Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: O1OD7e3yFy5GOk2+KENIjY8sJDrWTeIEBsoLyBimEyE=
Subject key identifier: A8:11:4E:A9:B0:CE:3C:4D:19:40:75:10:E4:C4:3E:35:60:7C:C6:20
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019A51F5E23BAA9297D931FBF08A3848B757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 03:00:59 +0000
Manifest this update: Wed 05 Nov 2025 03:00:59 +0000
Manifest next update: Thu 06 Nov 2025 03:00:59 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: 9wf+Sw84REBE9+DwQHUxXA6YQXLa4IrrIz2es31IsGk=)
2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:e2:3b:aa:92:97:d9:31:fb:f0:8a:38:48:b7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Nov 5 03:00:59 2025 GMT
Not After : Nov 6 03:00:59 2025 GMT
Subject: CN=a8114ea9b0ce3c4d19407510e4c43e35607cc620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:9c:47:0e:b1:37:ed:dd:d1:ce:ab:95:69:
6d:46:8a:b8:aa:e3:38:04:ef:a7:29:d1:e5:51:0a:
55:bd:fa:30:41:86:c4:70:67:14:e4:46:8f:5b:42:
0d:78:f2:ec:90:e3:ed:27:50:b3:73:b8:ab:74:81:
9f:c5:1f:e7:29:3e:be:b2:06:4c:3d:df:bd:f8:5d:
6c:22:9f:5a:c9:35:c7:00:0d:54:6c:5b:7f:3d:b0:
00:e9:a0:67:e4:52:5c:eb:41:9d:e6:00:8a:db:eb:
0b:b2:bb:e3:e0:ae:15:b9:08:a7:fc:98:d0:eb:e4:
bb:47:2a:3f:97:5a:22:c7:f0:23:bc:79:bc:76:ce:
a9:20:bc:c4:6a:79:4d:d1:b8:c2:2f:7c:7d:9c:6a:
7d:62:61:29:4e:92:69:42:5c:21:e5:cd:9d:de:b9:
12:ad:0d:50:a0:69:16:b8:da:72:11:85:f6:e5:2c:
84:c4:26:65:d4:56:48:5d:6b:6c:5b:57:ea:e8:9c:
1a:d1:84:78:fa:4e:f8:7f:2c:07:40:05:96:f4:5d:
7d:85:a5:3d:c7:58:d8:f8:dd:4e:f3:75:73:8e:92:
b5:af:7a:24:8d:b5:48:6a:d3:e9:ce:21:85:9c:7a:
ac:88:e0:f4:8c:5e:2f:d4:50:7d:48:5f:b6:a1:fb:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:11:4E:A9:B0:CE:3C:4D:19:40:75:10:E4:C4:3E:35:60:7C:C6:20
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:71:66:74:01:cd:53:4a:b4:1f:2d:b1:43:96:32:7b:ca:90:
9c:43:c1:66:e9:b1:ad:1b:fe:a7:10:c7:18:ff:2e:4e:02:da:
4a:58:df:4a:dd:c2:6d:b0:eb:a8:ee:68:be:f6:ad:86:75:8a:
fd:ac:f8:39:63:fd:4c:9b:fc:90:5a:96:31:65:e9:ce:f6:83:
b5:f4:5c:b9:7a:16:c7:4b:34:87:1e:26:d1:6f:4b:c0:ac:80:
3a:82:dd:a6:fa:31:ca:35:f3:65:d3:a7:46:c5:d3:bb:13:96:
d4:34:37:5f:dd:ff:13:f4:18:c4:9e:a8:46:79:d1:03:ce:0a:
52:60:98:8d:f2:76:93:6c:b9:8c:0d:cf:c9:fb:f1:ae:b8:5c:
4c:0b:cb:c1:80:07:74:c9:2f:85:fb:91:0d:51:aa:24:89:eb:
b8:7f:ba:b4:38:ce:0c:66:6e:d1:12:5d:92:c3:5e:35:5a:74:
d0:fe:94:a9:43:de:90:bf:27:74:88:bf:35:7c:2c:b9:fe:9a:
cb:65:85:df:08:09:b5:5e:33:1f:3b:64:f1:0a:27:4c:01:71:
c8:e8:0a:94:95:ab:69:d8:f0:ab:dd:12:08:49:a6:43:6c:e6:
b7:00:bb:67:b6:89:63:00:b6:08:07:50:a7:28:fe:c2:2b:20:
3b:9f:b6:3a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpR9eI7qpKX2TH78Io4SLdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YTM1MjBmZDljMjk5YTI4NzRkZjVlNDdiNjMwMmE0MjUy
YTcyNmIwHhcNMjUxMTA1MDMwMDU5WhcNMjUxMTA2MDMwMDU5WjAzMTEwLwYDVQQD
EyhhODExNGVhOWIwY2UzYzRkMTk0MDc1MTBlNGM0M2UzNTYwN2NjNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE+cRw6xN+3d0c6rlWltRoq4quM4
BO+nKdHlUQpVvfowQYbEcGcU5EaPW0INePLskOPtJ1Czc7irdIGfxR/nKT6+sgZM
Pd+9+F1sIp9ayTXHAA1UbFt/PbAA6aBn5FJc60Gd5gCK2+sLsrvj4K4VuQin/JjQ
6+S7Ryo/l1oix/AjvHm8ds6pILzEanlN0bjCL3x9nGp9YmEpTpJpQlwh5c2d3rkS
rQ1QoGkWuNpyEYX25SyExCZl1FZIXWtsW1fq6Jwa0YR4+k74fywHQAWW9F19haU9
x1jY+N1O83VzjpK1r3okjbVIatPpziGFnHqsiOD0jF4v1FB9SF+2ofvdqQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKgRTqmwzjxNGUB1EOTEPjVgfMYgMB8GA1UdIwQY
MBaAFPmjUg/Zwpmih0315HtjAqQlKnJrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1hTlNEOW5DbWFLSFRmWGtlMk1DcENVcWNtcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvODQwNzU3LTgxNDktNDBmZS1hNDli
LWFlNWU3NGVkNWJhMC8xLzEtYU5TRDluQ21hS0hUZlhrZTJNQ3BDVXFjbXMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI1Lzg0MDc1Ny04MTQ5LTQwZmUtYTQ5Yi1hZTVlNzRlZDVi
YTAvMS8xLWFOU0Q5bkNtYUtIVGZYa2UyTUNwQ1VxY21zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnFm
dAHNU0q0Hy2xQ5Yye8qQnEPBZumxrRv+pxDHGP8uTgLaSljfSt3CbbDrqO5ovvat
hnWK/az4OWP9TJv8kFqWMWXpzvaDtfRcuXoWx0s0hx4m0W9LwKyAOoLdpvoxyjXz
ZdOnRsXTuxOW1DQ3X93/E/QYxJ6oRnnRA84KUmCYjfJ2k2y5jA3PyfvxrrhcTAvL
wYAHdMkvhfuRDVGqJInruH+6tDjODGZu0RJdksNeNVp00P6UqUPekL8ndIi/NXws
uf6ay2WF3wgJtV4zHztk8QonTAFxyOgKlJWradjwq90SCEmmQ2zmtwC7Z7aJYwC2
CAdQpyj+wisgO5+2Og==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:05 2025 by rpki-client