
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: Se7DUpx3mbfsIWjoH+MuZFzRFE8WJQFuW5KGDoRWEkY=
Subject key identifier: 65:1E:D1:13:92:35:B0:91:33:99:F9:A9:7D:3D:26:AF:97:D9:DC:0F
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 01988B0E8F9C97AEF1C0B025CEEC0AE318A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 0FA2
Signing time: Fri 08 Aug 2025 19:00:43 +0000
Manifest this update: Fri 08 Aug 2025 19:00:43 +0000
Manifest next update: Sat 09 Aug 2025 19:00:43 +0000
Files and hashes: 1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=)
2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: Ai9HbR7WVZBCNNLHCAloliR3EkxJC0J0LX0cIOBW39s=)
3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:8f:9c:97:ae:f1:c0:b0:25:ce:ec:0a:e3:18:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Aug 8 19:00:43 2025 GMT
Not After : Aug 9 19:00:43 2025 GMT
Subject: CN=651ed1139235b0913399f9a97d3d26af97d9dc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:dd:85:01:8a:0a:41:7a:44:17:2a:f6:19:
68:67:ce:20:85:0f:02:6f:8f:90:38:42:15:a9:6a:
74:c0:59:00:47:51:0c:ad:09:ec:73:49:f8:21:29:
41:27:94:06:60:8b:a2:43:7b:b2:a8:1f:62:89:75:
51:87:39:6a:c4:84:e2:e1:88:f5:c4:12:0d:a3:d8:
5e:e2:93:0b:d2:c7:e7:c0:58:ee:ca:ae:8b:60:8c:
de:7a:17:76:7e:76:88:74:8e:73:0c:3d:a6:51:de:
e5:f6:25:49:ef:94:cc:f2:64:b9:e6:6c:a0:40:a3:
4c:c5:7d:86:67:0a:75:45:46:e7:87:ff:ee:0b:61:
be:f1:62:55:b4:a7:b2:35:fd:37:e0:f7:b1:78:22:
a6:4c:e6:eb:a2:75:3c:e7:97:cc:64:b7:4c:45:55:
62:60:96:98:f1:3e:42:d5:ea:c9:db:9f:97:73:74:
64:3b:fc:9f:5c:45:f8:09:90:83:37:90:5e:73:d7:
03:b8:3c:ee:55:2e:05:ad:16:8b:14:a3:16:87:c0:
43:91:26:43:16:5b:74:9f:27:54:fb:fb:4f:cf:11:
4a:be:74:01:a6:43:19:d0:1f:e0:d0:f3:db:2e:34:
82:80:d3:de:ad:a7:7b:3d:ab:8e:40:16:6f:1e:1c:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1E:D1:13:92:35:B0:91:33:99:F9:A9:7D:3D:26:AF:97:D9:DC:0F
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dc:b5:72:6f:70:ee:a3:67:2b:6b:6b:f1:7b:ce:eb:85:81:
0e:82:4c:2f:51:a9:83:42:41:2b:86:ad:1d:e9:65:d9:ea:b6:
7e:cd:69:41:92:5c:01:f9:33:f1:0f:84:46:39:80:1c:12:81:
ec:e1:d5:ce:f1:c6:f5:61:88:eb:b6:21:56:1a:2a:de:f6:16:
24:ea:93:45:e3:4e:dd:73:d9:ff:c1:ce:dd:d9:52:d2:73:91:
00:76:30:51:72:ae:3c:4b:87:cc:18:5d:8a:be:b6:77:7c:3c:
f3:74:19:48:9a:8d:c9:2c:9e:06:91:2f:52:ef:96:49:55:81:
e3:eb:60:11:6e:82:6a:78:a4:48:79:b5:00:74:64:fc:5d:93:
c1:f7:a8:fb:a1:ec:be:b9:52:fc:c6:21:1e:7a:a1:56:79:3e:
8c:4b:cb:0c:ce:ce:d6:20:c9:7d:9c:d7:aa:3f:fa:fa:67:2c:
1c:57:42:f0:0e:51:91:30:79:d5:69:77:c3:2c:eb:f1:af:5d:
6e:b0:65:69:9c:57:0c:6b:8f:68:8f:4e:f5:02:1b:f7:44:51:
bd:91:e7:97:cd:12:21:69:1d:40:14:8c:da:81:c1:21:08:88:
c6:e4:eb:b0:60:e7:c4:c2:87:4f:5f:44:b9:23:09:03:e0:30:
81:4b:e6:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDo+cl67xwLAlzuwK4xinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYzM0ZTQ5ZmJhOTY0MGI4M2VhYmFhZmJhOWM0YWI5NmM4
YzM1NDQwHhcNMjUwODA4MTkwMDQzWhcNMjUwODA5MTkwMDQzWjAzMTEwLwYDVQQD
Eyg2NTFlZDExMzkyMzViMDkxMzM5OWY5YTk3ZDNkMjZhZjk3ZDlkYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EXdhQGKCkF6RBcq9hloZ84ghQ8C
b4+QOEIVqWp0wFkAR1EMrQnsc0n4ISlBJ5QGYIuiQ3uyqB9iiXVRhzlqxITi4Yj1
xBINo9he4pML0sfnwFjuyq6LYIzeehd2fnaIdI5zDD2mUd7l9iVJ75TM8mS55myg
QKNMxX2GZwp1RUbnh//uC2G+8WJVtKeyNf034PexeCKmTObronU855fMZLdMRVVi
YJaY8T5C1erJ25+Xc3RkO/yfXEX4CZCDN5Bec9cDuDzuVS4FrRaLFKMWh8BDkSZD
Flt0nydU+/tPzxFKvnQBpkMZ0B/g0PPbLjSCgNPerad7PauOQBZvHhzDUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUe0ROSNbCRM5n5qX09Jq+X2dwPMB8GA1UdIwQY
MBaAFGrDTkn7qWQLg+q6r7qcSrlsjDVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAt
OTNjNDU2OGIxMDNiLzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAtOTNjNDU2OGIxMDNi
LzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZty1cm9w
7qNnK2tr8XvO64WBDoJML1Gpg0JBK4atHell2eq2fs1pQZJcAfkz8Q+ERjmAHBKB
7OHVzvHG9WGI67YhVhoq3vYWJOqTReNO3XPZ/8HO3dlS0nORAHYwUXKuPEuHzBhd
ir62d3w883QZSJqNySyeBpEvUu+WSVWB4+tgEW6CanikSHm1AHRk/F2Twfeo+6Hs
vrlS/MYhHnqhVnk+jEvLDM7O1iDJfZzXqj/6+mcsHFdC8A5RkTB51Wl3wyzr8a9d
brBlaZxXDGuPaI9O9QIb90RRvZHnl80SIWkdQBSM2oHBIQiIxuTrsGDnxMKHT19E
uSMJA+AwgUvmjA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:54 2025 by rpki-client