Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: PhBdwu1ul2RlXnNFcI3/HaavH179xhHS3LMB5mCmhQ4=
Subject key identifier: 0F:31:0F:E9:84:81:E8:B5:D5:3E:4F:6B:41:84:3C:A4:2E:12:00:E0
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 0198D4E06F5E3455271B8B1E154729826048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: BmiZPohnpdjBlaMW/b1c1W6exRP0rTJlEDg8SX1azFc=)
2: MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa (hash: R8z9BxbXd7Dke2ejYNt/dzLTxcDWFrg7+4k/8QPKV/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6f:5e:34:55:27:1b:8b:1e:15:47:29:82:60:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=0f310fe98481e8b5d53e4f6b41843ca42e1200e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:13:d4:1c:a3:40:d1:b7:3e:79:19:67:2f:
fa:27:b8:bd:3b:a1:8d:bd:b5:2a:ec:28:ae:d5:39:
cf:f6:6d:b0:9f:97:1b:50:13:2b:90:69:b1:31:d3:
b3:72:ed:30:eb:52:5f:77:00:c0:5f:bd:4b:f5:d1:
5f:5e:5c:f7:8a:8a:ad:26:37:94:d5:dd:23:bf:d4:
71:37:f9:e7:44:a2:7e:0c:1b:c1:f7:c8:53:d0:46:
99:a1:d7:d8:39:8f:df:5b:c1:c9:f2:ba:00:f6:b4:
33:83:a1:76:23:e1:81:7b:6c:a8:e1:7a:79:e4:15:
74:a4:48:48:f6:1f:dd:fc:05:7c:de:66:97:c4:66:
b0:3a:5f:64:3a:0d:5e:b8:c8:00:67:89:fa:2c:af:
0b:6d:8a:dc:87:4a:7b:7c:45:f3:df:1e:96:4a:e5:
6c:48:a7:19:47:40:4c:58:60:c3:68:a7:d7:fc:31:
33:d0:c6:b9:18:2d:2c:8b:19:ee:02:fc:d9:fb:ed:
4b:1e:de:b6:15:f5:9e:9e:21:cc:76:8c:16:16:f1:
b8:cb:b5:0d:ca:75:f8:d3:b7:a0:7c:0c:56:6c:50:
fa:ec:db:d3:25:2c:38:c5:5b:76:4d:d7:6b:53:ae:
9c:d2:9f:8f:9e:e4:5f:97:23:56:c3:12:d4:58:de:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:31:0F:E9:84:81:E8:B5:D5:3E:4F:6B:41:84:3C:A4:2E:12:00:E0
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c9:a1:3c:88:27:e6:ba:a8:77:f2:84:7a:14:f0:d7:82:8c:
72:d7:69:77:2b:d5:fb:86:84:a1:8f:87:cf:b0:9b:4e:44:f1:
bd:6b:db:68:c0:6e:62:a8:e6:80:51:5e:a8:61:d6:42:cb:21:
1f:62:4c:35:59:8d:9c:16:b4:4d:5a:26:28:1e:8e:20:8e:f2:
9d:58:da:9e:71:86:9e:18:97:77:e7:cc:ba:66:95:cd:94:2d:
1d:1a:a0:3d:39:9b:da:4c:c2:e2:86:e9:af:6d:f5:2c:40:fb:
13:34:2b:01:76:5b:5b:a2:97:41:22:54:6c:f2:81:53:6a:c4:
3a:4b:31:33:57:55:b2:ca:68:55:5f:6c:c9:62:79:ce:c8:96:
b6:18:aa:10:28:83:1b:d2:a7:e0:2f:5e:09:c1:c7:67:37:f7:
78:71:63:28:68:f8:2c:71:93:92:ae:d8:26:bc:34:e1:97:6f:
1a:73:81:85:57:52:91:e0:7d:c6:e3:75:0d:5a:97:24:25:81:
3f:ee:4f:47:f7:05:13:e2:19:46:8c:e3:23:9d:44:6f:c5:c5:
84:ee:84:69:e6:e8:02:2d:d5:39:d2:0d:9d:2a:b0:9c:2a:e9:
4d:6f:ec:33:10:32:d8:37:77:a1:b1:fe:ab:b5:77:99:6b:5e:
ed:4e:da:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4G9eNFUnG4seFUcpgmBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwODU1ZGQ4OTcyNTZlODZkYTNjYmU2OTk0ZTk0Y2UyZTk2
OWFmMjYwHhcNMjUwODIzMDMwMjE0WhcNMjUwODI0MDMwMjE0WjAzMTEwLwYDVQQD
EygwZjMxMGZlOTg0ODFlOGI1ZDUzZTRmNmI0MTg0M2NhNDJlMTIwMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3usT1ByjQNG3PnkZZy/6J7i9O6GN
vbUq7Ciu1TnP9m2wn5cbUBMrkGmxMdOzcu0w61JfdwDAX71L9dFfXlz3ioqtJjeU
1d0jv9RxN/nnRKJ+DBvB98hT0EaZodfYOY/fW8HJ8roA9rQzg6F2I+GBe2yo4Xp5
5BV0pEhI9h/d/AV83maXxGawOl9kOg1euMgAZ4n6LK8LbYrch0p7fEXz3x6WSuVs
SKcZR0BMWGDDaKfX/DEz0Ma5GC0sixnuAvzZ++1LHt62FfWeniHMdowWFvG4y7UN
ynX407egfAxWbFD67NvTJSw4xVt2TddrU66c0p+PnuRflyNWwxLUWN6qZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8xD+mEgei11T5Pa0GEPKQuEgDgMB8GA1UdIwQY
MBaAFACFXdiXJW6G2jy+aZTpTOLpaa8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUt
ODg2ZjY2YmI2ZWU4LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUtODg2ZjY2YmI2ZWU4
LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscmhPIgn
5rqod/KEehTw14KMctdpdyvV+4aEoY+Hz7CbTkTxvWvbaMBuYqjmgFFeqGHWQssh
H2JMNVmNnBa0TVomKB6OII7ynVjannGGnhiXd+fMumaVzZQtHRqgPTmb2kzC4obp
r231LED7EzQrAXZbW6KXQSJUbPKBU2rEOksxM1dVsspoVV9syWJ5zsiWthiqECiD
G9Kn4C9eCcHHZzf3eHFjKGj4LHGTkq7YJrw04ZdvGnOBhVdSkeB9xuN1DVqXJCWB
P+5PR/cFE+IZRozjI51Eb8XFhO6EaeboAi3VOdINnSqwnCrpTW/sMxAy2Dd3obH+
q7V3mWte7U7aTw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:22 2025 by rpki-client