi6+VCliCu4PgmgZHjby2YeuuHra02S
9sCTKLKNX7NoMudbf15s46KV0p0pjUaSgPB/LiqKgSIcqkhFNx4hN28z7XhVd9lh
Foi7kceDzk0CaxZMf7/DB4B7fwoCRW3+hObkgxgNq+VhsP6C1N4qqnfEa4d/NgtA
oxI+UJFBsE+IwpiyFhFuW9PthiIE4QJLXAH7+h/L8SZ3ZAgQ61BD+7oL4ahxxoM6
LlbT3oQJVfN/2O4C5kR2OUkEqkiG44MKpuxeW5swCDS2A8lmoeE0hz66YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEy0mQSjQLLReEJ1sSER8rl8qLZeMB8GA1UdIwQY
MBaAFGmSEl49U8xIEzYQVIP8/3Af2huzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUt
ODM3YzVlMTJiZDA0LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUtODM3YzVlMTJiZDA0
LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+ux4qDn
dh8ERuiOIqGrJAWeM3NB9u+5gFAWI2Wmmo4d3df6NeTPaZBNrvxVh9Fx8AHgrKwA
r1Sswh3dFiVSINDnkwbMZhwscXiHj64e+Kzt1SEUP47eTeLabqsc2L+TcLg7sSQA
XZPUbhGRU8YUE8+5DjZMn9T7v8w9Jw/uto7AUUUFhhzs54SoWg4SOPKEqZ9KQmUU
HA6juo/dCCWfYiPsOiueYbcIVnAHZ+lwwLGJObkOETLchiXBB2yjOonX9uYvewJX
pyL0jzRhiaVJx1i8LNMhs0Ye0h+FvnYpEuhvu5oDwWw8aPme0HcXBiCpjsOxGZ9A
3veKU9/lHzfVbQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:40 2025 by rpki-client