Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: Er2Y+DQLAl1tZ8fooesIM9Z4yCufvzaJ+h8fIgsgdRM=
Subject key identifier: EB:75:55:99:AE:86:C1:DA:52:1A:05:04:BB:F7:BD:AF:4D:89:32:BF
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 0198D884DBCE4B01DCAA066516C8079A0608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 20:00:42 +0000
Manifest this update: Sat 23 Aug 2025 20:00:42 +0000
Manifest next update: Sun 24 Aug 2025 20:00:42 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: I/LlmIpVXVC1uZhdlz39B/DtshIJTmZfIUKhv80buG4=)
2: rFvQ7kKYqXPkmLuwIzu6v_5kUm4.roa (hash: sOutQCKMagct2n7Im9fbDePApSglLVIsuSmVsFlE9uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:db:ce:4b:01:dc:aa:06:65:16:c8:07:9a:06:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Aug 23 20:00:42 2025 GMT
Not After : Aug 24 20:00:42 2025 GMT
Subject: CN=eb755599ae86c1da521a0504bbf7bdaf4d8932bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:fe:d1:0f:82:67:2c:05:c5:58:73:6f:b8:
62:42:56:b4:ee:67:a8:d1:af:01:30:db:70:33:72:
8e:33:1e:4b:33:b2:ea:2c:5c:41:d2:d1:18:da:82:
ff:6b:73:41:39:fc:07:a9:10:07:aa:75:07:a5:0d:
fc:21:b4:55:ea:84:3e:a0:b3:45:f5:81:21:b9:81:
11:05:be:e7:b5:d4:4d:ca:05:0b:ad:e1:5d:f7:1d:
9d:02:f2:d5:e1:ee:d5:4b:1d:6f:7f:b6:28:02:3b:
62:a0:0e:2a:c3:e0:41:b2:ab:95:69:c2:da:e0:0d:
cf:e0:49:58:06:1e:28:1d:54:ce:a0:ab:03:a5:8e:
ac:f7:c2:19:4a:1a:4e:82:21:21:31:fa:fa:67:78:
d0:b0:3c:f4:92:aa:a6:d1:aa:e7:d1:8b:d2:2b:a6:
e5:ea:ae:42:25:d4:d9:23:7e:5b:67:d5:ff:ca:3e:
0c:aa:75:98:de:00:86:51:de:f7:ed:5c:c9:47:00:
a3:54:7a:fa:d2:55:b1:bb:6c:50:9e:69:79:73:d0:
02:8c:02:3b:6c:2e:23:df:94:28:36:50:2d:5c:1d:
3a:0b:7c:8f:75:90:82:94:ee:52:a4:8b:dd:ac:53:
a6:36:52:7f:05:30:a0:b0:9a:18:16:0b:16:a5:e6:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:75:55:99:AE:86:C1:DA:52:1A:05:04:BB:F7:BD:AF:4D:89:32:BF
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f0:9a:cb:b3:a0:85:49:ed:aa:76:5f:8a:62:44:95:db:e2:
b5:59:40:c5:1e:dd:be:4d:74:36:d7:22:6a:1f:ba:67:0c:af:
e0:48:6e:12:b5:2e:bd:a5:0d:21:1a:10:57:36:44:a0:a0:3a:
81:20:2d:c8:53:cc:43:fe:61:d1:7c:f1:ab:65:02:57:73:8a:
7f:e4:34:0e:d9:65:93:07:81:ea:11:ec:82:2e:98:ec:95:77:
b3:54:dd:d1:84:53:4b:c2:6d:c8:07:99:22:c2:77:ad:3d:fe:
a9:dd:cb:9b:b8:e4:8e:96:ff:a4:0c:7f:7a:f6:de:d9:03:fc:
a1:cf:4a:6b:2a:d6:f4:0d:8a:95:81:2e:af:7f:3c:b0:7b:f3:
fb:67:86:82:17:d2:b7:18:e0:b5:29:b4:2b:2c:b1:59:2d:2b:
41:ba:35:fd:ef:e1:5e:7a:cb:24:a8:a2:87:eb:f1:c5:10:46:
78:09:6a:c2:2e:20:a5:12:31:39:0d:ad:25:1a:4d:23:c1:93:
58:9d:ed:50:0c:36:15:46:36:95:b0:54:a7:da:cb:c7:f9:05:
75:75:1c:cd:f7:10:ef:e3:1f:03:8b:15:0b:8e:90:d0:9c:e9:
33:02:77:6f:64:14:83:29:18:96:12:0e:00:f1:5d:d7:3c:25:
f6:e7:de:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYhNvOSwHcqgZlFsgHmgYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk
ZTI0NTIwHhcNMjUwODIzMjAwMDQyWhcNMjUwODI0MjAwMDQyWjAzMTEwLwYDVQQD
EyhlYjc1NTU5OWFlODZjMWRhNTIxYTA1MDRiYmY3YmRhZjRkODkzMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVf+0Q+CZywFxVhzb7hiQla07meo
0a8BMNtwM3KOMx5LM7LqLFxB0tEY2oL/a3NBOfwHqRAHqnUHpQ38IbRV6oQ+oLNF
9YEhuYERBb7ntdRNygULreFd9x2dAvLV4e7VSx1vf7YoAjtioA4qw+BBsquVacLa
4A3P4ElYBh4oHVTOoKsDpY6s98IZShpOgiEhMfr6Z3jQsDz0kqqm0arn0YvSK6bl
6q5CJdTZI35bZ9X/yj4MqnWY3gCGUd737VzJRwCjVHr60lWxu2xQnml5c9ACjAI7
bC4j35QoNlAtXB06C3yPdZCClO5SpIvdrFOmNlJ/BTCgsJoYFgsWpeZZewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOt1VZmuhsHaUhoFBLv3va9NiTK/MB8GA1UdIwQY
MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt
YTNiNTg2MjgwNjBkLzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk
LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPCay7Og
hUntqnZfimJEldvitVlAxR7dvk10Ntciah+6Zwyv4EhuErUuvaUNIRoQVzZEoKA6
gSAtyFPMQ/5h0Xzxq2UCV3OKf+Q0DtllkweB6hHsgi6Y7JV3s1Td0YRTS8JtyAeZ
IsJ3rT3+qd3Lm7jkjpb/pAx/evbe2QP8oc9KayrW9A2KlYEur388sHvz+2eGghfS
txjgtSm0KyyxWS0rQbo1/e/hXnrLJKiih+vxxRBGeAlqwi4gpRIxOQ2tJRpNI8GT
WJ3tUAw2FUY2lbBUp9rLx/kFdXUczfcQ7+MfA4sVC46Q0JzpMwJ3b2QUgykYlhIO
APFd1zwl9ufe5A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:10 2025 by rpki-client