Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: cNbAlg6bhnJw/c6TA6bwIxF14Oc/H70xvDvgK3/JKN0=
Subject key identifier: 8A:EA:9F:F9:3B:8F:1C:97:AE:87:42:F7:88:6E:10:44:D6:61:31:DF
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 0197B7EA5E492A1B28937E09A95236DD7474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: G3jkppDUZ7UShIbg3wj67wwITjQ.roa (hash: IM9aMDCOjn2pDhh5r2plZvteAbzhdwZ0L/lTf4RJayk=)
2: Tz1CIM1JoghruWTN6nGpazj8zTs.roa (hash: VV/wpFoAA0PEYjeaECSEYgoe19Q1uDYWZTbwDnhLY+0=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: L5U75liJLdorR1uG/6q99R0yX6xot/PfTOKO+e0gQBY=)
4: qOyspdHf0vEJQuyvIz0XkgRHk_0.roa (hash: yR7LTFxNYmFcq/nxWYOH7mZupl2rRRW8SrPwUWcJB0k=)
5: uiGdfZv36ngdlEPtH0Dctu5_0kI.roa (hash: kwlBzu/ziaLKG7neS7FV84L3FCZ7YdUCR1fgHvPBMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5e:49:2a:1b:28:93:7e:09:a9:52:36:dd:74:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=8aea9ff93b8f1c97ae8742f7886e1044d66131df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:fc:8e:4d:12:51:44:0b:a6:25:15:52:e3:
37:7e:26:c5:08:e1:c2:08:7b:9e:3e:fe:ce:56:12:
75:8c:e2:cc:fd:74:aa:bc:9d:43:fc:92:f2:31:88:
a4:98:cf:e1:54:09:df:3f:9e:78:27:41:fb:7c:69:
cc:a3:b7:c0:d3:77:53:38:de:b2:0f:b1:27:87:4e:
f2:64:10:75:73:bb:f2:ed:11:30:0b:0e:a6:1b:12:
61:0b:e5:43:02:c9:78:aa:c9:f6:b6:9b:6c:b4:2c:
2f:7f:40:2c:9f:81:f3:42:65:ca:da:e6:f3:ae:96:
d1:8f:9e:82:93:12:c1:57:49:41:9b:ce:fe:b0:e7:
a6:a9:dd:a0:21:51:8e:cd:ab:bb:c8:9d:ea:18:e5:
14:7d:25:ff:90:49:21:79:c5:05:0c:f4:0d:93:02:
3a:b3:36:88:bd:27:03:d1:90:4c:b3:51:15:2a:2e:
21:c3:4c:f9:8e:f1:b4:e0:51:8f:16:79:f3:15:04:
8e:95:48:30:49:42:e0:e9:1f:f8:8a:09:75:b2:61:
66:4e:b6:6d:b4:23:fa:1b:c3:3b:e1:15:f8:34:6e:
61:26:5d:4a:79:77:f5:be:7f:90:c6:82:1a:32:41:
cb:5f:c1:2d:83:6c:27:07:8d:7a:74:be:90:93:5e:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:9F:F9:3B:8F:1C:97:AE:87:42:F7:88:6E:10:44:D6:61:31:DF
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2d:df:6a:3f:10:96:83:1d:96:ae:ea:29:9c:00:a4:a5:5d:
4b:dd:17:f5:26:9a:e2:1d:97:eb:c4:16:e3:3a:b8:7c:06:6d:
30:0d:a1:57:2a:c1:87:59:38:3d:74:0a:06:cb:48:cb:c7:c7:
0f:37:19:60:d7:c6:45:a3:3a:b2:1c:ae:28:99:c8:81:98:e9:
4a:66:89:33:8f:8c:ad:5e:c5:0f:a3:01:9c:d1:78:23:63:de:
55:97:29:85:47:d5:bb:c9:9f:5c:ac:a6:cc:9e:97:51:03:7f:
aa:02:a2:08:60:09:2b:65:1b:27:1a:53:dc:0f:2f:a0:fc:53:
82:ef:3b:5a:5f:cb:28:c8:b4:f4:22:50:e1:55:bd:49:68:ea:
c6:26:2c:17:a7:68:05:03:de:76:9b:88:82:25:23:7b:4e:83:
01:8d:5e:e3:3e:38:44:10:46:34:ec:6f:32:ea:fb:31:a7:0b:
b0:8c:92:23:8e:37:5e:7e:b4:11:28:bc:1f:96:ad:0b:ee:12:
d2:47:76:19:08:c5:7e:9f:f4:7d:6d:99:2f:7f:d7:65:03:c0:
e6:5f:73:8d:d0:d2:03:cd:91:e5:9f:40:12:42:82:73:f4:3a:
6c:c1:56:88:5e:33:ef:59:b2:f8:53:65:de:4e:03:11:67:8a:
12:e1:2d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36l5JKhsok34JqVI23XR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZThiYWVhOTVkNDA0MDM0OGYwYTg5ZWM0ZTRiZDE1Mjc1
ZjZjMzkwHhcNMjUwNjI4MTkwMTE5WhcNMjUwNjI5MTkwMTE5WjAzMTEwLwYDVQQD
Eyg4YWVhOWZmOTNiOGYxYzk3YWU4NzQyZjc4ODZlMTA0NGQ2NjEzMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnX8jk0SUUQLpiUVUuM3fibFCOHC
CHuePv7OVhJ1jOLM/XSqvJ1D/JLyMYikmM/hVAnfP554J0H7fGnMo7fA03dTON6y
D7Enh07yZBB1c7vy7REwCw6mGxJhC+VDAsl4qsn2tptstCwvf0Asn4HzQmXK2ubz
rpbRj56CkxLBV0lBm87+sOemqd2gIVGOzau7yJ3qGOUUfSX/kEkhecUFDPQNkwI6
szaIvScD0ZBMs1EVKi4hw0z5jvG04FGPFnnzFQSOlUgwSULg6R/4igl1smFmTrZt
tCP6G8M74RX4NG5hJl1KeXf1vn+QxoIaMkHLX8Etg2wnB416dL6Qk17KJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrqn/k7jxyXrodC94huEETWYTHfMB8GA1UdIwQY
MBaAFGjouuqV1AQDSPConsTkvRUnX2w5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2Ut
MzcxMWZhZThjYTc3LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2UtMzcxMWZhZThjYTc3
LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApy3faj8Q
loMdlq7qKZwApKVdS90X9Saa4h2X68QW4zq4fAZtMA2hVyrBh1k4PXQKBstIy8fH
DzcZYNfGRaM6shyuKJnIgZjpSmaJM4+MrV7FD6MBnNF4I2PeVZcphUfVu8mfXKym
zJ6XUQN/qgKiCGAJK2UbJxpT3A8voPxTgu87Wl/LKMi09CJQ4VW9SWjqxiYsF6do
BQPedpuIgiUje06DAY1e4z44RBBGNOxvMur7MacLsIySI443Xn60ESi8H5atC+4S
0kd2GQjFfp/0fW2ZL3/XZQPA5l9zjdDSA82R5Z9AEkKCc/Q6bMFWiF4z71my+FNl
3k4DEWeKEuEtRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:57 2025 by rpki-client