Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: PbBKdSjRdvS/YpSPRz8AEvcl+v/B84/4QkjieoyAf8o=
Subject key identifier: 93:56:0A:45:32:FD:7F:E6:59:42:F6:C5:BB:BD:61:61:90:D3:58:33
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019A4EF4BCDF60330BF82F784781DDB520CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 13:00:53 +0000
Manifest this update: Tue 04 Nov 2025 13:00:53 +0000
Manifest next update: Wed 05 Nov 2025 13:00:53 +0000
Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=)
2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=)
3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: vo8GGyvpiQiXtnXvEnseZazNIYkSSs/I2q6XMjbbxTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bc:df:60:33:0b:f8:2f:78:47:81:dd:b5:20:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Nov 4 13:00:53 2025 GMT
Not After : Nov 5 13:00:53 2025 GMT
Subject: CN=93560a4532fd7fe65942f6c5bbbd616190d35833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:d9:39:b8:1d:b0:6c:9c:c7:58:3a:58:3b:
d5:2a:f9:9a:60:d0:32:db:ed:6e:0a:9d:10:db:65:
d9:69:1c:f8:02:37:1a:86:3b:96:31:7f:3e:75:be:
f4:2c:c2:bc:5a:df:33:50:cc:6e:fc:b7:6d:0c:18:
ea:ef:e5:81:63:cd:90:b1:b5:3f:94:aa:98:48:33:
b6:83:e8:1c:2e:2c:0a:0e:44:71:40:02:c0:78:3d:
a7:ef:e0:83:c5:63:2d:07:d6:04:e4:60:a0:47:a4:
22:74:23:9a:9e:de:59:31:3c:18:4b:c6:1b:e4:28:
e0:09:be:c1:a3:a5:d0:1f:06:91:bc:6f:3c:ce:e5:
51:a2:2d:7e:c7:f0:9b:fa:71:6b:7d:05:3f:87:f4:
bf:0f:19:34:0b:44:52:30:85:51:96:46:b1:fc:f7:
33:ba:eb:33:96:3b:d4:88:1f:f3:76:2c:e2:dc:89:
e0:d4:3b:f9:dd:44:b8:5f:7d:87:6d:f6:5b:92:1b:
ed:99:0a:9a:d8:22:a3:e9:3d:11:d7:56:81:f1:d3:
79:37:ad:9a:ff:21:b0:7b:d0:05:aa:31:7d:ac:67:
a3:db:4b:8a:84:6b:45:12:8b:2a:e8:1d:11:73:1b:
70:d8:af:3d:0a:1e:bb:61:2c:32:6f:fb:0d:ee:7c:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:56:0A:45:32:FD:7F:E6:59:42:F6:C5:BB:BD:61:61:90:D3:58:33
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1e:f7:4d:bf:df:86:06:38:29:6a:47:8b:df:ba:e8:4a:9f:
36:4f:5b:05:29:a9:de:05:aa:d6:13:30:53:95:a0:7c:b5:76:
38:43:3d:e1:b6:f5:f2:65:dd:5c:f7:1c:21:18:e4:81:29:cb:
a7:71:3d:ad:92:7c:93:07:46:31:d6:96:b7:6e:24:fa:90:23:
c6:48:9a:0f:23:dc:32:f4:4a:70:34:47:3e:fe:45:e5:ec:15:
53:a1:19:3f:eb:79:1e:7a:3d:2e:4f:56:69:6e:5e:42:43:43:
cf:68:64:01:39:bc:a3:82:97:52:dc:04:ff:e6:f5:23:9e:d3:
5f:7b:ab:94:3f:03:70:4a:e2:73:e0:76:3b:42:71:d4:d8:f7:
54:c6:1e:63:f4:4d:8b:c9:bf:40:2f:ad:aa:a6:0e:86:65:c4:
80:cb:b8:d0:b3:7f:da:7a:aa:d1:29:2c:95:64:bd:c4:30:d6:
dd:f5:56:61:73:f8:cc:a1:da:0b:a1:65:46:f2:13:a5:d0:e6:
e2:8f:e0:80:e8:64:6f:73:ef:a9:4d:91:e9:d4:cf:8d:bf:80:
50:01:03:81:ed:ce:4f:fb:1d:c7:21:18:32:ae:ac:33:a8:45:
d6:0c:00:ba:4d:71:c7:75:eb:66:ec:2a:63:42:29:60:13:bd:
0d:15:95:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9LzfYDML+C94R4HdtSDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNmNjNzkwNjk1YjcxOWI5MjNjNzRkMjBmYWI3ZTYzYzE4
YmM3MzYwHhcNMjUxMTA0MTMwMDUzWhcNMjUxMTA1MTMwMDUzWjAzMTEwLwYDVQQD
Eyg5MzU2MGE0NTMyZmQ3ZmU2NTk0MmY2YzViYmJkNjE2MTkwZDM1ODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTfZObgdsGycx1g6WDvVKvmaYNAy
2+1uCp0Q22XZaRz4AjcahjuWMX8+db70LMK8Wt8zUMxu/LdtDBjq7+WBY82QsbU/
lKqYSDO2g+gcLiwKDkRxQALAeD2n7+CDxWMtB9YE5GCgR6QidCOant5ZMTwYS8Yb
5CjgCb7Bo6XQHwaRvG88zuVRoi1+x/Cb+nFrfQU/h/S/Dxk0C0RSMIVRlkax/Pcz
uuszljvUiB/zdizi3Ing1Dv53US4X32HbfZbkhvtmQqa2CKj6T0R11aB8dN5N62a
/yGwe9AFqjF9rGej20uKhGtFEosq6B0Rcxtw2K89Ch67YSwyb/sN7ny7wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNWCkUy/X/mWUL2xbu9YWGQ01gzMB8GA1UdIwQY
MBaAFGtsx5BpW3Gbkjx00g+rfmPBi8c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTkt
NTdkNWY0MDFiNTY0LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTktNTdkNWY0MDFiNTY0
LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACB73Tb/f
hgY4KWpHi9+66EqfNk9bBSmp3gWq1hMwU5WgfLV2OEM94bb18mXdXPccIRjkgSnL
p3E9rZJ8kwdGMdaWt24k+pAjxkiaDyPcMvRKcDRHPv5F5ewVU6EZP+t5Hno9Lk9W
aW5eQkNDz2hkATm8o4KXUtwE/+b1I57TX3urlD8DcEric+B2O0Jx1Nj3VMYeY/RN
i8m/QC+tqqYOhmXEgMu40LN/2nqq0SkslWS9xDDW3fVWYXP4zKHaC6FlRvITpdDm
4o/ggOhkb3PvqU2R6dTPjb+AUAEDge3OT/sdxyEYMq6sM6hF1gwAuk1xx3XrZuwq
Y0IpYBO9DRWVTA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:21 2025 by rpki-client