Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier: 2ytN8YdgJj9AIuSS8OZU/6G53ST399GqPuxqhGocavs=
Subject key identifier: AC:04:E3:05:10:4C:2D:EF:F8:21:DF:05:B1:28:1E:43:74:3C:16:AE
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 0197B77C34216DAC9B93BA33AF13C86C2CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number: 02A3
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (hash: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=)
2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: 3R7bRNBpZ9rVBZe6LHYqchMPWFf5EqXuUWnCB4piSgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:34:21:6d:ac:9b:93:ba:33:af:13:c8:6c:2c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=ac04e305104c2deff821df05b1281e43743c16ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:41:8d:a5:53:6b:37:02:7c:70:fc:eb:59:
b5:2a:96:08:81:c3:d1:1b:75:ce:4f:f8:53:e2:bc:
93:d1:5b:cc:19:44:96:57:26:f9:b6:1d:f3:9e:67:
cc:5c:d1:61:85:a1:d4:78:f2:39:e2:9b:5a:66:86:
82:19:21:c4:e5:e1:e1:71:d7:52:2f:08:d9:19:5e:
b5:cc:d8:03:48:86:95:d0:05:91:ec:70:d0:34:dc:
9f:d9:1b:61:40:8c:43:43:a6:d3:1d:2a:89:ae:91:
0c:92:5f:24:36:44:63:4d:11:b1:95:04:ec:d8:70:
d6:2c:18:bf:aa:69:8f:a7:ba:8a:02:0c:10:5c:d0:
3f:b7:76:cd:3b:54:69:f7:1d:05:91:43:42:7b:4e:
e6:cd:e9:e9:c6:7e:77:0b:57:2a:7a:62:3f:ba:8e:
bc:91:aa:57:7b:0f:9c:8b:a0:ec:00:78:8f:54:f6:
b4:fd:d9:94:36:16:65:6c:96:94:98:cb:66:e2:91:
69:8f:86:25:50:8e:59:09:09:c3:39:dd:ef:87:b5:
08:b9:a6:26:e1:da:6f:3f:6e:e6:fb:bd:3b:40:99:
2d:21:0d:22:1d:66:34:88:d0:00:78:85:93:bf:c6:
42:f9:f7:78:34:ac:ea:ca:38:15:af:1e:9e:2d:98:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:04:E3:05:10:4C:2D:EF:F8:21:DF:05:B1:28:1E:43:74:3C:16:AE
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8c:01:26:fd:b8:21:2f:c9:a3:05:0b:4d:58:fa:84:f1:c5:
f5:4b:0b:6f:ac:57:f4:16:3a:5b:70:a0:a2:e8:02:f4:db:11:
2d:66:f2:bc:b0:1f:8a:e7:a1:b6:18:e3:05:35:e1:8a:99:7b:
02:d0:3f:0c:84:b7:a6:14:fe:93:a7:94:75:b9:c9:9e:e7:1c:
43:4d:9d:04:e9:67:dc:e8:f8:c6:da:d8:59:99:83:37:f9:4a:
1e:47:3e:ca:0f:6e:da:6a:48:3e:aa:77:42:45:a8:0d:6d:68:
d1:77:d3:75:6b:74:7a:c7:9a:c1:ca:6b:9a:83:f2:e7:1e:2e:
67:ce:b4:0a:70:47:dc:4a:f2:30:08:b7:aa:5f:3a:82:34:bf:
c0:3a:f3:d2:53:cc:45:38:28:c7:f7:ec:de:12:b5:ad:1f:2d:
9e:8b:a0:d9:55:d1:46:04:78:45:af:3f:a8:af:d2:27:ba:62:
1d:b4:59:a2:68:51:41:77:d3:d1:09:45:81:57:34:c4:a8:eb:
40:40:2f:a5:c0:53:c1:8f:e9:52:ff:04:8f:ce:e9:04:0b:f5:
23:f7:7e:f8:77:d7:cb:a7:d6:b4:66:df:2f:cf:f3:a5:70:7b:
cf:54:ea:af:93:fe:30:bf:09:61:f6:fa:40:05:7f:f3:3e:af:
70:a5:01:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDQhbaybk7ozrxPIbCzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDhkYTEzOWI1NmY5OThiZTI0NjY1ZGIxNGFkMWUxNTY3
NjhmYzMwHhcNMjUwNjI4MTcwMDU5WhcNMjUwNjI5MTcwMDU5WjAzMTEwLwYDVQQD
EyhhYzA0ZTMwNTEwNGMyZGVmZjgyMWRmMDViMTI4MWU0Mzc0M2MxNmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg9BjaVTazcCfHD861m1KpYIgcPR
G3XOT/hT4ryT0VvMGUSWVyb5th3znmfMXNFhhaHUePI54ptaZoaCGSHE5eHhcddS
LwjZGV61zNgDSIaV0AWR7HDQNNyf2RthQIxDQ6bTHSqJrpEMkl8kNkRjTRGxlQTs
2HDWLBi/qmmPp7qKAgwQXNA/t3bNO1Rp9x0FkUNCe07mzenpxn53C1cqemI/uo68
kapXew+ci6DsAHiPVPa0/dmUNhZlbJaUmMtm4pFpj4YlUI5ZCQnDOd3vh7UIuaYm
4dpvP27m+707QJktIQ0iHWY0iNAAeIWTv8ZC+fd4NKzqyjgVrx6eLZjuxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwE4wUQTC3v+CHfBbEoHkN0PBauMB8GA1UdIwQY
MBaAFKwI2hObVvmYviRmXbFK0eFWdo/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0Mzct
Njk5Y2Y3YjA5NTkwLzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0MzctNjk5Y2Y3YjA5NTkw
LzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYwBJv24
IS/JowULTVj6hPHF9UsLb6xX9BY6W3CgougC9NsRLWbyvLAfiuehthjjBTXhipl7
AtA/DIS3phT+k6eUdbnJnuccQ02dBOln3Oj4xtrYWZmDN/lKHkc+yg9u2mpIPqp3
QkWoDW1o0XfTdWt0eseawcprmoPy5x4uZ860CnBH3EryMAi3ql86gjS/wDrz0lPM
RTgox/fs3hK1rR8tnoug2VXRRgR4Ra8/qK/SJ7piHbRZomhRQXfT0QlFgVc0xKjr
QEAvpcBTwY/pUv8Ej87pBAv1I/d++HfXy6fWtGbfL8/zpXB7z1Tqr5P+ML8JYfb6
QAV/8z6vcKUBYA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:37 2025 by rpki-client