Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: I1gWaqPeVy2QeEeTxKYK24xYnONIqVYH0YMdmJsE8MQ=
Subject key identifier: BE:F3:6E:EC:4D:DB:B2:55:B8:5F:84:F9:A8:84:51:1B:46:64:31:42
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019A4F629D5A4CC84C1BB08AE6533694B85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 1195
Signing time: Tue 04 Nov 2025 15:00:54 +0000
Manifest this update: Tue 04 Nov 2025 15:00:54 +0000
Manifest next update: Wed 05 Nov 2025 15:00:54 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: RJZetuptAAs0NphdEpT398Xybjo2ilaq5Mjy7rmm/yU=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9d:5a:4c:c8:4c:1b:b0:8a:e6:53:36:94:b8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Nov 4 15:00:54 2025 GMT
Not After : Nov 5 15:00:54 2025 GMT
Subject: CN=bef36eec4ddbb255b85f84f9a884511b46643142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:51:4d:ff:97:ac:9c:16:df:6c:33:e4:fb:
dc:69:9c:5b:af:e5:02:8d:97:4b:f6:29:b6:d8:7e:
24:04:60:93:a9:5c:61:72:da:b3:c2:4e:9c:8e:62:
26:f6:67:30:55:dc:6a:ee:71:bf:6c:db:15:63:fb:
b0:f3:8d:80:f1:ff:87:fa:b0:72:c2:14:84:17:cb:
7b:3c:4d:c8:08:57:2f:a3:6b:cf:b9:09:51:2c:9c:
83:ab:e9:ff:2b:68:66:d1:13:c6:70:0e:1b:c6:17:
58:11:57:60:39:6c:41:64:5c:09:28:f4:ab:34:c3:
36:1d:f2:e9:59:33:b8:d5:90:c1:8f:21:d9:c8:31:
0b:96:33:85:b9:57:33:52:3b:92:80:b1:2b:87:e3:
d4:49:15:ef:0d:ca:27:5e:62:06:d3:4b:07:bd:fb:
18:cf:c5:85:c2:f8:50:91:11:02:b3:3c:1b:78:f7:
5f:4e:49:2b:51:47:b2:b5:7c:7c:91:55:8c:c4:3c:
4f:d3:fd:62:47:7d:9e:4a:26:cd:93:f5:41:34:7d:
8e:26:03:5e:81:b1:57:ac:4a:3b:6d:17:dd:7d:21:
8e:b7:bf:8c:47:3a:aa:d2:cf:eb:9b:66:ce:a4:8c:
c1:e5:91:85:fc:b0:d9:4b:19:8c:85:6d:5b:c6:29:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F3:6E:EC:4D:DB:B2:55:B8:5F:84:F9:A8:84:51:1B:46:64:31:42
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:b3:60:2e:f8:cc:38:36:b0:df:2d:c8:df:00:ca:5a:77:
bc:85:cc:41:fd:02:03:64:d1:55:e2:47:6f:a5:84:a8:5e:86:
db:c4:4d:7f:ef:64:e7:af:11:08:0d:94:ce:59:f1:94:22:ac:
8d:8a:64:90:b2:03:fb:b4:42:8f:e0:dd:34:de:bd:30:d4:58:
ef:f8:8f:40:07:fe:24:fb:14:6e:e6:8a:6a:c4:4b:55:2f:59:
89:19:d5:1f:28:83:17:7e:db:50:7e:0a:ed:00:73:9e:d8:c4:
13:76:3a:d3:28:bb:54:fd:c6:85:6b:21:7c:bd:b6:1a:5c:10:
51:39:82:dd:97:33:26:a8:6d:b0:c9:aa:85:f8:c9:28:f7:27:
b3:3a:8f:de:dc:b0:80:78:5f:b1:48:15:35:bf:ad:f5:d9:1a:
b3:bf:a9:d7:0b:05:3f:12:e6:79:31:64:b8:a5:fb:a4:a5:ce:
28:5e:f1:c1:0b:96:a5:be:f3:59:a2:36:fe:55:63:9c:61:ae:
6d:4f:6f:dd:3d:3f:a7:e8:91:ad:b8:dd:f7:81:6f:32:df:af:
d7:8c:4b:09:f4:01:62:db:af:4b:8e:8f:f3:31:a8:15:c6:6a:
25:c3:bf:b3:c8:13:43:b7:ff:b3:d8:4e:bb:81:30:5b:d3:75:
cc:8b:ab:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYp1aTMhMG7CK5lM2lLhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0
ZmQ1MTcwHhcNMjUxMTA0MTUwMDU0WhcNMjUxMTA1MTUwMDU0WjAzMTEwLwYDVQQD
EyhiZWYzNmVlYzRkZGJiMjU1Yjg1Zjg0ZjlhODg0NTExYjQ2NjQzMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXlRTf+XrJwW32wz5PvcaZxbr+UC
jZdL9im22H4kBGCTqVxhctqzwk6cjmIm9mcwVdxq7nG/bNsVY/uw842A8f+H+rBy
whSEF8t7PE3ICFcvo2vPuQlRLJyDq+n/K2hm0RPGcA4bxhdYEVdgOWxBZFwJKPSr
NMM2HfLpWTO41ZDBjyHZyDELljOFuVczUjuSgLErh+PUSRXvDconXmIG00sHvfsY
z8WFwvhQkRECszwbePdfTkkrUUeytXx8kVWMxDxP0/1iR32eSibNk/VBNH2OJgNe
gbFXrEo7bRfdfSGOt7+MRzqq0s/rm2bOpIzB5ZGF/LDZSxmMhW1bxiku+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7zbuxN27JVuF+E+aiEURtGZDFCMB8GA1UdIwQY
MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt
ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2
LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg02zYC74
zDg2sN8tyN8Aylp3vIXMQf0CA2TRVeJHb6WEqF6G28RNf+9k568RCA2UzlnxlCKs
jYpkkLID+7RCj+DdNN69MNRY7/iPQAf+JPsUbuaKasRLVS9ZiRnVHyiDF37bUH4K
7QBzntjEE3Y60yi7VP3GhWshfL22GlwQUTmC3ZczJqhtsMmqhfjJKPcnszqP3tyw
gHhfsUgVNb+t9dkas7+p1wsFPxLmeTFkuKX7pKXOKF7xwQuWpb7zWaI2/lVjnGGu
bU9v3T0/p+iRrbjd94FvMt+v14xLCfQBYtuvS46P8zGoFcZqJcO/s8gTQ7f/s9hO
u4EwW9N1zIur/w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:25 2025 by rpki-client