Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: QiaWwkXaORYy6QqHAyzpPDYEPPGkDV6zIPRWPn84ldQ=
Subject key identifier: 19:D6:28:64:10:E3:69:AF:47:A3:44:75:DE:57:56:CF:66:AB:CF:AC
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019A50E3656BB0E97D9D54AAC12C586E93E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:11 +0000
Manifest this update: Tue 04 Nov 2025 22:01:11 +0000
Manifest next update: Wed 05 Nov 2025 22:01:11 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: /xXOi2o0cSJy6GtmeGPmT/5yjD8BOEcKOj1dBBHyoiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:65:6b:b0:e9:7d:9d:54:aa:c1:2c:58:6e:93:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Nov 4 22:01:11 2025 GMT
Not After : Nov 5 22:01:11 2025 GMT
Subject: CN=19d6286410e369af47a34475de5756cf66abcfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:39:27:60:cc:6d:7e:2d:5b:0f:d7:10:e5:
11:f6:e9:e1:ce:97:a4:96:e6:21:45:7c:37:68:68:
f7:dc:65:5c:e7:fc:a9:f2:9b:05:46:41:f7:d3:ef:
61:7d:c5:8f:1d:03:c7:73:76:bf:e4:0a:5b:9c:87:
15:a1:20:1b:05:cf:d3:67:b1:04:76:03:9c:95:55:
3c:b4:d9:59:25:d4:8c:cf:17:22:ef:3e:44:01:de:
a9:e3:86:32:2a:69:f5:3f:f0:e4:36:77:40:7b:55:
79:de:a4:0f:a8:e7:5c:bc:cf:80:cf:fa:a2:bf:7d:
47:33:3f:ae:4a:31:1f:2f:a2:4d:90:d9:cb:b0:36:
f0:68:ae:15:19:19:04:18:17:ea:6f:b3:29:08:63:
82:9c:d1:26:23:f4:e5:53:e9:68:ec:5d:00:8f:be:
54:0d:19:46:bf:4e:f8:ce:24:e0:32:59:05:da:2c:
32:2c:0e:65:01:9e:ba:05:ad:4d:23:42:8e:ad:a3:
97:ef:8a:23:9f:ec:75:a3:52:dc:60:22:c1:d7:29:
97:69:46:6a:83:56:68:51:a0:ca:76:1e:68:2d:52:
c9:36:d8:f3:4d:9c:91:7b:17:49:d9:8d:50:20:20:
6c:fc:4f:9f:39:7d:df:98:97:80:19:95:0c:b5:7f:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:28:64:10:E3:69:AF:47:A3:44:75:DE:57:56:CF:66:AB:CF:AC
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ab:ce:0d:3f:e1:10:b2:a4:7a:67:78:d5:1d:65:ea:ea:c2:
75:5a:b1:a2:6f:1b:23:e2:1a:2a:c8:2b:2c:41:24:4a:35:31:
ee:a2:14:b5:44:9c:f4:f8:2e:c8:b0:48:bc:9a:83:aa:1d:3f:
37:e6:db:9e:2f:10:44:90:0d:03:63:df:07:6e:f1:7d:72:8c:
f4:cd:86:4e:98:98:05:44:7e:1b:46:93:3e:4d:5b:b4:e1:b3:
d5:5f:10:57:75:ab:fe:46:fe:d1:ba:bc:7a:1f:e0:1b:5d:cf:
37:53:e1:f0:ca:ed:78:d9:84:97:dc:7d:08:c9:05:b8:1d:21:
c1:34:84:e2:42:31:3a:68:c6:ea:6f:d6:ce:86:13:b9:98:86:
62:e4:06:d0:29:39:2b:99:84:0c:25:87:d0:ed:5e:03:95:c3:
2b:ad:e8:a9:fa:f8:0c:05:ad:b3:fb:26:db:f6:de:25:bb:f5:
c4:49:ed:da:f5:17:8f:2b:76:5e:bc:c9:a8:fb:05:d5:33:27:
5c:d0:15:13:2a:7e:38:d3:c4:33:45:a5:b9:0b:90:6a:e2:60:
c7:aa:22:6f:c3:94:4c:06:76:66:7a:a4:e5:1b:f6:bb:9d:18:
9c:ae:a2:8f:99:d6:b4:f4:9c:57:30:1b:11:9f:46:3a:cb:04:
f5:33:bf:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ42VrsOl9nVSqwSxYbpPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YWY3MGJkYTc3Y2Y4NThlMTY0ZDZiN2M3MDllODc4ZmQx
YTYwNDUwHhcNMjUxMTA0MjIwMTExWhcNMjUxMTA1MjIwMTExWjAzMTEwLwYDVQQD
EygxOWQ2Mjg2NDEwZTM2OWFmNDdhMzQ0NzVkZTU3NTZjZjY2YWJjZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhs5J2DMbX4tWw/XEOUR9unhzpek
luYhRXw3aGj33GVc5/yp8psFRkH30+9hfcWPHQPHc3a/5ApbnIcVoSAbBc/TZ7EE
dgOclVU8tNlZJdSMzxci7z5EAd6p44YyKmn1P/DkNndAe1V53qQPqOdcvM+Az/qi
v31HMz+uSjEfL6JNkNnLsDbwaK4VGRkEGBfqb7MpCGOCnNEmI/TlU+lo7F0Aj75U
DRlGv074ziTgMlkF2iwyLA5lAZ66Ba1NI0KOraOX74ojn+x1o1LcYCLB1ymXaUZq
g1ZoUaDKdh5oLVLJNtjzTZyRexdJ2Y1QICBs/E+fOX3fmJeAGZUMtX8A0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnWKGQQ42mvR6NEdd5XVs9mq8+sMB8GA1UdIwQY
MBaAFGmvcL2nfPhY4WTWt8cJ6Hj9GmBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgt
NjI4NzdmZTQ4NjE4LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgtNjI4NzdmZTQ4NjE4
LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVavODT/h
ELKkemd41R1l6urCdVqxom8bI+IaKsgrLEEkSjUx7qIUtUSc9PguyLBIvJqDqh0/
N+bbni8QRJANA2PfB27xfXKM9M2GTpiYBUR+G0aTPk1btOGz1V8QV3Wr/kb+0bq8
eh/gG13PN1Ph8MrteNmEl9x9CMkFuB0hwTSE4kIxOmjG6m/WzoYTuZiGYuQG0Ck5
K5mEDCWH0O1eA5XDK63oqfr4DAWts/sm2/beJbv1xEnt2vUXjyt2XrzJqPsF1TMn
XNAVEyp+ONPEM0WluQuQauJgx6oib8OUTAZ2Znqk5Rv2u50YnK6ij5nWtPScVzAb
EZ9GOssE9TO/JA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:03:10 2025 by rpki-client