Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: ZQDMvhgbbr3v295niY0sSbutdGQssxDXBN+gxP1auCk=
Subject key identifier: 7F:AE:62:2D:56:A6:48:65:3F:38:D4:78:32:D6:CD:12:76:C3:8A:5E
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019A4E4F984C63BA9BB1898960D7C780172E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 03F2
Signing time: Tue 04 Nov 2025 10:00:30 +0000
Manifest this update: Tue 04 Nov 2025 10:00:30 +0000
Manifest next update: Wed 05 Nov 2025 10:00:30 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: R0Y9imyZXaAOePF6hagkPL/w1jgKPu7+7erTZNhoGFk=)
2: muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (hash: RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:98:4c:63:ba:9b:b1:89:89:60:d7:c7:80:17:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Nov 4 10:00:30 2025 GMT
Not After : Nov 5 10:00:30 2025 GMT
Subject: CN=7fae622d56a648653f38d47832d6cd1276c38a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:55:b1:d0:da:e0:44:3b:bc:14:61:35:e7:f8:
1f:48:c2:97:4c:f1:e3:44:06:22:da:09:b4:5a:65:
ad:53:88:b3:e3:7d:8d:92:f3:fe:80:54:23:3d:ce:
55:e0:60:69:07:16:10:3f:e2:cf:ff:c1:4f:ae:ff:
53:e4:e3:93:5f:d0:c3:4f:3c:98:d5:94:5f:2a:9c:
7a:a8:26:37:ee:ed:fe:b2:bf:90:e5:14:b2:74:75:
f0:6e:77:be:9b:82:ef:3f:3e:d8:cb:57:e9:c1:46:
97:ee:a9:a2:71:4c:f8:af:0c:c4:a1:68:aa:38:bf:
ad:ae:f6:f0:17:e9:8c:6b:dc:56:f8:ed:a9:c3:26:
5c:c0:8d:4c:b7:c5:69:c0:f7:86:ee:fd:1d:38:a7:
14:e2:de:c4:09:97:11:5e:07:a2:d3:3a:62:7d:3f:
e8:aa:fd:25:11:99:21:f9:38:de:c6:6c:37:4d:2a:
3f:99:e1:af:e2:3a:6e:cc:fe:70:c5:f2:ec:50:a5:
51:7b:d7:f3:42:a6:d7:b8:89:54:12:4a:d4:a5:fe:
d8:43:71:4a:a6:1b:2c:06:8d:f7:c9:30:99:17:73:
a5:1c:92:45:58:86:26:c1:21:44:b2:41:b3:e1:9f:
bc:09:7b:27:4e:bc:a9:2d:b9:f8:07:07:13:af:ea:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:62:2D:56:A6:48:65:3F:38:D4:78:32:D6:CD:12:76:C3:8A:5E
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f3:34:21:ff:26:8f:e8:73:de:f8:17:12:7c:b5:f2:92:b8:
07:3d:41:e6:c1:16:98:f5:a1:32:e0:56:d0:9c:5a:41:a2:c5:
e8:b4:f6:78:30:97:45:88:ab:a7:0d:98:e0:0a:2a:89:48:ac:
76:44:23:58:d9:b1:6c:84:c2:6a:ea:2f:bd:b2:3e:d6:40:fc:
86:dd:4a:7a:ee:25:dd:65:2c:24:2e:de:a1:56:29:cf:c6:3d:
a4:98:86:f9:06:16:90:94:08:47:b1:7f:e9:0b:60:85:d7:74:
77:03:86:cf:b4:5d:5e:e8:19:b1:65:bd:ed:f9:fc:de:c4:46:
67:dc:17:85:ad:56:82:39:a6:ef:19:e3:73:bc:b7:b2:eb:0b:
55:c4:a7:ea:10:1b:4d:69:c6:f4:4b:3d:72:c6:40:08:59:1f:
8d:49:f4:42:1f:52:91:69:69:5d:8d:8b:82:5e:f4:59:1f:36:
1d:77:6a:35:fc:8b:be:99:85:9a:6c:88:29:7e:15:00:be:15:
c0:ee:9f:95:89:d0:2d:20:31:54:d5:2d:6c:f8:22:86:35:ea:
b5:fa:77:58:0c:10:18:91:ab:56:eb:15:f0:77:2c:dd:ae:5d:
15:4a:be:44:f1:c0:aa:b2:dc:8b:a6:74:d5:b9:3b:18:1b:c5:
10:19:70:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT5hMY7qbsYmJYNfHgBcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWMwOGFlNmE5MzI1Mjg1YmRkNGE0YWRlOWMyMDdkN2Zh
MTA0NTkwHhcNMjUxMTA0MTAwMDMwWhcNMjUxMTA1MTAwMDMwWjAzMTEwLwYDVQQD
Eyg3ZmFlNjIyZDU2YTY0ODY1M2YzOGQ0NzgzMmQ2Y2QxMjc2YzM4YTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FWx0NrgRDu8FGE15/gfSMKXTPHj
RAYi2gm0WmWtU4iz432NkvP+gFQjPc5V4GBpBxYQP+LP/8FPrv9T5OOTX9DDTzyY
1ZRfKpx6qCY37u3+sr+Q5RSydHXwbne+m4LvPz7Yy1fpwUaX7qmicUz4rwzEoWiq
OL+trvbwF+mMa9xW+O2pwyZcwI1Mt8VpwPeG7v0dOKcU4t7ECZcRXgei0zpifT/o
qv0lEZkh+Tjexmw3TSo/meGv4jpuzP5wxfLsUKVRe9fzQqbXuIlUEkrUpf7YQ3FK
phssBo33yTCZF3OlHJJFWIYmwSFEskGz4Z+8CXsnTrypLbn4BwcTr+o4lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+uYi1WpkhlPzjUeDLWzRJ2w4peMB8GA1UdIwQY
MBaAFAPsCK5qkyUoW91KSt6cIH1/oQRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDIt
M2Q3NWM0ZjQ4OWU3LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDItM2Q3NWM0ZjQ4OWU3
LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfM0If8m
j+hz3vgXEny18pK4Bz1B5sEWmPWhMuBW0JxaQaLF6LT2eDCXRYirpw2Y4AoqiUis
dkQjWNmxbITCauovvbI+1kD8ht1Keu4l3WUsJC7eoVYpz8Y9pJiG+QYWkJQIR7F/
6Qtghdd0dwOGz7RdXugZsWW97fn83sRGZ9wXha1Wgjmm7xnjc7y3susLVcSn6hAb
TWnG9Es9csZACFkfjUn0Qh9SkWlpXY2Lgl70WR82HXdqNfyLvpmFmmyIKX4VAL4V
wO6flYnQLSAxVNUtbPgihjXqtfp3WAwQGJGrVusV8Hcs3a5dFUq+RPHAqrLci6Z0
1bk7GBvFEBlwdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:08 2025 by rpki-client