Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: bBhk4ULtS3AXNubQFe+m8gaPE6EHUh43b3qXuWCAwMQ=
Subject key identifier: CF:42:4D:48:DF:9E:96:3B:0D:93:95:56:9A:89:F5:07:8F:3D:C8:38
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 0197B70F45E900924E410FDB6A8A5896DC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0713
Signing time: Sat 28 Jun 2025 15:02:00 +0000
Manifest this update: Sat 28 Jun 2025 15:02:00 +0000
Manifest next update: Sun 29 Jun 2025 15:02:00 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: bD7SPsVOEtBz2qXN8rSQvtvp4CkM+Scs1RChBbaK07M=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:45:e9:00:92:4e:41:0f:db:6a:8a:58:96:dc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jun 28 15:02:00 2025 GMT
Not After : Jun 29 15:02:00 2025 GMT
Subject: CN=cf424d48df9e963b0d9395569a89f5078f3dc838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:e9:15:7e:be:97:bb:5a:0c:d0:c0:0e:37:
a7:ad:ea:eb:79:c4:9c:80:70:03:61:4f:f8:f8:49:
c0:ce:07:78:c1:11:1a:05:31:8f:3a:da:c0:6a:ab:
7e:37:71:93:a7:22:8d:98:cb:3d:6e:3c:2f:5e:69:
c3:5a:ee:58:73:ba:a1:bd:0d:81:2d:76:33:00:72:
27:6d:1a:a0:b9:66:80:e2:ad:4d:09:e4:70:38:fe:
e3:18:54:45:6f:cb:87:9b:12:be:92:a4:22:52:69:
fa:ed:4d:e7:e6:38:58:17:d8:66:9f:71:ef:d5:b4:
5b:22:10:37:f5:88:e6:9a:d7:bd:4e:e6:2e:49:27:
60:7e:42:bc:bb:06:6c:3b:92:16:3d:fd:0c:e5:78:
de:97:4e:29:23:72:8a:31:ff:ad:ea:cc:59:58:25:
97:25:8c:5a:aa:70:95:22:05:4e:7c:ae:24:1a:a9:
2a:18:dd:d8:82:28:f1:62:11:86:dc:53:86:15:9b:
9d:d5:ec:5b:d9:70:d1:60:d6:e4:9c:59:4d:d0:87:
98:a3:b4:5c:b1:0f:d9:18:d7:91:ac:0c:fb:37:e5:
da:d6:c7:69:90:91:bc:da:39:3b:bb:e4:06:c2:ae:
96:3e:e7:4d:1f:20:7f:1a:e2:86:98:a6:a1:23:58:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:42:4D:48:DF:9E:96:3B:0D:93:95:56:9A:89:F5:07:8F:3D:C8:38
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1b:f7:97:dc:21:5e:2d:a9:66:97:3d:90:28:ce:fa:1d:0c:
4f:90:9e:0f:e7:97:0e:87:26:d1:5e:b0:4c:a2:9d:0f:5f:9b:
bb:d4:db:ea:12:78:e5:18:33:06:d3:ac:1e:9e:79:da:83:17:
b3:a9:f7:b2:0e:15:ca:7e:7f:fe:07:b6:22:76:37:cc:a5:7c:
39:7b:29:1a:4c:d9:11:f6:c6:6e:29:0e:76:1b:da:1e:0f:b5:
49:c7:aa:14:81:76:2e:4b:f4:e0:bb:a7:9d:81:d4:1e:55:44:
8d:9f:ed:82:08:2d:7d:fc:8f:c0:06:ae:c5:c9:34:e0:a5:a6:
55:75:36:9a:b2:f1:ca:68:9f:5d:ad:10:73:d4:d1:4e:3e:8b:
89:38:de:ab:48:8b:55:48:50:ad:a3:4d:56:96:84:32:e9:23:
bc:4e:5c:14:85:1b:c4:2c:7f:4f:87:7f:db:84:6d:e5:16:65:
71:70:3b:85:4a:50:5f:27:cf:8f:0a:c3:35:dc:88:be:9d:86:
d0:93:36:ef:dd:42:1b:56:0c:3a:76:26:46:21:cd:41:19:ee:
35:02:02:fa:13:9d:ec:71:95:86:21:9a:22:7f:ad:ab:04:22:
6f:4c:f7:a6:3f:38:d7:d5:5e:41:e0:fd:10:97:91:d6:56:53:
c1:7d:3c:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0XpAJJOQQ/baopYltxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2Nzg2N2UwZTIwMjI0OGU3ZjVlM2NiZDU3NGJkMWEz
MmZlM2YwHhcNMjUwNjI4MTUwMjAwWhcNMjUwNjI5MTUwMjAwWjAzMTEwLwYDVQQD
EyhjZjQyNGQ0OGRmOWU5NjNiMGQ5Mzk1NTY5YTg5ZjUwNzhmM2RjODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOPpFX6+l7taDNDADjenrerrecSc
gHADYU/4+EnAzgd4wREaBTGPOtrAaqt+N3GTpyKNmMs9bjwvXmnDWu5Yc7qhvQ2B
LXYzAHInbRqguWaA4q1NCeRwOP7jGFRFb8uHmxK+kqQiUmn67U3n5jhYF9hmn3Hv
1bRbIhA39Yjmmte9TuYuSSdgfkK8uwZsO5IWPf0M5Xjel04pI3KKMf+t6sxZWCWX
JYxaqnCVIgVOfK4kGqkqGN3YgijxYhGG3FOGFZud1exb2XDRYNbknFlN0IeYo7Rc
sQ/ZGNeRrAz7N+Xa1sdpkJG82jk7u+QGwq6WPudNHyB/GuKGmKahI1iNwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9CTUjfnpY7DZOVVpqJ9QePPcg4MB8GA1UdIwQY
MBaAFGlsZ4Z+DiAiSOf148vVdL0aMv4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEt
MWNiMWE4ZjgwMjM4LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEtMWNiMWE4ZjgwMjM4
LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBv3l9wh
Xi2pZpc9kCjO+h0MT5CeD+eXDocm0V6wTKKdD1+bu9Tb6hJ45RgzBtOsHp552oMX
s6n3sg4Vyn5//ge2InY3zKV8OXspGkzZEfbGbikOdhvaHg+1SceqFIF2Lkv04Lun
nYHUHlVEjZ/tgggtffyPwAauxck04KWmVXU2mrLxymifXa0Qc9TRTj6LiTjeq0iL
VUhQraNNVpaEMukjvE5cFIUbxCx/T4d/24Rt5RZlcXA7hUpQXyfPjwrDNdyIvp2G
0JM2791CG1YMOnYmRiHNQRnuNQIC+hOd7HGVhiGaIn+tqwQib0z3pj8419VeQeD9
EJeR1lZTwX08lQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:45 2025 by rpki-client