Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier: Xg6oggxjaQ9pY9NLK71HTKZoTvi3uV4NU/xZkSyJTq8=
Subject key identifier: 60:58:45:E4:E9:9C:17:B3:B7:46:9A:A7:65:DB:9F:5C:5F:61:34:32
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial: 0198D73B63126076EA4EF3133C029CF28643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number: 0C15
Signing time: Sat 23 Aug 2025 14:00:50 +0000
Manifest this update: Sat 23 Aug 2025 14:00:50 +0000
Manifest next update: Sun 24 Aug 2025 14:00:50 +0000
Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: bQXaugYi0WzD7fpb0nDio8ENLowzlLW6XHaxmCAt0Yg=)
2: c2eVtCtVjsi6i3vPHgLATuNVfoM.roa (hash: tozwRqmwgoJZSoOdc4bKHZ1xB9xQYRcf64jJhmtl4S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:63:12:60:76:ea:4e:f3:13:3c:02:9c:f2:86:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
Validity
Not Before: Aug 23 14:00:50 2025 GMT
Not After : Aug 24 14:00:50 2025 GMT
Subject: CN=605845e4e99c17b3b7469aa765db9f5c5f613432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:24:d2:11:a4:5c:85:d8:7f:1c:e1:57:3f:
21:2e:d0:9d:ea:fe:de:8d:d6:3c:59:c6:b9:14:fa:
b3:82:7d:64:22:d0:4d:d4:10:34:d8:d5:9f:ae:80:
d8:cb:b1:0e:90:01:ef:89:8c:60:a6:73:55:94:0f:
8e:65:b0:4c:4d:08:73:49:b5:2e:01:bd:09:fa:14:
6b:b9:08:62:1b:df:a5:6d:dc:f1:50:15:28:57:8a:
21:e8:99:15:f6:fa:62:19:3b:3b:4b:7f:82:7d:17:
1e:43:e6:d1:d2:ac:de:8c:89:61:5c:f0:3a:63:ac:
59:66:be:1a:2d:f7:0f:6e:12:22:14:4d:22:f0:40:
bc:96:6c:69:f1:4e:ca:b9:09:77:a2:7f:2a:08:09:
bb:f2:00:7a:ab:0e:d1:05:6a:fc:80:f0:7b:60:6f:
54:65:fb:f6:45:ff:73:01:ed:60:5b:f9:7c:70:b6:
a5:66:d5:38:1f:27:29:86:9a:05:cf:81:44:a0:a7:
e3:10:b7:38:a2:02:3d:2d:14:01:4a:9f:47:84:e4:
29:3b:a5:34:90:36:56:2b:f5:81:7e:8d:25:cd:54:
ad:59:fc:f7:c5:0f:20:d3:35:24:fc:1d:f0:59:0e:
36:41:61:15:82:81:20:c3:ee:86:e4:86:d5:62:eb:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:58:45:E4:E9:9C:17:B3:B7:46:9A:A7:65:DB:9F:5C:5F:61:34:32
X509v3 Authority Key Identifier:
keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:99:3f:30:5b:2b:6f:a5:7a:f5:4f:d6:c4:fd:69:06:93:b5:
ae:f7:50:ec:f8:d9:30:20:dd:5b:52:a4:e5:97:7e:b3:ca:35:
f9:b6:7b:70:ae:6d:d3:d4:7d:39:aa:d2:94:19:65:80:0b:1d:
3f:92:99:4f:86:c6:e9:dc:94:a9:54:8f:b6:1a:7a:96:6c:8c:
84:aa:c6:03:36:6a:3d:4f:40:7f:8a:cd:69:d5:84:1f:eb:bf:
51:8d:36:45:c5:97:65:48:fb:53:24:ef:2f:18:5d:84:f6:55:
57:f9:7c:94:2c:be:83:8e:2d:12:8f:62:09:38:ed:03:9c:79:
72:90:82:a6:5e:42:e0:33:4a:58:7a:dd:80:77:cd:e5:de:8e:
b6:f8:cd:6d:94:98:66:1e:d2:84:04:7f:7e:e5:df:83:da:bb:
e2:3d:c0:31:4a:5e:48:c3:dd:4c:7d:4c:2c:3b:cd:66:13:74:
f6:97:fe:86:f0:cb:5e:35:9c:4c:90:b4:16:3e:be:64:49:15:
46:8c:05:28:6b:d8:f0:30:bf:9c:3e:69:74:1c:cc:1a:91:6f:
82:0c:c0:a8:4e:f1:39:2c:b2:b0:a9:c0:d7:81:e1:e9:8a:9c:
b7:30:e2:74:e5:b2:5c:04:ca:11:97:e7:2d:bd:c9:10:6a:cb:
3c:af:e9:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO2MSYHbqTvMTPAKc8oZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGQwZmVlMmNkNTY2OTY1Y2EwOGRiNTUwNjYzY2IyMGI0
MTIzNDMwHhcNMjUwODIzMTQwMDUwWhcNMjUwODI0MTQwMDUwWjAzMTEwLwYDVQQD
Eyg2MDU4NDVlNGU5OWMxN2IzYjc0NjlhYTc2NWRiOWY1YzVmNjEzNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvsk0hGkXIXYfxzhVz8hLtCd6v7e
jdY8Wca5FPqzgn1kItBN1BA02NWfroDYy7EOkAHviYxgpnNVlA+OZbBMTQhzSbUu
Ab0J+hRruQhiG9+lbdzxUBUoV4oh6JkV9vpiGTs7S3+CfRceQ+bR0qzejIlhXPA6
Y6xZZr4aLfcPbhIiFE0i8EC8lmxp8U7KuQl3on8qCAm78gB6qw7RBWr8gPB7YG9U
Zfv2Rf9zAe1gW/l8cLalZtU4HycphpoFz4FEoKfjELc4ogI9LRQBSp9HhOQpO6U0
kDZWK/WBfo0lzVStWfz3xQ8g0zUk/B3wWQ42QWEVgoEgw+6G5IbVYus46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBYReTpnBezt0aap2Xbn1xfYTQyMB8GA1UdIwQY
MBaAFAAND+4s1WaWXKCNtVBmPLILQSNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTkt
Yjk0MWJhOTIxYjNmLzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTktYjk0MWJhOTIxYjNm
LzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJk/MFsr
b6V69U/WxP1pBpO1rvdQ7PjZMCDdW1Kk5Zd+s8o1+bZ7cK5t09R9OarSlBllgAsd
P5KZT4bG6dyUqVSPthp6lmyMhKrGAzZqPU9Af4rNadWEH+u/UY02RcWXZUj7UyTv
LxhdhPZVV/l8lCy+g44tEo9iCTjtA5x5cpCCpl5C4DNKWHrdgHfN5d6OtvjNbZSY
Zh7ShAR/fuXfg9q74j3AMUpeSMPdTH1MLDvNZhN09pf+hvDLXjWcTJC0Fj6+ZEkV
RowFKGvY8DC/nD5pdBzMGpFvggzAqE7xOSyysKnA14Hh6YqctzDidOWyXATKEZfn
Lb3JEGrLPK/prw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:52:42 2025 by rpki-client