Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: W+ZH1y5VYcGQ88r3IQMIDWAROurMcemvx3H0vrHIuxs=
Subject key identifier: 63:78:12:6D:0F:F9:40:09:56:B5:B1:DB:F6:BE:B6:11:70:8E:4F:06
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 0198D5BC02D744EF9BF75E7290BE3D128516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 152B
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: q9E5uV7od6hZI5Hm7AXnIqpCF5m3UPCKoyHWsRQXDSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:02:d7:44:ef:9b:f7:5e:72:90:be:3d:12:85:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=6378126d0ff9400956b5b1dbf6beb611708e4f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:8d:b9:f4:5d:d8:bc:0c:97:b5:88:2a:55:
c8:49:81:10:bb:58:94:d4:7a:00:67:e7:6b:d9:c8:
c4:87:b0:c6:1a:4a:f6:e8:c8:e3:1d:7c:c8:35:e5:
68:a6:82:1a:39:a6:e5:69:58:eb:fa:c7:a5:b4:74:
29:c8:3e:1d:d6:6e:d6:2c:22:3c:d9:c4:1f:8f:23:
9b:ec:e0:e1:ce:ea:f6:03:78:56:18:2b:fe:ff:aa:
97:6b:cf:ca:30:b3:6c:0e:cc:c5:7e:75:2b:fc:e5:
45:61:73:9e:e6:2f:f9:89:0e:50:66:22:11:77:03:
bd:0c:8c:75:68:cc:d0:c8:33:c7:3a:b4:4e:e0:44:
ed:11:7a:87:9d:7d:55:3e:66:ba:5c:03:f9:fa:65:
29:58:70:d0:52:ae:67:f9:81:d2:bf:d9:e1:83:6a:
77:34:9f:d2:5b:7a:b8:c5:9a:4e:13:54:47:36:5e:
cb:29:09:73:63:fa:25:f3:07:81:44:95:f0:e6:d5:
b8:30:6e:55:b7:9d:2f:e8:9d:09:2f:35:72:a5:80:
49:31:75:1a:62:74:83:e0:8d:7a:c1:e5:61:18:2d:
f6:2a:19:e2:f1:96:7a:62:3e:81:30:eb:7d:48:10:
f6:ff:85:f4:52:3c:83:d2:cb:66:22:05:3e:e6:1d:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:78:12:6D:0F:F9:40:09:56:B5:B1:DB:F6:BE:B6:11:70:8E:4F:06
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:30:72:e3:f6:79:b2:90:cf:5d:61:90:84:0b:24:9b:93:16:
9d:13:9e:32:dc:6c:c6:11:94:f4:14:83:8a:a1:6d:8e:e7:be:
98:54:a4:5c:4b:b4:92:87:18:d6:09:4d:fa:9d:88:3e:39:2d:
b5:4a:37:f4:7c:8a:e0:1d:95:03:77:19:04:ca:62:0d:5b:e3:
24:ee:cf:cb:d1:0f:a4:17:51:d1:97:11:5a:08:3a:89:7f:fc:
99:c4:d7:a2:0c:85:59:12:1f:34:6a:c5:c6:1e:be:9e:8a:92:
c1:d2:62:4a:02:77:29:4d:e1:38:25:64:a9:63:7a:00:2c:63:
b1:e9:9f:a3:8f:5c:4b:ff:e9:08:a7:3b:1c:8e:6d:89:77:b7:
b5:0e:31:82:1c:47:41:68:fd:80:b8:9e:b8:e6:e8:be:7f:35:
64:e4:04:69:fb:b3:2d:07:3e:d5:36:b2:3a:cc:a4:f9:16:fe:
85:6d:9d:91:b6:e3:92:77:b5:1c:dc:dc:44:c4:39:65:c2:66:
4f:ca:32:97:0b:bb:30:4f:da:6c:c8:2e:b7:a8:83:eb:8f:a4:
8e:83:42:d9:bd:4a:1d:22:9c:60:9f:8d:e9:11:f4:41:42:4a:
2b:59:2a:1b:e3:0e:64:10:eb:6d:ea:ac:f0:81:22:33:4a:81:
ba:3b:87:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvALXRO+b915ykL49EoUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNGE4MDhjY2Y1OTE5ZDA1NjdkYzQyMzRlOTBhM2U2MGNl
YjE2NDgwHhcNMjUwODIzMDcwMjA1WhcNMjUwODI0MDcwMjA1WjAzMTEwLwYDVQQD
Eyg2Mzc4MTI2ZDBmZjk0MDA5NTZiNWIxZGJmNmJlYjYxMTcwOGU0ZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGuNufRd2LwMl7WIKlXISYEQu1iU
1HoAZ+dr2cjEh7DGGkr26MjjHXzINeVopoIaOablaVjr+seltHQpyD4d1m7WLCI8
2cQfjyOb7ODhzur2A3hWGCv+/6qXa8/KMLNsDszFfnUr/OVFYXOe5i/5iQ5QZiIR
dwO9DIx1aMzQyDPHOrRO4ETtEXqHnX1VPma6XAP5+mUpWHDQUq5n+YHSv9nhg2p3
NJ/SW3q4xZpOE1RHNl7LKQlzY/ol8weBRJXw5tW4MG5Vt50v6J0JLzVypYBJMXUa
YnSD4I16weVhGC32Khni8ZZ6Yj6BMOt9SBD2/4X0UjyD0stmIgU+5h2BPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGN4Em0P+UAJVrWx2/a+thFwjk8GMB8GA1UdIwQY
MBaAFAFKgIzPWRnQVn3EI06Qo+YM6xZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMjg3MjktODRlZS00MDg1LWI4NWMt
MTZhMmQzZTZjOTk0LzEvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMjg3MjktODRlZS00MDg1LWI4NWMtMTZhMmQzZTZjOTk0
LzEvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDBy4/Z5
spDPXWGQhAskm5MWnROeMtxsxhGU9BSDiqFtjue+mFSkXEu0kocY1glN+p2IPjkt
tUo39HyK4B2VA3cZBMpiDVvjJO7Py9EPpBdR0ZcRWgg6iX/8mcTXogyFWRIfNGrF
xh6+noqSwdJiSgJ3KU3hOCVkqWN6ACxjsemfo49cS//pCKc7HI5tiXe3tQ4xghxH
QWj9gLieuObovn81ZOQEafuzLQc+1TayOsyk+Rb+hW2dkbbjkne1HNzcRMQ5ZcJm
T8oylwu7ME/abMgut6iD64+kjoNC2b1KHSKcYJ+N6RH0QUJKK1kqG+MOZBDrbeqs
8IEiM0qBujuH0A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:55 2025 by rpki-client