Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: qBiLC0+F7cNHuwsVn6mnQem7VPqkcxL2J5kqyoMBP44=
Subject key identifier: 96:FE:F5:57:35:0D:73:CF:BC:2B:7F:6B:1D:AA:54:BB:05:5A:61:D8
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 0197B6A1258C128DCAEC46A092D4EDEF5F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0BBD
Signing time: Sat 28 Jun 2025 13:01:43 +0000
Manifest this update: Sat 28 Jun 2025 13:01:43 +0000
Manifest next update: Sun 29 Jun 2025 13:01:43 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: wk8A443PCxJYkrhg9h6sXsvlYdRXbSOLdnvgQ63h4qA=)
2: PF_eVnR65kNetKj7PMmx-v4rMFw.roa (hash: /4k6yxxkJCQSm4rG3gdwumQHjo0wfUW3Pw4ZNvKY7P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:25:8c:12:8d:ca:ec:46:a0:92:d4:ed:ef:5f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Jun 28 13:01:43 2025 GMT
Not After : Jun 29 13:01:43 2025 GMT
Subject: CN=96fef557350d73cfbc2b7f6b1daa54bb055a61d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:71:a5:d3:ba:4d:04:f8:22:0e:a2:b6:54:
43:e5:f2:ad:07:60:68:a2:61:33:00:52:c4:d4:73:
ad:4c:91:36:84:35:6c:fe:b3:59:60:94:c7:d0:1f:
a6:f2:f5:ce:4d:32:a3:85:ab:6c:cb:93:89:fa:2b:
78:23:17:a9:d8:4a:27:1b:3d:b6:d0:69:f0:11:c9:
d7:80:39:0b:96:35:b0:90:36:a0:79:76:d1:61:8d:
12:38:a3:70:5e:15:43:e4:89:8a:17:23:96:70:bd:
58:0f:bb:b2:32:37:a0:7f:02:7b:fd:86:55:53:e7:
37:14:37:7e:86:c8:cd:6d:3d:d7:99:00:38:bb:22:
0a:3c:a5:e8:7a:40:7b:1b:ba:a2:75:35:f0:44:95:
f2:8b:41:d6:7d:bc:c5:cf:7d:7e:27:bd:7e:e7:79:
3b:b1:78:98:45:2f:e0:31:0e:9e:60:44:c7:40:01:
78:c9:c8:e2:a5:f5:01:e9:63:90:92:a5:27:48:8f:
5d:4d:6f:6e:d1:5b:05:01:24:7c:63:d7:44:43:be:
a5:e6:7a:05:02:78:c4:f0:f7:55:81:01:ce:33:f6:
86:95:4b:0d:f8:82:6c:b4:e4:93:1f:ba:f3:b0:30:
68:fd:08:02:08:b7:b8:a6:de:28:25:da:93:92:c2:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FE:F5:57:35:0D:73:CF:BC:2B:7F:6B:1D:AA:54:BB:05:5A:61:D8
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6a:51:2a:3e:aa:ac:b0:00:2e:82:08:26:b3:0c:de:fd:ec:
b3:82:d3:7d:91:57:98:75:a3:6d:b6:90:47:59:ae:62:e9:6c:
51:13:2b:ff:89:30:ea:f8:74:73:e3:b3:b1:94:88:a2:29:1f:
f0:63:09:35:1e:24:b8:c7:e5:19:3a:59:07:d9:42:b4:17:5e:
07:bd:ec:a6:ac:05:1b:5e:a5:89:51:3f:5d:90:d5:ac:a2:b1:
c4:e3:1f:42:30:38:dd:63:11:a5:4d:18:dc:85:78:0e:4b:0d:
af:64:c9:a6:a6:09:de:91:43:a3:67:f6:34:12:cc:eb:5f:eb:
03:7f:24:9c:96:37:63:50:bf:78:ab:21:bd:d4:5e:01:e9:29:
b3:49:eb:e7:e1:7f:28:10:74:21:41:ea:8b:04:f8:3d:c7:8c:
20:3d:c1:2e:a9:2a:de:18:1d:1e:33:55:97:aa:4e:37:8e:91:
84:60:42:a1:a8:25:7d:89:05:01:2a:6b:61:d9:f8:d4:28:db:
73:57:72:32:39:18:8f:38:e7:c9:9f:7c:63:fe:b4:38:dc:63:
ec:45:4f:4c:37:70:0f:90:b2:e0:d0:83:29:c5:56:56:f6:81:
a5:d8:0c:c7:97:5c:47:b3:06:c5:60:91:ad:0b:67:43:74:8d:
cd:ff:5e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oSWMEo3K7EagktTt719RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOGZkZjcxOWQ0N2ExMDAzMzQ1MWE4MzM4NGE2ZGI2OGRi
ZDViMGYwHhcNMjUwNjI4MTMwMTQzWhcNMjUwNjI5MTMwMTQzWjAzMTEwLwYDVQQD
Eyg5NmZlZjU1NzM1MGQ3M2NmYmMyYjdmNmIxZGFhNTRiYjA1NWE2MWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jJxpdO6TQT4Ig6itlRD5fKtB2Bo
omEzAFLE1HOtTJE2hDVs/rNZYJTH0B+m8vXOTTKjhatsy5OJ+it4Ixep2EonGz22
0GnwEcnXgDkLljWwkDageXbRYY0SOKNwXhVD5ImKFyOWcL1YD7uyMjegfwJ7/YZV
U+c3FDd+hsjNbT3XmQA4uyIKPKXoekB7G7qidTXwRJXyi0HWfbzFz31+J71+53k7
sXiYRS/gMQ6eYETHQAF4ycjipfUB6WOQkqUnSI9dTW9u0VsFASR8Y9dEQ76l5noF
AnjE8PdVgQHOM/aGlUsN+IJstOSTH7rzsDBo/QgCCLe4pt4oJdqTksJndwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb+9Vc1DXPPvCt/ax2qVLsFWmHYMB8GA1UdIwQY
MBaAFAKP33GdR6EAM0UagzhKbbaNvVsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjct
MDU1YTljYWQ4ZGY3LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjctMDU1YTljYWQ4ZGY3
LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWpRKj6q
rLAALoIIJrMM3v3ss4LTfZFXmHWjbbaQR1muYulsURMr/4kw6vh0c+OzsZSIoikf
8GMJNR4kuMflGTpZB9lCtBdeB73spqwFG16liVE/XZDVrKKxxOMfQjA43WMRpU0Y
3IV4DksNr2TJpqYJ3pFDo2f2NBLM61/rA38knJY3Y1C/eKshvdReAekps0nr5+F/
KBB0IUHqiwT4PceMID3BLqkq3hgdHjNVl6pON46RhGBCoaglfYkFASprYdn41Cjb
c1dyMjkYjzjnyZ98Y/60ONxj7EVPTDdwD5Cy4NCDKcVWVvaBpdgMx5dcR7MGxWCR
rQtnQ3SNzf9e1A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:42 2025 by rpki-client