Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
File: aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json)
Hash identifier: 08CbejGuU/wBx3D70ukbom2PZafQg0tVS3kja26Lrgw=
Subject key identifier: 96:26:00:CC:41:B0:BE:4F:91:0F:D2:9C:0B:72:E5:86:B9:2F:A1:51
Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c
Certificate serial: 0197B6D74F6E65F1255E327730E9D5F13E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
Manifest number: 09C6
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: pKWGQRrRFyGS/28HupPfPra/I5P4kv4ZhDDsOgF1sIo=)
2: vq_lB1n1a8tSkpEaBYJenT9A5i0.roa (hash: TQs2bRUGUy5hOg6esXq8436QciZ59nHTgLwMPf5bhwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4f:6e:65:f1:25:5e:32:77:30:e9:d5:f1:3e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=962600cc41b0be4f910fd29c0b72e586b92fa151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:cd:ac:fb:bc:f9:ca:1b:a2:a5:11:9d:69:
6b:21:91:cb:a1:00:c5:cd:9f:8a:4a:b7:d1:a5:f3:
37:7f:66:14:ab:53:5e:27:3c:58:4e:0a:7f:f2:bf:
9c:3a:f0:b0:dd:f5:4b:47:5e:59:f2:93:b9:21:dd:
1b:af:54:8f:e7:3e:92:60:b1:e2:17:e5:cf:aa:76:
81:47:57:02:8e:ec:f2:81:50:27:04:29:03:17:5a:
85:42:b8:56:02:e0:15:27:dd:fb:fa:18:b2:5a:aa:
17:ce:13:17:a5:70:93:c2:94:f4:96:f4:d1:43:58:
1a:ab:3c:a1:ae:b2:03:30:94:91:ce:b6:9c:f4:43:
13:d4:35:0b:44:65:2c:3d:1c:e5:69:d6:8b:98:a3:
19:e3:ba:a3:93:6d:04:40:28:bb:c8:7d:23:bf:ca:
a7:44:40:c0:1b:d6:11:a9:32:df:4a:6d:c8:24:71:
4c:45:0c:86:71:8f:66:56:ec:aa:9d:03:2f:d5:7b:
c5:03:98:44:d7:1f:2e:e9:49:fe:93:17:ce:e7:32:
19:f4:74:3a:d5:0f:6c:c7:bd:17:76:2c:86:74:50:
ca:8b:98:f0:e9:26:43:6f:c7:f2:9c:b9:d3:ee:dd:
10:eb:c1:15:71:cd:97:dd:96:34:db:87:d9:ba:e9:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:26:00:CC:41:B0:BE:4F:91:0F:D2:9C:0B:72:E5:86:B9:2F:A1:51
X509v3 Authority Key Identifier:
keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6f:bb:72:91:ae:d5:39:f3:cb:d5:5f:c7:2e:0b:05:47:12:
2e:fe:7c:16:9f:67:76:46:80:73:ca:2d:68:a8:ed:32:e7:75:
86:05:3b:35:e8:9f:cc:f5:d1:11:fa:9d:30:30:9e:bb:5d:08:
53:56:e4:0f:4e:b9:a8:f2:f3:15:97:f5:18:f5:a9:29:46:e6:
ef:d9:54:6a:e2:25:77:b7:10:46:5f:50:b1:4b:32:2e:b7:b2:
cd:85:08:f4:fb:89:ec:74:99:2c:ec:9c:d1:37:1c:78:25:80:
87:af:68:d9:3f:39:9e:0d:23:34:9b:39:e0:24:1b:c1:26:23:
5d:92:07:c2:10:e0:4a:e9:05:c8:09:c0:6c:77:5b:1f:47:92:
13:ab:17:8b:13:f2:f5:7b:80:ca:5b:6d:f5:b3:5c:03:d1:9b:
2a:8b:5b:13:84:99:96:a8:92:ac:53:a1:f0:a2:32:fa:d0:23:
8f:01:ee:0b:e6:5d:59:8d:92:f5:92:f9:ce:99:5d:3b:44:5f:
e9:1c:eb:cf:ba:ba:d1:99:6e:53:a5:82:be:0b:3b:bc:e9:8c:
e8:aa:22:79:cf:a7:8a:ab:4f:0d:2e:9d:99:c1:60:aa:60:de:
bf:4b:08:52:b1:15:bd:fc:90:2e:16:13:30:f1:8d:21:b3:78:
18:66:14:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2109uZfElXjJ3MOnV8T5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ODEwZmZlNGY5MjAzYTEwMDY3N2Q2NTE5M2I0NDI2Nzg5
YWNmNWMwHhcNMjUwNjI4MTQwMDUzWhcNMjUwNjI5MTQwMDUzWjAzMTEwLwYDVQQD
Eyg5NjI2MDBjYzQxYjBiZTRmOTEwZmQyOWMwYjcyZTU4NmI5MmZhMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoDNrPu8+coboqURnWlrIZHLoQDF
zZ+KSrfRpfM3f2YUq1NeJzxYTgp/8r+cOvCw3fVLR15Z8pO5Id0br1SP5z6SYLHi
F+XPqnaBR1cCjuzygVAnBCkDF1qFQrhWAuAVJ937+hiyWqoXzhMXpXCTwpT0lvTR
Q1gaqzyhrrIDMJSRzrac9EMT1DULRGUsPRzladaLmKMZ47qjk20EQCi7yH0jv8qn
REDAG9YRqTLfSm3IJHFMRQyGcY9mVuyqnQMv1XvFA5hE1x8u6Un+kxfO5zIZ9HQ6
1Q9sx70XdiyGdFDKi5jw6SZDb8fynLnT7t0Q68EVcc2X3ZY024fZuumiNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYmAMxBsL5PkQ/SnAty5Ya5L6FRMB8GA1UdIwQY
MBaAFGiBD/5PkgOhAGd9ZRk7RCZ4ms9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNDEyMDMtODEzZi00NzEyLTliZDct
YmRmNDMxZWI5NGYwLzEvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xNDEyMDMtODEzZi00NzEyLTliZDctYmRmNDMxZWI5NGYw
LzEvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXW+7cpGu
1Tnzy9Vfxy4LBUcSLv58Fp9ndkaAc8otaKjtMud1hgU7NeifzPXREfqdMDCeu10I
U1bkD065qPLzFZf1GPWpKUbm79lUauIld7cQRl9QsUsyLreyzYUI9PuJ7HSZLOyc
0TcceCWAh69o2T85ng0jNJs54CQbwSYjXZIHwhDgSukFyAnAbHdbH0eSE6sXixPy
9XuAyltt9bNcA9GbKotbE4SZlqiSrFOh8KIy+tAjjwHuC+ZdWY2S9ZL5zpldO0Rf
6Rzrz7q60ZluU6WCvgs7vOmM6Koiec+niqtPDS6dmcFgqmDev0sIUrEVvfyQLhYT
MPGNIbN4GGYUmg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:03 2025 by rpki-client