
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: 3Ho8VTZs6I4f4CgqJCWjobCnsjMJf1Jlx061/yLWnsY=
Subject key identifier: 62:A2:71:12:A0:F6:D4:23:A5:BF:18:91:7C:02:D2:7C:49:6E:AA:14
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 019888B29C1B3D35E89AFD753127C8B44FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 02A5
Signing time: Fri 08 Aug 2025 08:01:03 +0000
Manifest this update: Fri 08 Aug 2025 08:01:03 +0000
Manifest next update: Sat 09 Aug 2025 08:01:03 +0000
Files and hashes: 1: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: 6BEkW8Ho+RhL0aQ6A0EAZiU4r0dUf203BYwlSUMmGyE=)
2: E09vqP6Dhzwi3swUd7vdKQdAZ-E.roa (hash: MzWcZL4YZkWICabmNLBtwrsQlq2zb5xWQgY5PAU+5oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:9c:1b:3d:35:e8:9a:fd:75:31:27:c8:b4:4f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: Aug 8 08:01:03 2025 GMT
Not After : Aug 9 08:01:03 2025 GMT
Subject: CN=62a27112a0f6d423a5bf18917c02d27c496eaa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:79:f4:f5:db:b7:86:85:41:6e:84:21:12:
b5:ac:87:0f:ec:dc:2e:e3:0e:26:72:b6:62:16:26:
18:98:88:1b:e9:c1:38:21:7d:05:5b:49:cc:2b:ca:
fd:21:60:8f:b5:2a:b4:48:46:f2:e2:d0:f1:26:c4:
c7:ff:6e:64:62:c3:08:3a:53:5d:51:6b:3d:12:e8:
e1:3f:98:68:70:06:89:a6:f8:ea:fe:33:fd:b2:29:
88:88:3d:cf:ea:cd:47:26:a0:53:f3:80:e3:7d:7c:
78:20:44:93:3b:f7:8b:2e:f1:42:67:57:ad:52:a7:
9b:db:e5:05:a2:d0:a2:97:ec:d9:8f:98:c0:04:93:
0d:5e:6f:55:bb:0b:9e:8e:cf:cc:aa:43:bd:0f:92:
1d:79:00:90:aa:cc:12:e8:6d:a6:df:86:21:38:53:
f1:f8:6b:9d:bf:b6:24:94:0c:66:e5:86:85:12:1c:
19:68:45:6d:8e:df:72:33:62:9b:d8:3e:8c:6e:03:
20:a4:a3:35:38:67:60:aa:9c:f5:6f:84:5e:7c:85:
94:62:8e:94:1d:98:4d:34:9c:5d:5c:ab:90:87:65:
64:a1:22:69:29:ca:70:12:d6:9a:28:cf:57:f1:7a:
08:07:51:e8:c7:da:45:f4:81:8e:64:87:b9:80:89:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A2:71:12:A0:F6:D4:23:A5:BF:18:91:7C:02:D2:7C:49:6E:AA:14
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f5:22:09:05:eb:81:cd:f8:e2:f2:7b:58:ce:7a:81:90:10:
1a:3a:34:12:1b:d1:31:97:b7:ac:93:cb:d5:cc:3a:ad:62:9f:
3a:97:7e:f6:7a:57:e4:fe:67:bc:24:be:51:db:d3:12:e7:e3:
01:9d:13:2f:c6:a8:6b:f1:58:52:53:1e:fb:75:64:69:ae:7b:
b8:18:fe:ab:23:1f:20:14:59:d2:fd:77:41:ff:3f:98:96:50:
ea:31:53:74:8f:7d:b2:df:7e:06:62:a9:53:98:89:77:c7:a7:
2d:5e:64:de:3d:95:33:61:57:2d:07:07:46:37:1a:56:31:af:
23:59:24:d6:91:e7:e1:07:c4:24:bf:13:87:02:de:94:ee:f6:
b2:6e:0a:d7:dc:5f:16:08:b7:b5:eb:3f:b8:86:e5:49:6e:6a:
1c:4d:76:e7:e2:b8:e4:ad:59:b9:7a:be:f9:5b:3c:b6:f3:91:
9b:1c:8a:63:67:6a:04:bb:ba:b8:62:0d:a4:13:d6:19:87:55:
b9:c2:ab:67:e4:fc:98:2f:37:08:6a:b6:37:2c:ad:c1:bf:4e:
a6:d8:a0:02:e3:e2:24:56:1f:3e:10:4e:d2:36:22:ed:02:dc:
fd:bc:5c:76:77:63:cf:7b:fb:8f:5a:a0:2b:8d:17:16:cf:b5:
83:7e:f2:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIspwbPTXomv11MSfItE/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmIwYWQ3NzY1NjEzOTUzYjkyYjZjYmY0Y2RhOTNmOWMx
MzcyZTYwHhcNMjUwODA4MDgwMTAzWhcNMjUwODA5MDgwMTAzWjAzMTEwLwYDVQQD
Eyg2MmEyNzExMmEwZjZkNDIzYTViZjE4OTE3YzAyZDI3YzQ5NmVhYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpl59PXbt4aFQW6EIRK1rIcP7Nwu
4w4mcrZiFiYYmIgb6cE4IX0FW0nMK8r9IWCPtSq0SEby4tDxJsTH/25kYsMIOlNd
UWs9EujhP5hocAaJpvjq/jP9simIiD3P6s1HJqBT84DjfXx4IESTO/eLLvFCZ1et
Uqeb2+UFotCil+zZj5jABJMNXm9Vuwuejs/MqkO9D5IdeQCQqswS6G2m34YhOFPx
+Gudv7YklAxm5YaFEhwZaEVtjt9yM2Kb2D6MbgMgpKM1OGdgqpz1b4RefIWUYo6U
HZhNNJxdXKuQh2VkoSJpKcpwEtaaKM9X8XoIB1Hox9pF9IGOZIe5gInaXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKicRKg9tQjpb8YkXwC0nxJbqoUMB8GA1UdIwQY
MBaAFAO7Ctd2VhOVO5K2y/TNqT+cE3LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTIt
ZDc1ODI1ODliYjU5LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTItZDc1ODI1ODliYjU5
LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvUiCQXr
gc344vJ7WM56gZAQGjo0EhvRMZe3rJPL1cw6rWKfOpd+9npX5P5nvCS+UdvTEufj
AZ0TL8aoa/FYUlMe+3Vkaa57uBj+qyMfIBRZ0v13Qf8/mJZQ6jFTdI99st9+BmKp
U5iJd8enLV5k3j2VM2FXLQcHRjcaVjGvI1kk1pHn4QfEJL8ThwLelO72sm4K19xf
Fgi3tes/uIblSW5qHE125+K45K1ZuXq++Vs8tvORmxyKY2dqBLu6uGINpBPWGYdV
ucKrZ+T8mC83CGq2Nyytwb9OptigAuPiJFYfPhBO0jYi7QLc/bxcdndjz3v7j1qg
K40XFs+1g37yKQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:59 2025 by rpki-client