Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier: Q8oOZKvTZW+GFOJ+AS5csIYfTuGizi87frULz0cfvXI=
Subject key identifier: F0:C3:CD:7F:4E:FE:38:6D:65:59:6D:B0:14:BA:92:88:7F:E4:8C:79
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial: 019A4E4F944D0D19F89FBCE2F31540E6A43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number: 10FE
Signing time: Tue 04 Nov 2025 10:00:29 +0000
Manifest this update: Tue 04 Nov 2025 10:00:29 +0000
Manifest next update: Wed 05 Nov 2025 10:00:29 +0000
Files and hashes: 1: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: TF6HwAojG4QQQJyapP8ZA30kjXmXDuGIJaXgq8TIfUM=)
2: njKb2eruHX8H9g3wi8a7hMHrArw.roa (hash: 6gW6VZJ5Gbs98ZjAseT0lvfg+/2Cg+ztPZG7diySUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:94:4d:0d:19:f8:9f:bc:e2:f3:15:40:e6:a4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Validity
Not Before: Nov 4 10:00:29 2025 GMT
Not After : Nov 5 10:00:29 2025 GMT
Subject: CN=f0c3cd7f4efe386d65596db014ba92887fe48c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:63:57:ff:f6:81:61:51:46:a6:3f:97:23:
a7:c5:eb:65:1d:fc:6c:a0:f6:32:c8:55:23:ad:37:
1e:06:ed:69:e8:7f:38:1e:ff:bd:d0:75:3a:ac:30:
b5:8f:6c:68:b9:52:bf:44:fb:47:d4:6f:3d:b3:96:
4b:80:dd:96:42:fb:61:53:81:1d:a0:e3:93:ce:39:
c4:aa:92:a5:a0:4b:ef:57:90:40:ed:fd:bc:26:47:
51:10:2d:d1:50:b0:11:c0:02:bb:6e:71:99:4e:27:
53:d0:46:f3:00:9a:7d:80:9c:19:bd:7f:5f:63:f6:
99:18:22:2a:15:48:e0:55:d2:f3:4e:25:ae:ff:32:
2c:a9:c5:6c:1e:4d:c4:57:c5:4e:5e:2a:bb:19:e9:
3b:fe:9c:41:c5:4a:fc:59:63:e4:a6:05:27:bb:e2:
de:1d:00:ff:c2:b8:31:34:f8:c7:93:3e:61:5c:5b:
6d:44:54:7d:7c:4f:ea:f9:93:12:73:8b:df:3b:16:
80:c7:9e:0c:ba:31:2f:2e:ae:4d:81:ee:28:a1:2e:
e0:e9:12:29:d8:49:06:8e:e9:a1:b0:a3:37:50:d0:
b4:bc:70:8b:3d:fc:e7:fd:2d:20:d1:21:b5:19:42:
9a:1b:47:b4:8e:f2:7a:88:51:14:d6:81:44:6b:b6:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:CD:7F:4E:FE:38:6D:65:59:6D:B0:14:BA:92:88:7F:E4:8C:79
X509v3 Authority Key Identifier:
keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e3:68:b4:55:ed:5b:aa:e8:ce:6a:44:e5:e8:d7:da:85:46:
5a:30:6b:5f:9f:bd:5c:d8:d6:6a:8a:0f:4f:91:6d:cf:34:aa:
6e:34:0f:41:92:17:f2:9a:8e:28:3e:b9:79:89:5b:a2:10:57:
fa:b1:e7:ec:de:b8:70:22:ac:18:b0:3e:7f:70:c7:06:ff:f9:
1e:f8:01:d7:28:aa:81:fc:01:2c:e3:d9:f0:ea:25:23:2f:b7:
b6:1d:a6:08:be:68:a9:e2:90:ba:df:0c:f7:f3:a0:30:21:8d:
6f:8c:2a:7f:7d:a7:cd:dd:f5:ed:a2:5a:dd:58:af:b6:2e:66:
d2:cb:35:d1:04:8c:06:e4:d5:6f:8c:1d:85:e5:7a:3c:de:de:
56:35:f4:b5:db:6b:63:ca:60:f3:fc:46:45:a6:e9:2a:70:a8:
f6:46:40:1f:c4:9e:3c:06:28:b7:a5:f4:07:10:a4:37:e3:37:
aa:0e:c8:3d:f4:31:e9:69:47:e2:e3:40:37:ae:fb:58:e7:15:
4e:4a:d5:d9:9c:a1:4a:5d:9d:ab:30:f9:ca:2b:ef:68:19:1e:
80:a6:fb:b2:ee:18:1d:38:e3:04:32:d2:92:7d:c9:05:f9:8e:
e2:21:a0:6d:a3:cc:16:b4:d2:89:47:d6:b0:d2:eb:39:31:1b:
36:6b:33:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT5RNDRn4n7zi8xVA5qQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhY2E3MWYyZDlmZTJiNDljNjc2MmYzZDlhMGU4YmYzMzJk
ZmRlZDEwHhcNMjUxMTA0MTAwMDI5WhcNMjUxMTA1MTAwMDI5WjAzMTEwLwYDVQQD
EyhmMGMzY2Q3ZjRlZmUzODZkNjU1OTZkYjAxNGJhOTI4ODdmZTQ4Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqdjV//2gWFRRqY/lyOnxetlHfxs
oPYyyFUjrTceBu1p6H84Hv+90HU6rDC1j2xouVK/RPtH1G89s5ZLgN2WQvthU4Ed
oOOTzjnEqpKloEvvV5BA7f28JkdREC3RULARwAK7bnGZTidT0EbzAJp9gJwZvX9f
Y/aZGCIqFUjgVdLzTiWu/zIsqcVsHk3EV8VOXiq7Gek7/pxBxUr8WWPkpgUnu+Le
HQD/wrgxNPjHkz5hXFttRFR9fE/q+ZMSc4vfOxaAx54MujEvLq5Nge4ooS7g6RIp
2EkGjumhsKM3UNC0vHCLPfzn/S0g0SG1GUKaG0e0jvJ6iFEU1oFEa7Zk/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDDzX9O/jhtZVltsBS6koh/5Ix5MB8GA1UdIwQY
MBaAFGrKcfLZ/itJxnYvPZoOi/My397RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODkt
OWE4ZDJiZjAwMzIwLzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODktOWE4ZDJiZjAwMzIw
LzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkONotFXt
W6rozmpE5ejX2oVGWjBrX5+9XNjWaooPT5FtzzSqbjQPQZIX8pqOKD65eYlbohBX
+rHn7N64cCKsGLA+f3DHBv/5HvgB1yiqgfwBLOPZ8OolIy+3th2mCL5oqeKQut8M
9/OgMCGNb4wqf32nzd317aJa3Vivti5m0ss10QSMBuTVb4wdheV6PN7eVjX0tdtr
Y8pg8/xGRabpKnCo9kZAH8SePAYot6X0BxCkN+M3qg7IPfQx6WlH4uNAN677WOcV
TkrV2ZyhSl2dqzD5yivvaBkegKb7su4YHTjjBDLSkn3JBfmO4iGgbaPMFrTSiUfW
sNLrOTEbNmszQQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:48 2025 by rpki-client