Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File: Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier: LugCLDHIUjv877A0ot0q+rfV7fQifuBhFuo8xvhyZrM=
Subject key identifier: AF:D2:87:61:9A:1D:54:F4:C7:C2:C0:89:68:22:ED:B9:0E:42:A6:7B
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer: /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial: 01991D2F5DF6E36331BA5D156621E588DE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number: 166F
Signing time: Sat 06 Sep 2025 04:01:07 +0000
Manifest this update: Sat 06 Sep 2025 04:01:07 +0000
Manifest next update: Sun 07 Sep 2025 04:01:07 +0000
Files and hashes: 1: 2nLfLY9iuS0QWJUoxMXGuTVNh4Q.roa (hash: KGQN3KTkCEm9UO8mNAZfG4hkgxNjImc/0aUX1CErP0M=)
2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: t/YOM+FF0Ub0FJxkgPxtfxxOmcADbeWVwQKTocspVvg=)
3: OP_LxEh3lwkqqiARAnCPDgbwZFo.roa (hash: s8g9cGnm5CE4zgxAFLfWVnDVE/Wx0l3/tOuxqSeDbUw=)
4: Th0AzgJWNzEMUInk7IHPiBNTMFs.roa (hash: 0b9R/T23sDaiRJT9SmZqwKUiLRaB4TURwrsLOA1pG44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:2f:5d:f6:e3:63:31:ba:5d:15:66:21:e5:88:de:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Validity
Not Before: Sep 6 04:01:07 2025 GMT
Not After : Sep 7 04:01:07 2025 GMT
Subject: CN=afd287619a1d54f4c7c2c0896822edb90e42a67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:6c:13:bd:1c:9f:29:24:47:c8:86:a7:2a:
2e:d5:e4:db:e7:f9:96:b9:cc:f3:b8:e3:e9:5c:86:
49:0f:68:a5:88:ec:0f:d1:fb:c4:9f:e9:5c:4a:4a:
22:f3:ea:d6:78:9f:5b:89:d3:8f:99:a3:af:dd:d2:
1e:e3:e7:40:29:d5:7e:6a:7a:81:9d:7c:13:3e:5f:
ba:52:56:70:0f:87:86:d7:e8:a7:3c:14:03:d9:03:
e1:57:f1:51:57:ea:e7:dc:29:50:2d:7b:c5:24:88:
1a:25:ef:19:52:de:29:25:e5:be:6c:55:b5:e1:31:
ef:81:65:8c:e8:02:87:bb:fc:e0:d9:0b:10:bd:8e:
de:82:d8:8b:73:9c:3e:9e:bc:45:d0:0c:f0:db:47:
82:11:42:d0:1c:77:78:62:cd:c8:80:44:64:8d:a8:
7f:b2:c9:43:2b:95:c3:7a:cc:3b:7e:a5:7f:54:87:
41:95:8b:43:dc:4a:0b:3d:56:0c:a6:42:54:fa:23:
b8:eb:a5:6d:d0:a2:df:6c:1e:60:bf:f4:bf:c9:93:
80:af:c6:af:b4:63:7e:eb:d9:e3:74:83:07:dd:79:
43:10:6f:bc:bc:ec:fb:ab:e1:5b:c3:80:77:49:26:
49:50:0a:95:ab:47:66:af:e9:d5:ea:40:58:6e:d8:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D2:87:61:9A:1D:54:F4:C7:C2:C0:89:68:22:ED:B9:0E:42:A6:7B
X509v3 Authority Key Identifier:
keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fa:52:0c:d3:58:79:32:2f:74:b1:28:77:ec:44:ae:fe:5f:
0b:a2:4e:d9:4f:e9:6e:25:1e:b8:5c:b5:c3:65:ff:75:6e:50:
f1:22:c9:3e:a3:a0:f7:9b:a2:88:1f:a4:e2:13:15:96:19:62:
7d:0a:55:8f:a6:43:99:a8:59:2c:27:96:01:7a:4e:f0:eb:71:
69:29:3d:e9:af:da:65:40:f1:8a:fd:5c:04:33:00:38:d1:be:
01:ef:b1:01:39:b9:71:e3:bf:b9:1c:c5:72:ab:ae:e7:e5:41:
3f:bb:47:f9:08:ff:24:04:30:8a:e5:40:1d:9e:9c:d1:9f:ba:
e7:d4:4f:e6:9f:54:30:12:6f:6f:77:61:22:68:9a:cc:12:e3:
4a:57:7a:3c:d9:1f:53:01:64:d1:d8:e3:ab:22:35:20:84:45:
8d:09:73:73:fe:ae:8a:8d:b3:34:02:8d:19:15:2e:cb:6d:41:
55:a5:86:60:2d:ae:02:94:1b:27:45:bd:d7:e8:c0:45:0f:f0:
bc:2b:e8:e6:03:5d:c2:71:81:96:29:2e:bd:c2:84:18:00:b3:
e1:cd:f2:6a:86:88:28:e9:bc:60:f2:f4:ee:5d:2b:38:9f:39:
a2:a9:4d:5b:df:b8:99:db:63:09:28:3c:49:ed:c3:31:6a:e4:
75:e9:38:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkdL13242Mxul0VZiHliN5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzdhY2QxMTJmMWM2YzgzM2JlYzIyZjhiNTNjYzcwZDIz
OTA4NzYwHhcNMjUwOTA2MDQwMTA3WhcNMjUwOTA3MDQwMTA3WjAzMTEwLwYDVQQD
EyhhZmQyODc2MTlhMWQ1NGY0YzdjMmMwODk2ODIyZWRiOTBlNDJhNjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV9sE70cnykkR8iGpyou1eTb5/mW
uczzuOPpXIZJD2iliOwP0fvEn+lcSkoi8+rWeJ9bidOPmaOv3dIe4+dAKdV+anqB
nXwTPl+6UlZwD4eG1+inPBQD2QPhV/FRV+rn3ClQLXvFJIgaJe8ZUt4pJeW+bFW1
4THvgWWM6AKHu/zg2QsQvY7egtiLc5w+nrxF0Azw20eCEULQHHd4Ys3IgERkjah/
sslDK5XDesw7fqV/VIdBlYtD3EoLPVYMpkJU+iO466Vt0KLfbB5gv/S/yZOAr8av
tGN+69njdIMH3XlDEG+8vOz7q+Fbw4B3SSZJUAqVq0dmr+nV6kBYbtgYLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/Sh2GaHVT0x8LAiWgi7bkOQqZ7MB8GA1UdIwQY
MBaAFAJ3rNES8cbIM77CL4tTzHDSOQh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQt
ZDk2NTU5ODc4NzRhLzEvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQtZDk2NTU5ODc4NzRh
LzEvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevpSDNNY
eTIvdLEod+xErv5fC6JO2U/pbiUeuFy1w2X/dW5Q8SLJPqOg95uiiB+k4hMVlhli
fQpVj6ZDmahZLCeWAXpO8OtxaSk96a/aZUDxiv1cBDMAONG+Ae+xATm5ceO/uRzF
cquu5+VBP7tH+Qj/JAQwiuVAHZ6c0Z+659RP5p9UMBJvb3dhImiazBLjSld6PNkf
UwFk0djjqyI1IIRFjQlzc/6uio2zNAKNGRUuy21BVaWGYC2uApQbJ0W91+jARQ/w
vCvo5gNdwnGBlikuvcKEGACz4c3yaoaIKOm8YPL07l0rOJ85oqlNW9+4mdtjCSg8
Se3DMWrkdek45w==
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:47:16 2025 by rpki-client