Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: UHljTs67hwXUbLviuO8qG0xatKpQIhenLL07Dwo/5MI=
Subject key identifier: 9C:F8:2C:72:35:92:6C:3A:5F:24:6A:1D:E4:DE:66:4F:38:5C:D7:5A
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 0198D5BB8744AAA23F0D2381F86C594D3BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 12BD
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: KE8Wx8lJRFdF/H9Hzr9i9hRy2FBbtrurNl+uVsfvIQA=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:87:44:aa:a2:3f:0d:23:81:f8:6c:59:4d:3b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=9cf82c7235926c3a5f246a1de4de664f385cd75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:ee:9b:67:ad:89:2d:14:e3:39:fd:bf:47:
ba:76:34:ba:a0:cb:4b:81:aa:3b:90:3b:84:49:d4:
73:2a:69:55:70:c9:bc:b6:56:85:dc:e0:98:b1:0f:
89:d6:55:cf:8d:c2:4b:da:62:4a:5f:4f:da:aa:dc:
2c:c9:94:69:d7:73:36:a4:16:93:1b:fa:b4:c2:4c:
46:a5:06:71:58:54:5e:b5:05:dc:e2:29:73:0e:16:
10:95:f0:19:89:d4:7e:ec:17:0f:8c:b5:d6:f1:f3:
be:0a:90:f7:fe:4f:69:5c:53:28:02:f6:87:58:57:
1c:30:a9:17:00:54:3b:ca:eb:b0:89:a0:38:c0:e9:
ae:6e:80:07:57:ca:e8:89:54:2b:35:f6:f2:40:e9:
58:61:39:a7:bf:da:4b:e9:e0:22:47:e6:6a:49:b7:
fc:40:78:3a:84:84:32:a3:a4:87:b6:b1:80:4c:17:
3d:a9:f1:a8:91:96:bb:7f:94:d1:7b:62:cd:1f:26:
eb:f4:20:8f:b7:e5:fd:52:e3:5a:96:8a:1e:aa:d0:
f8:b9:c9:51:09:d2:2d:12:88:7b:8e:91:11:a1:f7:
84:a8:3d:3a:50:58:4a:c5:8b:0f:f8:13:b6:f9:7e:
5e:fc:de:e3:76:03:23:43:95:08:d2:9f:8c:c2:7b:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:2C:72:35:92:6C:3A:5F:24:6A:1D:E4:DE:66:4F:38:5C:D7:5A
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:98:41:a0:60:04:32:a5:b3:18:2e:c6:32:03:35:97:f7:9e:
4b:fb:cb:9e:15:90:97:3f:87:82:e6:56:cc:03:1d:15:56:cc:
55:08:62:88:42:ff:c6:2e:d5:cb:10:aa:be:12:2c:79:0a:73:
50:be:05:26:33:4a:79:52:32:de:08:06:82:f5:b6:69:e2:0f:
8e:1b:f1:cb:5b:e8:de:20:82:3d:a9:6f:36:23:c2:c3:e3:db:
7b:7f:79:03:2c:ec:77:bc:f2:e9:13:77:10:7f:27:47:bd:e3:
a4:6c:f7:37:5c:85:68:7b:30:96:ec:ec:b1:22:9e:62:88:0a:
c3:1c:e4:dd:8f:fe:de:b2:bd:c0:c7:c3:72:8c:ec:36:de:67:
d3:33:4e:c3:b7:20:f1:d6:3c:f0:35:62:15:b7:27:83:c5:6b:
3c:9b:2d:02:cb:1b:47:30:d0:9e:50:45:98:09:5a:c9:3a:f7:
7f:ff:61:8b:8c:70:8e:1f:e2:2b:ad:f8:e1:e2:52:1e:98:f1:
71:a3:46:f1:74:df:22:5e:5b:8a:e2:5e:1e:84:89:29:bd:08:
59:45:2f:b4:4e:c1:2e:5f:f3:38:55:78:37:e8:1b:54:53:18:
d6:65:78:7d:18:79:d9:c4:d5:93:a2:71:a0:4f:35:ec:18:24:
71:f5:fd:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu4dEqqI/DSOB+GxZTTukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz
MDU1MmQwHhcNMjUwODIzMDcwMTMzWhcNMjUwODI0MDcwMTMzWjAzMTEwLwYDVQQD
Eyg5Y2Y4MmM3MjM1OTI2YzNhNWYyNDZhMWRlNGRlNjY0ZjM4NWNkNzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8bum2etiS0U4zn9v0e6djS6oMtL
gao7kDuESdRzKmlVcMm8tlaF3OCYsQ+J1lXPjcJL2mJKX0/aqtwsyZRp13M2pBaT
G/q0wkxGpQZxWFRetQXc4ilzDhYQlfAZidR+7BcPjLXW8fO+CpD3/k9pXFMoAvaH
WFccMKkXAFQ7yuuwiaA4wOmuboAHV8roiVQrNfbyQOlYYTmnv9pL6eAiR+ZqSbf8
QHg6hIQyo6SHtrGATBc9qfGokZa7f5TRe2LNHybr9CCPt+X9UuNalooeqtD4uclR
CdItEoh7jpERofeEqD06UFhKxYsP+BO2+X5e/N7jdgMjQ5UI0p+Mwnsz0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz4LHI1kmw6XyRqHeTeZk84XNdaMB8GA1UdIwQY
MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It
NjlhNDRmMDQ4ZGI4LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4
LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfphBoGAE
MqWzGC7GMgM1l/eeS/vLnhWQlz+HguZWzAMdFVbMVQhiiEL/xi7VyxCqvhIseQpz
UL4FJjNKeVIy3ggGgvW2aeIPjhvxy1vo3iCCPalvNiPCw+Pbe395Ayzsd7zy6RN3
EH8nR73jpGz3N1yFaHswluzssSKeYogKwxzk3Y/+3rK9wMfDcozsNt5n0zNOw7cg
8dY88DViFbcng8VrPJstAssbRzDQnlBFmAlayTr3f/9hi4xwjh/iK6344eJSHpjx
caNG8XTfIl5biuJeHoSJKb0IWUUvtE7BLl/zOFV4N+gbVFMY1mV4fRh52cTVk6Jx
oE817BgkcfX92w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:48 2025 by rpki-client