Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
File: 8aqhbd2NihLf0OUyEXA62VLjshQ.mft (raw, json)
Hash identifier: nkwV2Ys8ZFmJFa0iyGmH1zd5mf4WgvbgWrpvpzQgoXA=
Subject key identifier: A2:46:F9:1E:D9:90:C3:B4:88:DC:80:CC:12:40:AD:02:8E:83:57:3D
Authority key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Certificate issuer: /CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Certificate serial: 0197B7455E495A3A8B4EA2F8610362E797DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
Manifest number: 0C03
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: 8aqhbd2NihLf0OUyEXA62VLjshQ.crl (hash: a3JIhEWa1EryTGuy/Y8vd9Md/x5ObRn2SaJ+b/a+lww=)
2: lU08unvCcfUmoq9nA8rwwc_EGrY.roa (hash: r4fF+/jooZGKRffBCLRbLiandhCNSPTtKJ/Y1slqur8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5e:49:5a:3a:8b:4e:a2:f8:61:03:62:e7:97:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=a246f91ed990c3b488dc80cc1240ad028e83573d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:e4:76:d6:d8:23:0a:c3:b5:d4:78:06:a8:
25:21:e7:fa:f0:5d:49:03:8c:65:e9:e9:d9:96:a3:
fc:a5:c4:c8:4b:06:1d:c8:a4:cf:ea:05:ab:8f:e9:
ec:99:2b:c9:9a:f1:ff:69:c7:21:26:c7:28:c0:57:
59:a4:43:a9:fd:48:b2:f7:80:96:5b:cc:51:74:a2:
fa:61:5c:57:ce:ed:6f:c5:c8:2d:ca:28:17:e6:a9:
af:69:1a:a9:33:95:94:85:76:c3:c3:b2:70:62:12:
34:b5:4a:57:a6:24:f2:13:63:c4:d7:6b:ff:05:de:
46:e5:a2:94:f9:96:ca:fa:91:89:f0:c1:cd:4e:21:
fd:a4:05:e7:ff:1b:cd:93:25:47:15:4a:55:59:10:
6b:24:39:b6:82:db:1e:12:65:70:7b:e5:50:e3:e2:
2b:d5:d6:79:08:6f:38:31:ae:47:a4:3f:00:f1:cb:
9f:28:ca:79:9c:be:fe:ce:15:f7:14:5b:ab:26:b0:
3e:4c:54:e7:08:6d:d1:ab:a5:02:d4:67:d7:f6:6f:
7d:ef:10:6d:86:2c:4a:90:2b:6d:0e:83:b7:34:49:
76:af:c3:57:2a:18:d2:27:11:31:7e:89:e8:15:b2:
c9:8d:70:00:b2:e6:ec:21:92:db:ae:8c:8e:56:71:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:46:F9:1E:D9:90:C3:B4:88:DC:80:CC:12:40:AD:02:8E:83:57:3D
X509v3 Authority Key Identifier:
keyid:F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9b:b6:da:af:19:b2:a7:b1:0e:de:34:c7:06:c3:eb:f8:76:
2d:38:d7:67:7d:eb:95:4a:cb:08:63:4b:74:88:fd:47:79:de:
fc:0a:ff:32:5e:c2:95:1f:a9:3c:6c:52:e6:8a:8d:0f:f3:37:
2f:33:81:04:2d:46:a5:fb:fc:c3:47:60:b8:5c:ca:52:1d:84:
f8:58:96:78:92:d8:c9:25:1c:48:33:b6:4c:49:67:7f:8f:ac:
df:8e:12:7f:35:20:37:be:7f:5b:9c:e9:84:42:14:cc:b6:cd:
f0:d4:c7:c7:6f:5a:e3:3e:69:41:4d:b3:45:e8:15:d0:65:2c:
2d:69:ca:eb:84:09:34:69:35:1c:6b:54:94:f5:c1:7e:ee:a4:
5b:84:29:78:65:b0:cf:05:ab:a4:a7:79:b6:d2:e1:08:99:d4:
07:63:34:e1:fa:0d:10:51:57:d1:06:e7:f8:fd:55:a7:77:fe:
05:af:c2:fc:ee:20:58:9e:5f:93:86:f4:4b:82:88:1f:a1:4b:
3a:87:32:51:6a:c9:04:af:4c:0d:3f:82:53:db:7f:cf:76:84:
92:d9:14:35:9a:78:39:94:83:89:e6:7f:36:de:96:86:b5:ae:
d1:b2:e0:3e:a3:79:fc:be:0e:d3:df:82:63:b8:8c:28:9c:90:
88:21:65:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RV5JWjqLTqL4YQNi55feMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYWFhMTZkZGQ4ZDhhMTJkZmQwZTUzMjExNzAzYWQ5NTJl
M2IyMTQwHhcNMjUwNjI4MTYwMTA1WhcNMjUwNjI5MTYwMTA1WjAzMTEwLwYDVQQD
EyhhMjQ2ZjkxZWQ5OTBjM2I0ODhkYzgwY2MxMjQwYWQwMjhlODM1NzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQnkdtbYIwrDtdR4BqglIef68F1J
A4xl6enZlqP8pcTISwYdyKTP6gWrj+nsmSvJmvH/acchJscowFdZpEOp/Uiy94CW
W8xRdKL6YVxXzu1vxcgtyigX5qmvaRqpM5WUhXbDw7JwYhI0tUpXpiTyE2PE12v/
Bd5G5aKU+ZbK+pGJ8MHNTiH9pAXn/xvNkyVHFUpVWRBrJDm2gtseEmVwe+VQ4+Ir
1dZ5CG84Ma5HpD8A8cufKMp5nL7+zhX3FFurJrA+TFTnCG3Rq6UC1GfX9m997xBt
hixKkCttDoO3NEl2r8NXKhjSJxExfonoFbLJjXAAsubsIZLbroyOVnHVNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJG+R7ZkMO0iNyAzBJArQKOg1c9MB8GA1UdIwQY
MBaAFPGqoW3djYoS39DlMhFwOtlS47IUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGFxaGJkMk5paExmME9VeUVYQTYyVkxqc2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ZWFjYTAtOGRiOS00ZDBhLWJhMjIt
OGE5OTM1ZGEwNTg4LzEvOGFxaGJkMk5paExmME9VeUVYQTYyVkxqc2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ZWFjYTAtOGRiOS00ZDBhLWJhMjItOGE5OTM1ZGEwNTg4
LzEvOGFxaGJkMk5paExmME9VeUVYQTYyVkxqc2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJu22q8Z
sqexDt40xwbD6/h2LTjXZ33rlUrLCGNLdIj9R3ne/Ar/Ml7ClR+pPGxS5oqND/M3
LzOBBC1Gpfv8w0dguFzKUh2E+FiWeJLYySUcSDO2TElnf4+s344SfzUgN75/W5zp
hEIUzLbN8NTHx29a4z5pQU2zRegV0GUsLWnK64QJNGk1HGtUlPXBfu6kW4QpeGWw
zwWrpKd5ttLhCJnUB2M04foNEFFX0Qbn+P1Vp3f+Ba/C/O4gWJ5fk4b0S4KIH6FL
OocyUWrJBK9MDT+CU9t/z3aEktkUNZp4OZSDieZ/Nt6WhrWu0bLgPqN5/L4O09+C
Y7iMKJyQiCFl/A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:48 2025 by rpki-client