
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier: 0dzHMm0EvKcNNZR1JOVKcdhPB6RQoj5fMQX1o3hwa7s=
Subject key identifier: 02:26:D1:3D:82:C1:EA:EB:48:25:B8:11:8C:61:64:06:C7:66:E5:74
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 0197B70EC4C200DEF057C0D67FAB089932C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number: 0148
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: OXOnare6dVM-zLYHWOSVEGQTw18.roa (hash: dcwy2HRQRShbBLQYZ7Zn1DYc8vKW+hy7H3ObhuzMkSQ=)
2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: Jz7aJ9/ld1CqodfPDuEjQcPqdYkHwwht/56z0IkbPSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c4:c2:00:de:f0:57:c0:d6:7f:ab:08:99:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=0226d13d82c1eaeb4825b8118c616406c766e574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f4:36:c3:e2:a8:5a:9a:9c:bf:6f:be:95:eb:
33:92:92:a8:70:c8:fd:18:98:65:e0:9f:c8:b1:fb:
b2:4f:c9:cd:6b:a7:f4:8e:f1:ec:71:23:1f:ba:10:
61:fc:67:03:57:89:99:7c:d4:cf:60:0e:95:17:63:
11:56:bc:da:e6:33:bd:32:5f:01:39:8a:21:fe:00:
da:1a:33:e9:f6:b0:c1:9e:72:1e:2d:fb:89:62:92:
a1:74:7b:5c:ad:02:ae:60:f1:77:4d:77:28:90:f3:
6d:37:f0:51:77:bf:14:47:f6:f4:52:e2:37:46:0c:
e1:35:7b:34:01:57:71:42:59:d0:85:07:cd:39:59:
ef:d6:76:92:9d:68:59:08:f0:5c:6b:d8:a3:ca:8d:
9d:b3:ec:e7:0b:cf:3a:34:5e:38:37:a6:78:40:fd:
d7:90:d8:ad:61:9c:e7:7f:8c:f6:1e:13:88:06:13:
bf:6f:a5:8a:eb:95:1a:b2:63:52:2b:80:8b:dd:f7:
cc:40:c6:79:36:b8:ef:c5:66:3e:02:b2:1b:5c:c4:
29:3a:82:bb:26:96:1e:73:44:a8:0a:7a:a9:7f:3a:
c9:26:02:81:3f:e4:f7:5b:bf:8c:b0:59:fa:fa:53:
b7:17:eb:a6:2f:6b:1d:b1:fa:16:87:a9:bf:ab:dc:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:26:D1:3D:82:C1:EA:EB:48:25:B8:11:8C:61:64:06:C7:66:E5:74
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:09:78:7c:3a:b1:08:7c:70:d4:0c:39:e4:96:3c:1a:4a:da:
35:d0:05:f4:41:b5:9a:16:c2:e5:e7:ea:1e:1d:2b:68:5e:e0:
cb:7b:1d:41:de:80:a5:c4:47:23:d8:d6:e9:14:2c:67:50:e3:
a6:06:ef:4d:01:5c:70:40:3a:d6:25:48:d9:82:f7:6e:65:5a:
28:9a:56:e9:d7:68:ad:95:20:ec:27:b8:49:87:6b:e3:1b:d7:
cd:f9:4b:07:9b:53:f8:30:81:6b:81:73:c1:66:d2:ee:63:85:
54:3f:5c:c0:92:62:25:b7:9b:66:b2:8c:50:03:8e:a7:07:83:
6b:3c:89:ed:0b:29:b1:4c:6a:3a:ea:a2:30:14:c4:c3:08:e0:
ca:33:7d:e8:ee:18:14:56:d3:ac:46:16:93:40:de:12:0a:02:
b8:be:97:2c:18:0a:d0:b8:5d:9a:b7:be:51:fb:6c:af:52:58:
2a:34:95:25:df:36:3f:8e:fe:7b:2a:a1:66:04:b2:cc:d7:5a:
41:fc:55:71:a8:a2:75:88:7b:54:a9:08:12:bd:d4:8c:6c:14:
fa:3f:ce:96:a5:49:fd:e7:ff:40:7d:be:06:23:cf:8a:b8:1b:
23:a0:f9:b5:5a:d9:76:b4:ab:13:49:e1:6f:09:52:3d:3e:2a:
1b:45:00:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DsTCAN7wV8DWf6sImTLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMjZiOWU4ZGY1ZGE1Njk4NTRjNjFhZjcxNGRiMzAzNDky
YjYyZjEwHhcNMjUwNjI4MTUwMTI3WhcNMjUwNjI5MTUwMTI3WjAzMTEwLwYDVQQD
EygwMjI2ZDEzZDgyYzFlYWViNDgyNWI4MTE4YzYxNjQwNmM3NjZlNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fQ2w+KoWpqcv2++leszkpKocMj9
GJhl4J/IsfuyT8nNa6f0jvHscSMfuhBh/GcDV4mZfNTPYA6VF2MRVrza5jO9Ml8B
OYoh/gDaGjPp9rDBnnIeLfuJYpKhdHtcrQKuYPF3TXcokPNtN/BRd78UR/b0UuI3
RgzhNXs0AVdxQlnQhQfNOVnv1naSnWhZCPBca9ijyo2ds+znC886NF44N6Z4QP3X
kNitYZznf4z2HhOIBhO/b6WK65UasmNSK4CL3ffMQMZ5NrjvxWY+ArIbXMQpOoK7
JpYec0SoCnqpfzrJJgKBP+T3W7+MsFn6+lO3F+umL2sdsfoWh6m/q9zVUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIm0T2CwerrSCW4EYxhZAbHZuV0MB8GA1UdIwQY
MBaAFGomuejfXaVphUxhr3FNswNJK2LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNGVlMzktODBiNC00MjM5LThjMzkt
MDUxYjAwZjg1OGVkLzEvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kNGVlMzktODBiNC00MjM5LThjMzktMDUxYjAwZjg1OGVk
LzEvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwl4fDqx
CHxw1Aw55JY8GkraNdAF9EG1mhbC5efqHh0raF7gy3sdQd6ApcRHI9jW6RQsZ1Dj
pgbvTQFccEA61iVI2YL3bmVaKJpW6ddorZUg7Ce4SYdr4xvXzflLB5tT+DCBa4Fz
wWbS7mOFVD9cwJJiJbebZrKMUAOOpweDazyJ7QspsUxqOuqiMBTEwwjgyjN96O4Y
FFbTrEYWk0DeEgoCuL6XLBgK0Lhdmre+Uftsr1JYKjSVJd82P47+eyqhZgSyzNda
QfxVcaiidYh7VKkIEr3UjGwU+j/OlqVJ/ef/QH2+BiPPirgbI6D5tVrZdrSrE0nh
bwlSPT4qG0UApg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:51 2025 by rpki-client