Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: RCnkoHg+Xye2P5cS4JbAztdtsodKXty0hzUOj1sciMI=
Subject key identifier: 42:EE:DA:A5:55:02:49:C8:BE:23:C6:CD:8D:6A:21:44:33:E3:B8:32
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 0197B6D7331264FFB2FE27C4BCEA13A6B1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: vdeSf0MA413NZuYqMZk4vTD9FZB+7iEd1OAa9pmuZxw=)
2: rFvQ7kKYqXPkmLuwIzu6v_5kUm4.roa (hash: sOutQCKMagct2n7Im9fbDePApSglLVIsuSmVsFlE9uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:33:12:64:ff:b2:fe:27:c4:bc:ea:13:a6:b1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=42eedaa5550249c8be23c6cd8d6a214433e3b832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:50:f5:92:d6:d9:f7:46:c6:b7:db:99:9e:
82:a6:68:bd:bf:3a:7c:74:72:23:bd:d7:64:f9:ce:
7a:be:97:ef:25:b1:73:c9:1e:8b:9b:50:d2:91:60:
9b:7b:23:ca:fc:14:cd:3f:88:ab:80:a3:b7:a9:ee:
75:45:95:af:2e:f7:61:b3:b8:c9:4d:09:39:2f:03:
ba:5b:85:af:5a:dc:1e:52:b7:0c:30:93:c2:d4:02:
09:20:dd:04:4a:c4:e1:95:10:12:38:15:3f:42:02:
b6:5e:bf:55:09:04:96:c7:82:d1:d2:31:09:d1:f4:
e9:5b:da:f1:8c:ef:fd:1b:d9:07:8d:69:9c:a9:01:
2d:29:39:6a:ee:12:e8:9b:38:d2:3f:2e:85:8b:e2:
d8:69:61:00:c6:46:32:6e:1d:f8:e6:93:45:1c:04:
ae:f5:6c:2a:3f:4e:b4:3b:e7:89:b1:2f:8b:8e:c5:
ac:70:b6:b4:ca:f9:ce:44:2b:27:97:0c:48:00:4c:
8c:7c:26:c3:5e:ee:c7:99:74:a9:c1:46:3b:e1:ef:
c5:66:d1:2f:36:ac:04:b5:6f:f2:71:4c:a0:5e:59:
b8:7f:b2:54:5e:26:d9:fb:b8:28:d8:31:2e:95:da:
23:6f:50:1e:c3:0a:54:b5:6a:d6:e4:17:4d:36:c0:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EE:DA:A5:55:02:49:C8:BE:23:C6:CD:8D:6A:21:44:33:E3:B8:32
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:07:da:8f:ea:1e:25:2a:52:36:43:26:f1:ca:7e:34:7f:20:
74:fd:c3:91:6c:5f:3a:18:7b:af:49:31:73:6a:7c:d0:93:db:
dc:19:25:46:3e:96:a1:2e:45:70:ae:0f:c4:68:db:4c:0b:92:
9d:0f:49:5b:dc:24:e1:b9:f7:6e:f1:96:88:b1:31:0a:36:da:
61:7a:5a:7f:99:e1:7a:f7:79:9e:37:0a:82:d7:9a:0c:69:b4:
0b:17:23:fe:23:95:2e:bb:b4:dd:f6:34:d6:d2:a6:eb:af:29:
26:dd:14:8b:84:0e:ee:6f:a2:1b:a0:2c:f9:a0:ce:2c:b9:36:
6b:61:aa:0a:88:fb:cc:7f:6d:3f:fd:df:fa:d6:9d:17:2e:82:
ac:2b:43:08:c5:f5:b2:8d:b2:45:68:1a:e3:ed:92:fe:11:0c:
b3:b1:74:43:12:94:a5:d4:c8:e2:c4:b8:f6:4b:46:73:c9:b0:
b9:0d:3a:fa:3e:2c:a6:cd:58:b3:d4:43:1b:5e:bd:e7:24:f5:
0c:7f:59:f3:6a:38:28:c4:9d:d8:55:a2:1a:6a:ce:e3:73:f1:
55:82:37:20:6f:30:e6:66:a7:91:c0:fa:2d:3c:3b:12:78:45:
3b:fd:5b:a5:8d:b8:e2:cf:d0:ba:8f:37:ec:30:fb:2b:b9:d8:
b5:7b:0f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21zMSZP+y/ifEvOoTprGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk
ZTI0NTIwHhcNMjUwNjI4MTQwMDQ2WhcNMjUwNjI5MTQwMDQ2WjAzMTEwLwYDVQQD
Eyg0MmVlZGFhNTU1MDI0OWM4YmUyM2M2Y2Q4ZDZhMjE0NDMzZTNiODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzRQ9ZLW2fdGxrfbmZ6Cpmi9vzp8
dHIjvddk+c56vpfvJbFzyR6Lm1DSkWCbeyPK/BTNP4irgKO3qe51RZWvLvdhs7jJ
TQk5LwO6W4WvWtweUrcMMJPC1AIJIN0ESsThlRASOBU/QgK2Xr9VCQSWx4LR0jEJ
0fTpW9rxjO/9G9kHjWmcqQEtKTlq7hLomzjSPy6Fi+LYaWEAxkYybh345pNFHASu
9WwqP060O+eJsS+LjsWscLa0yvnORCsnlwxIAEyMfCbDXu7HmXSpwUY74e/FZtEv
NqwEtW/ycUygXlm4f7JUXibZ+7go2DEuldojb1AewwpUtWrW5BdNNsAxrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELu2qVVAknIviPGzY1qIUQz47gyMB8GA1UdIwQY
MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt
YTNiNTg2MjgwNjBkLzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk
LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwfaj+oe
JSpSNkMm8cp+NH8gdP3DkWxfOhh7r0kxc2p80JPb3BklRj6WoS5FcK4PxGjbTAuS
nQ9JW9wk4bn3bvGWiLExCjbaYXpaf5nhevd5njcKgteaDGm0Cxcj/iOVLru03fY0
1tKm668pJt0Ui4QO7m+iG6As+aDOLLk2a2GqCoj7zH9tP/3f+tadFy6CrCtDCMX1
so2yRWga4+2S/hEMs7F0QxKUpdTI4sS49ktGc8mwuQ06+j4sps1Ys9RDG1695yT1
DH9Z82o4KMSd2FWiGmrO43PxVYI3IG8w5mankcD6LTw7EnhFO/1bpY244s/Quo83
7DD7K7nYtXsPvg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:57 2025 by rpki-client