Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: PT7emAVVcNir7SYhDLMjr+jiSFJAHFScVNJGAfC0mek=
Subject key identifier: 72:E0:07:41:72:64:28:D7:CB:07:DB:E9:CC:99:A5:96:68:33:74:F8
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 0197B7451ECA71300A37BE99B8A893D9AFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: FmKeTAVAWyk7pYw2FSyUnbf3VkuWVDejENa6Pi8Wqro=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1e:ca:71:30:0a:37:be:99:b8:a8:93:d9:af:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=72e00741726428d7cb07dbe9cc99a596683374f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c5:a5:31:59:6a:c8:df:15:a2:51:fb:12:89:
be:72:db:c4:77:92:2c:66:dd:44:30:b8:49:91:51:
28:c5:a1:5b:cb:f4:32:78:45:04:9a:2d:7e:92:af:
9b:83:cf:88:69:86:66:3b:ac:a3:67:29:a6:0d:e0:
81:8a:03:7c:2a:dc:a8:33:d5:76:c9:9a:6a:06:2c:
42:5f:0e:35:62:02:29:9b:a7:d3:d2:01:bb:b2:1c:
a6:05:a2:fb:3f:8f:7e:de:f7:11:56:46:71:52:d5:
76:9b:1e:35:6b:68:81:97:76:5a:52:76:15:ba:6b:
c3:e8:89:c7:a8:95:20:52:6b:b2:69:ae:44:96:1d:
ac:1b:8c:0f:3a:65:de:56:e9:e1:ff:b9:79:56:92:
ca:ac:d6:2c:ea:c7:37:6e:28:3d:55:b1:bb:b0:8e:
ff:a9:d3:2d:77:a0:22:88:02:92:17:13:2e:ed:39:
46:dc:49:cb:5a:f0:53:9e:a3:55:32:9e:67:4c:d7:
3c:43:d6:ba:d3:91:ee:d9:e6:6d:59:11:1b:c9:41:
bb:36:fe:54:92:81:79:72:a0:59:7e:97:f3:de:1c:
1c:83:7f:40:c3:ff:c1:a0:53:41:c2:41:7a:d1:1e:
c3:7b:6a:ab:b3:57:ab:42:c4:00:61:d1:9a:8a:8c:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E0:07:41:72:64:28:D7:CB:07:DB:E9:CC:99:A5:96:68:33:74:F8
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f9:92:aa:14:dc:a3:05:28:e4:f4:38:6f:f3:ba:9e:27:4b:
c4:4f:81:6c:e7:90:ed:18:4a:82:2a:53:5a:02:04:36:6b:65:
78:b3:c7:9a:2e:83:a2:95:92:73:f6:c5:90:76:b3:40:29:4f:
fe:7a:58:3e:37:7c:c5:a8:f5:8c:68:b5:f8:ad:42:67:42:7c:
9b:e2:31:af:cd:27:e4:a1:b2:a1:76:85:87:af:74:fb:8b:dc:
9b:d8:95:d8:08:f3:23:8b:f4:55:7c:03:77:14:c0:91:e2:f0:
c6:73:55:04:5a:5b:00:da:ad:ba:81:80:41:2d:14:41:3b:eb:
8c:d7:ef:0e:df:0b:39:0a:3f:cc:98:e8:b1:41:9b:ab:d2:cb:
d7:10:4d:5b:c6:9b:b8:66:f7:4f:6b:ee:49:81:a9:28:34:37:
8c:90:86:4a:cc:fc:43:e4:e2:28:64:42:a8:22:a2:98:13:9b:
d8:a5:9a:62:3f:c0:89:52:11:1a:2a:3e:15:26:01:b4:b2:af:
71:a5:16:70:eb:ec:5e:00:15:ad:18:ba:b2:ee:24:9d:09:5c:
a0:8b:36:6b:64:e6:32:e8:04:1f:a4:62:d0:9a:d7:91:e6:65:
b2:ea:c8:75:5f:31:a1:4f:ec:fb:b6:da:ae:36:48:ec:59:bd:
2d:86:b5:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RR7KcTAKN76ZuKiT2a+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyY2M2OTE0NzZhNmU3ODk1YjBlNDU2MTE2NDQ0ZjkxOTM3
YmYwMWUwHhcNMjUwNjI4MTYwMDQ5WhcNMjUwNjI5MTYwMDQ5WjAzMTEwLwYDVQQD
Eyg3MmUwMDc0MTcyNjQyOGQ3Y2IwN2RiZTljYzk5YTU5NjY4MzM3NGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMWlMVlqyN8VolH7Eom+ctvEd5Is
Zt1EMLhJkVEoxaFby/QyeEUEmi1+kq+bg8+IaYZmO6yjZymmDeCBigN8KtyoM9V2
yZpqBixCXw41YgIpm6fT0gG7shymBaL7P49+3vcRVkZxUtV2mx41a2iBl3ZaUnYV
umvD6InHqJUgUmuyaa5Elh2sG4wPOmXeVunh/7l5VpLKrNYs6sc3big9VbG7sI7/
qdMtd6AiiAKSFxMu7TlG3EnLWvBTnqNVMp5nTNc8Q9a605Hu2eZtWREbyUG7Nv5U
koF5cqBZfpfz3hwcg39Aw//BoFNBwkF60R7De2qrs1erQsQAYdGaiowXnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLgB0FyZCjXywfb6cyZpZZoM3T4MB8GA1UdIwQY
MBaAFALMaRR2pueJWw5FYRZET5GTe/AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYt
YmMxOTJiYjczMDI1LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYtYmMxOTJiYjczMDI1
LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/mSqhTc
owUo5PQ4b/O6nidLxE+BbOeQ7RhKgipTWgIENmtleLPHmi6DopWSc/bFkHazQClP
/npYPjd8xaj1jGi1+K1CZ0J8m+Ixr80n5KGyoXaFh690+4vcm9iV2AjzI4v0VXwD
dxTAkeLwxnNVBFpbANqtuoGAQS0UQTvrjNfvDt8LOQo/zJjosUGbq9LL1xBNW8ab
uGb3T2vuSYGpKDQ3jJCGSsz8Q+TiKGRCqCKimBOb2KWaYj/AiVIRGio+FSYBtLKv
caUWcOvsXgAVrRi6su4knQlcoIs2a2TmMugEH6Ri0JrXkeZlsurIdV8xoU/s+7ba
rjZI7Fm9LYa1zA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:35 2025 by rpki-client