Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: m96ALaYpO2x6Zxzs2AKO2EUiJAXSWH41Oyfwkj4JnZw=
Subject key identifier: 9C:D6:56:BF:B1:31:AF:6C:44:D7:DC:B8:5F:E7:90:D9:21:5C:CB:6A
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 0197B6A23025F6AC99E4463D7CE15652F4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 117E
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: n02RExHfpuRupIXB1LPO+1hlgOFkS/J/IFBM1m87YYg=)
3: pA69kigPY-rHAuVsRrW13R0aZeM.roa (hash: pYVfBq1JCxgc3lobgl41dLccuxJHZgCaSlieF8Jm/Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:30:25:f6:ac:99:e4:46:3d:7c:e1:56:52:f4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=9cd656bfb131af6c44d7dcb85fe790d9215ccb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:3c:b4:5a:ed:66:b7:90:73:90:24:52:17:
06:1d:fb:03:a2:7e:72:80:e8:47:c5:33:d6:f5:7d:
31:31:ed:75:cb:40:b2:02:5d:29:84:e4:80:78:8d:
d4:d4:fe:66:5b:72:6d:e5:6a:c4:03:cf:98:83:9a:
eb:ec:d4:ce:78:36:31:2f:ec:1f:e1:48:1c:a4:eb:
a8:6f:38:aa:b4:f7:28:42:f3:4c:d7:41:ab:5d:fc:
41:e2:f0:de:55:bc:35:43:d1:7c:4a:76:e0:4d:32:
71:ac:4d:fe:20:12:2d:b4:b0:81:31:28:60:3c:3f:
cd:7d:2d:4c:5a:29:aa:4d:ac:7b:0d:4e:fc:28:c6:
31:9e:fc:c6:f4:0f:e9:3a:b6:dd:75:18:12:b2:49:
4c:21:a6:62:14:e9:58:45:2c:93:5d:84:fc:6c:b7:
c3:d0:46:96:d6:1f:3a:ce:2f:ec:c5:d3:bb:e2:23:
5f:49:47:fb:50:11:a3:10:cb:7f:ad:5b:97:11:9e:
50:f0:84:04:94:56:9e:13:88:57:a0:92:09:53:58:
24:05:99:3c:75:49:9c:a2:c7:4c:f0:1e:16:1e:06:
bd:89:8c:02:b1:f3:b3:2d:97:82:47:be:be:e4:26:
43:a7:0b:fe:d4:8d:02:48:56:0a:f9:c2:81:aa:56:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D6:56:BF:B1:31:AF:6C:44:D7:DC:B8:5F:E7:90:D9:21:5C:CB:6A
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:ac:b9:f5:64:20:62:0c:a9:26:cd:c7:c8:a8:b6:bd:56:
01:10:6e:75:40:93:9c:56:92:f2:3e:31:16:ba:74:1b:88:cd:
5b:81:f1:75:fc:75:c9:f9:a1:5d:83:9e:4e:65:17:c9:87:d5:
37:5c:c1:ff:33:ac:42:84:17:63:6f:fc:69:2c:3a:d5:2f:33:
ae:1f:50:b5:cd:b6:a0:7d:48:d8:24:52:62:4a:cb:3b:49:4c:
31:66:c6:50:3a:78:fb:53:5f:b7:0c:c2:4d:09:bb:53:ba:c4:
2e:27:5e:2b:7d:2a:9a:11:e1:4e:d5:5b:25:4c:98:d5:71:61:
8f:4b:fb:b3:99:2c:d1:3c:60:fa:a6:3d:bb:0e:55:79:d7:b4:
4b:ad:29:c3:a0:c0:c4:f6:a7:56:2d:23:5a:b0:46:25:45:ea:
92:2a:80:0f:b0:26:ed:10:fe:e6:92:19:7f:ad:09:0e:79:bf:
e0:00:de:dc:76:9a:cb:c0:fc:64:e6:8f:ff:06:71:23:da:88:
14:b9:72:6c:1a:ed:d6:d8:f2:84:3f:af:0d:5d:3c:67:d1:db:
a9:e8:18:24:13:09:5d:8b:43:b1:eb:98:b8:4c:a9:be:be:b7:
87:39:11:18:df:52:c0:52:8a:8f:40:4c:26:a5:5f:1a:b6:93:
ba:26:e9:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ojAl9qyZ5EY9fOFWUvSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjIyZWVhNGE0YTNiODE2NTRhMjI3ZWRhOTRlMGU3NTkz
N2IwMTUwHhcNMjUwNjI4MTMwMjUxWhcNMjUwNjI5MTMwMjUxWjAzMTEwLwYDVQQD
Eyg5Y2Q2NTZiZmIxMzFhZjZjNDRkN2RjYjg1ZmU3OTBkOTIxNWNjYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhg8tFrtZreQc5AkUhcGHfsDon5y
gOhHxTPW9X0xMe11y0CyAl0phOSAeI3U1P5mW3Jt5WrEA8+Yg5rr7NTOeDYxL+wf
4UgcpOuobziqtPcoQvNM10GrXfxB4vDeVbw1Q9F8SnbgTTJxrE3+IBIttLCBMShg
PD/NfS1MWimqTax7DU78KMYxnvzG9A/pOrbddRgSsklMIaZiFOlYRSyTXYT8bLfD
0EaW1h86zi/sxdO74iNfSUf7UBGjEMt/rVuXEZ5Q8IQElFaeE4hXoJIJU1gkBZk8
dUmcosdM8B4WHga9iYwCsfOzLZeCR76+5CZDpwv+1I0CSFYK+cKBqla7rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzWVr+xMa9sRNfcuF/nkNkhXMtqMB8GA1UdIwQY
MBaAFGiyLupKSjuBZUoiftqU4OdZN7AVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2It
MmI2NWE3YThiZThjLzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2ItMmI2NWE3YThiZThj
LzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoesufVk
IGIMqSbNx8iotr1WARBudUCTnFaS8j4xFrp0G4jNW4Hxdfx1yfmhXYOeTmUXyYfV
N1zB/zOsQoQXY2/8aSw61S8zrh9Qtc22oH1I2CRSYkrLO0lMMWbGUDp4+1NftwzC
TQm7U7rELideK30qmhHhTtVbJUyY1XFhj0v7s5ks0Txg+qY9uw5Vede0S60pw6DA
xPanVi0jWrBGJUXqkiqAD7Am7RD+5pIZf60JDnm/4ADe3Haay8D8ZOaP/wZxI9qI
FLlybBrt1tjyhD+vDV08Z9HbqegYJBMJXYtDseuYuEypvr63hzkRGN9SwFKKj0BM
JqVfGraTuibpdw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:53 2025 by rpki-client