Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: FrMDkhopKdDl2vDns6m14OEs6eaF5hBYSujDu5eX41M=
Subject key identifier: DC:92:91:83:61:17:64:74:6E:AA:91:1F:EC:69:AF:D8:53:3A:16:D4
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019A51F5C38FEA425FDB2269456653D7A808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 06
Signing time: Wed 05 Nov 2025 03:00:52 +0000
Manifest this update: Wed 05 Nov 2025 03:00:52 +0000
Manifest next update: Thu 06 Nov 2025 03:00:52 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: gVfCXhLK4VUAj+VkTTtfDpuIxMtx3w+QRyrz4JEm8aE=)
2: 87yx483oVXks-bk_sk0MNPTV_t4.roa (hash: LClG6gFlyEGvlH9X1YL4e3oheLHFDUpclpdgzOfoNAg=)
3: MqlpmDhYAub2bu3DE_adNxU2zB4.roa (hash: gwjgbm4J/KmnCuxBa3i4/WnmlRnKiQOkFcPgwudjAHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:c3:8f:ea:42:5f:db:22:69:45:66:53:d7:a8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Nov 5 03:00:52 2025 GMT
Not After : Nov 6 03:00:52 2025 GMT
Subject: CN=dc929183611764746eaa911fec69afd8533a16d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:5c:44:a5:3c:b4:8a:fd:fe:00:ad:60:ca:
0b:fa:a3:80:86:61:f3:fc:51:5a:9f:30:4f:f9:af:
5e:8b:63:f0:03:7c:90:7b:4b:23:d0:3d:35:71:f3:
da:3f:41:fd:7f:83:2f:c6:e7:10:64:5e:cf:d3:7a:
5f:b5:58:be:93:f8:99:f7:1e:63:e1:b6:6a:6f:89:
dc:6c:12:78:d8:77:7e:f5:0e:cc:8a:3b:18:d0:af:
33:5a:1d:bd:9e:ee:32:95:e0:04:77:f4:e7:8d:60:
a8:d8:ff:83:c1:2d:4c:26:cc:03:5b:2c:4b:1f:b0:
27:81:44:17:d7:3d:e6:c3:e4:ac:49:6a:4b:db:2b:
c3:d2:62:00:2d:bb:e9:4f:0a:bb:2e:77:80:09:02:
27:87:41:f3:c1:a0:34:8f:97:1b:ee:07:15:96:6f:
8e:1e:8c:0d:7b:00:7c:19:db:b1:51:1b:71:cd:a6:
84:83:58:f9:0d:b1:5b:ac:20:49:d2:99:8a:62:75:
7a:4d:18:56:b0:2e:f2:e6:da:48:d3:49:83:e1:1b:
82:61:84:29:e8:e8:8f:be:87:dd:da:9c:bb:90:19:
6d:c1:68:33:29:d6:a8:02:c8:64:59:b5:f0:b0:02:
86:d2:85:ad:e6:e2:2c:b5:66:4c:6a:7c:b3:b6:ee:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:92:91:83:61:17:64:74:6E:AA:91:1F:EC:69:AF:D8:53:3A:16:D4
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:77:8b:e6:4d:15:62:85:94:01:53:b7:cd:3c:f9:57:c5:bd:
da:07:cb:5f:cb:e4:81:ac:36:c6:91:c3:4c:f9:fd:bc:1a:6b:
9d:c4:04:28:04:dc:25:d0:2a:fe:af:bd:e1:66:85:7d:8f:a6:
85:1a:b0:81:c8:6c:7b:d7:8b:10:3f:de:81:1d:84:c6:15:e3:
8b:c8:4d:23:49:cf:9e:a2:12:af:04:f8:d8:2d:f4:8e:d4:76:
33:a6:ee:ea:e1:f2:bd:f5:78:10:a0:cd:bf:8f:93:a1:13:7e:
68:75:fe:2e:db:c5:8d:19:ec:d8:95:a8:63:b5:6a:58:59:c8:
d5:97:fd:2c:92:5d:0a:b4:4b:fd:9b:80:a4:95:f3:62:cf:a6:
41:3a:cd:77:5d:d3:6d:1f:af:e3:15:ac:a2:82:b5:38:e0:2e:
9c:37:71:7d:23:19:0c:fa:1a:f7:9b:2d:0a:64:01:22:e8:fe:
c8:c8:14:ac:4f:0a:d4:8a:4e:1e:17:9c:1a:ed:4e:71:5d:a0:
68:59:44:8d:62:bc:90:7f:38:bf:f6:f4:dc:d4:cb:05:c3:a3:
f9:ea:f9:37:39:96:a5:8e:a6:3b:5b:7e:97:7e:3e:64:37:84:
8c:f1:94:c9:bd:a5:92:d2:2c:e5:d9:fa:b6:1f:75:68:ea:29:
0a:77:d2:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9cOP6kJf2yJpRWZT16gIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDQwNzY1ZTQ3NDYwMGUxYmM3NjIyYTQzNjYzZGQ4ZDlm
YWRjODcwHhcNMjUxMTA1MDMwMDUyWhcNMjUxMTA2MDMwMDUyWjAzMTEwLwYDVQQD
EyhkYzkyOTE4MzYxMTc2NDc0NmVhYTkxMWZlYzY5YWZkODUzM2ExNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvRcRKU8tIr9/gCtYMoL+qOAhmHz
/FFanzBP+a9ei2PwA3yQe0sj0D01cfPaP0H9f4MvxucQZF7P03pftVi+k/iZ9x5j
4bZqb4ncbBJ42Hd+9Q7MijsY0K8zWh29nu4yleAEd/TnjWCo2P+DwS1MJswDWyxL
H7AngUQX1z3mw+SsSWpL2yvD0mIALbvpTwq7LneACQInh0HzwaA0j5cb7gcVlm+O
HowNewB8GduxURtxzaaEg1j5DbFbrCBJ0pmKYnV6TRhWsC7y5tpI00mD4RuCYYQp
6OiPvofd2py7kBltwWgzKdaoAshkWbXwsAKG0oWt5uIstWZManyztu5q5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNySkYNhF2R0bqqRH+xpr9hTOhbUMB8GA1UdIwQY
MBaAFNAEB2XkdGAOG8diKkNmPdjZ+tyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDIt
NDdkMzA4NzEzN2Y0LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDItNDdkMzA4NzEzN2Y0
LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXeL5k0V
YoWUAVO3zTz5V8W92gfLX8vkgaw2xpHDTPn9vBprncQEKATcJdAq/q+94WaFfY+m
hRqwgchse9eLED/egR2ExhXji8hNI0nPnqISrwT42C30jtR2M6bu6uHyvfV4EKDN
v4+ToRN+aHX+LtvFjRns2JWoY7VqWFnI1Zf9LJJdCrRL/ZuApJXzYs+mQTrNd13T
bR+v4xWsooK1OOAunDdxfSMZDPoa95stCmQBIuj+yMgUrE8K1IpOHhecGu1OcV2g
aFlEjWK8kH84v/b03NTLBcOj+er5NzmWpY6mO1t+l34+ZDeEjPGUyb2lktIs5dn6
th91aOopCnfS6g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:24:54 2025 by rpki-client