Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: e7ksSHNFya+JxSi5tc9d1CiK1mFOVaY4K58huTn/sLM=
Subject key identifier: 11:4B:35:F4:1E:E8:88:8C:5C:96:6D:8D:E2:56:2C:97:6D:97:C7:D2
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 0198D5BBBA77B78750CDBD435D45509E62A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 1364
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: CcO4X5owbp8OTsQUAi4Se0U0bGo.roa (hash: Rjhil4a1bZ7IivISF1+emC+myyX4/SSXPPEDg9r6bJ4=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: qf25sJaFiPc7JPQloDBd2DCECXID+iM/ogjcVfE5gVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ba:77:b7:87:50:cd:bd:43:5d:45:50:9e:62:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=114b35f41ee8888c5c966d8de2562c976d97c7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:9f:54:16:e2:c7:86:76:b7:f5:27:1d:eb:
b7:a1:b9:b9:7e:40:d8:d8:0c:1d:ed:a9:8c:cc:5f:
21:0c:c6:b0:4d:f2:0c:67:66:db:f0:99:b1:e5:e2:
9a:2f:19:3e:b0:a8:56:40:35:9c:c1:a4:e3:3d:f0:
35:52:75:b1:db:74:23:22:59:50:b1:3d:c7:ea:ec:
ba:e9:26:f1:33:87:0f:2b:c8:ed:18:46:ba:ad:de:
7d:ac:b5:89:66:62:c8:9f:9b:47:0d:70:43:a8:63:
70:f8:cd:5c:39:71:7d:02:0a:c3:a8:22:d0:57:1c:
a2:a1:b1:d7:50:b8:39:d9:44:e0:c2:a3:2a:44:56:
1c:d7:2c:0b:a2:2b:25:39:52:c3:fd:fb:4f:35:fc:
dc:4b:d7:5c:ca:de:48:ef:f0:a1:73:d1:5d:93:c6:
5e:ea:c2:72:71:56:85:23:ef:66:ea:99:fb:d4:55:
e2:f5:d7:18:0e:ba:3a:b9:19:55:44:ff:8e:b9:54:
df:64:5f:a7:90:8a:25:57:e2:f8:d4:86:ef:23:78:
c3:7d:d9:5e:10:7e:45:20:3d:4d:65:25:1e:20:c2:
b1:0f:e0:0d:30:0a:de:59:8c:f0:f6:d9:16:3e:66:
a7:65:60:3b:28:15:2b:62:00:84:9e:1b:75:97:b9:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4B:35:F4:1E:E8:88:8C:5C:96:6D:8D:E2:56:2C:97:6D:97:C7:D2
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dc:f0:2b:09:01:57:7c:05:9a:c3:17:40:31:e6:81:d0:d5:
36:55:c1:5e:42:74:b4:e5:9b:b7:bc:be:07:5f:99:fd:9f:66:
39:76:9c:9c:87:70:b4:77:9f:13:67:43:46:ad:a4:9b:12:ad:
08:8c:d1:0e:33:5a:ec:85:5b:78:9c:cd:51:11:04:34:b1:31:
4f:74:44:43:b6:76:6e:8b:c7:b5:1f:66:6d:3d:0b:ec:66:6a:
ae:0d:94:ba:5e:69:ba:48:b4:f0:03:b2:0c:eb:40:2a:8e:f2:
33:62:63:a7:f3:55:20:09:2c:92:e3:17:5d:b9:06:19:62:a3:
49:8e:f6:88:e1:50:05:da:a7:22:2b:67:1f:8d:b6:23:c0:8d:
5c:f5:e0:5d:c1:7e:55:ed:7d:db:18:8b:6d:9d:2f:b4:a7:a3:
e3:26:8a:1a:e8:0a:0d:74:89:6e:11:c4:a9:44:30:d4:86:86:
b3:0b:c0:fb:d6:9d:e5:b9:24:e0:fd:d5:f0:dc:f9:cc:67:58:
61:f6:a3:2a:87:b8:9c:ef:65:9c:7c:44:eb:85:cd:b9:57:1f:
ce:50:8b:3e:1c:0d:6f:3c:a1:81:18:bc:85:cb:94:66:50:74:
10:6e:35:9b:36:aa:84:38:b2:fd:a5:da:cf:1d:88:1d:8e:54:
33:41:6a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7p3t4dQzb1DXUVQnmKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YWRiODI1ZjlmZGJjYTBjZDdjNzkwMWRlYjdhMjJhZTE3
OTdjMDYwHhcNMjUwODIzMDcwMTQ2WhcNMjUwODI0MDcwMTQ2WjAzMTEwLwYDVQQD
EygxMTRiMzVmNDFlZTg4ODhjNWM5NjZkOGRlMjU2MmM5NzZkOTdjN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MWfVBbix4Z2t/UnHeu3obm5fkDY
2Awd7amMzF8hDMawTfIMZ2bb8Jmx5eKaLxk+sKhWQDWcwaTjPfA1UnWx23QjIllQ
sT3H6uy66SbxM4cPK8jtGEa6rd59rLWJZmLIn5tHDXBDqGNw+M1cOXF9AgrDqCLQ
VxyiobHXULg52UTgwqMqRFYc1ywLoislOVLD/ftPNfzcS9dcyt5I7/Chc9Fdk8Ze
6sJycVaFI+9m6pn71FXi9dcYDro6uRlVRP+OuVTfZF+nkIolV+L41IbvI3jDfdle
EH5FID1NZSUeIMKxD+ANMAreWYzw9tkWPmanZWA7KBUrYgCEnht1l7m65QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFLNfQe6IiMXJZtjeJWLJdtl8fSMB8GA1UdIwQY
MBaAFGmtuCX5/bygzXx5Ad63oirheXwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hZjZiN2EtOWE3MC00OTRlLThhOTAt
MzIzNjI2N2M4Nzk5LzEvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hZjZiN2EtOWE3MC00OTRlLThhOTAtMzIzNjI2N2M4Nzk5
LzEvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9zwKwkB
V3wFmsMXQDHmgdDVNlXBXkJ0tOWbt7y+B1+Z/Z9mOXacnIdwtHefE2dDRq2kmxKt
CIzRDjNa7IVbeJzNUREENLExT3REQ7Z2bovHtR9mbT0L7GZqrg2Uul5puki08AOy
DOtAKo7yM2Jjp/NVIAkskuMXXbkGGWKjSY72iOFQBdqnIitnH422I8CNXPXgXcF+
Ve192xiLbZ0vtKej4yaKGugKDXSJbhHEqUQw1IaGswvA+9ad5bkk4P3V8Nz5zGdY
YfajKoe4nO9lnHxE64XNuVcfzlCLPhwNbzyhgRi8hcuUZlB0EG41mzaqhDiy/aXa
zx2IHY5UM0FqmQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:46 2025 by rpki-client