Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: /9383sGghmBRqDM6mr0e+Ke1OkIORu8SIYSb0biA6CQ=
Subject key identifier: C9:0F:E9:46:55:2E:FE:92:96:F9:19:CE:B3:8C:A3:99:8D:F9:AD:08
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019A4EF5D4172CEA72C90E45F52B05187A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 10C7
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: OrcggSBmYNSyTjL6jQooqvvSOM5nKvWbffuKjgxE3u4=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d4:17:2c:ea:72:c9:0e:45:f5:2b:05:18:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=c90fe946552efe9296f919ceb38ca3998df9ad08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:ea:1b:e5:a4:ce:28:7b:ac:17:70:7f:a8:
85:3b:96:9b:44:13:4b:59:d8:c0:21:9c:ec:b9:d0:
e9:82:00:34:e0:01:6d:7e:6b:91:34:94:7e:98:0f:
29:e6:1a:62:ee:e2:6d:aa:92:2f:bd:4c:f0:c9:26:
74:db:a7:22:8e:02:25:ec:03:ee:ff:93:8c:61:ec:
01:7b:0e:f7:bc:79:94:93:9f:e9:70:4d:1e:c5:c5:
a1:4c:95:a2:bd:1b:90:8d:3b:a4:c2:4c:b2:3a:90:
a3:85:b4:b5:53:98:fe:8c:53:e5:11:b7:44:61:28:
94:3d:47:94:0c:7f:72:6f:3b:a0:64:af:8e:6b:67:
83:d0:30:63:81:06:1a:58:9d:b6:ba:15:d5:74:8b:
9a:62:9a:74:be:17:ca:41:ec:cc:08:e1:71:08:01:
a5:c9:fb:fd:bb:4e:e5:27:bc:64:11:54:b7:e9:b0:
04:65:fd:dc:03:e1:da:3d:9a:73:57:e4:9d:93:f7:
21:12:75:c2:15:27:a0:ca:6a:34:c9:bf:33:e0:d1:
76:ff:d0:fa:ec:72:c2:d6:bb:b0:ff:57:36:4d:39:
8d:a9:7c:92:fd:cd:00:21:7e:77:6f:5c:17:e6:e7:
0f:30:99:c6:bd:2f:3b:6e:67:2d:aa:6c:90:90:ee:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0F:E9:46:55:2E:FE:92:96:F9:19:CE:B3:8C:A3:99:8D:F9:AD:08
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:09:c1:bb:99:35:7e:1b:e1:df:3d:89:d8:be:1f:8d:7f:4c:
1a:29:77:a7:d0:a9:24:65:3f:de:a3:c9:af:4b:ea:d3:31:78:
d6:be:63:0a:cd:44:83:73:a4:d0:29:51:f2:47:20:10:09:16:
b3:77:6f:c5:79:e5:f2:14:85:af:b3:d1:fb:75:5e:16:fc:ee:
ad:b9:bb:53:56:10:7d:37:72:9b:15:fb:fa:1c:1e:26:68:50:
0c:53:e2:2a:80:bd:91:c2:de:3e:3e:25:d1:c4:d6:e9:88:03:
04:35:79:4b:9c:92:05:59:5c:d3:27:8f:14:d7:ad:b5:4e:5e:
f1:2f:d9:0f:8b:45:50:26:50:b0:bd:fd:d0:ce:63:aa:7e:da:
40:af:9d:26:a5:33:bb:c8:95:94:fc:84:b3:5c:71:88:5a:44:
f5:8c:2b:3f:ad:b3:28:63:eb:45:11:f1:e4:1d:39:ca:f8:1f:
84:e4:02:4c:c8:cd:df:4f:1b:e7:3f:5c:03:55:1d:55:e6:05:
24:71:21:3a:b3:79:81:53:16:66:97:bc:ed:c9:9e:b3:8c:82:
d1:7a:7e:09:f7:37:bb:fa:d2:08:ff:81:cf:bd:5d:84:7e:9d:
e7:16:32:8d:7c:bd:66:db:84:a6:7c:19:ad:e5:30:84:ec:74:
28:81:3b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9dQXLOpyyQ5F9SsFGHosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDdjNmI1NmVmMWYyMzliMDI4ZWY0MjM3NWEyYTE3NjVi
YzA4YjgwHhcNMjUxMTA0MTMwMjA0WhcNMjUxMTA1MTMwMjA0WjAzMTEwLwYDVQQD
EyhjOTBmZTk0NjU1MmVmZTkyOTZmOTE5Y2ViMzhjYTM5OThkZjlhZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5HqG+Wkzih7rBdwf6iFO5abRBNL
WdjAIZzsudDpggA04AFtfmuRNJR+mA8p5hpi7uJtqpIvvUzwySZ026cijgIl7APu
/5OMYewBew73vHmUk5/pcE0excWhTJWivRuQjTukwkyyOpCjhbS1U5j+jFPlEbdE
YSiUPUeUDH9ybzugZK+Oa2eD0DBjgQYaWJ22uhXVdIuaYpp0vhfKQezMCOFxCAGl
yfv9u07lJ7xkEVS36bAEZf3cA+HaPZpzV+Sdk/chEnXCFSegymo0yb8z4NF2/9D6
7HLC1ruw/1c2TTmNqXyS/c0AIX53b1wX5ucPMJnGvS87bmctqmyQkO4t3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkP6UZVLv6SlvkZzrOMo5mN+a0IMB8GA1UdIwQY
MBaAFPwHxrVu8fI5sCjvQjdaKhdlvAi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQt
Yzg3MDBhMTQ3NjFiLzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQtYzg3MDBhMTQ3NjFi
LzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgnBu5k1
fhvh3z2J2L4fjX9MGil3p9CpJGU/3qPJr0vq0zF41r5jCs1Eg3Ok0ClR8kcgEAkW
s3dvxXnl8hSFr7PR+3VeFvzurbm7U1YQfTdymxX7+hweJmhQDFPiKoC9kcLePj4l
0cTW6YgDBDV5S5ySBVlc0yePFNettU5e8S/ZD4tFUCZQsL390M5jqn7aQK+dJqUz
u8iVlPyEs1xxiFpE9YwrP62zKGPrRRHx5B05yvgfhOQCTMjN308b5z9cA1UdVeYF
JHEhOrN5gVMWZpe87cmes4yC0Xp+Cfc3u/rSCP+Bz71dhH6d5xYyjXy9ZtuEpnwZ
reUwhOx0KIE7KA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:49:02 2025 by rpki-client