Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: VrxNqZ2QNnV5KVQHxyb0g5XWLL3C7VuoiOSW1rQt4ow=
Subject key identifier: AF:26:D7:73:F6:D7:F7:7E:3F:C8:B1:3A:61:65:90:B3:3F:7B:B0:8D
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 01989DBA2CB0F406EFDE96D58F5601CE9C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 05F6
Signing time: Tue 12 Aug 2025 10:01:20 +0000
Manifest this update: Tue 12 Aug 2025 10:01:20 +0000
Manifest next update: Wed 13 Aug 2025 10:01:20 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: kwdv4ilY3wtnSeIVoKFHAQo+6W6kfE2WAxX8EtifaVo=)
2: IrEzCg-L6ChV6NO0z_pSKTvObkE.roa (hash: BAxTmTfKNgnausi613sLgqp7n2C4MuqhHvDS7/1g8aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:ba:2c:b0:f4:06:ef:de:96:d5:8f:56:01:ce:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Aug 12 10:01:20 2025 GMT
Not After : Aug 13 10:01:20 2025 GMT
Subject: CN=af26d773f6d7f77e3fc8b13a616590b33f7bb08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:a5:4a:b5:80:d3:01:df:f7:03:38:80:e9:
69:83:64:02:8b:89:b8:41:e4:22:6e:22:bd:28:cf:
b9:ec:51:a5:ba:c1:6c:1e:cb:49:26:9e:03:54:fe:
8a:53:64:15:68:21:0f:bd:83:ca:4a:bc:25:45:ed:
5d:ae:cc:59:84:88:4c:ca:78:bb:cf:cd:db:15:a3:
53:ed:90:34:10:c5:70:f8:1a:46:c5:cc:52:6c:45:
a2:94:4b:7e:d1:d7:8f:ae:c2:96:4d:5c:5d:cc:4f:
02:48:6a:39:b1:f4:4b:4e:1e:87:3e:ef:b4:ad:8a:
0d:4c:2f:85:36:1e:b2:2f:77:d8:fb:42:bd:ad:33:
13:ec:22:3c:d8:f5:9c:b4:a9:68:d1:0e:ce:59:79:
2d:ad:85:17:b7:d2:27:fa:8a:30:46:aa:8e:b2:44:
fb:3d:37:ee:99:26:af:66:a6:81:82:e7:1b:12:77:
42:22:38:95:8a:a3:37:bb:90:3d:0c:3d:12:d4:fc:
cf:69:47:44:7e:3d:df:ac:08:b5:f9:a9:8f:fc:3c:
3f:b5:81:3e:a6:da:f0:16:c7:71:51:fd:cb:f3:13:
14:27:bc:8e:2d:52:fb:ef:03:c6:c0:84:4d:72:40:
4b:e9:77:09:4a:f5:54:2c:1e:ed:67:ea:34:6b:48:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:26:D7:73:F6:D7:F7:7E:3F:C8:B1:3A:61:65:90:B3:3F:7B:B0:8D
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:05:7c:85:d1:0f:a6:0d:2a:4c:d7:71:d0:43:15:58:6f:94:
ec:81:70:16:67:c1:3d:cb:ba:23:69:b3:99:a2:4d:83:0a:fa:
59:db:26:75:a4:40:8d:98:7b:df:1c:be:aa:a6:29:2f:0e:3f:
d3:38:7a:2a:ce:f5:76:d2:03:be:93:a8:b4:f7:7d:6d:35:bf:
9f:04:47:73:b3:99:0c:ec:6e:72:ac:03:fa:21:34:e7:55:04:
b8:a6:03:83:96:aa:7a:56:8e:a6:b0:b8:75:fc:60:a5:85:7e:
22:98:5e:15:53:3d:8a:49:3e:be:86:1f:80:e5:83:ad:aa:ce:
22:d6:c8:bc:88:20:40:86:1b:d7:4d:7f:b1:db:69:ee:3a:26:
bf:ec:7e:8f:d5:d7:28:96:40:0c:5d:2a:54:94:cf:9b:16:e3:
78:3a:46:2e:1e:43:43:f2:30:67:d8:ac:29:9a:de:92:5b:b9:
c9:0f:b9:e9:0c:6d:f4:0b:21:90:46:05:97:4a:90:2c:bd:76:
46:b8:8a:82:46:a1:fe:61:a3:09:f2:cf:9e:4b:0b:88:52:03:
aa:55:ae:d7:32:5d:6f:c0:8f:1c:4a:57:cb:4a:e1:85:c8:57:
8a:dc:ea:55:bb:c4:e2:12:a9:a6:37:06:4d:8b:b3:c8:f7:8c:
a4:a3:a6:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiduiyw9Abv3pbVj1YBzpw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYWI4NmY4MGM0YmIyYWM1NmU0MWVjN2EyNDZhZTI5Njlk
OGQzNTgwHhcNMjUwODEyMTAwMTIwWhcNMjUwODEzMTAwMTIwWjAzMTEwLwYDVQQD
EyhhZjI2ZDc3M2Y2ZDdmNzdlM2ZjOGIxM2E2MTY1OTBiMzNmN2JiMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW+lSrWA0wHf9wM4gOlpg2QCi4m4
QeQibiK9KM+57FGlusFsHstJJp4DVP6KU2QVaCEPvYPKSrwlRe1drsxZhIhMyni7
z83bFaNT7ZA0EMVw+BpGxcxSbEWilEt+0dePrsKWTVxdzE8CSGo5sfRLTh6HPu+0
rYoNTC+FNh6yL3fY+0K9rTMT7CI82PWctKlo0Q7OWXktrYUXt9In+oowRqqOskT7
PTfumSavZqaBgucbEndCIjiViqM3u5A9DD0S1PzPaUdEfj3frAi1+amP/Dw/tYE+
ptrwFsdxUf3L8xMUJ7yOLVL77wPGwIRNckBL6XcJSvVULB7tZ+o0a0gMvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8m13P21/d+P8ixOmFlkLM/e7CNMB8GA1UdIwQY
MBaAFOGrhvgMS7KsVuQex6JGrilp2NNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODct
NTE2ZjExYWNiM2FlLzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODctNTE2ZjExYWNiM2Fl
LzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAV8hdEP
pg0qTNdx0EMVWG+U7IFwFmfBPcu6I2mzmaJNgwr6WdsmdaRAjZh73xy+qqYpLw4/
0zh6Ks71dtIDvpOotPd9bTW/nwRHc7OZDOxucqwD+iE051UEuKYDg5aqelaOprC4
dfxgpYV+IpheFVM9ikk+voYfgOWDrarOItbIvIggQIYb101/sdtp7jomv+x+j9XX
KJZADF0qVJTPmxbjeDpGLh5DQ/IwZ9isKZreklu5yQ+56Qxt9AshkEYFl0qQLL12
RriKgkah/mGjCfLPnksLiFIDqlWu1zJdb8CPHEpXy0rhhchXitzqVbvE4hKppjcG
TYuzyPeMpKOmPw==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:34:57 2025 by rpki-client