Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: O1ETNVgxa42KXWGj0bi9sjNn19MaU69t4d6xxYGEhyU=
Subject key identifier: AC:16:5B:A0:5F:CE:A0:D5:F3:BC:82:32:9A:FC:F8:93:AD:AC:D7:24
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 019A4EF5EBACB37D6AA44BAA524FFC3D3BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 0843
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=)
2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: M4rSiNPyaDwpvCDPhFOKTExacG5JkqMVylv9jRQq5XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:eb:ac:b3:7d:6a:a4:4b:aa:52:4f:fc:3d:3b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=ac165ba05fcea0d5f3bc82329afcf893adacd724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:0b:a5:18:b6:d7:c4:47:a8:58:cf:1e:28:
97:9f:a8:d9:ca:fe:af:c4:bb:e6:82:3e:f2:c8:4b:
3e:ee:f0:e3:40:f4:54:2d:8a:ba:ad:e1:64:a8:63:
00:e9:d6:3c:e4:35:54:23:99:ec:77:5d:09:8b:cb:
db:c4:cd:fb:33:e7:b0:11:c2:fe:7c:8e:f6:a0:2d:
a1:07:7a:85:58:0e:04:3f:60:dd:53:91:58:90:a7:
ef:0c:1c:fc:39:95:c4:b5:99:2b:0c:92:27:56:62:
e0:eb:fe:8a:92:a0:f8:c6:bf:56:38:f7:df:2a:bf:
fa:bd:8e:eb:14:ef:e6:a1:94:87:eb:03:f6:e2:04:
67:12:8b:af:a6:09:57:02:b8:43:93:33:17:6f:35:
b9:b1:46:af:07:4a:aa:b6:8d:24:ff:af:43:3e:6f:
2f:29:33:53:84:9e:0f:eb:02:d4:1f:b0:fd:68:bc:
6f:88:2b:58:5d:46:07:dd:f9:b7:a5:45:2f:90:97:
d2:be:03:db:aa:aa:20:dd:e1:c3:11:3c:40:3e:3d:
08:14:5a:4b:16:2d:56:ca:be:28:7b:a6:b0:57:44:
4f:95:fb:9a:55:38:14:fc:13:09:e6:fb:52:69:f8:
86:9e:42:a3:63:1f:90:02:5e:af:e2:d3:17:e5:57:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:16:5B:A0:5F:CE:A0:D5:F3:BC:82:32:9A:FC:F8:93:AD:AC:D7:24
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ef:e7:38:cd:67:fe:a4:f2:48:cd:74:7f:d3:ad:94:fd:52:
ef:01:95:82:e8:88:a6:92:03:42:10:49:71:55:9f:67:eb:39:
6a:93:5e:a4:93:6d:5b:5e:11:d2:9f:b3:3e:54:23:4e:7f:b9:
ab:bd:d6:c3:cd:61:18:3d:44:d3:d4:a8:85:2a:bd:86:9a:c8:
08:af:a2:85:0d:9e:bc:39:88:9c:2e:aa:06:c3:49:17:d1:e0:
4f:d0:e2:d6:d5:71:9f:75:64:d2:c6:1f:1c:bd:31:14:68:f1:
ec:96:94:b6:2e:2b:b5:89:da:c6:7b:09:1d:e1:35:e8:df:64:
d2:95:65:ff:b7:f7:4e:5a:23:1c:6d:82:af:9a:39:b7:b0:ef:
78:a9:2c:4f:ec:02:7d:c9:05:77:d5:6f:8e:b3:06:fa:5d:57:
8c:00:55:fd:e3:3f:9d:38:e4:06:7d:42:49:22:69:41:7f:03:
43:2f:e2:a3:6d:1c:9d:06:5e:5c:92:26:a4:45:1c:fd:4c:4b:
0b:a2:81:9b:c3:b3:80:27:d0:75:6f:87:cc:a5:c9:b9:ae:bb:
14:da:6e:bc:9d:32:b6:28:af:93:a0:86:7e:95:d6:3c:3a:1f:
6b:0e:c1:17:1e:81:98:d4:14:60:ab:fd:e8:57:c4:7d:6f:5d:
a7:9c:c3:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9euss31qpEuqUk/8PTu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZDE5ZDY5NzAxZjEzYTU5NzdjZDIyOTZmYTg3YTI1MmZi
ZjA1ZjcwHhcNMjUxMTA0MTMwMjEwWhcNMjUxMTA1MTMwMjEwWjAzMTEwLwYDVQQD
EyhhYzE2NWJhMDVmY2VhMGQ1ZjNiYzgyMzI5YWZjZjg5M2FkYWNkNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MoLpRi218RHqFjPHiiXn6jZyv6v
xLvmgj7yyEs+7vDjQPRULYq6reFkqGMA6dY85DVUI5nsd10Ji8vbxM37M+ewEcL+
fI72oC2hB3qFWA4EP2DdU5FYkKfvDBz8OZXEtZkrDJInVmLg6/6KkqD4xr9WOPff
Kr/6vY7rFO/moZSH6wP24gRnEouvpglXArhDkzMXbzW5sUavB0qqto0k/69DPm8v
KTNThJ4P6wLUH7D9aLxviCtYXUYH3fm3pUUvkJfSvgPbqqog3eHDETxAPj0IFFpL
Fi1Wyr4oe6awV0RPlfuaVTgU/BMJ5vtSafiGnkKjYx+QAl6v4tMX5Vdz0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwWW6BfzqDV87yCMpr8+JOtrNckMB8GA1UdIwQY
MBaAFGvRnWlwHxOll3zSKW+oeiUvvwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUt
OGYwZDRlZWY2YWI1LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUtOGYwZDRlZWY2YWI1
LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+/nOM1n
/qTySM10f9OtlP1S7wGVguiIppIDQhBJcVWfZ+s5apNepJNtW14R0p+zPlQjTn+5
q73Ww81hGD1E09SohSq9hprICK+ihQ2evDmInC6qBsNJF9HgT9Di1tVxn3Vk0sYf
HL0xFGjx7JaUti4rtYnaxnsJHeE16N9k0pVl/7f3TlojHG2Cr5o5t7DveKksT+wC
fckFd9VvjrMG+l1XjABV/eM/nTjkBn1CSSJpQX8DQy/io20cnQZeXJImpEUc/UxL
C6KBm8OzgCfQdW+HzKXJua67FNpuvJ0ytiivk6CGfpXWPDofaw7BFx6BmNQUYKv9
6FfEfW9dp5zDsQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:55 2025 by rpki-client