Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
File: aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json)
Hash identifier: StW5q8Gww9FSokF9j8sWVMbwacQVZE7kjKY73HhoNE4=
Subject key identifier: 45:DA:BC:7A:7D:C3:6A:B5:A3:55:D5:86:91:27:D7:D9:F5:08:24:33
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 0197B6D7317A70800D86988D0305583B9299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
Manifest number: 1497
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: VuecASVmjUcKvyphdlmWhBLtzCY.roa (hash: 9pywbAdYpVLPp0+Qv028vFSYWXiOfuf7WbI6OQxi+GI=)
2: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: y1n1/oBsHO+lURudsK+lBRuxjZrNS60JLrkmS/KyhXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:31:7a:70:80:0d:86:98:8d:03:05:58:3b:92:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=45dabc7a7dc36ab5a355d5869127d7d9f5082433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:74:0d:90:13:c7:aa:dd:bb:9d:a8:5a:7d:
63:9e:ea:d4:01:15:3d:8d:20:12:03:5b:d7:f8:b8:
05:ce:29:80:27:f3:d5:07:c1:5b:3b:92:29:2c:17:
8f:5f:9c:59:2e:5f:4c:f4:31:fe:db:f0:9b:99:de:
c2:38:42:eb:22:20:f1:f1:d7:a5:84:f1:23:29:d7:
ce:32:78:33:a3:c2:74:42:25:50:a2:16:81:29:eb:
37:14:06:00:6d:fe:9f:d3:d8:11:85:81:00:a3:37:
24:cb:42:99:f5:57:9d:21:62:5d:38:36:00:9b:74:
5f:63:2b:83:17:19:a2:d0:cc:d6:42:be:fd:cc:d2:
1c:ed:ab:33:84:9f:ed:f0:28:70:39:c4:36:41:fc:
0a:f4:d0:5b:0c:c3:e6:8d:51:fa:c3:78:ac:b9:74:
da:0e:b3:af:3c:bc:a8:11:5a:9b:27:82:64:b0:28:
52:2a:cc:89:bd:27:18:7f:71:22:86:4e:59:24:34:
a8:33:93:eb:b5:26:10:f4:73:4a:85:6c:65:96:1c:
64:6c:fe:ef:e2:8f:46:91:0b:ba:5f:42:de:e2:d7:
11:ce:4c:b0:da:d2:26:65:d7:c3:71:1d:23:5a:95:
64:40:ce:a2:c3:ee:e0:c1:aa:8b:ee:55:d7:8e:01:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DA:BC:7A:7D:C3:6A:B5:A3:55:D5:86:91:27:D7:D9:F5:08:24:33
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cc:5d:2d:c4:df:9a:f3:31:a5:e0:89:a0:a6:a9:54:9b:cb:
32:86:28:2c:06:2e:2e:65:b3:88:7b:8c:8b:5f:6b:a5:3f:f7:
d3:03:a3:6e:ae:18:05:89:a9:7e:35:27:36:3b:48:ed:5d:da:
db:d8:4c:57:b4:a3:99:6e:09:f3:ff:1e:19:1e:f1:f3:90:79:
06:7b:8c:a6:5b:ca:f1:48:fb:46:e0:a8:4a:7e:d7:01:c9:e5:
1f:67:86:b4:7d:62:92:93:d9:e9:4e:23:50:b6:2e:7b:86:5d:
5d:71:9f:8d:15:0b:ec:f7:c9:61:6f:21:af:c2:f4:4f:6b:8e:
21:0b:dd:39:14:e5:47:39:db:3e:89:94:07:1b:88:f2:3e:c4:
92:5d:c2:85:da:1b:bd:03:9c:5a:60:af:de:af:ed:e0:07:09:
55:86:67:15:b8:a6:a6:6f:1a:e2:32:a0:8a:25:48:08:5a:84:
4d:43:88:be:04:91:59:09:b5:16:c3:a9:0d:4a:7e:5e:cc:b7:
79:89:f1:3d:96:22:93:0c:08:2a:74:51:74:d4:46:1b:b4:5b:
f4:6b:af:b3:2b:98:fc:63:4a:49:f7:83:14:69:49:cb:c7:36:
72:a1:46:91:a2:2b:68:98:50:f8:4c:c0:5a:fe:22:2a:63:27:
49:ca:67:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21zF6cIANhpiNAwVYO5KZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZmVkNTA4Y2NhNWY3MTZlNGRkOTc0ZGUzNTAwZTdkZDE5
YmFhMTUwHhcNMjUwNjI4MTQwMDQ1WhcNMjUwNjI5MTQwMDQ1WjAzMTEwLwYDVQQD
Eyg0NWRhYmM3YTdkYzM2YWI1YTM1NWQ1ODY5MTI3ZDdkOWY1MDgyNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEB0DZATx6rdu52oWn1jnurUARU9
jSASA1vX+LgFzimAJ/PVB8FbO5IpLBePX5xZLl9M9DH+2/Cbmd7COELrIiDx8del
hPEjKdfOMngzo8J0QiVQohaBKes3FAYAbf6f09gRhYEAozcky0KZ9VedIWJdODYA
m3RfYyuDFxmi0MzWQr79zNIc7aszhJ/t8ChwOcQ2QfwK9NBbDMPmjVH6w3isuXTa
DrOvPLyoEVqbJ4JksChSKsyJvScYf3Eihk5ZJDSoM5PrtSYQ9HNKhWxllhxkbP7v
4o9GkQu6X0Le4tcRzkyw2tImZdfDcR0jWpVkQM6iw+7gwaqL7lXXjgEN7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXavHp9w2q1o1XVhpEn19n1CCQzMB8GA1UdIwQY
MBaAFGj+1QjMpfcW5N2XTeNQDn3Rm6oVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVA3VkNNeWw5eGJrM1pkTjQxQU9mZEdicWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jNWVhMzEtN2JjMS00NzdhLThiZGMt
NDFhMzVlN2MyMmY4LzEvYVA3VkNNeWw5eGJrM1pkTjQxQU9mZEdicWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jNWVhMzEtN2JjMS00NzdhLThiZGMtNDFhMzVlN2MyMmY4
LzEvYVA3VkNNeWw5eGJrM1pkTjQxQU9mZEdicWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocxdLcTf
mvMxpeCJoKapVJvLMoYoLAYuLmWziHuMi19rpT/30wOjbq4YBYmpfjUnNjtI7V3a
29hMV7SjmW4J8/8eGR7x85B5BnuMplvK8Uj7RuCoSn7XAcnlH2eGtH1ikpPZ6U4j
ULYue4ZdXXGfjRUL7PfJYW8hr8L0T2uOIQvdORTlRznbPomUBxuI8j7Ekl3Chdob
vQOcWmCv3q/t4AcJVYZnFbimpm8a4jKgiiVICFqETUOIvgSRWQm1FsOpDUp+Xsy3
eYnxPZYikwwIKnRRdNRGG7Rb9GuvsyuY/GNKSfeDFGlJy8c2cqFGkaIraJhQ+EzA
Wv4iKmMnScpn5A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:16 2025 by rpki-client