Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: N6FdAFLzRG6RADbRctaT12yhiLxW7+jqUwXW6kVebzc=
Subject key identifier: 9D:61:25:B6:2D:CF:84:E6:EE:95:BA:2F:73:1B:23:2D:EB:D4:51:90
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 019A4D745425B906874084493EF054FB8BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 13A4
Signing time: Tue 04 Nov 2025 06:01:00 +0000
Manifest this update: Tue 04 Nov 2025 06:01:00 +0000
Manifest next update: Wed 05 Nov 2025 06:01:00 +0000
Files and hashes: 1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: D0rIED9Lg9hJcI0wKqnpWEh81gpxQB8aAJGYYa5+pxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:54:25:b9:06:87:40:84:49:3e:f0:54:fb:8b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Nov 4 06:01:00 2025 GMT
Not After : Nov 5 06:01:00 2025 GMT
Subject: CN=9d6125b62dcf84e6ee95ba2f731b232debd45190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:e6:df:67:59:66:b6:a0:01:2c:56:4e:05:
53:d9:cf:ca:0d:07:01:55:1e:2f:ab:f5:07:32:67:
c2:20:d2:47:05:84:16:38:6e:14:42:d5:1f:77:c8:
9d:27:27:3c:46:02:b9:f4:4e:0d:1a:ba:dc:f5:38:
89:57:40:f9:76:0f:75:19:81:4c:1f:d9:c7:63:99:
0f:5d:f1:bb:86:fd:2b:4d:ba:90:d0:73:d5:02:98:
df:ec:5a:a7:8c:ff:35:ae:02:2d:2f:a7:01:85:66:
22:7b:e9:a8:4a:35:40:e2:43:b6:54:9d:c6:48:72:
c4:41:d5:17:e5:0e:33:42:87:b1:c0:a6:d6:72:61:
a0:b5:36:4d:e8:79:dd:75:9d:09:0e:a1:9f:d4:96:
1c:bf:77:d3:ec:69:29:a4:0c:93:5f:6a:db:01:23:
a6:fd:bf:62:87:df:66:26:b5:3d:bb:c9:0e:73:f2:
73:0b:60:53:03:e6:c6:4e:83:77:4a:61:1f:a7:3f:
e6:b3:9c:02:bf:c3:08:74:f5:df:80:35:48:ee:8b:
72:e3:66:cf:1f:b6:5e:9b:c3:65:f9:8d:d4:73:b8:
42:8c:36:a7:97:2d:87:89:92:ae:e7:19:65:b7:56:
49:03:26:7b:fc:b6:42:b3:17:6b:ff:33:c1:55:21:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:61:25:B6:2D:CF:84:E6:EE:95:BA:2F:73:1B:23:2D:EB:D4:51:90
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3a:87:87:fb:95:aa:9e:01:7c:b0:f0:bb:00:ba:95:18:e0:
bc:46:4a:20:5a:25:eb:fc:c8:51:a2:3f:f5:16:16:d0:af:3b:
77:14:a6:9a:53:a1:c1:c4:1b:0f:64:ee:88:8b:e1:7c:78:e0:
a3:cd:03:42:d5:01:fa:39:2d:7a:f5:cf:9c:64:2e:db:03:bb:
0e:cd:d5:ba:03:75:6c:bb:bc:6f:a3:fe:d0:f0:87:74:60:ee:
b9:00:d6:a6:fc:51:71:61:76:29:4f:18:93:70:d1:9f:14:46:
b7:7e:16:5b:be:18:63:1d:bb:43:20:85:9a:38:09:e5:6d:06:
af:cd:68:45:36:84:d0:72:1f:04:4c:b0:32:cd:1b:69:0a:ef:
85:3a:c9:58:5a:95:59:77:88:1f:60:11:e3:67:c0:ea:1a:51:
1a:18:34:2d:3a:d2:a2:e4:c2:11:65:3a:30:7b:a4:a5:cf:90:
8a:33:a8:cd:de:dc:84:95:5a:d4:86:c1:9b:9a:2d:0a:43:a5:
ca:0e:1e:a5:1d:29:fc:28:7a:06:b6:ca:56:37:3e:31:e4:16:
6d:2f:8d:5b:28:78:b7:0c:29:dd:83:87:66:c6:da:6c:2d:d8:
5d:5d:ee:41:44:a9:64:83:c3:a2:d6:8a:3c:f6:ef:d4:bb:06:
1a:63:ad:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdFQluQaHQIRJPvBU+4vnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTg3Y2E1YjhhZWUxOTVjYzhjYWRjZmI0OGM1NDRiMTgx
NDc3ZWYwHhcNMjUxMTA0MDYwMTAwWhcNMjUxMTA1MDYwMTAwWjAzMTEwLwYDVQQD
Eyg5ZDYxMjViNjJkY2Y4NGU2ZWU5NWJhMmY3MzFiMjMyZGViZDQ1MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsILm32dZZragASxWTgVT2c/KDQcB
VR4vq/UHMmfCINJHBYQWOG4UQtUfd8idJyc8RgK59E4NGrrc9TiJV0D5dg91GYFM
H9nHY5kPXfG7hv0rTbqQ0HPVApjf7FqnjP81rgItL6cBhWYie+moSjVA4kO2VJ3G
SHLEQdUX5Q4zQoexwKbWcmGgtTZN6HnddZ0JDqGf1JYcv3fT7GkppAyTX2rbASOm
/b9ih99mJrU9u8kOc/JzC2BTA+bGToN3SmEfpz/ms5wCv8MIdPXfgDVI7oty42bP
H7Zem8Nl+Y3Uc7hCjDanly2HiZKu5xllt1ZJAyZ7/LZCsxdr/zPBVSEPCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1hJbYtz4Tm7pW6L3MbIy3r1FGQMB8GA1UdIwQY
MBaAFGoYfKW4ruGVzIytz7SMVEsYFHfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmIt
YmYwM2RjODM3OTAwLzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmItYmYwM2RjODM3OTAw
LzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzqHh/uV
qp4BfLDwuwC6lRjgvEZKIFol6/zIUaI/9RYW0K87dxSmmlOhwcQbD2TuiIvhfHjg
o80DQtUB+jktevXPnGQu2wO7Ds3VugN1bLu8b6P+0PCHdGDuuQDWpvxRcWF2KU8Y
k3DRnxRGt34WW74YYx27QyCFmjgJ5W0Gr81oRTaE0HIfBEywMs0baQrvhTrJWFqV
WXeIH2AR42fA6hpRGhg0LTrSouTCEWU6MHukpc+QijOozd7chJVa1IbBm5otCkOl
yg4epR0p/Ch6BrbKVjc+MeQWbS+NWyh4twwp3YOHZsbabC3YXV3uQUSpZIPDotaK
PPbv1LsGGmOtNg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:34 2025 by rpki-client