Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
File: aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json)
Hash identifier: waz4y0oSCGS6yio1ZSbXpeCT/alZ9jwOzl3LruoTgtY=
Subject key identifier: 91:5F:3E:DD:16:AC:D9:77:58:70:D8:60:2E:13:29:D2:A4:FC:B3:06
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Certificate issuer: /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial: 019A733874B9DBC90DF51C1A9425DC9D15F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
Manifest number: 0540
Signing time: Tue 11 Nov 2025 14:01:10 +0000
Manifest this update: Tue 11 Nov 2025 14:01:10 +0000
Manifest next update: Wed 12 Nov 2025 14:01:10 +0000
Files and hashes: 1: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: qvqbhKJQXd8F1KfnK+qdNcsyfYeABlprMb4zYaXlyJs=)
2: jlBmv3dPRy-aCAm4zGP5hP0eED4.roa (hash: x5w57iUiMtF5F3KiCgNFCVpxtjw/vaZ568ZRMFNq7qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:74:b9:db:c9:0d:f5:1c:1a:94:25:dc:9d:15:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Validity
Not Before: Nov 11 14:01:10 2025 GMT
Not After : Nov 12 14:01:10 2025 GMT
Subject: CN=915f3edd16acd9775870d8602e1329d2a4fcb306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:7a:2d:d2:58:3b:97:d7:75:10:5d:f1:46:
f1:a7:f8:a0:b1:72:cb:1b:49:36:b7:8a:bf:eb:bd:
3b:8c:b7:1b:4d:f5:d9:4d:bf:ff:13:fc:56:b5:36:
05:75:6c:0b:cd:36:a7:16:f2:04:26:79:f1:cf:66:
4b:e3:91:b7:30:d6:dd:cc:8f:c0:6f:e4:4a:be:fd:
d2:5f:5a:57:1e:e3:70:f6:08:71:26:03:14:16:bb:
e9:0d:29:c6:16:7b:90:00:b9:7e:5b:08:7b:38:39:
0f:2c:d5:ac:02:5a:e3:b5:ac:be:3b:b7:fb:a5:f0:
16:f7:97:62:98:54:e3:d9:38:c3:41:dc:5b:c6:69:
1c:27:29:8b:77:03:92:e6:2e:a1:e4:fc:c5:8c:96:
bd:43:33:21:87:59:5c:ac:fc:1e:91:30:ff:0d:7e:
bb:8d:a3:ee:fb:38:1f:f3:3e:98:f6:36:58:6a:7a:
ce:5d:4d:1d:dc:95:1c:e5:e6:e9:d9:ae:16:22:a5:
b2:26:e8:4d:92:65:73:67:7a:e0:91:d5:77:78:68:
83:82:e5:2f:2f:ce:fd:63:41:05:9a:29:fc:79:5f:
6b:1e:1a:eb:6c:cc:ee:62:5f:1e:f0:fa:00:50:fa:
b0:b3:5e:ac:13:28:4e:a2:50:68:e5:e1:3c:a8:04:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:3E:DD:16:AC:D9:77:58:70:D8:60:2E:13:29:D2:A4:FC:B3:06
X509v3 Authority Key Identifier:
keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7c:e5:1f:31:5f:42:84:2c:e9:34:17:1f:57:70:40:27:d6:
47:12:14:91:7f:4c:37:6f:f2:18:61:d4:97:ca:13:80:da:40:
99:ae:6f:e2:63:aa:79:b6:d3:0d:03:ad:fa:7b:83:07:d9:9d:
da:3d:99:7a:6f:d8:5b:67:25:b5:27:71:ae:9d:10:8a:58:b1:
69:8e:5f:54:da:fd:c4:85:90:98:06:52:c4:11:79:5d:bf:f3:
95:bf:a8:30:10:e0:be:4b:d2:8f:eb:4a:b1:a7:c7:1a:02:45:
e8:79:ff:7f:6a:82:4c:06:f3:3e:4c:12:35:3b:a2:a2:51:18:
95:23:0c:07:e7:54:0d:40:1a:57:53:8e:1e:79:22:1a:34:aa:
7a:64:68:c6:f0:3c:a4:28:61:a5:37:df:0e:3d:b3:01:20:4d:
3d:ea:e2:ea:27:79:76:b7:9c:12:7c:d4:41:fb:d8:9c:c1:db:
90:5a:51:3c:a2:93:d0:40:ef:cb:e2:d9:d5:81:90:18:48:18:
f6:3e:9d:ce:14:c2:68:d3:89:b7:44:d5:5e:8c:fe:97:71:86:
9f:53:86:9b:3f:e4:3a:d1:e9:81:17:5c:a9:50:1e:a0:e5:23:
42:ac:0d:9f:db:5d:2e:e1:46:ad:49:30:67:4f:9c:55:8e:00:
9a:77:44:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOHS528kN9RwalCXcnRX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhY2NkYjZjOThkNzIyYjMyZGM5MDBlZTFkZDY2ZTUxYzRm
NDI4ZGIwHhcNMjUxMTExMTQwMTEwWhcNMjUxMTEyMTQwMTEwWjAzMTEwLwYDVQQD
Eyg5MTVmM2VkZDE2YWNkOTc3NTg3MGQ4NjAyZTEzMjlkMmE0ZmNiMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCJ6LdJYO5fXdRBd8Ubxp/igsXLL
G0k2t4q/6707jLcbTfXZTb//E/xWtTYFdWwLzTanFvIEJnnxz2ZL45G3MNbdzI/A
b+RKvv3SX1pXHuNw9ghxJgMUFrvpDSnGFnuQALl+Wwh7ODkPLNWsAlrjtay+O7f7
pfAW95dimFTj2TjDQdxbxmkcJymLdwOS5i6h5PzFjJa9QzMhh1lcrPwekTD/DX67
jaPu+zgf8z6Y9jZYanrOXU0d3JUc5ebp2a4WIqWyJuhNkmVzZ3rgkdV3eGiDguUv
L879Y0EFmin8eV9rHhrrbMzuYl8e8PoAUPqws16sEyhOolBo5eE8qAQU9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFfPt0WrNl3WHDYYC4TKdKk/LMGMB8GA1UdIwQY
MBaAFGrM22yY1yKzLckA7h3WblHE9CjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYjIzMDctNjA1OS00MTVmLWI4Yjgt
MmZlOTMyZTdhYjQ0LzEvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kYjIzMDctNjA1OS00MTVmLWI4YjgtMmZlOTMyZTdhYjQ0
LzEvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnzlHzFf
QoQs6TQXH1dwQCfWRxIUkX9MN2/yGGHUl8oTgNpAma5v4mOqebbTDQOt+nuDB9md
2j2Zem/YW2cltSdxrp0QilixaY5fVNr9xIWQmAZSxBF5Xb/zlb+oMBDgvkvSj+tK
safHGgJF6Hn/f2qCTAbzPkwSNTuiolEYlSMMB+dUDUAaV1OOHnkiGjSqemRoxvA8
pChhpTffDj2zASBNPeri6id5drecEnzUQfvYnMHbkFpRPKKT0EDvy+LZ1YGQGEgY
9j6dzhTCaNOJt0TVXoz+l3GGn1OGmz/kOtHpgRdcqVAeoOUjQqwNn9tdLuFGrUkw
Z0+cVY4AmndE9w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:26 2025 by rpki-client