Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: QkRtptjAaWQqRk9YzZtV+NN3u3qZFqr9bcr6UhR+42Y=
Subject key identifier: 20:88:0E:B6:76:7A:5D:44:8D:60:EB:01:B1:D2:2B:FE:96:87:F0:F6
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019A5150D31D98F802C8622B7B92D4E3846D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0B51
Signing time: Wed 05 Nov 2025 00:00:42 +0000
Manifest this update: Wed 05 Nov 2025 00:00:42 +0000
Manifest next update: Thu 06 Nov 2025 00:00:42 +0000
Files and hashes: 1: 2K0uKSMybLcdA8jtmNxG5Ki84QY.roa (hash: 5mE2Q4t19bkfyumGCGmg6dxDWvIkT1fJkVfrU9nbK78=)
2: 6FGsGLFn7A73WCT0SPiFHEX5nI8.roa (hash: 7Hh/w12WqCnZ+Rx2BO6W7oVN9o4uT5fOf8UbGGxI1Zw=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: /FOvEz5cgQLE1UlQnLnIAugZq4zM+kXWrKXCO8W9+nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:d3:1d:98:f8:02:c8:62:2b:7b:92:d4:e3:84:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Nov 5 00:00:42 2025 GMT
Not After : Nov 6 00:00:42 2025 GMT
Subject: CN=20880eb6767a5d448d60eb01b1d22bfe9687f0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:d4:72:aa:48:45:4d:3b:7b:02:c2:f2:62:
b8:90:88:91:1f:7a:5f:a5:57:cb:8e:db:5d:d6:a8:
a8:2e:0e:4c:d7:9d:fc:e0:0d:21:75:30:47:22:a3:
6c:d8:13:e1:b8:4e:e5:75:2a:fe:c3:89:9f:26:e2:
a6:7e:fc:f9:fa:67:8a:f4:e6:52:92:39:d8:0f:f2:
08:46:2c:fb:ca:9d:e4:07:29:38:7f:0b:b2:1a:13:
72:af:04:70:6f:a5:42:19:d8:51:14:c9:da:50:9b:
a8:ad:e9:e1:f7:48:32:e8:4b:68:40:6b:75:16:e2:
12:f5:e0:52:a5:84:b7:7f:34:85:06:0f:ed:95:fe:
8b:e5:8d:46:d2:c3:ee:eb:5d:b5:de:ed:1d:3a:3c:
fe:41:16:06:b2:9e:90:bc:3e:51:e4:25:d0:47:ab:
69:3c:63:7e:1f:50:01:b9:d8:ad:cc:71:3a:f6:34:
30:59:33:22:ca:ad:1e:03:8c:4f:5e:86:38:87:e6:
90:65:b7:b9:0c:6b:bf:e1:e1:bb:fa:14:0f:31:b9:
63:5f:74:74:08:ec:46:82:0a:a1:95:99:5d:42:f2:
4c:3a:b4:ff:a6:2d:d6:0c:3f:cf:a5:e2:cd:f8:08:
20:05:bc:af:8a:36:75:6f:07:c5:92:0d:7c:04:3d:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:88:0E:B6:76:7A:5D:44:8D:60:EB:01:B1:D2:2B:FE:96:87:F0:F6
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6b:22:79:f5:13:91:67:19:f7:be:3e:1e:85:98:78:dd:99:
e8:15:0c:6f:3c:39:31:98:bb:13:9b:5a:50:dc:fd:49:1c:27:
57:ee:7c:49:af:69:5d:70:23:63:fb:61:31:37:d8:a1:e9:fa:
4d:7f:ee:82:80:5c:3f:5e:19:d6:fb:1f:36:67:53:1f:e9:53:
29:b4:73:ae:f9:22:82:00:06:24:ac:83:76:05:4b:a4:06:9d:
8d:ab:8c:19:9e:f6:8a:08:0a:f4:54:2a:11:ac:61:aa:33:88:
a6:0d:11:05:0a:e2:a5:b8:a5:c8:e7:27:75:ee:8e:03:fa:bd:
7d:e1:3b:13:fe:84:e0:72:cc:87:ba:3e:35:d4:04:7a:84:d0:
ab:a2:a2:07:51:0f:38:6a:9c:29:a2:93:de:1e:8b:5f:5f:db:
e6:e5:ba:66:f6:30:c3:a8:70:a3:8c:2e:f5:d1:c1:c6:e3:82:
68:18:26:60:18:73:c6:b8:41:8a:36:69:8a:bf:f6:98:e0:e0:
4d:4a:92:8d:a5:b6:87:fc:cf:a0:7b:55:a6:0a:db:45:c2:a2:
77:32:41:bd:02:02:1b:5b:6c:7a:d5:a6:ce:0b:34:c7:88:0c:
19:8d:26:4a:4e:83:f3:52:2a:03:6c:f3:65:2f:3d:79:ac:c7:
50:2c:79:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUNMdmPgCyGIre5LU44RtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzFiMzQ5MzhhMzFhMzRiZjU4NjZhMGYzZGQ3OGMzOGFh
YzYxMTkwHhcNMjUxMTA1MDAwMDQyWhcNMjUxMTA2MDAwMDQyWjAzMTEwLwYDVQQD
EygyMDg4MGViNjc2N2E1ZDQ0OGQ2MGViMDFiMWQyMmJmZTk2ODdmMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW7UcqpIRU07ewLC8mK4kIiRH3pf
pVfLjttd1qioLg5M15384A0hdTBHIqNs2BPhuE7ldSr+w4mfJuKmfvz5+meK9OZS
kjnYD/IIRiz7yp3kByk4fwuyGhNyrwRwb6VCGdhRFMnaUJuorenh90gy6EtoQGt1
FuIS9eBSpYS3fzSFBg/tlf6L5Y1G0sPu61213u0dOjz+QRYGsp6QvD5R5CXQR6tp
PGN+H1ABuditzHE69jQwWTMiyq0eA4xPXoY4h+aQZbe5DGu/4eG7+hQPMbljX3R0
COxGggqhlZldQvJMOrT/pi3WDD/PpeLN+AggBbyvijZ1bwfFkg18BD0IVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCIDrZ2el1EjWDrAbHSK/6Wh/D2MB8GA1UdIwQY
MBaAFGtxs0k4oxo0v1hmoPPdeMOKrGEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYt
NmY1NmUxZmEwMjMwLzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYtNmY1NmUxZmEwMjMw
LzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWsiefUT
kWcZ974+HoWYeN2Z6BUMbzw5MZi7E5taUNz9SRwnV+58Sa9pXXAjY/thMTfYoen6
TX/ugoBcP14Z1vsfNmdTH+lTKbRzrvkiggAGJKyDdgVLpAadjauMGZ72iggK9FQq
EaxhqjOIpg0RBQripbilyOcnde6OA/q9feE7E/6E4HLMh7o+NdQEeoTQq6KiB1EP
OGqcKaKT3h6LX1/b5uW6ZvYww6hwo4wu9dHBxuOCaBgmYBhzxrhBijZpir/2mODg
TUqSjaW2h/zPoHtVpgrbRcKidzJBvQICG1tsetWmzgs0x4gMGY0mSk6D81IqA2zz
ZS89eazHUCx5Hg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:47 2025 by rpki-client