Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json)
Hash identifier: Oux9IYpoa0jSgxxavwLZonIwQTLo3kowalt72F+zTZw=
Subject key identifier: CF:49:81:4A:6B:8E:79:60:58:A8:4F:ED:86:A4:2B:C9:F1:8A:7B:00
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 0198D7E0F1AFB3A593639BC4E9403418477D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
Manifest number: 0BBF
Signing time: Sat 23 Aug 2025 17:01:39 +0000
Manifest this update: Sat 23 Aug 2025 17:01:39 +0000
Manifest next update: Sun 24 Aug 2025 17:01:39 +0000
Files and hashes: 1: 7TO4e8lijWMlxMa1DByMrXD5jOw.roa (hash: cDwhkc8bh/DTSiy1V4KBQ3fFakHZ/iT/sbs5LQBmNws=)
2: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: 2GJsw5OUuDmHZgiecgxPMQdXADTmbNGQdY1Ey6Q4ghg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:f1:af:b3:a5:93:63:9b:c4:e9:40:34:18:47:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: Aug 23 17:01:39 2025 GMT
Not After : Aug 24 17:01:39 2025 GMT
Subject: CN=cf49814a6b8e796058a84fed86a42bc9f18a7b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:1c:d9:28:18:e8:66:af:27:6c:a4:0b:86:
a6:c7:8a:78:86:19:fe:72:c5:45:9e:88:74:05:80:
d5:73:68:26:f0:e5:c2:e6:a8:ae:1f:a5:50:38:6d:
91:db:c6:ab:97:a3:25:6a:e8:c2:cc:74:81:b8:37:
df:0d:21:95:0c:fd:b9:dd:6c:ba:f9:09:a8:b4:48:
b2:cf:9a:06:fb:52:16:ef:40:4b:f1:08:d9:a5:1d:
34:3c:31:47:35:49:4e:fa:c5:9e:02:af:ed:87:d3:
ad:95:d3:c4:4f:d9:fc:af:31:37:ab:7c:1d:b5:47:
6d:d1:cf:37:b1:cc:d4:3f:0d:5e:fa:3a:46:8f:3a:
b8:b2:ae:ac:24:93:9e:85:71:da:fa:fc:be:f2:46:
a4:6e:aa:c7:3b:46:ba:0b:31:3e:a4:00:06:44:bf:
dc:f8:fd:9f:d8:d0:8e:25:9d:34:06:55:a2:e9:d2:
5c:69:32:27:63:81:22:7d:62:55:b7:2b:6c:7b:98:
bb:ab:1b:fe:66:16:38:12:93:73:e4:2f:ef:34:19:
02:75:b3:37:65:ed:67:6a:91:04:31:1d:db:28:45:
46:7c:7d:83:1b:6b:1c:d8:c5:bf:37:73:07:c4:97:
38:ac:a6:97:a0:d7:00:b0:42:8c:77:6d:7c:cc:a3:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:49:81:4A:6B:8E:79:60:58:A8:4F:ED:86:A4:2B:C9:F1:8A:7B:00
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:b4:76:e4:1b:8e:3a:bd:06:a8:a8:47:7d:08:22:bc:a8:d1:
bd:c6:aa:c4:f4:82:c3:24:1d:12:fa:4d:59:de:b0:6d:a3:bf:
d1:18:1e:8a:43:98:1f:f8:07:f6:67:55:36:5c:45:98:87:2d:
0f:eb:62:d9:a7:79:4d:9c:00:1e:35:cf:19:f5:1f:1d:4f:7a:
04:48:3e:c0:25:6f:d9:03:95:57:f4:c6:21:5e:1c:34:dc:35:
2b:6a:98:dd:c9:ec:1b:66:42:f5:86:f2:35:8a:0b:1b:73:24:
23:30:5b:1e:4e:ee:42:12:c6:d3:0a:09:98:2f:b3:a2:bd:0e:
ae:8f:e0:43:49:35:d6:46:fb:ba:e8:4b:30:9d:64:7a:e4:96:
13:94:2b:3c:65:1b:fa:8f:a5:f4:6a:02:8c:3a:fc:e7:57:fa:
1d:88:ac:58:d5:2c:de:2b:ea:c2:91:9a:08:da:fa:42:3d:e4:
a4:2c:d9:fb:8f:30:0a:46:6a:8f:8c:f7:45:20:c2:97:40:b0:
80:4d:24:03:88:20:01:f7:58:5b:2b:17:ca:8d:ab:e4:44:23:
02:ea:8a:0b:50:ed:32:8f:e1:1f:67:cc:c1:9c:e8:a6:e1:d3:
71:c4:13:a9:02:9c:3a:83:39:56:16:d3:fc:67:40:a4:1e:ae:
9e:57:a7:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4PGvs6WTY5vE6UA0GEd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMmM4ZmZjNTA2MDllYzBkOGI0YTcyODA1Yzg5OTBhNjRh
YWU3MWUwHhcNMjUwODIzMTcwMTM5WhcNMjUwODI0MTcwMTM5WjAzMTEwLwYDVQQD
EyhjZjQ5ODE0YTZiOGU3OTYwNThhODRmZWQ4NmE0MmJjOWYxOGE3YjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplUc2SgY6GavJ2ykC4amx4p4hhn+
csVFnoh0BYDVc2gm8OXC5qiuH6VQOG2R28arl6MlaujCzHSBuDffDSGVDP253Wy6
+QmotEiyz5oG+1IW70BL8QjZpR00PDFHNUlO+sWeAq/th9OtldPET9n8rzE3q3wd
tUdt0c83sczUPw1e+jpGjzq4sq6sJJOehXHa+vy+8kakbqrHO0a6CzE+pAAGRL/c
+P2f2NCOJZ00BlWi6dJcaTInY4EifWJVtytse5i7qxv+ZhY4EpNz5C/vNBkCdbM3
Ze1napEEMR3bKEVGfH2DG2sc2MW/N3MHxJc4rKaXoNcAsEKMd218zKMK6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9JgUprjnlgWKhP7YakK8nxinsAMB8GA1UdIwQY
MBaAFAIsj/xQYJ7A2LSnKAXImQpkquceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82ZjhhNzctYjI2Yy00ZDI0LWJiNDQt
MTViMGMzNDQ5OTA3LzEvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My82ZjhhNzctYjI2Yy00ZDI0LWJiNDQtMTViMGMzNDQ5OTA3
LzEvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1rR25BuO
Or0GqKhHfQgivKjRvcaqxPSCwyQdEvpNWd6wbaO/0RgeikOYH/gH9mdVNlxFmIct
D+ti2ad5TZwAHjXPGfUfHU96BEg+wCVv2QOVV/TGIV4cNNw1K2qY3cnsG2ZC9Yby
NYoLG3MkIzBbHk7uQhLG0woJmC+zor0Oro/gQ0k11kb7uuhLMJ1keuSWE5QrPGUb
+o+l9GoCjDr851f6HYisWNUs3ivqwpGaCNr6Qj3kpCzZ+48wCkZqj4z3RSDCl0Cw
gE0kA4ggAfdYWysXyo2r5EQjAuqKC1DtMo/hH2fMwZzopuHTccQTqQKcOoM5VhbT
/GdApB6unlengg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:26 2025 by rpki-client