Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier: 4tTqcXzpZgvUdo8THGIUt8feMJnkip9MEJSakYKwklI=
Subject key identifier: 91:7A:96:F2:4B:7C:ED:A6:E0:16:A0:BF:39:26:E9:F0:B1:B6:D5:93
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 019A522C7D45219244597A26583404B5BC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number: 1543
Signing time: Wed 05 Nov 2025 04:00:38 +0000
Manifest this update: Wed 05 Nov 2025 04:00:38 +0000
Manifest next update: Thu 06 Nov 2025 04:00:38 +0000
Files and hashes: 1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=)
2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: ksb5AyGHg1M1q+uUwpqwjpljse8AwYplrL85U+ThWBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:7d:45:21:92:44:59:7a:26:58:34:04:b5:bc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Nov 5 04:00:38 2025 GMT
Not After : Nov 6 04:00:38 2025 GMT
Subject: CN=917a96f24b7ceda6e016a0bf3926e9f0b1b6d593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:97:45:81:f8:20:56:e5:3b:d0:e4:09:19:
af:b5:3d:06:cb:2b:02:c2:c6:0e:77:c1:89:ca:20:
b7:66:48:ac:f0:de:4e:5e:a0:bf:5d:2d:43:72:81:
f4:d7:0f:2d:d3:09:b7:5b:b3:c5:75:81:1f:ff:a2:
a0:cf:0e:d4:d5:15:de:4d:81:27:e5:cb:39:9b:d5:
ae:ab:0b:ad:9f:e6:6e:4f:e2:a6:72:d1:94:d3:cb:
36:ce:a6:35:59:ac:70:37:19:75:c8:21:85:67:ac:
cc:cf:23:c1:66:f3:8b:a3:55:e9:8c:27:e1:2a:c9:
a7:b1:e6:e7:a1:90:dd:15:7e:a6:bf:87:26:b7:7a:
fd:b3:e6:30:95:98:69:31:6e:8b:a3:fc:95:3b:ec:
9a:ab:c2:5a:c8:78:98:25:6d:a8:fe:34:ee:22:0a:
15:2c:b5:6b:45:19:db:e3:c3:1e:db:78:16:99:30:
63:07:c8:5a:5c:f6:fa:cb:59:99:91:8b:19:d8:73:
5f:65:ca:01:15:7e:c4:dd:55:1b:97:44:0e:0e:d2:
12:8b:76:1d:30:d8:72:20:fe:27:ef:62:0d:01:3f:
0b:01:73:52:86:b0:a2:33:f1:c0:45:c8:6e:7e:b8:
5a:37:e8:c1:1d:ab:c4:07:fb:e9:9c:4e:3c:b6:c6:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7A:96:F2:4B:7C:ED:A6:E0:16:A0:BF:39:26:E9:F0:B1:B6:D5:93
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:55:47:cb:59:20:88:80:38:1c:45:a1:29:53:39:7d:21:a0:
bf:59:2d:70:24:6b:5e:6a:0b:c2:a1:d1:91:33:5c:1d:0f:54:
8c:5e:32:78:14:5c:b1:b6:b8:04:8a:c6:3d:0d:60:14:95:74:
5b:58:71:2d:fd:8a:a0:96:61:cf:53:fc:22:4b:86:f6:2b:ea:
28:ae:f3:0d:21:41:c5:ab:d1:8f:6e:35:24:eb:13:9f:cd:9d:
30:fe:f2:4c:5d:cf:ce:b4:16:b5:a7:85:da:d7:7f:50:34:43:
5c:cf:be:1f:85:38:0f:b6:53:bd:57:b2:71:f6:2c:1c:1e:2f:
14:93:4d:54:88:5c:17:9f:d1:07:4e:25:8a:5b:25:b9:01:6c:
7f:71:b7:1c:53:ce:26:51:09:68:b5:39:9c:78:5d:cc:1c:31:
29:06:8c:69:f7:7b:2c:7a:1d:40:d5:43:94:8d:bc:f7:f7:78:
ba:09:16:78:62:1a:80:20:e6:65:5f:df:70:28:2f:ed:5b:7d:
7f:52:42:2f:2c:1f:e2:47:14:0c:47:3f:c5:34:48:45:35:6f:
a6:50:c6:61:cb:03:e1:34:90:b9:42:ad:a6:fe:63:7f:8b:b8:
1f:6d:70:6e:9b:4e:4a:b5:1a:19:a4:70:57:6d:28:39:1c:66:
49:70:0f:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLH1FIZJEWXomWDQEtbyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjhmNjU2ODA1MzgwY2E4NmU3OTE3Mzc4OWQ2NjhkYzQw
MWQ1YjUwHhcNMjUxMTA1MDQwMDM4WhcNMjUxMTA2MDQwMDM4WjAzMTEwLwYDVQQD
Eyg5MTdhOTZmMjRiN2NlZGE2ZTAxNmEwYmYzOTI2ZTlmMGIxYjZkNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTmXRYH4IFblO9DkCRmvtT0GyysC
wsYOd8GJyiC3Zkis8N5OXqC/XS1DcoH01w8t0wm3W7PFdYEf/6Kgzw7U1RXeTYEn
5cs5m9Wuqwutn+ZuT+KmctGU08s2zqY1WaxwNxl1yCGFZ6zMzyPBZvOLo1XpjCfh
KsmnsebnoZDdFX6mv4cmt3r9s+YwlZhpMW6Lo/yVO+yaq8JayHiYJW2o/jTuIgoV
LLVrRRnb48Me23gWmTBjB8haXPb6y1mZkYsZ2HNfZcoBFX7E3VUbl0QODtISi3Yd
MNhyIP4n72INAT8LAXNShrCiM/HARchufrhaN+jBHavEB/vpnE48tsZf6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJF6lvJLfO2m4Bagvzkm6fCxttWTMB8GA1UdIwQY
MBaAFGho9laAU4DKhueRc3idZo3EAdW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgt
MjZjOWY5OTMyYmJjLzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgtMjZjOWY5OTMyYmJj
LzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1VHy1kg
iIA4HEWhKVM5fSGgv1ktcCRrXmoLwqHRkTNcHQ9UjF4yeBRcsba4BIrGPQ1gFJV0
W1hxLf2KoJZhz1P8IkuG9ivqKK7zDSFBxavRj241JOsTn82dMP7yTF3PzrQWtaeF
2td/UDRDXM++H4U4D7ZTvVeycfYsHB4vFJNNVIhcF5/RB04lilsluQFsf3G3HFPO
JlEJaLU5nHhdzBwxKQaMafd7LHodQNVDlI289/d4ugkWeGIagCDmZV/fcCgv7Vt9
f1JCLywf4kcUDEc/xTRIRTVvplDGYcsD4TSQuUKtpv5jf4u4H21wbptOSrUaGaRw
V20oORxmSXAPdA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:42:58 2025 by rpki-client