Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: FD4g29RJhyp0hccWxxuINg7rv3pztNsmnJyVF7wp0bQ=
Subject key identifier: 71:00:25:BA:CD:D5:8C:89:65:EF:3F:A2:B6:5D:99:E5:49:77:46:71
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 019A4DE180148401225BC352755FB00905D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 031A
Signing time: Tue 04 Nov 2025 08:00:15 +0000
Manifest this update: Tue 04 Nov 2025 08:00:15 +0000
Manifest next update: Wed 05 Nov 2025 08:00:15 +0000
Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: tMPYwuJOFTs/VJ9S52ArJqRO3+GYTZFjbuRrMbVL0VQ=)
2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:80:14:84:01:22:5b:c3:52:75:5f:b0:09:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Nov 4 08:00:15 2025 GMT
Not After : Nov 5 08:00:15 2025 GMT
Subject: CN=710025bacdd58c8965ef3fa2b65d99e549774671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:9a:13:64:f6:44:55:fc:6f:1f:29:23:28:
95:d8:03:5c:52:cd:11:a0:2e:74:f3:dd:1c:0e:ed:
86:90:78:11:cc:49:2d:81:f7:59:03:d6:55:87:44:
99:55:ad:33:43:27:5b:fa:c4:ca:4f:77:88:b1:8f:
c1:c5:f2:9d:ca:80:12:88:f6:2f:4b:3d:61:41:42:
d8:2b:de:0e:1a:7b:2f:88:0f:59:85:b9:09:3d:6a:
fe:d8:37:b0:54:78:11:ff:ff:f6:14:d6:c2:bb:15:
a6:09:29:66:62:42:40:cb:5e:5b:7c:6c:62:64:cf:
0d:1d:e8:24:6b:d4:43:e8:89:cb:41:10:48:12:3d:
53:6e:d8:fd:fa:9b:ff:04:97:5c:3e:a9:7d:dd:da:
a9:8c:04:62:53:47:aa:fd:1f:ad:61:58:c0:d0:75:
d5:fa:9c:04:01:8c:b1:92:de:04:15:09:9a:36:66:
c4:61:e9:4d:c9:2c:b9:41:bb:f9:0e:0f:bb:3e:a8:
d2:e0:a3:ec:96:ad:47:c7:5d:81:02:57:0b:37:28:
cc:47:a8:2a:b5:a5:b3:c6:d5:04:83:a0:82:e6:1f:
c6:86:d4:19:a4:94:81:03:b0:70:22:fe:1e:88:c0:
45:94:ff:74:3d:1a:ab:63:4b:8e:ec:47:4f:98:43:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:00:25:BA:CD:D5:8C:89:65:EF:3F:A2:B6:5D:99:E5:49:77:46:71
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:87:f2:2b:f8:f1:24:33:e4:9a:6c:25:d0:24:87:69:99:95:
52:19:66:ce:ff:7a:e2:af:60:c6:9c:e7:da:6d:ad:20:72:d4:
aa:37:a8:f6:70:65:b6:fb:2f:20:3d:0c:aa:de:ee:9d:60:1e:
03:c2:2d:23:7b:d7:78:37:ba:a8:2a:0f:29:3b:7d:cb:a5:77:
4e:80:c8:ea:69:36:ca:25:14:40:10:3b:d1:df:7d:b3:5f:d8:
96:d0:f5:1a:b6:d1:0e:5b:10:e2:15:b6:dd:4d:df:18:4e:57:
97:97:f2:1e:cb:0f:fd:3b:3e:1e:2e:ac:a0:30:18:21:1a:19:
f9:1f:8b:6c:d1:da:77:56:6c:a8:4d:8a:9d:5d:c6:6a:09:54:
5c:80:cd:da:ef:3d:60:43:c1:a9:8b:ce:25:98:a7:ce:5d:99:
a1:de:3d:57:16:ea:74:9e:41:3b:16:b8:cb:04:99:5a:cd:d9:
33:ed:15:e2:81:0d:56:4b:f9:fd:9e:ee:4e:cf:24:fe:6c:b5:
2e:e2:db:31:61:f6:cd:99:1d:6d:c3:34:19:52:58:73:f7:6d:
e6:93:06:00:62:83:b7:40:85:1b:17:45:27:fc:f7:62:3c:7c:
cd:cb:63:2c:35:a4:2d:ff:c8:46:f0:9f:c9:74:4c:61:70:3e:
53:7d:79:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4YAUhAEiW8NSdV+wCQXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzllYTRmOTY1ODhiMTZiZDRmY2EzOGQ0YzFkZGY2NWMx
YWJmZGEwHhcNMjUxMTA0MDgwMDE1WhcNMjUxMTA1MDgwMDE1WjAzMTEwLwYDVQQD
Eyg3MTAwMjViYWNkZDU4Yzg5NjVlZjNmYTJiNjVkOTllNTQ5Nzc0NjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA046aE2T2RFX8bx8pIyiV2ANcUs0R
oC50890cDu2GkHgRzEktgfdZA9ZVh0SZVa0zQydb+sTKT3eIsY/BxfKdyoASiPYv
Sz1hQULYK94OGnsviA9ZhbkJPWr+2DewVHgR///2FNbCuxWmCSlmYkJAy15bfGxi
ZM8NHegka9RD6InLQRBIEj1Tbtj9+pv/BJdcPql93dqpjARiU0eq/R+tYVjA0HXV
+pwEAYyxkt4EFQmaNmbEYelNySy5Qbv5Dg+7PqjS4KPslq1Hx12BAlcLNyjMR6gq
taWzxtUEg6CC5h/GhtQZpJSBA7BwIv4eiMBFlP90PRqrY0uO7EdPmENnoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEAJbrN1YyJZe8/orZdmeVJd0ZxMB8GA1UdIwQY
MBaAFAPJ6k+WWIsWvU/KONTB3fZcGr/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2Nzct
MWNkMzNjNjJjNDVjLzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2NzctMWNkMzNjNjJjNDVj
LzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMofyK/jx
JDPkmmwl0CSHaZmVUhlmzv964q9gxpzn2m2tIHLUqjeo9nBltvsvID0Mqt7unWAe
A8ItI3vXeDe6qCoPKTt9y6V3ToDI6mk2yiUUQBA70d99s1/YltD1GrbRDlsQ4hW2
3U3fGE5Xl5fyHssP/Ts+Hi6soDAYIRoZ+R+LbNHad1ZsqE2KnV3GaglUXIDN2u89
YEPBqYvOJZinzl2Zod49VxbqdJ5BOxa4ywSZWs3ZM+0V4oENVkv5/Z7uTs8k/my1
LuLbMWH2zZkdbcM0GVJYc/dt5pMGAGKDt0CFGxdFJ/z3Yjx8zctjLDWkLf/IRvCf
yXRMYXA+U3156g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:07 2025 by rpki-client