Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: FiKpJKnKku+Xx8UEVkD3Q0szMBXgRmSLURhF8pa9mB8=
Subject key identifier: 41:FB:73:08:8F:C3:B0:2D:27:6E:AE:B8:33:B0:C3:22:A4:80:36:04
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 019A50E4169BA498D129F22490D936068E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0C83
Signing time: Tue 04 Nov 2025 22:01:56 +0000
Manifest this update: Tue 04 Nov 2025 22:01:56 +0000
Manifest next update: Wed 05 Nov 2025 22:01:56 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: oNd0EZb69Z4yP2dAwMb4X10Bm78z01JzmvbnVeKQzKo=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:16:9b:a4:98:d1:29:f2:24:90:d9:36:06:8e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Nov 4 22:01:56 2025 GMT
Not After : Nov 5 22:01:56 2025 GMT
Subject: CN=41fb73088fc3b02d276eaeb833b0c322a4803604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:a0:7e:14:b4:c6:27:a1:17:60:08:0e:24:
54:be:72:61:2a:b7:84:5e:fd:6e:a4:ba:0c:76:6c:
b3:ac:53:67:f1:09:a0:af:95:aa:6f:1a:5b:a0:13:
42:70:06:20:d5:db:93:32:39:ef:87:d4:2d:db:7e:
cc:e8:59:c9:82:52:5c:95:5b:3e:3a:e1:4b:3b:94:
a8:6f:c4:1c:fb:70:a9:55:ea:01:96:1f:0b:10:69:
76:54:38:a2:90:b5:cc:81:2d:1b:31:68:91:a4:14:
6d:28:02:ee:cf:62:3c:c7:4b:09:69:3f:a3:0e:77:
7d:67:06:ec:6a:85:e8:84:1b:4d:3d:78:6e:0b:99:
8e:b4:61:e4:01:5d:02:03:7a:7a:95:9e:02:82:01:
51:36:78:db:d3:1f:c3:be:6e:df:f5:c9:26:65:c7:
dd:cf:54:95:a2:9f:4e:a0:ed:9e:3c:9e:ad:67:5f:
d0:42:11:66:31:22:d5:f0:18:f3:06:6f:24:99:a9:
4d:26:35:1a:1b:a7:28:a0:c7:7a:36:e4:e0:00:4b:
65:c5:67:58:da:eb:6c:8f:63:de:33:b7:57:d3:60:
4f:d8:a7:8f:a1:84:1f:9f:be:f2:78:56:35:1a:80:
4a:45:97:55:16:12:68:d9:a0:bd:ac:bd:a2:63:c9:
f3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FB:73:08:8F:C3:B0:2D:27:6E:AE:B8:33:B0:C3:22:A4:80:36:04
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4a:a7:83:aa:a4:ae:3d:0a:26:14:f5:ec:60:77:e0:c4:55:
e3:20:e9:c9:2a:16:ec:af:e1:05:00:7c:95:f5:03:a1:e6:7e:
9f:fc:f3:c4:04:f6:3a:79:6b:ad:b3:29:5e:01:06:42:9e:6f:
8c:1b:76:dc:c2:13:44:b3:61:54:09:7e:8c:c8:18:db:04:aa:
28:95:9f:73:5c:98:5d:d2:de:8a:c0:fa:5b:db:8c:bf:40:05:
fc:61:b1:3b:be:1e:11:9f:15:a6:4b:43:fc:31:85:21:a0:92:
bd:44:42:d3:4c:4a:6a:9c:fb:cc:c7:12:1a:d7:aa:80:3c:22:
fc:8b:a4:02:45:10:96:bc:99:72:c8:fa:29:0a:ca:b8:7c:69:
48:a6:17:73:9b:65:c5:c1:88:aa:27:11:88:9d:e9:00:7a:9c:
4a:44:99:d8:73:b3:9f:2d:ca:85:00:9c:0a:04:60:7e:eb:34:
d2:e0:34:fd:fe:1b:82:53:08:2d:ce:1c:59:d1:f0:93:0e:29:
ff:41:cb:77:71:e0:6a:ac:ef:53:98:0a:87:75:7d:60:c5:c4:
f1:e4:69:7b:ed:11:f3:bd:d3:2b:81:a4:85:fd:09:5a:e9:0b:
39:e2:c7:a8:9f:76:a8:31:1b:40:69:23:8e:48:5f:87:3f:34:
48:df:02:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5BabpJjRKfIkkNk2Bo4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGE3ZDRjNjRhZWQ0YmM5OGM2YjViMDY0ZmYwYTliODJl
YWRhODIwHhcNMjUxMTA0MjIwMTU2WhcNMjUxMTA1MjIwMTU2WjAzMTEwLwYDVQQD
Eyg0MWZiNzMwODhmYzNiMDJkMjc2ZWFlYjgzM2IwYzMyMmE0ODAzNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJygfhS0xiehF2AIDiRUvnJhKreE
Xv1upLoMdmyzrFNn8Qmgr5WqbxpboBNCcAYg1duTMjnvh9Qt237M6FnJglJclVs+
OuFLO5Sob8Qc+3CpVeoBlh8LEGl2VDiikLXMgS0bMWiRpBRtKALuz2I8x0sJaT+j
Dnd9ZwbsaoXohBtNPXhuC5mOtGHkAV0CA3p6lZ4CggFRNnjb0x/Dvm7f9ckmZcfd
z1SVop9OoO2ePJ6tZ1/QQhFmMSLV8BjzBm8kmalNJjUaG6cooMd6NuTgAEtlxWdY
2utsj2PeM7dX02BP2KePoYQfn77yeFY1GoBKRZdVFhJo2aC9rL2iY8nzRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH7cwiPw7AtJ26uuDOwwyKkgDYEMB8GA1UdIwQY
MBaAFAEKfUxkrtS8mMa1sGT/CpuC6tqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUt
ZGJmNzZlZDM5MzlmLzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUtZGJmNzZlZDM5Mzlm
LzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEqng6qk
rj0KJhT17GB34MRV4yDpySoW7K/hBQB8lfUDoeZ+n/zzxAT2OnlrrbMpXgEGQp5v
jBt23MITRLNhVAl+jMgY2wSqKJWfc1yYXdLeisD6W9uMv0AF/GGxO74eEZ8VpktD
/DGFIaCSvURC00xKapz7zMcSGteqgDwi/IukAkUQlryZcsj6KQrKuHxpSKYXc5tl
xcGIqicRiJ3pAHqcSkSZ2HOzny3KhQCcCgRgfus00uA0/f4bglMILc4cWdHwkw4p
/0HLd3HgaqzvU5gKh3V9YMXE8eRpe+0R873TK4Gkhf0JWukLOeLHqJ92qDEbQGkj
jkhfhz80SN8CPQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:06 2025 by rpki-client