Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: iHHdswaogfKZ0fA12t1vcIrd2MnY5aAKXSq8jG19lc4=
Subject key identifier: B0:A0:AD:40:AF:3F:3E:DF:BB:00:65:53:1F:9C:3A:57:12:8E:86:3E
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019A51511679DC9641E013F5EBFE4EC0B9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 086C
Signing time: Wed 05 Nov 2025 00:00:59 +0000
Manifest this update: Wed 05 Nov 2025 00:00:59 +0000
Manifest next update: Thu 06 Nov 2025 00:00:59 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: ztTaeReVhTjsK7Mezyg0owqCsndSJbzBAehizREjJmE=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:16:79:dc:96:41:e0:13:f5:eb:fe:4e:c0:b9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Nov 5 00:00:59 2025 GMT
Not After : Nov 6 00:00:59 2025 GMT
Subject: CN=b0a0ad40af3f3edfbb0065531f9c3a57128e863e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:b6:52:5f:bc:10:81:f8:b1:81:10:8d:82:
62:70:7b:85:2f:5e:d2:a8:20:1d:c7:99:e3:b0:6c:
70:f7:32:aa:88:fd:4c:a0:5a:bf:27:53:47:6e:b7:
b3:e4:7c:5b:6a:e8:6e:9c:ec:e9:aa:35:ea:28:79:
8f:71:4d:3f:fd:0b:3c:f2:93:76:53:d6:db:4f:80:
81:ee:db:f5:3c:e1:48:2b:b2:29:c2:27:1b:95:76:
7f:d5:9a:15:68:9e:93:81:48:49:4c:35:c9:cd:7d:
fe:8d:bf:7d:0d:ff:90:3a:2d:35:43:4d:1d:72:fc:
75:28:46:89:52:65:c2:b6:37:21:18:9a:50:07:de:
ee:24:78:89:ea:c0:8b:cf:7c:67:1f:da:86:bb:62:
d3:81:13:e8:71:fd:9e:9b:14:a2:8c:ff:5b:dc:40:
b7:9f:a7:6f:2f:97:c3:f0:8c:ce:fa:d7:51:35:a1:
04:5e:fd:c2:2e:b5:ee:f4:f7:b2:42:69:18:e3:03:
8b:6f:51:d7:97:45:fd:6a:8f:39:61:59:f0:ac:5f:
19:3e:2a:43:de:21:45:f1:43:c3:02:36:dc:61:4f:
10:57:fb:2c:07:2a:41:16:3e:b5:36:96:76:7f:f5:
9d:2f:02:0e:c5:06:5a:83:a8:37:59:e5:ab:aa:8d:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A0:AD:40:AF:3F:3E:DF:BB:00:65:53:1F:9C:3A:57:12:8E:86:3E
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2a:0a:9c:c8:16:9d:44:75:27:c9:73:22:44:e0:20:c5:ad:
cd:6c:ae:63:e8:2e:3f:60:a9:e5:fb:f8:30:48:2e:71:81:76:
6f:be:ca:18:f6:b1:05:62:53:a1:bd:ac:43:99:48:d9:91:34:
72:fe:ee:58:3e:c8:e8:2e:50:7f:23:48:df:3b:0e:d6:9b:0f:
b5:be:59:8e:13:b4:e1:ed:af:89:e1:32:f6:7b:8f:df:e7:ea:
49:2d:39:8d:11:b1:8d:a0:be:16:80:c3:6f:1e:25:52:2f:06:
35:6a:01:7c:2a:bb:b9:b7:62:2c:05:a4:8a:f7:1f:2d:a3:81:
cc:1f:63:d1:74:71:1e:bb:1d:40:15:13:cc:c0:c5:37:87:d2:
0d:85:47:35:84:eb:4c:5a:a6:53:29:f1:52:f5:01:a2:2a:c5:
6e:d9:b6:55:47:21:04:90:f5:2a:76:6f:9c:9a:e1:6d:29:6d:
d1:03:30:b3:c2:49:f4:fe:03:2c:21:c4:b7:2f:d9:e6:cc:ab:
90:c7:53:b6:e2:c1:91:21:4a:ed:5d:cc:df:1c:5f:ad:c0:66:
ce:59:31:be:2a:11:2e:cb:d9:c2:48:c9:c2:65:60:05:22:c7:
c5:50:cf:63:c9:ce:44:73:80:26:39:a9:fe:fd:fe:4d:9f:7a:
2b:bf:72:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRURZ53JZB4BP16/5OwLnoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2Nzg2N2UwZTIwMjI0OGU3ZjVlM2NiZDU3NGJkMWEz
MmZlM2YwHhcNMjUxMTA1MDAwMDU5WhcNMjUxMTA2MDAwMDU5WjAzMTEwLwYDVQQD
EyhiMGEwYWQ0MGFmM2YzZWRmYmIwMDY1NTMxZjljM2E1NzEyOGU4NjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GO2Ul+8EIH4sYEQjYJicHuFL17S
qCAdx5njsGxw9zKqiP1MoFq/J1NHbrez5HxbauhunOzpqjXqKHmPcU0//Qs88pN2
U9bbT4CB7tv1POFIK7IpwicblXZ/1ZoVaJ6TgUhJTDXJzX3+jb99Df+QOi01Q00d
cvx1KEaJUmXCtjchGJpQB97uJHiJ6sCLz3xnH9qGu2LTgRPocf2emxSijP9b3EC3
n6dvL5fD8IzO+tdRNaEEXv3CLrXu9PeyQmkY4wOLb1HXl0X9ao85YVnwrF8ZPipD
3iFF8UPDAjbcYU8QV/ssBypBFj61NpZ2f/WdLwIOxQZag6g3WeWrqo0JQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCgrUCvPz7fuwBlUx+cOlcSjoY+MB8GA1UdIwQY
MBaAFGlsZ4Z+DiAiSOf148vVdL0aMv4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEt
MWNiMWE4ZjgwMjM4LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEtMWNiMWE4ZjgwMjM4
LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSoKnMgW
nUR1J8lzIkTgIMWtzWyuY+guP2Cp5fv4MEgucYF2b77KGPaxBWJTob2sQ5lI2ZE0
cv7uWD7I6C5QfyNI3zsO1psPtb5ZjhO04e2vieEy9nuP3+fqSS05jRGxjaC+FoDD
bx4lUi8GNWoBfCq7ubdiLAWkivcfLaOBzB9j0XRxHrsdQBUTzMDFN4fSDYVHNYTr
TFqmUynxUvUBoirFbtm2VUchBJD1KnZvnJrhbSlt0QMws8JJ9P4DLCHEty/Z5syr
kMdTtuLBkSFK7V3M3xxfrcBmzlkxvioRLsvZwkjJwmVgBSLHxVDPY8nORHOAJjmp
/v3+TZ96K79y5A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:09 2025 by rpki-client