Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: lD901+bUIgmCxPGenhXftTO0aZT1WYOzU6tkmRCUpUw=
Subject key identifier: 28:8E:C6:0E:2F:C6:23:24:12:99:4E:E9:62:07:D7:A6:2A:22:C4:BA
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 0197B6A0ABD70CB8DCB200AFA1F38CAE63CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 0376
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: zCr70GNPklIx460DBRQrrnaKNQ2tYal7Zppir2v2TS8=)
2: M5q-y_pSOaw-LnhCtgtI_cxU90s.roa (hash: EkxFUEnDMMrgIyFYsLlI4yCORNtS7fa6ZKub0vDM94A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ab:d7:0c:b8:dc:b2:00:af:a1:f3:8c:ae:63:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=288ec60e2fc6232412994ee96207d7a62a22c4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:c2:7d:14:e6:41:9f:93:b0:4a:92:d5:82:
03:6f:b9:0d:23:ea:4c:67:9e:f6:20:dd:a5:b5:5c:
64:10:21:e7:f1:db:ee:56:99:c0:b0:a0:31:d6:47:
54:7c:d0:ee:ca:f5:b6:a6:d2:d6:e4:a2:e4:80:9e:
48:64:7e:48:7b:9d:e0:65:9c:0f:92:f6:3e:28:d8:
0e:9e:91:74:74:0e:0a:55:02:15:f4:c8:ab:2e:d1:
ae:d5:eb:97:6a:a4:6a:ce:b9:0a:d8:ac:d7:b9:de:
1f:69:b6:88:57:db:7d:06:ce:38:ae:dc:cb:31:c2:
24:81:a4:0e:05:de:bd:7b:6d:86:5f:1d:f5:31:bc:
60:16:6e:d0:e1:8c:64:dd:fe:99:e9:a4:34:82:fe:
db:de:b6:7a:1c:73:db:32:d7:fa:1e:5b:d9:47:f0:
ad:20:a1:7a:78:88:79:be:91:03:eb:86:6e:29:70:
84:c0:ee:d9:bc:3b:f2:f5:4b:b2:61:12:3b:7c:99:
fb:aa:9c:f1:46:c1:13:82:cd:dd:da:3c:16:11:d3:
11:94:9f:38:a2:37:41:cc:c6:4e:d2:30:71:55:62:
05:50:4c:0b:c1:a8:4f:11:ab:b3:a8:c9:62:d3:12:
0c:6c:02:0a:b8:9b:3a:22:54:eb:18:92:a8:7c:b5:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8E:C6:0E:2F:C6:23:24:12:99:4E:E9:62:07:D7:A6:2A:22:C4:BA
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7b:93:9f:df:4d:03:bb:d1:06:a3:b1:7b:b1:40:3e:b5:99:
f6:18:8b:02:19:95:c8:b1:1b:6f:1f:8a:88:eb:35:6e:93:73:
4f:03:b7:a5:39:f6:7d:a8:21:48:0e:b0:da:1f:9a:15:5f:29:
94:4d:8e:cf:40:34:bf:93:00:5a:e6:a0:e7:3d:a6:4f:bf:f7:
79:fa:e8:7c:5c:e1:5e:30:3f:d3:94:df:dc:42:02:36:19:0b:
52:69:e3:72:44:30:28:65:6b:ba:29:43:6b:98:f7:38:c7:77:
d3:94:1f:86:1a:a8:de:a6:b4:e2:43:12:e2:6a:7d:83:2d:be:
84:d0:a4:7c:2e:6b:be:8c:2a:a4:f0:3b:71:7f:d7:72:5d:b0:
68:b2:bc:0c:e9:f8:63:72:99:c7:68:37:aa:94:69:85:36:3b:
43:41:c1:b8:01:06:c1:31:34:99:be:38:80:07:ac:a9:e0:81:
81:b9:77:68:be:ef:8f:54:5e:82:42:47:21:ef:b0:09:14:db:
a0:b3:c5:e6:c3:fe:cf:06:4b:89:b4:04:05:77:b3:09:df:86:
d2:9a:a0:2e:9b:05:bb:fd:d5:35:9c:fe:32:43:a6:02:00:2d:
7a:1b:3a:5e:7a:c1:9f:7f:a8:02:fa:7d:c8:d7:9f:ce:a1:82:
70:f5:56:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKvXDLjcsgCvofOMrmPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyN2U1ODU4ZmE1NDNmZTNmZjQ3NGQ4ZDc2YWI5NzAxZWEw
MTBiMGIwHhcNMjUwNjI4MTMwMTEyWhcNMjUwNjI5MTMwMTEyWjAzMTEwLwYDVQQD
EygyODhlYzYwZTJmYzYyMzI0MTI5OTRlZTk2MjA3ZDdhNjJhMjJjNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtETCfRTmQZ+TsEqS1YIDb7kNI+pM
Z572IN2ltVxkECHn8dvuVpnAsKAx1kdUfNDuyvW2ptLW5KLkgJ5IZH5Ie53gZZwP
kvY+KNgOnpF0dA4KVQIV9MirLtGu1euXaqRqzrkK2KzXud4fabaIV9t9Bs44rtzL
McIkgaQOBd69e22GXx31MbxgFm7Q4Yxk3f6Z6aQ0gv7b3rZ6HHPbMtf6HlvZR/Ct
IKF6eIh5vpED64ZuKXCEwO7ZvDvy9UuyYRI7fJn7qpzxRsETgs3d2jwWEdMRlJ84
ojdBzMZO0jBxVWIFUEwLwahPEauzqMli0xIMbAIKuJs6IlTrGJKofLWDNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiOxg4vxiMkEplO6WIH16YqIsS6MB8GA1UdIwQY
MBaAFAJ+WFj6VD/j/0dNjXarlwHqAQsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMt
M2IyODk0ZjBlNjljLzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMtM2IyODk0ZjBlNjlj
LzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonuTn99N
A7vRBqOxe7FAPrWZ9hiLAhmVyLEbbx+KiOs1bpNzTwO3pTn2faghSA6w2h+aFV8p
lE2Oz0A0v5MAWuag5z2mT7/3efrofFzhXjA/05Tf3EICNhkLUmnjckQwKGVruilD
a5j3OMd305Qfhhqo3qa04kMS4mp9gy2+hNCkfC5rvowqpPA7cX/Xcl2waLK8DOn4
Y3KZx2g3qpRphTY7Q0HBuAEGwTE0mb44gAesqeCBgbl3aL7vj1RegkJHIe+wCRTb
oLPF5sP+zwZLibQEBXezCd+G0pqgLpsFu/3VNZz+MkOmAgAtehs6XnrBn3+oAvp9
yNefzqGCcPVWKg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:51 2025 by rpki-client