Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: Soux1YO1Ul80/fr+ZOHo5yRtZALJng4fqxTrtEmimD0=
Subject key identifier: 39:20:AE:40:C8:FA:AF:83:5A:A3:CA:73:BD:F8:F1:30:18:6F:07:B5
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 019A522CC3B8EF1FDE6E691870AF1B8CE1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0B7B
Signing time: Wed 05 Nov 2025 04:00:56 +0000
Manifest this update: Wed 05 Nov 2025 04:00:56 +0000
Manifest next update: Thu 06 Nov 2025 04:00:56 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: EvmVxGm4FH80HQ0PgL6PVEnCu91oqADrOtvfkHX21Og=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:c3:b8:ef:1f:de:6e:69:18:70:af:1b:8c:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Nov 5 04:00:56 2025 GMT
Not After : Nov 6 04:00:56 2025 GMT
Subject: CN=3920ae40c8faaf835aa3ca73bdf8f130186f07b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:4e:9a:7e:37:a3:6d:b5:16:60:be:7f:9c:
7d:fb:cb:96:ed:13:79:46:73:77:22:fe:f2:38:8b:
cd:01:a3:5b:df:f5:25:c5:57:d1:b2:bf:ed:b1:17:
66:ea:3b:57:18:92:8f:02:5a:ae:42:de:5f:a1:1b:
38:13:44:09:77:c0:f4:d3:f4:08:ea:83:ba:f2:2c:
2b:51:db:59:95:72:8c:8b:f2:b3:67:e7:d5:63:00:
a5:06:b9:5f:3f:89:6b:12:0f:e2:14:3d:fc:23:d0:
9b:dd:83:3e:1c:b2:f3:5f:6f:90:2f:fc:1f:44:c1:
49:86:9f:a1:f3:14:01:c2:20:18:d9:94:71:c5:91:
4b:e6:10:06:84:5b:b4:5f:74:0f:ce:bb:7a:df:a7:
58:b8:ad:e9:ae:30:7f:2f:bf:9c:65:c5:29:8f:26:
cd:49:1d:54:f7:0d:a8:a8:b5:07:ef:0b:6d:d6:f9:
f5:37:db:92:4e:8b:04:85:86:02:e1:e4:ec:62:30:
82:5b:08:d0:05:2f:af:da:2f:bf:9b:2c:81:78:14:
76:72:fd:53:d4:71:ee:b4:6a:30:3b:d0:4e:d6:f4:
5c:c7:45:94:5d:c4:be:af:49:87:09:c6:b7:3c:ca:
39:3e:68:1f:bf:ad:84:06:cf:f4:c8:08:33:41:c9:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:20:AE:40:C8:FA:AF:83:5A:A3:CA:73:BD:F8:F1:30:18:6F:07:B5
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:06:b3:77:c8:18:95:21:63:65:3d:aa:9f:2c:a7:f4:43:94:
16:ad:ce:39:bb:e5:27:96:3c:36:5f:6f:4b:f2:78:41:d4:24:
df:c4:ee:45:47:b6:45:52:3e:38:1c:45:ac:b4:82:49:bf:54:
e7:0e:db:69:bd:51:ff:43:94:a9:7d:f7:dd:60:d6:7a:24:88:
62:41:00:77:13:b6:4c:47:22:25:78:d6:f7:ac:f6:11:b7:dd:
6b:04:63:50:cb:eb:20:bb:c0:95:1c:c6:b5:ec:a3:a4:2f:ac:
18:1f:04:39:94:ee:eb:cf:1c:84:38:79:34:11:8e:6b:cc:48:
20:bb:62:71:13:d7:54:7c:fa:b4:d7:6b:70:eb:01:cf:6a:9a:
5e:b2:00:36:2e:c4:52:67:2d:c8:cf:9e:a4:ca:ff:e4:3d:f0:
28:8c:bd:6a:51:0d:ca:1b:e5:07:f7:5e:c2:54:89:9f:11:2f:
20:a0:27:df:52:88:14:f2:06:fd:3a:ce:d1:29:b3:7a:26:fc:
16:73:8a:d2:88:cd:f3:e1:d9:88:34:82:15:c1:4a:4f:02:d9:
73:a5:75:f5:82:9c:ab:8a:1d:41:a0:4e:c7:ff:8d:48:f3:c8:
6c:5d:b4:5b:fc:fe:d9:bc:1e:0c:77:63:e6:77:29:2b:03:20:
00:9f:fb:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLMO47x/ebmkYcK8bjOH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjU5NmIzM2I0OGMyOTM1ZGQxMjlmYWM2ZTYxZGJjMDA4
MTkzZmYwHhcNMjUxMTA1MDQwMDU2WhcNMjUxMTA2MDQwMDU2WjAzMTEwLwYDVQQD
EygzOTIwYWU0MGM4ZmFhZjgzNWFhM2NhNzNiZGY4ZjEzMDE4NmYwN2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+FOmn43o221FmC+f5x9+8uW7RN5
RnN3Iv7yOIvNAaNb3/UlxVfRsr/tsRdm6jtXGJKPAlquQt5foRs4E0QJd8D00/QI
6oO68iwrUdtZlXKMi/KzZ+fVYwClBrlfP4lrEg/iFD38I9Cb3YM+HLLzX2+QL/wf
RMFJhp+h8xQBwiAY2ZRxxZFL5hAGhFu0X3QPzrt636dYuK3prjB/L7+cZcUpjybN
SR1U9w2oqLUH7wtt1vn1N9uSTosEhYYC4eTsYjCCWwjQBS+v2i+/myyBeBR2cv1T
1HHutGowO9BO1vRcx0WUXcS+r0mHCca3PMo5Pmgfv62EBs/0yAgzQckOsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkgrkDI+q+DWqPKc7348TAYbwe1MB8GA1UdIwQY
MBaAFGhllrM7SMKTXdEp+sbmHbwAgZP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEt
NDUxY2RhMDc3ZDg2LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEtNDUxY2RhMDc3ZDg2
LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0gazd8gY
lSFjZT2qnyyn9EOUFq3OObvlJ5Y8Nl9vS/J4QdQk38TuRUe2RVI+OBxFrLSCSb9U
5w7bab1R/0OUqX333WDWeiSIYkEAdxO2TEciJXjW96z2EbfdawRjUMvrILvAlRzG
teyjpC+sGB8EOZTu688chDh5NBGOa8xIILticRPXVHz6tNdrcOsBz2qaXrIANi7E
UmctyM+epMr/5D3wKIy9alENyhvlB/dewlSJnxEvIKAn31KIFPIG/TrO0Smzeib8
FnOK0ojN8+HZiDSCFcFKTwLZc6V19YKcq4odQaBOx/+NSPPIbF20W/z+2bweDHdj
5ncpKwMgAJ/7EA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:12 2025 by rpki-client