Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: ey7w9b1N3+m6x7IrrGld5hvV60iiJ7M5LBs5dfwuHLw=
Subject key identifier: 8A:5F:51:37:C3:BA:80:3D:7F:CC:5B:43:11:A1:78:2E:50:0C:D8:C2
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 0197B5FC143F7AED920CCE4CCD72D8AF245F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 10:01:25 +0000
Manifest this update: Sat 28 Jun 2025 10:01:25 +0000
Manifest next update: Sun 29 Jun 2025 10:01:25 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: wY047Kzpce2kz+9UhHew03uMmzxB3CSX6iE6BRhx140=)
2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:14:3f:7a:ed:92:0c:ce:4c:cd:72:d8:af:24:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Jun 28 10:01:25 2025 GMT
Not After : Jun 29 10:01:25 2025 GMT
Subject: CN=8a5f5137c3ba803d7fcc5b4311a1782e500cd8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:21:ff:e9:ea:b5:c9:d9:78:65:5d:0c:aa:
b0:29:c2:a4:e3:85:e9:83:ad:6e:ec:f4:ed:1b:1a:
78:02:36:d0:78:4a:2f:7b:9f:0a:63:9b:a1:65:3e:
9d:4b:1d:a8:6d:11:c1:f7:5b:e8:12:81:4f:8c:16:
4f:ae:26:2a:21:3f:37:9f:b8:92:07:60:f8:e3:a3:
0c:5e:72:47:56:e6:a6:84:b6:b2:16:7d:89:cd:83:
c2:62:25:b4:4d:31:98:8e:95:4c:89:01:c0:df:55:
aa:22:b3:d0:bb:c3:b0:9f:e0:d3:c4:83:6d:7a:86:
a2:18:fc:ab:8b:a2:84:66:50:b5:27:ce:c3:4d:34:
97:3e:83:b6:6a:d4:da:7b:aa:8d:80:36:fe:d4:1a:
c5:90:0a:26:0c:5e:7c:b7:1f:6c:3d:66:80:29:c1:
59:0c:76:bc:85:b0:b1:0c:db:08:ce:a8:f5:ac:0f:
cf:0b:e3:db:fb:be:92:aa:c3:01:55:16:a9:24:43:
52:07:cd:34:05:54:c7:b7:09:ea:01:c8:88:8a:0e:
cc:03:33:c2:ff:69:1f:bd:80:d0:ca:a9:65:e4:04:
ce:48:81:ab:5b:b1:8b:27:c0:2e:42:d0:7a:f6:fe:
4c:8f:13:f3:64:5b:61:38:06:cf:e4:c5:89:ac:bf:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:51:37:C3:BA:80:3D:7F:CC:5B:43:11:A1:78:2E:50:0C:D8:C2
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8b:98:d5:d9:51:a0:8e:1c:25:5b:d7:78:36:5c:d4:1e:f8:
e7:35:4a:b9:05:77:4a:23:59:c5:88:3e:5b:b0:eb:40:36:ad:
dc:7c:0b:1e:20:c8:26:1e:c3:fd:92:17:5c:98:2b:d9:9d:3d:
02:9e:20:77:49:6c:2f:2e:99:9d:9c:31:13:83:04:a4:38:3a:
89:ea:63:44:29:29:76:02:94:f0:b8:f2:a1:02:8d:e3:90:d6:
96:b6:ce:07:98:8e:9e:12:8c:73:f4:25:bb:21:22:cb:e9:76:
26:66:57:19:ce:af:96:5c:04:79:5d:34:43:82:a1:e7:00:68:
a1:78:bc:54:2f:c8:62:e8:70:4b:7e:c3:30:70:60:50:c8:cb:
db:f7:c5:a9:f8:8e:4c:5e:55:d8:23:f6:07:44:ab:37:b6:de:
95:54:4b:66:3f:5b:62:59:c9:c8:e6:ca:9e:b0:f6:1a:5f:73:
b5:aa:f4:8a:60:31:bf:37:03:7b:f0:03:03:0f:21:a6:14:65:
0c:4a:1c:3c:9e:ff:07:de:b1:2c:73:cb:41:a5:e3:56:40:5a:
06:49:8c:23:7d:57:de:dc:c2:aa:81:43:12:0a:4c:ee:a4:e8:
4a:e2:d5:88:7f:4c:29:9e:15:a7:6c:20:77:34:34:55:67:7c:
ee:a7:56:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/BQ/eu2SDM5MzXLYryRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjFlOTAwMDk3N2JhZDU4Yzg3NzA1ZTNiMTY1YjA4NDgz
ZjBiM2EwHhcNMjUwNjI4MTAwMTI1WhcNMjUwNjI5MTAwMTI1WjAzMTEwLwYDVQQD
Eyg4YTVmNTEzN2MzYmE4MDNkN2ZjYzViNDMxMWExNzgyZTUwMGNkOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3kh/+nqtcnZeGVdDKqwKcKk44Xp
g61u7PTtGxp4AjbQeEove58KY5uhZT6dSx2obRHB91voEoFPjBZPriYqIT83n7iS
B2D446MMXnJHVuamhLayFn2JzYPCYiW0TTGYjpVMiQHA31WqIrPQu8Own+DTxINt
eoaiGPyri6KEZlC1J87DTTSXPoO2atTae6qNgDb+1BrFkAomDF58tx9sPWaAKcFZ
DHa8hbCxDNsIzqj1rA/PC+Pb+76SqsMBVRapJENSB800BVTHtwnqAciIig7MAzPC
/2kfvYDQyqll5ATOSIGrW7GLJ8AuQtB69v5MjxPzZFthOAbP5MWJrL9VCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpfUTfDuoA9f8xbQxGheC5QDNjCMB8GA1UdIwQY
MBaAFGth6QAJd7rVjIdwXjsWWwhIPws6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xZTJkOTktN2M4My00ZWIyLWExNjMt
MjIyOGY5YWQ3NTBmLzEvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xZTJkOTktN2M4My00ZWIyLWExNjMtMjIyOGY5YWQ3NTBm
LzEvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYuY1dlR
oI4cJVvXeDZc1B745zVKuQV3SiNZxYg+W7DrQDat3HwLHiDIJh7D/ZIXXJgr2Z09
Ap4gd0lsLy6ZnZwxE4MEpDg6iepjRCkpdgKU8LjyoQKN45DWlrbOB5iOnhKMc/Ql
uyEiy+l2JmZXGc6vllwEeV00Q4Kh5wBooXi8VC/IYuhwS37DMHBgUMjL2/fFqfiO
TF5V2CP2B0SrN7belVRLZj9bYlnJyObKnrD2Gl9ztar0imAxvzcDe/ADAw8hphRl
DEocPJ7/B96xLHPLQaXjVkBaBkmMI31X3tzCqoFDEgpM7qToSuLViH9MKZ4Vp2wg
dzQ0VWd87qdW2A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:34 2025 by rpki-client