Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: ZXgIpUe8dtarBr8uXBOpE0Lx5LAn3ILwuCeJNqJYbzc=
Subject key identifier: 0A:14:EA:4F:57:88:93:09:5B:22:FA:D3:51:0A:27:75:86:BB:1A:00
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 01987298C1AA143742819BC70784CDE8755C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0AE7
Signing time: Mon 04 Aug 2025 01:01:10 +0000
Manifest this update: Mon 04 Aug 2025 01:01:10 +0000
Manifest next update: Tue 05 Aug 2025 01:01:10 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: fnhgGURYis3cTHvzzFn9sdmZgvAsNwgm3a6Sl1qu5J8=)
2: TvqtU6kGEWNG1Cpdb9p7065y7Us.roa (hash: feIhe0HlEu5dhdmycewb1eBF/nryf3+/l635UbwMTEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c1:aa:14:37:42:81:9b:c7:07:84:cd:e8:75:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Aug 4 01:01:10 2025 GMT
Not After : Aug 5 01:01:10 2025 GMT
Subject: CN=0a14ea4f578893095b22fad3510a277586bb1a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8c:2a:09:e5:7b:f4:b3:ac:b6:dc:72:88:f7:
b4:26:1b:74:7d:65:89:51:bb:1a:e5:7a:12:e4:48:
b0:90:a9:89:54:0e:04:a6:d6:65:f4:87:f4:bd:31:
34:cb:33:67:f1:66:16:ac:12:8b:2b:bd:55:52:29:
59:5e:7c:4e:a8:4e:af:7d:ec:7d:0e:28:78:8b:a2:
f5:5a:55:85:88:83:54:22:63:05:cb:4b:bd:49:52:
a6:fb:65:d2:4c:c9:6c:14:17:2d:6f:e8:ea:8c:0f:
28:3e:2e:73:b9:72:84:5f:0e:3d:93:93:5a:0f:8c:
ba:6f:aa:8c:db:9e:cb:61:b7:bb:d4:84:be:20:ac:
3b:29:27:e8:1f:63:58:e0:e3:b6:a5:cc:f6:65:39:
94:1d:ff:20:ae:33:c7:c5:78:8a:ae:42:94:a9:ee:
f4:56:ec:01:c6:e5:c4:bd:96:71:29:8e:7d:ab:2d:
20:69:3b:07:6b:68:6c:c9:c0:9f:12:61:fa:04:b5:
7d:ed:2c:67:d1:fa:7b:90:fe:01:33:7c:ae:64:ed:
43:27:d0:fe:83:27:b9:e2:5a:d2:e4:00:c2:3f:ab:
c9:f8:ff:d5:5a:a0:aa:58:4d:2c:01:b2:17:d1:b1:
10:38:b5:09:f8:c1:25:08:66:8b:b2:81:85:b9:ad:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:14:EA:4F:57:88:93:09:5B:22:FA:D3:51:0A:27:75:86:BB:1A:00
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c5:5e:27:62:3b:d1:e0:f0:42:78:43:71:60:a2:fd:d4:9e:
27:79:c3:d6:5b:b8:ad:2e:b8:dd:4d:b1:93:14:98:11:29:ec:
d7:10:e8:57:74:50:24:34:f0:f4:a2:38:93:5b:04:a5:66:21:
81:f4:f9:c3:5e:4d:81:0f:df:cb:f8:d2:c3:58:6d:ab:dc:d8:
cc:e5:c4:c0:50:37:0b:54:0c:86:a5:b7:be:60:07:8d:7d:58:
e0:30:78:e2:d1:e6:69:9c:97:4b:43:05:5a:64:f5:f3:86:14:
39:72:13:e1:fa:58:6f:f1:ad:e5:07:90:0d:6b:18:71:7c:e9:
c5:a6:79:a6:19:d5:68:79:92:72:c8:c5:2a:9e:0d:76:2b:88:
be:f9:ad:40:ef:ae:d3:a3:9c:f2:cd:87:22:98:2a:4c:9f:be:
58:bd:09:5e:6e:b6:1b:fe:b0:ad:4c:69:d1:91:59:70:05:08:
b6:79:ae:be:86:d3:63:c1:c8:60:fc:5e:52:4d:27:e6:26:3e:
f8:90:fa:d6:c9:59:ef:23:a9:69:bb:9d:89:cf:56:dc:5b:0c:
33:d5:fe:8f:eb:42:24:6a:19:05:dd:25:72:a2:45:ec:99:fa:
3b:e1:70:c3:52:8d:97:69:b3:e6:95:13:23:52:0c:d9:3b:0d:
cc:40:7a:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymMGqFDdCgZvHB4TN6HVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTI5MTIyNGY4MmJjNmQyNmI1MTllZDdhZmJlMjVjYjMy
YzExNWMwHhcNMjUwODA0MDEwMTEwWhcNMjUwODA1MDEwMTEwWjAzMTEwLwYDVQQD
EygwYTE0ZWE0ZjU3ODg5MzA5NWIyMmZhZDM1MTBhMjc3NTg2YmIxYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8owqCeV79LOsttxyiPe0Jht0fWWJ
Ubsa5XoS5EiwkKmJVA4EptZl9If0vTE0yzNn8WYWrBKLK71VUilZXnxOqE6vfex9
Dih4i6L1WlWFiINUImMFy0u9SVKm+2XSTMlsFBctb+jqjA8oPi5zuXKEXw49k5Na
D4y6b6qM257LYbe71IS+IKw7KSfoH2NY4OO2pcz2ZTmUHf8grjPHxXiKrkKUqe70
VuwBxuXEvZZxKY59qy0gaTsHa2hsycCfEmH6BLV97Sxn0fp7kP4BM3yuZO1DJ9D+
gye54lrS5ADCP6vJ+P/VWqCqWE0sAbIX0bEQOLUJ+MElCGaLsoGFua3QPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoU6k9XiJMJWyL601EKJ3WGuxoAMB8GA1UdIwQY
MBaAFPWikSJPgrxtJrUZ7Xr74lyzLBFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzct
YmM3OTc3Mzk2ZDliLzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzctYmM3OTc3Mzk2ZDli
LzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsVeJ2I7
0eDwQnhDcWCi/dSeJ3nD1lu4rS643U2xkxSYESns1xDoV3RQJDTw9KI4k1sEpWYh
gfT5w15NgQ/fy/jSw1htq9zYzOXEwFA3C1QMhqW3vmAHjX1Y4DB44tHmaZyXS0MF
WmT184YUOXIT4fpYb/Gt5QeQDWsYcXzpxaZ5phnVaHmScsjFKp4NdiuIvvmtQO+u
06Oc8s2HIpgqTJ++WL0JXm62G/6wrUxp0ZFZcAUItnmuvobTY8HIYPxeUk0n5iY+
+JD61slZ7yOpabudic9W3FsMM9X+j+tCJGoZBd0lcqJF7Jn6O+Fww1KNl2mz5pUT
I1IM2TsNzEB6Eg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:29 2025 by rpki-client