Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
File: aQvbGIma-yf-H_eAUW_MC5PIuA0.mft (raw, json)
Hash identifier: y5++haBOWTjaQdOFCRjwki/slNyxTRT7e+3lSfE2Qow=
Subject key identifier: 41:3E:62:85:33:C3:87:C7:00:FE:CC:AC:4D:9F:40:0E:7D:77:9C:26
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Certificate issuer: /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial: 0198D70624C24EBB8FD3D7DB9241052A7312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
Manifest number: 07D2
Signing time: Sat 23 Aug 2025 13:02:40 +0000
Manifest this update: Sat 23 Aug 2025 13:02:40 +0000
Manifest next update: Sun 24 Aug 2025 13:02:40 +0000
Files and hashes: 1: 5qlyqHqHN9fm7YIJbWQAFC8mvBE.roa (hash: i7ncddTAht6A90LZTtfDRpJSDX/ZI6t1vgckOHtmIjg=)
2: aQvbGIma-yf-H_eAUW_MC5PIuA0.crl (hash: pWPHpKlw+ffJIB6xMLiKWLolfjbfEnWNb4g02N7PqxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:24:c2:4e:bb:8f:d3:d7:db:92:41:05:2a:73:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Validity
Not Before: Aug 23 13:02:40 2025 GMT
Not After : Aug 24 13:02:40 2025 GMT
Subject: CN=413e628533c387c700feccac4d9f400e7d779c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2a:73:61:9d:db:7d:08:53:93:f5:93:72:9a:
35:82:0f:3e:bc:a8:81:f8:4f:d3:57:a5:80:9d:f0:
20:e6:9b:69:ec:b4:15:42:7f:f6:ec:4e:9e:fd:f7:
a7:37:14:b7:52:c6:31:4f:26:30:d4:93:85:25:df:
5e:bb:71:bb:84:f7:51:31:ea:32:ca:f3:97:60:93:
0c:1f:fd:23:72:78:eb:a4:28:59:94:88:bc:3a:fd:
f1:7c:42:3b:25:02:23:8b:93:c8:7d:48:e8:3d:39:
c7:7c:62:f7:3f:b9:13:7e:ec:d7:e7:83:51:e7:06:
9c:29:3d:da:72:c8:ab:58:13:c3:de:a9:35:72:b2:
48:a5:18:6d:bf:d4:ce:1e:af:55:08:91:10:e6:ac:
01:e1:1e:a8:ef:9a:e0:27:d8:7c:63:30:25:21:2a:
f1:03:7d:9e:9c:39:24:d1:6f:0b:27:ba:a0:c5:64:
06:0c:6a:aa:19:b8:a9:b4:86:cb:6a:12:9a:a7:4f:
05:60:7c:1f:f6:27:e0:fd:da:19:56:6c:ca:05:7b:
9f:2b:2a:b2:28:71:a1:dd:3a:7b:50:af:ba:18:eb:
21:13:58:36:39:a7:2c:f6:20:ce:d8:49:bd:77:47:
6d:8a:ec:4a:94:5d:b7:35:76:78:12:fc:54:94:72:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3E:62:85:33:C3:87:C7:00:FE:CC:AC:4D:9F:40:0E:7D:77:9C:26
X509v3 Authority Key Identifier:
keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:85:08:3e:a5:f6:23:f1:f2:d1:06:ce:bb:7b:57:67:f5:d1:
85:85:7d:f0:e8:98:3b:b2:7b:30:d1:b6:21:fe:48:0f:61:30:
02:20:50:6e:59:67:1e:5c:b9:ae:69:6e:f1:7a:b1:2e:03:0e:
f2:36:b1:26:cf:80:0a:8a:2d:ea:08:8c:e8:8e:25:94:50:79:
43:d0:4f:7e:b5:b1:1e:c1:bc:df:19:e7:ce:a3:f5:05:a5:19:
e5:8f:01:2e:b0:08:b2:52:db:b4:76:1c:5b:5c:a0:93:8a:cb:
5f:a3:82:38:4b:e6:c7:34:4f:06:c4:94:15:56:7e:33:16:5b:
00:c2:7d:b9:4f:17:a4:92:d3:67:fd:64:f1:ff:90:1e:b3:2e:
12:b5:20:d0:82:bc:46:0a:81:7b:70:e2:db:25:10:fc:12:0a:
85:26:80:f9:e0:68:e1:6f:b4:e1:b4:a2:08:e7:b0:f5:00:60:
e9:8a:59:54:b4:73:fe:63:49:23:ed:20:82:5e:95:0b:5a:8f:
e0:0e:ea:13:24:59:3c:48:ee:08:cd:c3:49:b6:ad:1a:57:ca:
9e:35:0e:98:06:a6:d3:99:64:8d:f2:e0:6c:20:72:ef:73:aa:
9c:82:d6:a0:07:f2:7b:a8:41:20:c1:1e:cc:9a:27:66:5c:25:
b5:04:7c:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBiTCTruP09fbkkEFKnMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGJkYjE4ODk5YWZiMjdmZTFmZjc4MDUxNmZjYzBiOTNj
OGI4MGQwHhcNMjUwODIzMTMwMjQwWhcNMjUwODI0MTMwMjQwWjAzMTEwLwYDVQQD
Eyg0MTNlNjI4NTMzYzM4N2M3MDBmZWNjYWM0ZDlmNDAwZTdkNzc5YzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhipzYZ3bfQhTk/WTcpo1gg8+vKiB
+E/TV6WAnfAg5ptp7LQVQn/27E6e/fenNxS3UsYxTyYw1JOFJd9eu3G7hPdRMeoy
yvOXYJMMH/0jcnjrpChZlIi8Ov3xfEI7JQIji5PIfUjoPTnHfGL3P7kTfuzX54NR
5wacKT3acsirWBPD3qk1crJIpRhtv9TOHq9VCJEQ5qwB4R6o75rgJ9h8YzAlISrx
A32enDkk0W8LJ7qgxWQGDGqqGbiptIbLahKap08FYHwf9ifg/doZVmzKBXufKyqy
KHGh3Tp7UK+6GOshE1g2Oacs9iDO2Em9d0dtiuxKlF23NXZ4EvxUlHJ52wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE+YoUzw4fHAP7MrE2fQA59d5wmMB8GA1UdIwQY
MBaAFGkL2xiJmvsn/h/3gFFvzAuTyLgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82ZDg0NzAtNDg2MS00MTZkLWE3MmEt
MjhhZGVkOGRkZmFiLzEvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82ZDg0NzAtNDg2MS00MTZkLWE3MmEtMjhhZGVkOGRkZmFi
LzEvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIUIPqX2
I/Hy0QbOu3tXZ/XRhYV98OiYO7J7MNG2If5ID2EwAiBQbllnHly5rmlu8XqxLgMO
8jaxJs+ACoot6giM6I4llFB5Q9BPfrWxHsG83xnnzqP1BaUZ5Y8BLrAIslLbtHYc
W1ygk4rLX6OCOEvmxzRPBsSUFVZ+MxZbAMJ9uU8XpJLTZ/1k8f+QHrMuErUg0IK8
RgqBe3Di2yUQ/BIKhSaA+eBo4W+04bSiCOew9QBg6YpZVLRz/mNJI+0ggl6VC1qP
4A7qEyRZPEjuCM3DSbatGlfKnjUOmAam05lkjfLgbCBy73OqnILWoAfye6hBIMEe
zJonZlwltQR8uw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:46 2025 by rpki-client