Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: UL3Rfwosp15sHQQEreUSwYuExcEQQEGUoNwOCT9NYj8=
Subject key identifier: 99:ED:9C:B7:EF:3C:FB:A0:C9:B7:2D:4C:B3:86:66:C2:9E:01:5F:12
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 0197B70F081B350A138EFD22028C2A917A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: D0b97cw8+tv+Dh33mEIQJFrTNpJK4bl+x1OI1Dcjzp0=)
2: MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa (hash: R8z9BxbXd7Dke2ejYNt/dzLTxcDWFrg7+4k/8QPKV/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:08:1b:35:0a:13:8e:fd:22:02:8c:2a:91:7a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=99ed9cb7ef3cfba0c9b72d4cb38666c29e015f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:9a:4a:65:6b:18:49:58:6e:17:d0:f3:36:
38:04:cf:d5:53:93:c8:6c:27:64:18:34:a0:fc:3c:
4e:9a:1d:f0:d1:80:d4:60:7a:83:ee:b7:19:94:01:
ca:85:4e:7b:0d:f9:e1:61:35:53:b0:ab:0a:74:7a:
75:0c:5f:85:58:6b:85:f0:1d:f2:9b:24:8a:7e:40:
05:8a:54:c1:83:4c:14:c0:cb:41:8d:57:4d:0a:18:
2d:7c:45:1c:05:0d:f4:4f:6c:a1:03:97:64:54:a3:
9c:4f:e5:1b:e9:64:ae:07:27:94:5a:23:6b:d4:42:
94:0d:76:4c:e1:e4:32:08:35:ec:a7:f1:66:c3:32:
05:d7:fa:61:c5:7d:45:0d:f0:18:48:aa:39:48:f4:
ed:00:fe:90:a1:49:5f:de:b0:29:f2:ab:bd:20:06:
ff:cd:4f:57:7e:60:47:47:4b:ed:e7:18:b1:c1:50:
2a:f7:43:27:81:c1:52:f7:0b:fa:25:38:eb:73:d1:
48:01:1c:0f:81:24:d0:02:70:04:ea:f6:15:e8:81:
29:7d:bd:fc:fe:16:63:10:7e:da:97:2d:7c:1e:9f:
a5:1e:63:cc:1a:4e:5d:35:43:59:6c:d9:3c:d1:42:
5f:f1:07:c2:0b:06:be:22:a9:bd:89:cf:bc:11:47:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:9C:B7:EF:3C:FB:A0:C9:B7:2D:4C:B3:86:66:C2:9E:01:5F:12
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:88:df:41:7a:7a:2e:15:cd:f9:f4:8e:67:71:87:79:db:c7:
2d:63:5c:d7:08:a3:dd:69:b5:38:b4:16:c2:6a:bf:c4:3f:a7:
03:ed:1e:8e:70:60:5f:98:ad:ff:83:e8:3f:ec:50:d1:08:87:
d8:99:15:41:4f:68:f5:22:ba:7c:9b:23:d6:64:64:d8:65:7c:
13:23:71:95:a3:d2:32:06:08:2d:3b:ed:b4:e1:a7:b5:ae:7d:
f9:e5:29:06:e8:95:8a:0a:5a:d2:31:8c:9d:fa:bf:c2:71:24:
ac:8d:76:e4:3a:23:78:a9:a0:24:c8:1b:de:be:fb:e0:b7:8c:
1f:ca:e1:45:47:38:85:f0:66:43:23:16:5b:08:52:0a:28:94:
91:95:54:69:bb:fb:c4:1f:07:73:6e:82:8c:be:ee:b2:03:07:
53:d4:5d:44:56:4f:12:4b:64:5f:a4:7a:d9:30:13:7c:58:20:
35:55:51:40:c7:82:6e:5e:e9:05:e0:c8:8d:3c:27:7c:2b:ee:
66:8e:7a:ff:c8:4c:9d:d0:c4:c7:ae:f0:0e:53:fb:23:26:4c:
c0:81:88:f7:f2:b3:66:41:a7:17:3e:9e:46:1d:da:a1:e5:c5:
7d:f7:d8:b0:23:0f:13:92:4f:ab:a1:8e:49:6e:b8:a2:f3:fd:
87:3b:a3:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DwgbNQoTjv0iAowqkXobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwODU1ZGQ4OTcyNTZlODZkYTNjYmU2OTk0ZTk0Y2UyZTk2
OWFmMjYwHhcNMjUwNjI4MTUwMTQ0WhcNMjUwNjI5MTUwMTQ0WjAzMTEwLwYDVQQD
Eyg5OWVkOWNiN2VmM2NmYmEwYzliNzJkNGNiMzg2NjZjMjllMDE1ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14SaSmVrGElYbhfQ8zY4BM/VU5PI
bCdkGDSg/DxOmh3w0YDUYHqD7rcZlAHKhU57DfnhYTVTsKsKdHp1DF+FWGuF8B3y
mySKfkAFilTBg0wUwMtBjVdNChgtfEUcBQ30T2yhA5dkVKOcT+Ub6WSuByeUWiNr
1EKUDXZM4eQyCDXsp/FmwzIF1/phxX1FDfAYSKo5SPTtAP6QoUlf3rAp8qu9IAb/
zU9XfmBHR0vt5xixwVAq90MngcFS9wv6JTjrc9FIARwPgSTQAnAE6vYV6IEpfb38
/hZjEH7aly18Hp+lHmPMGk5dNUNZbNk80UJf8QfCCwa+Iqm9ic+8EUe25wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJntnLfvPPugybctTLOGZsKeAV8SMB8GA1UdIwQY
MBaAFACFXdiXJW6G2jy+aZTpTOLpaa8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUt
ODg2ZjY2YmI2ZWU4LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUtODg2ZjY2YmI2ZWU4
LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0IjfQXp6
LhXN+fSOZ3GHedvHLWNc1wij3Wm1OLQWwmq/xD+nA+0ejnBgX5it/4PoP+xQ0QiH
2JkVQU9o9SK6fJsj1mRk2GV8EyNxlaPSMgYILTvttOGnta59+eUpBuiVigpa0jGM
nfq/wnEkrI125DojeKmgJMgb3r774LeMH8rhRUc4hfBmQyMWWwhSCiiUkZVUabv7
xB8Hc26CjL7usgMHU9RdRFZPEktkX6R62TATfFggNVVRQMeCbl7pBeDIjTwnfCvu
Zo56/8hMndDEx67wDlP7IyZMwIGI9/KzZkGnFz6eRh3aoeXFfffYsCMPE5JPq6GO
SW64ovP9hzujjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:32 2025 by rpki-client