Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: eZyqk0yEwyHaGuEmuUpIAYxiPofRE6/b6qr//uWs1iU=
Subject key identifier: 1C:D5:8F:36:C5:9D:05:B9:89:13:70:E4:A0:96:78:2E:78:74:8E:BF
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 0197B7B2F0C0679F1E6EFC23DF20F644FA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0AF5
Signing time: Sat 28 Jun 2025 18:00:46 +0000
Manifest this update: Sat 28 Jun 2025 18:00:46 +0000
Manifest next update: Sun 29 Jun 2025 18:00:46 +0000
Files and hashes: 1: eZOZdw0xvypBF51rN4RfpY5h6vA.roa (hash: Rrqkszl7rnzrAJTcRtFLjvZXJPc9ZovjcSYFWUvutzY=)
2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: vaTe7eGrverfWdDbr7uqFH6/KZHf12K17svUf/RsbJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f0:c0:67:9f:1e:6e:fc:23:df:20:f6:44:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Jun 28 18:00:46 2025 GMT
Not After : Jun 29 18:00:46 2025 GMT
Subject: CN=1cd58f36c59d05b9891370e4a096782e78748ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:96:67:17:e9:8c:08:68:f1:a4:63:db:78:
54:df:ec:1a:5b:ed:74:a4:dc:2e:dd:ed:3d:35:aa:
d1:ec:de:b0:57:d9:21:96:97:75:3a:1f:db:d9:cb:
63:8a:03:ba:ad:fe:9d:84:29:62:0a:6a:d8:21:b5:
3c:99:96:fb:00:64:97:64:29:58:a3:ec:1f:52:ce:
17:10:1e:e9:10:7e:34:ec:b6:e1:5a:84:61:6b:2f:
9a:10:94:09:02:01:c6:eb:83:9a:5a:d7:be:54:9f:
f7:5f:b3:67:aa:05:01:85:99:b8:9e:d5:9c:84:f9:
fe:ef:91:44:9b:67:42:ec:c1:31:e9:d3:cd:83:35:
c4:a8:9d:85:04:6d:8a:80:a0:5e:1c:8e:69:31:63:
26:b7:27:b1:a3:57:cd:ed:2c:56:0a:a8:a9:2f:8f:
47:53:46:c9:a2:10:fe:a3:5f:de:0d:de:94:0d:6d:
ef:49:bd:5d:e5:fd:f4:c9:8b:38:40:2c:0a:fa:8a:
86:d0:03:1a:b1:29:80:27:04:64:36:c1:b2:a4:dd:
d1:d3:96:49:5c:55:d2:fe:f7:84:a8:be:51:93:49:
56:8c:f4:5e:3c:c7:62:ca:84:2d:4b:d7:1d:42:46:
b6:34:29:1c:4e:4f:b2:74:d7:b1:c8:dd:ab:d0:32:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:8F:36:C5:9D:05:B9:89:13:70:E4:A0:96:78:2E:78:74:8E:BF
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:dc:c8:7b:ed:bb:c4:3d:01:86:58:c0:a5:59:60:43:31:ca:
69:d2:a8:49:c4:c2:8a:7c:bb:b0:b9:88:50:f2:e8:53:b9:0c:
c9:0a:00:ef:31:3c:c8:f4:fe:6b:da:f9:8f:97:b3:fc:d3:c6:
80:16:43:29:1f:ba:2a:59:ee:14:e7:c3:52:9b:47:9d:ef:cc:
85:30:de:6f:01:0a:7f:94:ba:2d:67:ee:39:5a:53:ac:5e:96:
c8:cd:7d:b8:9e:01:5b:3e:fb:bd:d6:5c:1a:cf:a9:9d:89:44:
f6:91:f5:69:f4:e4:02:90:6f:fd:bd:e6:0e:28:f1:08:3c:41:
d8:48:05:38:c9:ff:e3:d1:b9:24:1b:6b:cf:b6:66:b1:47:ab:
8a:17:7d:11:93:b0:12:ae:ee:cc:33:6f:62:c3:87:60:bd:3c:
cc:ee:c3:51:ff:e5:05:66:c8:a5:61:e7:b9:5d:29:24:55:4f:
fc:67:16:69:21:62:9f:e4:35:ec:1d:85:ba:ca:69:1e:ed:49:
6d:70:b5:61:7c:17:0f:b1:3a:e1:f2:02:7a:75:a1:7b:e0:99:
8d:d2:a0:98:a8:a6:8d:e4:77:37:40:24:ff:02:4a:3b:a8:0e:
08:ff:df:27:49:ed:f7:a4:52:9a:36:32:bf:04:18:69:a4:c2:
e6:60:16:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3svDAZ58ebvwj3yD2RPosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDEwY2ViMjBmMmUwNzZhM2YwMDAyNzFhNWMzNzU3NjFi
ZWMyZjUwHhcNMjUwNjI4MTgwMDQ2WhcNMjUwNjI5MTgwMDQ2WjAzMTEwLwYDVQQD
EygxY2Q1OGYzNmM1OWQwNWI5ODkxMzcwZTRhMDk2NzgyZTc4NzQ4ZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx92WZxfpjAho8aRj23hU3+waW+10
pNwu3e09NarR7N6wV9khlpd1Oh/b2ctjigO6rf6dhCliCmrYIbU8mZb7AGSXZClY
o+wfUs4XEB7pEH407LbhWoRhay+aEJQJAgHG64OaWte+VJ/3X7NnqgUBhZm4ntWc
hPn+75FEm2dC7MEx6dPNgzXEqJ2FBG2KgKBeHI5pMWMmtyexo1fN7SxWCqipL49H
U0bJohD+o1/eDd6UDW3vSb1d5f30yYs4QCwK+oqG0AMasSmAJwRkNsGypN3R05ZJ
XFXS/veEqL5Rk0lWjPRePMdiyoQtS9cdQka2NCkcTk+ydNexyN2r0DLXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzVjzbFnQW5iRNw5KCWeC54dI6/MB8GA1UdIwQY
MBaAFKgBDOsg8uB2o/AAJxpcN1dhvsL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMt
NDlmNjVjNmE0OGJmLzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMtNDlmNjVjNmE0OGJm
LzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdzIe+27
xD0BhljApVlgQzHKadKoScTCiny7sLmIUPLoU7kMyQoA7zE8yPT+a9r5j5ez/NPG
gBZDKR+6KlnuFOfDUptHne/MhTDebwEKf5S6LWfuOVpTrF6WyM19uJ4BWz77vdZc
Gs+pnYlE9pH1afTkApBv/b3mDijxCDxB2EgFOMn/49G5JBtrz7ZmsUerihd9EZOw
Eq7uzDNvYsOHYL08zO7DUf/lBWbIpWHnuV0pJFVP/GcWaSFin+Q17B2FusppHu1J
bXC1YXwXD7E64fICenWhe+CZjdKgmKimjeR3N0Ak/wJKO6gOCP/fJ0nt96RSmjYy
vwQYaaTC5mAWVw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:57 2025 by rpki-client