Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: K9qehgEruSp1ZZFfZUlfiOX17xPy7+AQeY0uEMYd8Xw=
Subject key identifier: 76:39:06:A2:75:2E:28:B8:9A:05:4E:F6:4B:23:CC:AA:17:0B:C5:78
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 01988B0F6C761DADA2C26D3AF79393145F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 19:01:40 +0000
Manifest this update: Fri 08 Aug 2025 19:01:40 +0000
Manifest next update: Sat 09 Aug 2025 19:01:40 +0000
Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: xYFii4ptdqD1eNxEYEl0ex4GGRrjGbTjECZh7Z3TbDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:6c:76:1d:ad:a2:c2:6d:3a:f7:93:93:14:5f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Aug 8 19:01:40 2025 GMT
Not After : Aug 9 19:01:40 2025 GMT
Subject: CN=763906a2752e28b89a054ef64b23ccaa170bc578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:24:b7:3e:0f:cb:bd:36:67:29:4e:92:e1:
2e:45:a7:80:86:0f:ea:8a:25:3c:bd:ac:ba:33:96:
4d:ed:84:67:c8:f4:51:22:d5:5c:d4:d5:2d:bf:4a:
dc:b2:de:40:27:65:0f:7c:f4:61:6f:89:e5:48:d8:
52:31:f4:bf:ac:94:ca:48:37:d7:4c:7d:50:24:68:
49:a4:74:fc:3b:0c:06:97:1b:8c:e3:46:e2:b2:c4:
0e:9d:50:e8:28:f2:0f:c0:db:99:00:2b:6f:7e:b6:
ba:7e:19:44:73:77:9e:e1:9c:63:7b:e2:85:ec:fd:
68:b3:af:14:eb:27:62:a7:32:f1:6f:d4:51:f3:ef:
cf:93:c6:cf:37:8f:ac:36:61:8d:20:bf:7a:6f:f7:
71:a3:a4:a9:82:39:08:ee:5d:f2:9d:ba:44:e9:94:
22:ca:ea:cc:bf:3c:0f:c0:c8:b6:04:86:a7:f8:e3:
28:09:aa:31:88:e3:e5:7f:7e:0f:e0:5d:9f:e0:23:
a9:e8:2f:93:36:24:ea:9b:76:d3:e6:92:e0:2d:9a:
ea:8d:97:b9:16:26:02:26:86:49:9b:7a:47:09:c9:
f9:50:12:d5:fb:7f:84:68:bc:90:6f:96:28:c8:18:
07:fd:c7:07:ca:0c:70:c6:8f:27:f6:b3:07:4d:9c:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:06:A2:75:2E:28:B8:9A:05:4E:F6:4B:23:CC:AA:17:0B:C5:78
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:35:2f:4a:b6:48:9f:e2:1e:83:59:ce:48:5c:d5:d3:f3:b8:
0d:c1:d1:df:4a:17:a9:ce:7b:37:dd:d0:1b:03:fb:6c:9b:17:
a3:d2:d0:01:23:7b:99:64:2d:de:0a:09:07:6b:b0:b0:fa:11:
dc:0b:54:5d:83:40:65:b3:3b:ca:e9:b9:12:61:f6:c8:38:7e:
56:88:9d:fd:64:e7:b3:1b:0f:9e:42:2c:f5:0a:99:ba:d0:b4:
38:23:b4:a0:f0:68:22:9d:83:89:81:cf:fc:12:a9:a1:0d:e0:
43:56:1e:9e:02:81:59:e4:5b:d4:f8:93:f0:61:8a:88:c5:fc:
fb:7d:5d:ba:6c:c8:8b:f1:30:64:4f:3d:ae:2b:ee:c8:24:bd:
38:14:f4:da:ea:13:97:d6:d2:bd:dd:de:b2:c3:e1:37:c8:ca:
86:a2:17:3e:7e:3b:d1:17:89:fe:a5:a1:c9:6a:b1:dd:e5:e5:
20:5d:1e:bc:f2:d3:11:d9:18:b7:5d:60:c5:bd:55:37:87:4a:
f1:e5:22:2a:fd:c9:74:1f:e1:a6:5b:c4:57:64:cf:02:45:19:
41:59:b8:70:b4:7d:3c:d0:52:fe:f9:e8:ba:44:a3:dc:e2:eb:
ce:ac:e0:7e:55:16:1f:b0:d6:74:7c:7f:65:5c:a1:f6:b5:55:
5d:39:25:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD2x2Ha2iwm0695OTFF9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx
NjUzYWEwHhcNMjUwODA4MTkwMTQwWhcNMjUwODA5MTkwMTQwWjAzMTEwLwYDVQQD
Eyg3NjM5MDZhMjc1MmUyOGI4OWEwNTRlZjY0YjIzY2NhYTE3MGJjNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvEktz4Py702ZylOkuEuRaeAhg/q
iiU8vay6M5ZN7YRnyPRRItVc1NUtv0rcst5AJ2UPfPRhb4nlSNhSMfS/rJTKSDfX
TH1QJGhJpHT8OwwGlxuM40bissQOnVDoKPIPwNuZACtvfra6fhlEc3ee4Zxje+KF
7P1os68U6ydipzLxb9RR8+/Pk8bPN4+sNmGNIL96b/dxo6SpgjkI7l3ynbpE6ZQi
yurMvzwPwMi2BIan+OMoCaoxiOPlf34P4F2f4COp6C+TNiTqm3bT5pLgLZrqjZe5
FiYCJoZJm3pHCcn5UBLV+3+EaLyQb5YoyBgH/ccHygxwxo8n9rMHTZxgIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY5BqJ1Lii4mgVO9ksjzKoXC8V4MB8GA1UdIwQY
MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt
N2JjMjY4YTBiNTE3LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3
LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjUvSrZI
n+Ieg1nOSFzV0/O4DcHR30oXqc57N93QGwP7bJsXo9LQASN7mWQt3goJB2uwsPoR
3AtUXYNAZbM7yum5EmH2yDh+Void/WTnsxsPnkIs9QqZutC0OCO0oPBoIp2DiYHP
/BKpoQ3gQ1YengKBWeRb1PiT8GGKiMX8+31dumzIi/EwZE89rivuyCS9OBT02uoT
l9bSvd3essPhN8jKhqIXPn470ReJ/qWhyWqx3eXlIF0evPLTEdkYt11gxb1VN4dK
8eUiKv3JdB/hplvEV2TPAkUZQVm4cLR9PNBS/vnoukSj3OLrzqzgflUWH7DWdHx/
ZVyh9rVVXTkljQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:45 2025 by rpki-client