Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: vmYFpVEkrA62eZZTepOdnWmQxb/78htT7H43RRGOHjQ=
Subject key identifier: C2:B7:16:DC:5F:3D:3C:94:7F:02:8B:FB:F7:8D:AB:A3:D8:76:A1:EC
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019A503DF4DB50E5D4C2E5450538C0A24BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:28 +0000
Manifest this update: Tue 04 Nov 2025 19:00:28 +0000
Manifest next update: Wed 05 Nov 2025 19:00:28 +0000
Files and hashes: 1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=)
2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: iWiF359NIgGgmiTGppHVaXra0Yvv+7ig/0QFCGE8HUk=)
3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=)
4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f4:db:50:e5:d4:c2:e5:45:05:38:c0:a2:4b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Nov 4 19:00:28 2025 GMT
Not After : Nov 5 19:00:28 2025 GMT
Subject: CN=c2b716dc5f3d3c947f028bfbf78daba3d876a1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:52:e7:d0:29:39:c8:5b:c9:f7:4c:ac:f1:
2f:72:17:5d:dd:f1:10:72:3e:be:dd:e9:78:60:4f:
d4:10:e2:0d:ae:b3:f8:07:14:7c:34:04:3c:4e:52:
17:b2:72:39:7d:b5:0e:05:cf:61:2a:95:8c:35:db:
aa:5b:1d:a6:36:2d:90:29:12:2a:ce:fc:c6:98:bf:
a3:6e:00:3c:62:f1:fc:52:7d:3f:b1:a4:37:3a:47:
e9:08:df:f2:7d:e7:db:a7:b4:40:7f:c0:1d:28:26:
05:b9:78:c3:8f:ca:03:75:1e:2a:75:5e:d0:92:1c:
72:0a:9b:01:67:30:73:ce:12:37:01:7f:b9:5e:2e:
e7:26:87:96:49:82:cd:1e:1b:3b:07:f7:82:9a:97:
ff:e0:04:c0:d3:a2:7d:44:e3:42:3e:a2:58:60:95:
c7:ca:3c:84:03:da:e1:66:3a:11:76:66:be:e1:cb:
5b:db:f1:b0:be:54:11:94:ea:03:6d:5b:27:5d:27:
9b:5f:36:36:89:6a:36:23:37:d7:09:47:b2:80:a5:
1b:01:30:fc:cc:47:a9:88:8f:9a:f1:64:10:f8:25:
3d:a4:cc:82:2d:d0:df:db:5b:54:07:ba:19:a1:7b:
5c:f8:fc:e2:92:a9:c5:d8:85:c2:7b:af:df:f2:e8:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B7:16:DC:5F:3D:3C:94:7F:02:8B:FB:F7:8D:AB:A3:D8:76:A1:EC
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b1:ab:e2:96:39:91:d9:19:59:46:bd:b1:38:da:1f:04:17:
37:2d:0a:6d:54:b6:b9:e0:1e:79:8f:f4:27:e4:13:ad:8d:ba:
2c:1c:3a:77:66:e4:10:9e:2c:20:8e:6b:aa:f6:f5:de:94:6f:
72:bc:98:71:2f:93:d5:27:54:f3:0c:5c:c3:94:02:31:a0:a2:
d7:a4:70:c4:bb:97:61:df:2e:08:cf:2d:d9:93:03:79:63:99:
ab:7f:07:c6:90:61:60:c2:5b:16:d4:03:32:e5:1f:6d:41:19:
c6:ff:67:b5:b2:ff:61:36:7b:10:e3:7f:97:0e:ca:95:e2:85:
51:7f:d9:64:7a:15:12:c2:bf:93:dc:05:e1:a3:ff:d7:02:85:
85:e0:f9:8a:31:db:96:0d:3c:f2:a2:e9:60:3c:14:fd:29:29:
4f:13:f4:23:01:8d:11:8f:07:e0:52:3c:93:7e:ec:f3:17:5a:
46:8a:12:5d:ca:1b:cb:97:3a:d1:8e:67:48:46:34:29:4d:ad:
b7:0b:e8:14:e7:32:cc:72:e4:ca:a8:e6:92:19:70:64:4b:4d:
0e:51:3f:c7:e6:69:a1:dd:2c:30:ae:f6:8d:d9:76:21:5c:06:
ca:e0:ca:67:e4:e9:dc:47:a4:75:66:9e:4f:9e:66:fe:4f:f9:
81:b4:4f:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPfTbUOXUwuVFBTjAokvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjNmODI1OWIzMGVjMDM3MjJmOTQyMDM1YTk0ZTIwOWY4
ODI4NjEwHhcNMjUxMTA0MTkwMDI4WhcNMjUxMTA1MTkwMDI4WjAzMTEwLwYDVQQD
EyhjMmI3MTZkYzVmM2QzYzk0N2YwMjhiZmJmNzhkYWJhM2Q4NzZhMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03VS59ApOchbyfdMrPEvchdd3fEQ
cj6+3el4YE/UEOINrrP4BxR8NAQ8TlIXsnI5fbUOBc9hKpWMNduqWx2mNi2QKRIq
zvzGmL+jbgA8YvH8Un0/saQ3OkfpCN/yfefbp7RAf8AdKCYFuXjDj8oDdR4qdV7Q
khxyCpsBZzBzzhI3AX+5Xi7nJoeWSYLNHhs7B/eCmpf/4ATA06J9RONCPqJYYJXH
yjyEA9rhZjoRdma+4ctb2/GwvlQRlOoDbVsnXSebXzY2iWo2IzfXCUeygKUbATD8
zEepiI+a8WQQ+CU9pMyCLdDf21tUB7oZoXtc+PzikqnF2IXCe6/f8ujqSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK3FtxfPTyUfwKL+/eNq6PYdqHsMB8GA1UdIwQY
MBaAFAPz+CWbMOwDci+UIDWpTiCfiChhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQt
YWIxMzM1NmU1ZmVjLzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQtYWIxMzM1NmU1ZmVj
LzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLGr4pY5
kdkZWUa9sTjaHwQXNy0KbVS2ueAeeY/0J+QTrY26LBw6d2bkEJ4sII5rqvb13pRv
cryYcS+T1SdU8wxcw5QCMaCi16RwxLuXYd8uCM8t2ZMDeWOZq38HxpBhYMJbFtQD
MuUfbUEZxv9ntbL/YTZ7EON/lw7KleKFUX/ZZHoVEsK/k9wF4aP/1wKFheD5ijHb
lg088qLpYDwU/SkpTxP0IwGNEY8H4FI8k37s8xdaRooSXcoby5c60Y5nSEY0KU2t
twvoFOcyzHLkyqjmkhlwZEtNDlE/x+Zpod0sMK72jdl2IVwGyuDKZ+Tp3EekdWae
T55m/k/5gbRPXg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:32:40 2025 by rpki-client