Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier: +12Sb6a5ZG40xN6QKvEctAZiKr5xq3C10kBY+eCKRJ4=
Subject key identifier: 2D:26:8E:23:B3:87:D6:58:FC:E0:2E:99:DA:C6:78:90:25:3F:AA:02
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 0197B6A19D84BDCA90332F92EF1D20568009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:14 +0000
Manifest this update: Sat 28 Jun 2025 13:02:14 +0000
Manifest next update: Sun 29 Jun 2025 13:02:14 +0000
Files and hashes: 1: 1LWuminfGd450btHCMbnnbPQ_ZE.roa (hash: TISDdBpwKFkkTeSDLc72qwKWM7K/Xn5/55e5YUo0nnQ=)
2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: etj8raPhxH6Jku9EhMRbhTSh1LFRhW9pJVQRlpIED5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9d:84:bd:ca:90:33:2f:92:ef:1d:20:56:80:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Jun 28 13:02:14 2025 GMT
Not After : Jun 29 13:02:14 2025 GMT
Subject: CN=2d268e23b387d658fce02e99dac67890253faa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:c7:cc:27:b3:c1:cf:94:1d:e9:d5:4d:82:
e4:a9:84:5c:74:2a:1f:c7:6c:3e:1a:c1:0a:15:a2:
c0:84:50:f9:72:7c:1b:51:31:5f:36:3d:22:3c:dc:
94:11:80:a5:7b:45:91:df:27:75:d1:22:ef:21:3f:
0f:d6:00:11:5a:60:a2:79:c8:0f:b5:41:e8:0f:c1:
99:dd:53:06:bf:2d:be:d5:23:79:a3:56:3d:f1:ab:
6d:22:db:42:5b:bc:99:6d:42:aa:09:f8:9a:53:c5:
36:b8:91:41:41:8c:e0:5c:a5:67:9e:bc:6f:29:2a:
e7:2b:c3:bb:29:9e:2d:af:9b:22:6d:9a:4a:13:e6:
5e:69:30:75:b4:55:db:92:a8:f8:c7:db:d0:a4:ae:
18:c8:32:29:03:55:7e:c7:a3:24:c5:a7:a1:e0:93:
1c:99:fa:78:f5:32:10:48:b7:36:77:30:f2:5e:ab:
05:21:cf:18:d6:60:f1:9c:af:0f:90:82:b7:c8:de:
cc:e4:26:32:3e:4f:ca:23:dd:35:0a:99:3c:09:34:
09:9c:cd:34:7d:d9:65:be:d5:b3:38:dc:75:d1:d4:
52:29:b5:4a:19:65:f6:da:4f:81:4a:a5:24:8a:67:
09:8d:69:2e:72:5c:47:b0:0b:2a:35:14:b7:66:3e:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:26:8E:23:B3:87:D6:58:FC:E0:2E:99:DA:C6:78:90:25:3F:AA:02
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:c3:4d:ce:30:c3:b7:99:9b:1d:66:c9:80:25:2a:02:94:
f8:3f:06:f2:01:28:5b:0f:15:5b:fc:2c:66:8c:3a:2c:bf:eb:
2d:b8:e4:d8:8b:59:b9:51:f0:fb:ac:8f:fe:67:f5:11:4c:1c:
eb:65:4e:4b:ea:27:f2:8b:76:8f:c2:ef:5d:24:b4:f2:5f:77:
d9:38:06:8e:6f:57:74:6c:d9:d4:dc:38:a4:04:f5:17:cc:e2:
54:ed:b9:36:cb:29:a8:f6:34:46:40:5c:d8:95:43:d8:87:36:
36:0c:33:c3:f5:c6:33:2f:c6:19:00:93:10:80:48:d3:59:c0:
00:d3:c5:63:00:09:b0:c5:6c:8c:bc:30:8c:5a:9b:60:34:9a:
44:99:56:ba:39:f5:91:dc:28:ba:91:3c:c6:0d:04:dc:d9:ad:
30:a2:d5:f2:66:8c:dd:99:f1:69:b9:08:c9:76:aa:20:d4:ea:
58:68:24:50:7f:33:eb:b2:6f:1b:c5:bc:09:4c:d0:35:c2:c0:
e0:9a:35:cb:39:09:0f:e9:8c:09:bc:61:02:19:24:16:a2:3d:
be:23:b6:d0:de:7c:42:51:94:09:67:00:4d:a9:b6:d8:65:ef:
90:17:7a:cd:45:3d:32:f2:7d:5c:17:c8:92:92:8f:10:4e:10:
fa:de:07:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZ2EvcqQMy+S7x0gVoAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGU1MTVjYzViZTRlMjdlOWQzZDEzZTVlMWMxMWRjNzUy
OTI3NGIwHhcNMjUwNjI4MTMwMjE0WhcNMjUwNjI5MTMwMjE0WjAzMTEwLwYDVQQD
EygyZDI2OGUyM2IzODdkNjU4ZmNlMDJlOTlkYWM2Nzg5MDI1M2ZhYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgDHzCezwc+UHenVTYLkqYRcdCof
x2w+GsEKFaLAhFD5cnwbUTFfNj0iPNyUEYCle0WR3yd10SLvIT8P1gARWmCiecgP
tUHoD8GZ3VMGvy2+1SN5o1Y98attIttCW7yZbUKqCfiaU8U2uJFBQYzgXKVnnrxv
KSrnK8O7KZ4tr5sibZpKE+ZeaTB1tFXbkqj4x9vQpK4YyDIpA1V+x6Mkxaeh4JMc
mfp49TIQSLc2dzDyXqsFIc8Y1mDxnK8PkIK3yN7M5CYyPk/KI901Cpk8CTQJnM00
fdllvtWzONx10dRSKbVKGWX22k+BSqUkimcJjWkuclxHsAsqNRS3Zj4hQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0mjiOzh9ZY/OAumdrGeJAlP6oCMB8GA1UdIwQY
MBaAFGlOUVzFvk4n6dPRPl4cEdx1KSdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYt
NTFjNzdjYzQ5MTQ2LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYtNTFjNzdjYzQ5MTQ2
LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIu7DTc4w
w7eZmx1myYAlKgKU+D8G8gEoWw8VW/wsZow6LL/rLbjk2ItZuVHw+6yP/mf1EUwc
62VOS+on8ot2j8LvXSS08l932TgGjm9XdGzZ1Nw4pAT1F8ziVO25NsspqPY0RkBc
2JVD2Ic2Ngwzw/XGMy/GGQCTEIBI01nAANPFYwAJsMVsjLwwjFqbYDSaRJlWujn1
kdwoupE8xg0E3NmtMKLV8maM3ZnxabkIyXaqINTqWGgkUH8z67JvG8W8CUzQNcLA
4Jo1yzkJD+mMCbxhAhkkFqI9viO20N58QlGUCWcATam22GXvkBd6zUU9MvJ9XBfI
kpKPEE4Q+t4H/A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:12 2025 by rpki-client