Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: TRRNrWlqZx6MDXoGz9t5VwreHYORoDoDVDwhiVt+wK8=
Subject key identifier: 61:1D:8B:6C:15:CC:62:31:B3:4A:50:8F:A3:89:19:F6:61:A1:E2:F1
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 0198D516005D9E9B46A8E34E79B60FF0ABB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0681
Signing time: Sat 23 Aug 2025 04:00:45 +0000
Manifest this update: Sat 23 Aug 2025 04:00:45 +0000
Manifest next update: Sun 24 Aug 2025 04:00:45 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: DnZ5YwoBsy1jZCGeaLppCRmtYNyBjy8i6F8jD1fIaCU=)
2: BJSflswBbF0KTW1WxnqGispYE6A.roa (hash: 0G9L1AGhPY7c7LWy6WEMdnKFLYng4LvVWndIKcOm2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:00:5d:9e:9b:46:a8:e3:4e:79:b6:0f:f0:ab:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Aug 23 04:00:45 2025 GMT
Not After : Aug 24 04:00:45 2025 GMT
Subject: CN=611d8b6c15cc6231b34a508fa38919f661a1e2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:33:04:64:0e:01:a9:36:09:6d:49:f6:a7:
7f:c6:1c:c5:4d:33:90:cd:ac:cf:a9:44:71:a6:d2:
a0:86:6c:b8:26:cc:25:6d:5d:5e:e7:df:37:e7:97:
96:d1:e0:1e:51:8e:ce:37:e3:27:99:7e:61:39:75:
57:71:19:46:40:2d:9b:b6:bf:26:1a:cb:bc:aa:3f:
0b:8b:d1:dd:f4:da:c3:39:92:99:6b:02:0c:05:66:
0a:c7:38:c3:a1:50:6b:75:ca:18:9e:67:08:4d:2c:
1e:31:0c:74:c5:1f:51:6e:60:0b:e2:0f:1d:3b:21:
c9:f2:41:e5:d9:ae:b9:ae:14:e4:0e:07:85:e2:00:
2f:ba:d2:64:02:83:10:63:32:74:74:e2:61:b0:4b:
7f:f6:be:98:98:f6:ec:9c:a0:fb:8f:b9:f5:a9:c8:
d2:14:0e:77:a3:ec:bf:a5:a0:75:27:c3:fb:3a:a2:
7a:2a:3c:d5:40:b8:e0:b4:d5:72:5b:64:94:17:07:
94:d3:e5:a0:a6:ff:d2:8a:09:cc:89:fb:55:13:73:
d2:cf:d5:8a:5d:df:ae:bb:40:02:42:33:4a:3c:79:
e0:2c:ee:b9:44:9c:3e:67:e7:44:ee:2b:10:fa:48:
47:56:dd:2e:37:72:8d:14:cc:f0:a1:b1:cd:60:be:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:8B:6C:15:CC:62:31:B3:4A:50:8F:A3:89:19:F6:61:A1:E2:F1
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:00:1f:21:10:b4:bb:70:42:c0:83:4b:17:80:a2:07:90:65:
ad:84:39:20:42:1d:21:0f:66:b0:9e:a2:8e:b3:47:b2:b6:2e:
06:b1:aa:63:95:7b:bd:b7:0d:e6:22:a2:48:24:fc:8b:ae:a8:
08:ca:05:42:10:59:49:db:0d:73:68:10:5f:67:94:1d:99:48:
e0:83:c8:dd:b8:a8:cd:a3:3c:b8:64:76:61:43:bb:3a:c6:2e:
db:28:5f:4b:0e:5f:dd:07:34:f2:f6:87:ce:bc:53:e1:8b:ce:
01:f4:4f:60:f4:33:90:0a:5a:1d:5c:1b:e4:e6:b2:8b:cf:21:
16:bc:38:5c:3c:52:3e:21:ee:a9:e9:f9:03:4f:c8:a5:36:cb:
8c:30:da:77:02:3a:df:46:d0:3a:79:1c:22:9b:b1:20:52:13:
ac:c8:94:cd:1d:cb:e1:48:be:c5:9f:8e:d0:6c:62:bf:a6:b5:
13:c0:1b:c4:f8:98:30:1e:4c:bb:e3:c6:07:23:31:ce:84:c5:
30:f9:a5:cc:19:aa:15:e5:da:89:47:d4:81:3b:df:25:4a:83:
22:d1:27:00:22:a7:7c:f4:03:7e:55:13:3a:37:7d:f4:4a:01:
a0:0d:ec:42:60:6c:85:ba:da:80:27:3d:21:75:13:a3:c1:3f:
05:73:ec:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFgBdnptGqONOebYP8KuyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzk0ODA0Y2ZjYzdlZjI1OGQ0NmZjMzI0YzE2NzY0NDc2
MDNlZjYwHhcNMjUwODIzMDQwMDQ1WhcNMjUwODI0MDQwMDQ1WjAzMTEwLwYDVQQD
Eyg2MTFkOGI2YzE1Y2M2MjMxYjM0YTUwOGZhMzg5MTlmNjYxYTFlMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH0zBGQOAak2CW1J9qd/xhzFTTOQ
zazPqURxptKghmy4JswlbV1e598355eW0eAeUY7ON+MnmX5hOXVXcRlGQC2btr8m
Gsu8qj8Li9Hd9NrDOZKZawIMBWYKxzjDoVBrdcoYnmcITSweMQx0xR9RbmAL4g8d
OyHJ8kHl2a65rhTkDgeF4gAvutJkAoMQYzJ0dOJhsEt/9r6YmPbsnKD7j7n1qcjS
FA53o+y/paB1J8P7OqJ6KjzVQLjgtNVyW2SUFweU0+Wgpv/SignMiftVE3PSz9WK
Xd+uu0ACQjNKPHngLO65RJw+Z+dE7isQ+khHVt0uN3KNFMzwobHNYL7kUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEdi2wVzGIxs0pQj6OJGfZhoeLxMB8GA1UdIwQY
MBaAFALJSATPzH7yWNRvwyTBZ2RHYD72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMt
MjU5YmU5ZmJjMWYxLzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMtMjU5YmU5ZmJjMWYx
LzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwAfIRC0
u3BCwINLF4CiB5BlrYQ5IEIdIQ9msJ6ijrNHsrYuBrGqY5V7vbcN5iKiSCT8i66o
CMoFQhBZSdsNc2gQX2eUHZlI4IPI3biozaM8uGR2YUO7OsYu2yhfSw5f3Qc08vaH
zrxT4YvOAfRPYPQzkApaHVwb5Oayi88hFrw4XDxSPiHuqen5A0/IpTbLjDDadwI6
30bQOnkcIpuxIFITrMiUzR3L4Ui+xZ+O0Gxiv6a1E8AbxPiYMB5Mu+PGByMxzoTF
MPmlzBmqFeXaiUfUgTvfJUqDItEnACKnfPQDflUTOjd99EoBoA3sQmBshbragCc9
IXUTo8E/BXPstA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:19 2025 by rpki-client