Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: KRIv2+wH9TeXeddE8tJ5R1rC8O0J8PFagRdTH/frVxc=
Subject key identifier: AF:41:EF:F6:E3:1E:0C:2D:AF:06:5B:39:0D:A5:97:12:D4:08:B9:43
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 0197B88F3E789C94040F0F3B85638D1BC0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0B2B
Signing time: Sat 28 Jun 2025 22:01:24 +0000
Manifest this update: Sat 28 Jun 2025 22:01:24 +0000
Manifest next update: Sun 29 Jun 2025 22:01:24 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: gllxd/s/r8vCEDi4v0Qcmp/dcUFJGF3oGeLrhYgaNpc=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:3e:78:9c:94:04:0f:0f:3b:85:63:8d:1b:c0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Jun 28 22:01:24 2025 GMT
Not After : Jun 29 22:01:24 2025 GMT
Subject: CN=af41eff6e31e0c2daf065b390da59712d408b943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:6f:d0:0e:a9:36:22:51:b8:f2:b6:5f:f9:
7d:56:a4:f8:2f:17:31:d3:2c:1c:49:54:1f:3b:a7:
42:c2:51:63:02:77:de:02:5a:b3:ed:1d:f5:55:f2:
2e:ad:fa:a1:00:5d:95:2c:5c:51:74:5d:f5:2d:d4:
e4:a6:af:9b:31:02:1e:7c:6d:83:30:9f:40:7b:a9:
d7:19:64:04:9e:26:6f:10:07:ad:00:cc:7c:1f:d9:
66:0a:e3:39:a2:42:17:0e:f2:86:60:8e:c6:5a:0f:
71:60:b5:0f:24:50:cf:82:30:ed:f6:32:ed:bf:a5:
d8:04:7a:56:d3:f4:2f:d5:97:fa:39:82:df:58:78:
f1:4d:0e:89:cb:8e:a0:cb:3c:63:8d:b2:a6:84:96:
a2:fa:10:bb:79:91:47:b1:a3:1c:e4:6b:5b:86:a5:
65:fd:63:6f:32:e4:c1:76:80:3c:d8:43:61:ff:e4:
71:4d:6e:26:75:f1:8b:5c:c4:de:53:44:ad:3e:b4:
7c:81:39:22:94:a1:30:be:08:7f:21:7b:a3:6f:d7:
aa:a9:40:f7:ac:1f:d7:29:bc:92:9c:93:f5:31:86:
e1:98:0f:8d:ba:1e:8e:b7:6d:8d:41:2e:e9:af:44:
dd:51:9c:ce:17:27:4e:11:90:ce:58:fc:d5:a5:b7:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:EF:F6:E3:1E:0C:2D:AF:06:5B:39:0D:A5:97:12:D4:08:B9:43
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b9:fe:b7:ad:ca:e6:64:45:1c:c2:ab:eb:b4:3f:fc:a1:17:
16:42:dc:61:a3:ed:b1:32:42:c5:2e:9c:60:62:e9:9e:0b:eb:
52:3f:32:4e:45:74:ca:cf:ec:cd:f6:f8:04:2d:2f:e8:01:ba:
cb:70:ea:b0:bb:49:09:73:16:f0:c0:ad:24:81:d6:bf:4c:16:
cb:33:b1:3e:dc:66:ba:e3:7f:53:90:64:c6:32:70:8a:bf:00:
70:59:2f:c9:5b:df:86:b2:d4:56:62:e4:86:b6:5a:27:e0:e0:
9d:9c:c8:fd:54:ec:f5:9d:eb:db:ab:2e:e2:5b:f5:5d:65:15:
17:02:7f:72:1e:40:22:dd:05:e2:8d:74:58:e9:ba:b0:5f:50:
1b:f6:b8:42:09:02:5d:6b:57:a9:c7:44:8e:d9:d3:10:69:5d:
23:2b:f4:a5:2e:5a:3e:5d:55:1d:f2:9c:bb:70:75:52:33:e5:
6f:54:ae:1c:34:bd:19:b3:7b:b0:2c:50:14:c3:52:13:b9:6c:
1e:00:43:71:60:32:70:bf:dc:ad:c8:f1:c3:df:d1:7f:5f:87:
3b:d5:07:35:e4:18:83:b0:c9:6c:41:49:d9:17:f9:76:32:a8:
77:45:0c:34:69:d8:9d:68:06:d1:d8:92:fb:43:52:81:ca:3c:
36:fb:60:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jz54nJQEDw87hWONG8C7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGE3ZDRjNjRhZWQ0YmM5OGM2YjViMDY0ZmYwYTliODJl
YWRhODIwHhcNMjUwNjI4MjIwMTI0WhcNMjUwNjI5MjIwMTI0WjAzMTEwLwYDVQQD
EyhhZjQxZWZmNmUzMWUwYzJkYWYwNjViMzkwZGE1OTcxMmQ0MDhiOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Bv0A6pNiJRuPK2X/l9VqT4Lxcx
0ywcSVQfO6dCwlFjAnfeAlqz7R31VfIurfqhAF2VLFxRdF31LdTkpq+bMQIefG2D
MJ9Ae6nXGWQEniZvEAetAMx8H9lmCuM5okIXDvKGYI7GWg9xYLUPJFDPgjDt9jLt
v6XYBHpW0/Qv1Zf6OYLfWHjxTQ6Jy46gyzxjjbKmhJai+hC7eZFHsaMc5GtbhqVl
/WNvMuTBdoA82ENh/+RxTW4mdfGLXMTeU0StPrR8gTkilKEwvgh/IXujb9eqqUD3
rB/XKbySnJP1MYbhmA+Nuh6Ot22NQS7pr0TdUZzOFydOEZDOWPzVpbdYEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9B7/bjHgwtrwZbOQ2llxLUCLlDMB8GA1UdIwQY
MBaAFAEKfUxkrtS8mMa1sGT/CpuC6tqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUt
ZGJmNzZlZDM5MzlmLzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUtZGJmNzZlZDM5Mzlm
LzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbn+t63K
5mRFHMKr67Q//KEXFkLcYaPtsTJCxS6cYGLpngvrUj8yTkV0ys/szfb4BC0v6AG6
y3DqsLtJCXMW8MCtJIHWv0wWyzOxPtxmuuN/U5BkxjJwir8AcFkvyVvfhrLUVmLk
hrZaJ+DgnZzI/VTs9Z3r26su4lv1XWUVFwJ/ch5AIt0F4o10WOm6sF9QG/a4QgkC
XWtXqcdEjtnTEGldIyv0pS5aPl1VHfKcu3B1UjPlb1SuHDS9GbN7sCxQFMNSE7ls
HgBDcWAycL/crcjxw9/Rf1+HO9UHNeQYg7DJbEFJ2Rf5djKod0UMNGnYnWgG0diS
+0NSgco8NvtgwQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:31 2025 by rpki-client