Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
File: AUa0KfjElhH8_qHvoaUbnA7dtuc.mft (raw, json)
Hash identifier: hKKq5y+tVAbUHQwQmiRWt7LtukCKa4ZyYlNhaUBSJSs=
Subject key identifier: E2:94:70:03:E3:EF:A6:83:76:C5:C5:63:72:21:B0:CE:FA:C3:6F:D7
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 019A530804950EA975579E756B68EAAE5944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
Manifest number: 15A3
Signing time: Wed 05 Nov 2025 08:00:25 +0000
Manifest this update: Wed 05 Nov 2025 08:00:25 +0000
Manifest next update: Thu 06 Nov 2025 08:00:25 +0000
Files and hashes: 1: 4lSW2DqUUyfLAwCJxmdcakNOOAc.roa (hash: 0bkR+y4/sbmt2mM+LAt7tzsFlo9ay8a2libMzm6BQSQ=)
2: AUa0KfjElhH8_qHvoaUbnA7dtuc.crl (hash: aVJL5S4x3v5tXXEiWQy+2r7WRV1+zvquubKcrb5kBhg=)
3: EGYTjO7QUfpx0ulGevFYUIiqj3s.roa (hash: g2MIGdqU/L1bshOQ8N/mggpTuJ9tqqfK/SHJoPKbENM=)
4: PUvtKljRLvuOqowlndxBwGQKDl4.roa (hash: U5kHad25poEIvcwR4qtcel7KCFYyUvjuPf1N4FDV5NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:04:95:0e:a9:75:57:9e:75:6b:68:ea:ae:59:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: Nov 5 08:00:25 2025 GMT
Not After : Nov 6 08:00:25 2025 GMT
Subject: CN=e2947003e3efa68376c5c5637221b0cefac36fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:31:0b:34:e7:45:b6:6b:9c:6c:9b:90:7c:51:
72:e9:f1:5d:6d:b2:94:79:dd:82:8d:83:57:e5:c6:
d7:e6:2c:5d:f8:90:1e:fd:72:00:0a:39:fd:26:a2:
92:51:15:69:f9:8a:23:9a:21:b1:c9:9e:45:77:18:
92:5d:ea:ad:f3:01:7c:be:97:cf:fb:53:f6:d2:5b:
bc:ec:1c:a1:41:34:e1:d5:04:6f:79:c9:32:b2:23:
ab:f9:1a:f0:73:d5:c2:7b:56:b3:af:60:9d:47:bd:
0d:d5:b0:db:65:d0:76:41:3a:d3:f8:fd:c0:b0:93:
19:8e:5c:c2:84:28:e1:ca:b6:17:2c:80:27:a0:2b:
23:66:23:f3:90:16:25:01:3c:09:9c:08:74:91:3c:
99:fb:24:33:9c:86:5b:b5:5c:9d:4a:94:7e:47:5a:
5c:1b:1d:bc:fb:d5:a0:1a:3c:87:41:9d:a2:29:03:
84:0e:58:d1:4d:5d:7b:79:74:11:54:2c:50:4b:60:
0e:77:a4:7e:3d:a4:06:af:df:bc:d3:7e:17:b9:56:
73:b3:78:7f:d0:a2:bb:a9:1b:16:45:54:e9:68:09:
b0:7a:f6:aa:86:07:69:0f:18:e8:1a:92:a6:30:bf:
7d:34:c9:1e:91:0d:1b:31:e3:61:78:c1:b7:8f:22:
88:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:70:03:E3:EF:A6:83:76:C5:C5:63:72:21:B0:CE:FA:C3:6F:D7
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:10:61:14:6d:48:55:57:00:2c:0e:68:15:f4:18:ac:f6:54:
a6:75:7d:7a:47:af:6d:c0:3d:ad:44:e0:18:f2:2d:93:6b:e1:
47:dc:29:35:ea:8f:c0:c0:e3:76:dc:77:3e:8e:54:fb:9d:78:
58:38:4e:54:0c:a8:63:1b:20:de:3d:29:9f:c1:ba:40:ae:3d:
9d:35:7f:ae:e6:f1:2f:f7:14:6a:26:38:1a:5b:b8:de:57:1f:
bc:da:ac:22:15:9c:33:2a:16:15:36:96:5c:bf:f1:63:01:bc:
a7:0c:ec:27:2c:c8:b4:7b:aa:11:42:33:ce:81:9e:78:dc:e9:
9a:4d:04:8b:54:0b:4f:73:de:7b:36:ca:0d:a4:27:04:49:f4:
13:b6:be:12:62:0f:e9:af:a1:6a:e4:f7:a9:ae:87:86:f6:79:
c9:a9:a9:00:99:c4:5f:a6:49:c0:d9:74:2b:cf:07:62:56:a3:
c1:db:a0:59:50:2f:69:a6:92:10:5a:2e:bd:0b:db:52:d0:c1:
88:c4:b9:ed:5e:0e:af:a3:5e:9a:b5:23:33:e6:4a:4d:74:5d:
3b:99:b2:40:da:5f:20:6b:e4:8a:81:7d:16:b9:d7:30:a3:b4:
80:1f:40:75:e1:dc:0c:24:c0:67:01:e9:31:c2:c9:aa:67:e3:
a1:9d:e9:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCASVDql1V551a2jqrllEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDZiNDI5ZjhjNDk2MTFmY2ZlYTFlZmExYTUxYjljMGVk
ZGI2ZTcwHhcNMjUxMTA1MDgwMDI1WhcNMjUxMTA2MDgwMDI1WjAzMTEwLwYDVQQD
EyhlMjk0NzAwM2UzZWZhNjgzNzZjNWM1NjM3MjIxYjBjZWZhYzM2ZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TELNOdFtmucbJuQfFFy6fFdbbKU
ed2CjYNX5cbX5ixd+JAe/XIACjn9JqKSURVp+YojmiGxyZ5FdxiSXeqt8wF8vpfP
+1P20lu87ByhQTTh1QRveckysiOr+Rrwc9XCe1azr2CdR70N1bDbZdB2QTrT+P3A
sJMZjlzChCjhyrYXLIAnoCsjZiPzkBYlATwJnAh0kTyZ+yQznIZbtVydSpR+R1pc
Gx28+9WgGjyHQZ2iKQOEDljRTV17eXQRVCxQS2AOd6R+PaQGr9+8034XuVZzs3h/
0KK7qRsWRVTpaAmwevaqhgdpDxjoGpKmML99NMkekQ0bMeNheMG3jyKIJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKUcAPj76aDdsXFY3IhsM76w2/XMB8GA1UdIwQY
MBaAFAFGtCn4xJYR/P6h76GlG5wO3bbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMt
ZWEyNmU3NDZhMGFkLzEvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMtZWEyNmU3NDZhMGFk
LzEvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRBhFG1I
VVcALA5oFfQYrPZUpnV9ekevbcA9rUTgGPItk2vhR9wpNeqPwMDjdtx3Po5U+514
WDhOVAyoYxsg3j0pn8G6QK49nTV/rubxL/cUaiY4Glu43lcfvNqsIhWcMyoWFTaW
XL/xYwG8pwzsJyzItHuqEUIzzoGeeNzpmk0Ei1QLT3PeezbKDaQnBEn0E7a+EmIP
6a+hauT3qa6HhvZ5yampAJnEX6ZJwNl0K88HYlajwdugWVAvaaaSEFouvQvbUtDB
iMS57V4Or6NemrUjM+ZKTXRdO5myQNpfIGvkioF9FrnXMKO0gB9AdeHcDCTAZwHp
McLJqmfjoZ3pZg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:30:45 2025 by rpki-client