Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: QuxYCISp3CFSutvUWvjLlUfH1kmtIonRIkZff79MigI=
Subject key identifier: 78:81:6D:7C:80:D0:BB:D5:4D:0D:7B:20:2D:1B:29:5F:7B:53:E2:80
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 0198D66024E67B112DEB17E5CE74DED6BAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: 0JN2vyzDQDc8hqznZuHYx59iVgw.roa (hash: f3XiZFi6nbVWq/4L3lB2rfwMDECeZB1pzVtF3apTcoA=)
2: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: BGZiOGQfSb9ae3S2TkWmQZtNgvKQW/9SzWBwGnkZpKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:24:e6:7b:11:2d:eb:17:e5:ce:74:de:d6:ba:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=78816d7c80d0bbd54d0d7b202d1b295f7b53e280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:5e:8e:87:a0:27:48:a0:bf:cd:d8:17:81:
f0:4b:a1:f4:49:67:5f:a2:4d:a5:92:64:15:08:04:
63:f0:08:84:cc:b0:21:41:22:97:ef:9d:62:80:64:
20:ca:51:69:b2:5d:6e:fa:28:31:41:99:da:1d:12:
9a:de:7f:46:d4:8a:76:54:28:a2:9e:21:4d:b2:44:
a0:30:c5:dc:62:25:6a:22:c1:ee:80:84:1d:f5:9a:
5d:17:ed:b4:ae:8b:ed:06:6d:04:58:0b:f5:2e:72:
b1:6e:31:59:34:6d:58:55:89:66:20:bf:23:75:87:
6c:d4:c0:3e:5e:9f:f7:69:06:f7:58:87:6a:d8:23:
97:7a:db:4b:ce:75:6b:17:30:2f:50:f8:e5:06:26:
26:21:cb:1d:83:a6:b4:91:c6:ec:1b:03:e9:48:57:
96:a9:7d:5d:c2:10:43:91:ec:bb:3f:5e:a2:e9:01:
50:26:c4:69:12:06:b0:2a:36:61:75:8d:69:9e:13:
d8:da:d1:93:b5:a4:49:6a:08:c7:2e:57:13:72:7a:
28:0d:29:d2:1d:8b:4e:4a:5f:fa:7e:57:75:2f:63:
b5:4d:14:39:17:d5:41:51:04:8c:d8:9e:74:92:51:
be:03:6f:b5:ce:b3:70:fd:5b:97:68:22:c4:c3:a6:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:81:6D:7C:80:D0:BB:D5:4D:0D:7B:20:2D:1B:29:5F:7B:53:E2:80
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:61:20:3e:1e:4f:a5:e6:54:6b:7e:1c:46:00:48:50:00:d1:
27:0d:83:98:65:8b:b1:69:4b:5e:bd:e8:73:d3:77:eb:dc:fc:
1d:5e:0b:4a:e3:ea:bf:73:5f:c8:d9:70:1f:8b:7d:e4:5f:6f:
e9:52:e1:18:63:c1:09:04:27:8a:b9:ee:4e:b2:8a:cf:14:ba:
b3:fd:5a:2f:30:8f:87:de:52:18:66:00:d4:30:81:9e:5a:2c:
fd:c3:c7:8e:7a:9d:0f:90:34:23:a6:84:dd:e0:51:40:b0:94:
2d:60:99:c5:8b:a9:a1:7f:26:1c:da:05:d6:10:9e:86:f3:9f:
a0:65:b7:10:b4:d5:8a:cc:e7:68:e2:20:17:39:15:1a:10:3f:
fc:fb:e7:6e:6d:48:fc:2d:de:10:21:3b:a0:8f:df:24:56:b3:
fd:c0:e9:1a:5a:19:fa:5d:a1:dc:3f:76:26:53:fc:c4:03:25:
84:24:9e:86:3e:37:23:3a:30:16:58:17:08:e0:87:52:ac:55:
cc:e1:c3:ad:1a:7c:b9:d2:b8:4d:54:84:55:2d:dd:ea:6d:d5:
9d:72:ed:dc:59:37:96:66:43:c9:3a:5d:c1:32:e9:f9:02:3d:
91:55:c9:4c:d6:57:b1:ac:ea:cf:81:bd:db:48:d5:3c:9c:91:
13:c6:ca:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYCTmexEt6xflznTe1rrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGNmMDdjN2QwNTkzMDJiNTYwNjZhYWY2Y2JlZWMxMzUx
ODZhNDQwHhcNMjUwODIzMTAwMTIxWhcNMjUwODI0MTAwMTIxWjAzMTEwLwYDVQQD
Eyg3ODgxNmQ3YzgwZDBiYmQ1NGQwZDdiMjAyZDFiMjk1ZjdiNTNlMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOZejoegJ0igv83YF4HwS6H0SWdf
ok2lkmQVCARj8AiEzLAhQSKX751igGQgylFpsl1u+igxQZnaHRKa3n9G1Ip2VCii
niFNskSgMMXcYiVqIsHugIQd9ZpdF+20rovtBm0EWAv1LnKxbjFZNG1YVYlmIL8j
dYds1MA+Xp/3aQb3WIdq2COXettLznVrFzAvUPjlBiYmIcsdg6a0kcbsGwPpSFeW
qX1dwhBDkey7P16i6QFQJsRpEgawKjZhdY1pnhPY2tGTtaRJagjHLlcTcnooDSnS
HYtOSl/6fld1L2O1TRQ5F9VBUQSM2J50klG+A2+1zrNw/VuXaCLEw6Zh+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiBbXyA0LvVTQ17IC0bKV97U+KAMB8GA1UdIwQY
MBaAFABM8Hx9BZMCtWBmqvbL7sE1GGpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTIt
NmU1NDViNmM0M2IwLzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTItNmU1NDViNmM0M2Iw
LzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGEgPh5P
peZUa34cRgBIUADRJw2DmGWLsWlLXr3oc9N369z8HV4LSuPqv3NfyNlwH4t95F9v
6VLhGGPBCQQnirnuTrKKzxS6s/1aLzCPh95SGGYA1DCBnlos/cPHjnqdD5A0I6aE
3eBRQLCULWCZxYupoX8mHNoF1hCehvOfoGW3ELTVisznaOIgFzkVGhA//Pvnbm1I
/C3eECE7oI/fJFaz/cDpGloZ+l2h3D92JlP8xAMlhCSehj43IzowFlgXCOCHUqxV
zOHDrRp8udK4TVSEVS3d6m3VnXLt3Fk3lmZDyTpdwTLp+QI9kVXJTNZXsazqz4G9
20jVPJyRE8bKNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:33 2025 by rpki-client