Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: fX3UQuYJA/XOcyyxPhURJkPtu84+eu38Nhf9uov9Hn0=
Subject key identifier: B9:07:22:CB:AA:F9:A3:B0:5B:8E:BA:4C:F3:E3:5C:CE:8F:0A:DF:4E
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 0197B5FC5E76E17D4DF2E91D76D95D8C3FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 068B
Signing time: Sat 28 Jun 2025 10:01:44 +0000
Manifest this update: Sat 28 Jun 2025 10:01:44 +0000
Manifest next update: Sun 29 Jun 2025 10:01:44 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: e+tNjCNoCkqS/1ZM+NG5CpsAyD5Nozh8wctTLwV+nTs=)
2: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=)
3: USUwNqXAmKM8gCgpmaifdth2hJ4.roa (hash: dUbC8Qp7CGpNXjvMgeVikpMPAaWUU03LQwDK+csc06U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:5e:76:e1:7d:4d:f2:e9:1d:76:d9:5d:8c:3f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Jun 28 10:01:44 2025 GMT
Not After : Jun 29 10:01:44 2025 GMT
Subject: CN=b90722cbaaf9a3b05b8eba4cf3e35cce8f0adf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:ee:93:2e:3f:c8:9d:97:fd:f3:25:cc:eb:
e0:53:d1:c2:17:4f:73:90:fb:b2:46:9a:86:56:f3:
f7:ed:ae:cf:85:36:97:82:53:6f:4d:ab:40:70:ca:
83:b2:0b:c2:b8:c3:95:a5:7e:46:41:08:1c:a4:9a:
d5:be:b9:d4:65:d0:84:6d:44:7a:10:99:06:d7:da:
3e:cd:ce:98:3b:39:d4:a2:be:1b:47:cd:55:f0:3d:
1a:b4:41:a1:54:87:23:32:ae:c9:30:f8:a7:11:b2:
aa:cf:bd:39:06:24:ee:1f:b9:e4:00:73:33:54:fb:
03:27:a4:12:33:8e:c7:81:f0:78:2d:4d:76:3a:eb:
1c:47:b5:64:ba:40:8e:9f:01:55:2e:6c:50:1d:97:
3c:61:9f:1a:a7:12:1b:bf:76:b0:21:2d:d2:cc:f8:
fa:27:88:a9:a0:5d:1b:ab:9c:59:ea:cf:1a:af:42:
33:1f:ff:2d:aa:f2:51:a5:68:ce:1d:8f:3c:1a:5c:
75:50:48:a2:01:70:fb:75:e9:c2:8e:ef:6b:90:df:
29:3d:38:ee:99:29:71:c7:47:c4:2b:07:4a:56:04:
2d:d3:55:c8:4d:f6:bf:ad:0d:e2:78:72:d2:76:91:
ce:ae:5d:a9:48:50:1e:1a:1c:0c:b6:4a:57:98:27:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:07:22:CB:AA:F9:A3:B0:5B:8E:BA:4C:F3:E3:5C:CE:8F:0A:DF:4E
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2f:d2:9b:f0:64:97:b9:b2:c2:16:01:71:80:df:8c:18:2b:
34:fb:fc:70:d5:a5:d2:a4:8a:ce:0b:77:aa:c2:5f:c6:8a:8e:
4e:e0:d3:6d:47:e0:6b:f9:79:58:0b:da:85:de:33:80:70:89:
a2:6d:5c:5b:83:b7:eb:d8:9c:fa:1c:95:fb:ba:fc:11:81:ab:
d5:4f:86:cc:e5:69:4b:d0:1b:9f:49:91:56:f4:61:d1:bf:8c:
6c:c9:c9:c1:23:47:a9:9b:0e:d6:2c:63:73:65:de:9e:cd:e1:
a7:bf:bd:4e:79:b7:1b:30:99:f2:0c:6c:ec:34:5c:e2:c2:63:
97:89:b1:fa:b9:e8:ac:47:5d:95:32:c8:25:1a:0f:10:02:b5:
6f:ce:1b:e4:19:e2:cc:6a:18:24:4b:5c:9b:a2:d3:14:a1:9a:
49:9d:b2:90:58:1e:9f:4e:7e:8e:bd:9a:dd:39:8e:58:bf:8e:
a0:22:48:1e:ce:21:89:0d:06:4b:30:7f:29:20:f4:39:ed:2f:
04:9d:2a:db:6a:13:f3:52:d3:46:53:fb:d6:ca:30:a4:3f:33:
ed:81:0e:9e:c0:81:aa:5e:04:b7:06:e1:ef:2d:af:6d:48:b3:
84:6c:d4:20:26:e4:aa:70:9c:dc:bd:55:d3:00:de:56:8d:ec:
ba:9a:44:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/F524X1N8ukddtldjD+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkYjFkY2YwYzI0MjllMTIxNTE2YWUyNzkyZmMzMjUz
ZmQzYmEwHhcNMjUwNjI4MTAwMTQ0WhcNMjUwNjI5MTAwMTQ0WjAzMTEwLwYDVQQD
EyhiOTA3MjJjYmFhZjlhM2IwNWI4ZWJhNGNmM2UzNWNjZThmMGFkZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn7uky4/yJ2X/fMlzOvgU9HCF09z
kPuyRpqGVvP37a7PhTaXglNvTatAcMqDsgvCuMOVpX5GQQgcpJrVvrnUZdCEbUR6
EJkG19o+zc6YOznUor4bR81V8D0atEGhVIcjMq7JMPinEbKqz705BiTuH7nkAHMz
VPsDJ6QSM47HgfB4LU12OuscR7VkukCOnwFVLmxQHZc8YZ8apxIbv3awIS3SzPj6
J4ipoF0bq5xZ6s8ar0IzH/8tqvJRpWjOHY88Glx1UEiiAXD7denCju9rkN8pPTju
mSlxx0fEKwdKVgQt01XITfa/rQ3ieHLSdpHOrl2pSFAeGhwMtkpXmCfgMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkHIsuq+aOwW466TPPjXM6PCt9OMB8GA1UdIwQY
MBaAFAMk2x3PDCQp4SFRauJ5L8MlP9O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUt
NGQyYzRkYTcyMWQ0LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUtNGQyYzRkYTcyMWQ0
LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWC/Sm/Bk
l7mywhYBcYDfjBgrNPv8cNWl0qSKzgt3qsJfxoqOTuDTbUfga/l5WAvahd4zgHCJ
om1cW4O369ic+hyV+7r8EYGr1U+GzOVpS9Abn0mRVvRh0b+MbMnJwSNHqZsO1ixj
c2Xens3hp7+9Tnm3GzCZ8gxs7DRc4sJjl4mx+rnorEddlTLIJRoPEAK1b84b5Bni
zGoYJEtcm6LTFKGaSZ2ykFgen05+jr2a3TmOWL+OoCJIHs4hiQ0GSzB/KSD0Oe0v
BJ0q22oT81LTRlP71sowpD8z7YEOnsCBql4Etwbh7y2vbUizhGzUICbkqnCc3L1V
0wDeVo3suppE6g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:08 2025 by rpki-client