Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File: AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier: M41BUfzMubAWsjYWbrb+Ro5b6wRAUsYiQkNd4NJvKc4=
Subject key identifier: E9:31:63:72:12:D3:1E:45:35:B8:53:81:2B:3A:63:E8:72:DB:49:73
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 0197B7EA7E99032613ADD9AB5FA020FD9065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: K6UjeLOvmXe2FTfMSGHo8CAlTsrEbV3T2SIP5FpNgsg=)
2: V2K-oZleXeUaxCNtSI8GJz8R-T8.roa (hash: BfQ/+c4yu8OqgDpQuVge6IJ1WfNKM140JuABCwOq8WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7e:99:03:26:13:ad:d9:ab:5f:a0:20:fd:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=e931637212d31e4535b853812b3a63e872db4973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:8b:69:36:3e:99:88:de:f0:24:7b:26:a9:
31:95:54:ce:81:cd:df:0d:bd:8e:7b:ce:4f:1f:ed:
0a:99:e6:ca:5d:82:5c:db:9d:6a:1a:13:46:03:40:
e7:a8:5a:fd:ae:58:c8:aa:43:2b:29:34:95:b8:7e:
7e:67:40:38:76:1d:bc:f1:e1:44:72:25:23:de:28:
64:9c:55:fd:88:7d:ca:72:2c:5c:c4:16:c3:5d:36:
23:b4:6a:a4:24:d6:b8:6d:ef:99:aa:7e:47:cc:e7:
d6:bf:e3:b4:88:ec:96:74:bd:56:43:6c:84:85:6c:
5b:20:ca:91:f8:1e:63:86:f5:5a:ee:5d:4a:78:cd:
34:15:6b:75:dd:34:52:64:25:92:a5:62:af:49:18:
5c:c3:bf:4e:57:d8:c9:30:87:d0:e0:37:46:17:56:
fb:1e:f3:88:01:03:02:95:81:22:5f:ad:b7:01:dc:
e1:86:5d:4d:ce:e3:9d:d5:c8:39:cb:fa:80:53:d1:
ac:cf:10:ee:55:40:55:d2:51:b5:18:27:11:e7:19:
dd:d8:9c:6c:1f:4f:37:ca:32:dd:26:3b:83:0b:19:
53:53:4c:93:57:ff:ee:cc:d0:c2:11:50:71:81:8b:
e3:8c:41:50:ab:04:3b:f3:e8:30:03:70:e9:47:82:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:63:72:12:D3:1E:45:35:B8:53:81:2B:3A:63:E8:72:DB:49:73
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:52:e0:a2:12:3f:54:cd:d7:58:99:7d:a6:72:f7:02:1d:14:
33:5d:51:ad:03:c2:ed:4d:2f:be:77:0a:6c:d4:89:db:b7:51:
25:6d:a6:15:26:6f:30:65:c7:94:e1:b3:4b:e0:54:63:4a:84:
9b:a1:11:ca:fc:52:56:6b:62:18:de:cd:e5:5e:2f:49:ba:dd:
df:58:c6:ab:6f:30:cb:0d:7a:02:de:71:93:36:f7:ce:40:65:
a8:8e:49:4c:79:e0:b2:3a:60:28:4c:f1:4c:a3:6e:6f:e1:b5:
b7:06:bb:e4:3c:96:8c:29:cf:63:4a:ed:85:a8:83:d8:7f:97:
fd:80:69:66:5e:a8:d5:58:35:2b:2a:20:90:ce:94:29:4d:85:
cd:ad:51:1e:3c:51:a0:21:43:70:08:c0:2d:d5:60:2f:51:e3:
88:6a:87:8d:47:5e:8f:d5:0f:fc:4a:c7:9a:c5:0e:fa:92:6b:
ed:aa:7f:62:fe:e2:70:77:53:39:0a:5b:de:f5:71:8d:0b:f3:
0f:cc:3f:f2:83:7c:41:5b:a7:a1:c5:d2:ee:67:c7:3e:6f:59:
f3:2c:88:0a:a7:9f:be:71:7e:27:5b:cd:44:d5:47:e1:93:92:
95:ad:69:d4:d3:75:31:74:03:fe:c5:04:db:b5:df:e3:5e:4c:
6c:c2:e9:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36n6ZAyYTrdmrX6Ag/ZBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjg3MzUxODY5N2MyM2U5YzNlMzdhNjQ2YmFkMTIxMjM1
YWQ3NDQwHhcNMjUwNjI4MTkwMTI3WhcNMjUwNjI5MTkwMTI3WjAzMTEwLwYDVQQD
EyhlOTMxNjM3MjEyZDMxZTQ1MzViODUzODEyYjNhNjNlODcyZGI0OTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4yLaTY+mYje8CR7JqkxlVTOgc3f
Db2Oe85PH+0KmebKXYJc251qGhNGA0DnqFr9rljIqkMrKTSVuH5+Z0A4dh288eFE
ciUj3ihknFX9iH3KcixcxBbDXTYjtGqkJNa4be+Zqn5HzOfWv+O0iOyWdL1WQ2yE
hWxbIMqR+B5jhvVa7l1KeM00FWt13TRSZCWSpWKvSRhcw79OV9jJMIfQ4DdGF1b7
HvOIAQMClYEiX623Adzhhl1NzuOd1cg5y/qAU9GszxDuVUBV0lG1GCcR5xnd2Jxs
H083yjLdJjuDCxlTU0yTV//uzNDCEVBxgYvjjEFQqwQ78+gwA3DpR4KvDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkxY3IS0x5FNbhTgSs6Y+hy20lzMB8GA1UdIwQY
MBaAFAMoc1GGl8I+nD43pka60SEjWtdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmIt
MTI3MDA4OTI0ZWVkLzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmItMTI3MDA4OTI0ZWVk
LzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1LgohI/
VM3XWJl9pnL3Ah0UM11RrQPC7U0vvncKbNSJ27dRJW2mFSZvMGXHlOGzS+BUY0qE
m6ERyvxSVmtiGN7N5V4vSbrd31jGq28wyw16At5xkzb3zkBlqI5JTHngsjpgKEzx
TKNub+G1twa75DyWjCnPY0rthaiD2H+X/YBpZl6o1Vg1KyogkM6UKU2Fza1RHjxR
oCFDcAjALdVgL1HjiGqHjUdej9UP/ErHmsUO+pJr7ap/Yv7icHdTOQpb3vVxjQvz
D8w/8oN8QVunocXS7mfHPm9Z8yyICqefvnF+J1vNRNVH4ZOSla1p1NN1MXQD/sUE
27Xf415MbMLpHg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:05 2025 by rpki-client