Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
File: aL0515MSXGhN_ycviGIrrEMhgPA.mft (raw, json)
Hash identifier: U6G65mgG4I5RMGAeu2EcU6DHvDczVvEKPvV1AL0Lf80=
Subject key identifier: 02:2D:06:26:6A:53:1D:8C:AA:37:58:64:A8:E3:7F:FD:A7:77:75:A7
Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0
Certificate serial: 0197B6A1466900F756C0F6D526E9DFEF3846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: UITBZGotoEJu7VXUeHnQEpzUh80.roa (hash: +4A8vS2ImMKHLoBNzMFALbXMy6VYqIeTofj/Zphvx9I=)
2: aL0515MSXGhN_ycviGIrrEMhgPA.crl (hash: Zk7HYfutCQyQOqqRHJbkoNP15DDPgexfBf89e/7h03o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:46:69:00:f7:56:c0:f6:d5:26:e9:df:ef:38:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd39d793125c684dff272f88622bac432180f0
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=022d06266a531d8caa375864a8e37ffda77775a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:08:24:77:28:8e:13:ab:03:bb:94:43:09:
a3:43:64:2a:1b:ec:08:5c:9e:8c:e1:73:5d:3b:4c:
b9:82:55:7f:70:4b:da:06:e1:65:7d:6c:a5:f0:4e:
e4:3d:3b:56:e6:72:3f:03:e5:5f:4b:cd:8f:9e:f3:
8a:78:13:ce:5f:ae:29:4a:bd:c0:51:42:46:a3:83:
17:da:23:d0:e3:57:15:bf:c3:15:66:9d:62:7e:de:
80:9f:39:83:4f:b8:bf:67:ab:72:4b:1e:09:9e:25:
1f:5f:f2:78:97:d5:c8:ec:50:c6:bc:6c:38:e7:a0:
dd:e9:f0:25:66:e9:45:5e:20:99:1d:69:52:0a:2e:
0b:4c:df:07:d5:18:f8:6c:1e:04:cd:40:1e:8f:25:
79:20:b5:e4:b2:20:f3:ed:67:81:34:f7:56:a8:6f:
bc:bc:75:89:05:ae:b3:42:47:89:f0:b1:43:52:da:
94:0b:1d:fc:61:a3:60:73:5b:63:3d:80:8f:b0:a7:
31:29:d0:08:80:90:68:8e:ab:ee:61:6c:01:8c:01:
03:ec:f3:5a:b4:21:3a:46:42:2f:3e:59:42:c1:af:
c0:d3:09:db:84:cd:5b:ac:ad:7f:74:0c:ce:de:3c:
ef:d3:83:3d:7e:c8:05:40:55:83:49:a0:0c:c8:82:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:06:26:6A:53:1D:8C:AA:37:58:64:A8:E3:7F:FD:A7:77:75:A7
X509v3 Authority Key Identifier:
keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d6:c9:d5:9b:37:ef:a2:b3:c3:a4:9a:7e:81:e2:71:fc:93:
4a:d9:a9:65:ee:fa:6d:54:7f:2c:be:45:74:cb:89:48:96:91:
bf:b8:99:e2:33:89:45:cd:27:6c:d6:e0:fd:7f:96:3f:4a:bf:
d0:3f:d0:dd:db:ec:db:61:31:ab:fc:36:af:e4:0b:85:3a:44:
b6:c3:cf:77:80:92:08:16:38:e3:7c:ae:8f:da:3c:45:9a:d2:
6f:b7:0f:fd:2c:bc:eb:ad:4d:76:e1:f7:33:21:36:a0:e6:aa:
07:8e:c8:f0:74:09:a4:0f:d9:1a:d0:70:32:43:30:53:46:91:
0f:fd:4f:37:f9:b6:a4:fe:78:28:bf:a4:e2:f9:86:3c:4f:4e:
10:19:39:2c:b1:7e:b4:a7:86:ed:2f:ab:66:13:5b:e3:a4:9f:
76:96:39:af:0a:aa:90:2a:40:3a:a3:26:6b:5f:eb:49:49:22:
49:a6:97:7b:c0:11:a5:73:33:9f:c5:ae:f0:da:82:db:ca:86:
21:e2:76:d9:c3:78:a4:5e:a3:52:17:bc:d9:32:3b:e4:74:c4:
57:96:0a:d6:e3:b5:4f:14:d7:73:e5:ef:20:a0:2d:d0:00:e9:
bd:20:96:83:89:6c:ea:44:83:3a:e0:11:99:90:75:3f:5b:db:
ba:13:6e:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUZpAPdWwPbVJunf7zhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YmQzOWQ3OTMxMjVjNjg0ZGZmMjcyZjg4NjIyYmFjNDMy
MTgwZjAwHhcNMjUwNjI4MTMwMTUxWhcNMjUwNjI5MTMwMTUxWjAzMTEwLwYDVQQD
EygwMjJkMDYyNjZhNTMxZDhjYWEzNzU4NjRhOGUzN2ZmZGE3Nzc3NWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6AIJHcojhOrA7uUQwmjQ2QqG+wI
XJ6M4XNdO0y5glV/cEvaBuFlfWyl8E7kPTtW5nI/A+VfS82PnvOKeBPOX64pSr3A
UUJGo4MX2iPQ41cVv8MVZp1ift6AnzmDT7i/Z6tySx4JniUfX/J4l9XI7FDGvGw4
56Dd6fAlZulFXiCZHWlSCi4LTN8H1Rj4bB4EzUAejyV5ILXksiDz7WeBNPdWqG+8
vHWJBa6zQkeJ8LFDUtqUCx38YaNgc1tjPYCPsKcxKdAIgJBojqvuYWwBjAED7PNa
tCE6RkIvPllCwa/A0wnbhM1brK1/dAzO3jzv04M9fsgFQFWDSaAMyIJdoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAItBiZqUx2MqjdYZKjjf/2nd3WnMB8GA1UdIwQY
MBaAFGi9OdeTElxoTf8nL4hiK6xDIYDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80MjRiOTQtZTcwMi00YjIyLWFlMmUt
MDg5MDUyMGI4ODQ2LzEvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80MjRiOTQtZTcwMi00YjIyLWFlMmUtMDg5MDUyMGI4ODQ2
LzEvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdbJ1Zs3
76Kzw6SafoHicfyTStmpZe76bVR/LL5FdMuJSJaRv7iZ4jOJRc0nbNbg/X+WP0q/
0D/Q3dvs22Exq/w2r+QLhTpEtsPPd4CSCBY443yuj9o8RZrSb7cP/Sy8661NduH3
MyE2oOaqB47I8HQJpA/ZGtBwMkMwU0aRD/1PN/m2pP54KL+k4vmGPE9OEBk5LLF+
tKeG7S+rZhNb46SfdpY5rwqqkCpAOqMma1/rSUkiSaaXe8ARpXMzn8Wu8NqC28qG
IeJ22cN4pF6jUhe82TI75HTEV5YK1uO1TxTXc+XvIKAt0ADpvSCWg4ls6kSDOuAR
mZB1P1vbuhNu0g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:34 2025 by rpki-client