Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: s43cDVat0X+MX04zdC3aefhIiA5HoRrdy/VYH0pEJ/g=
Subject key identifier: 9E:A1:EF:7D:0F:E8:86:82:1B:E2:E4:3C:D0:B8:9C:E5:89:B8:2F:70
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 0198D6981697A553A8E72C28318FD6F48882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 11:02:28 +0000
Manifest this update: Sat 23 Aug 2025 11:02:28 +0000
Manifest next update: Sun 24 Aug 2025 11:02:28 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: KJZGtTbJQ6vMkDE6nng4XJO/7L5+p7obDVOeZkgV+J4=)
2: gvJBtDmrBY4y1m9tVe-S6ndjy20.roa (hash: e9qz/rQIxQf43DTjLpdblCilaun5V9rCKHAnrG6oKJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:16:97:a5:53:a8:e7:2c:28:31:8f:d6:f4:88:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Aug 23 11:02:28 2025 GMT
Not After : Aug 24 11:02:28 2025 GMT
Subject: CN=9ea1ef7d0fe886821be2e43cd0b89ce589b82f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:52:46:01:3c:10:36:b4:34:16:e1:ca:98:
8a:0d:7b:83:df:46:b9:f9:e0:8e:6a:6b:4d:29:78:
bc:1d:ac:a2:4c:02:90:e0:73:d9:5b:5f:ef:bd:f9:
28:bb:31:43:ba:e1:b1:80:c3:0f:ef:b5:b7:d1:de:
a7:48:14:ce:50:55:0b:03:1b:df:cd:62:2f:6a:87:
e2:18:17:d6:6c:f6:31:0a:84:8d:2f:3d:4e:fe:75:
27:53:5f:bc:a2:da:0d:1e:dc:28:a9:79:73:96:8c:
e4:77:b3:a3:7f:5b:27:96:57:83:33:c1:b1:3a:35:
23:40:f2:9c:47:ca:7f:e3:07:bc:0b:e5:fc:2e:d9:
a9:f4:e4:e7:a9:fc:e1:0a:38:02:4d:de:08:27:fd:
ba:a9:cd:bd:64:87:d7:77:5f:9c:4b:54:a7:37:6f:
c1:4d:b0:e5:a6:e7:0f:ef:ff:76:58:b0:b9:be:81:
de:5d:ed:4e:d2:7e:a1:f0:c3:b6:9a:aa:79:4a:d0:
ce:28:fd:0a:b4:80:a8:d3:0a:06:e7:3b:6e:7b:d3:
0c:5a:73:83:0c:be:29:86:c2:0a:9e:33:67:b7:d4:
19:d0:1c:c3:42:2c:c3:e1:4c:e8:7f:74:45:f1:7c:
e2:c0:d7:8c:4f:43:b9:d7:d2:6c:0d:db:de:d8:27:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:EF:7D:0F:E8:86:82:1B:E2:E4:3C:D0:B8:9C:E5:89:B8:2F:70
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fa:dd:95:0c:79:6a:f0:4b:d6:38:d3:4e:ff:0b:78:64:d6:
e7:04:9c:e3:66:f3:d6:53:eb:8e:c6:fe:ab:f6:b8:7b:33:24:
90:e5:b6:61:b0:31:fc:44:05:a3:e8:b6:95:f4:90:b2:1e:4f:
af:ed:e8:47:71:44:79:f2:bc:3a:42:e0:66:b9:f3:33:42:6a:
1e:17:2c:e7:26:82:5e:49:06:45:72:ff:7d:1b:82:25:5f:50:
de:53:0a:ce:0f:9e:f9:23:6e:54:57:9f:64:37:35:65:a0:92:
6a:ee:f2:08:ac:b3:67:7d:c5:a1:a1:96:c0:bc:4e:41:ae:a1:
5d:f8:95:9d:5a:fd:aa:22:35:07:9d:fb:64:77:35:0d:c5:23:
93:dd:bb:e9:55:44:a3:e3:d8:21:e2:c0:38:cf:ba:83:2a:e3:
e5:38:db:2a:34:39:cd:1e:57:e4:d0:6b:f8:ee:e9:68:fa:f5:
29:9c:9c:93:c4:92:d3:b9:59:97:77:03:a0:f8:d3:85:0c:b7:
96:b3:ed:40:b6:41:15:85:d6:35:d9:a0:cf:35:bf:fe:47:0d:
03:67:b9:41:06:e2:b6:b2:7f:10:ba:b2:5c:e5:9a:aa:d5:b7:
d0:3e:cb:be:fd:e9:77:d7:e3:af:90:75:55:bf:f1:47:75:be:
98:ea:7f:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmBaXpVOo5ywoMY/W9IiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjUwODIzMTEwMjI4WhcNMjUwODI0MTEwMjI4WjAzMTEwLwYDVQQD
Eyg5ZWExZWY3ZDBmZTg4NjgyMWJlMmU0M2NkMGI4OWNlNTg5YjgyZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMdSRgE8EDa0NBbhypiKDXuD30a5
+eCOamtNKXi8HayiTAKQ4HPZW1/vvfkouzFDuuGxgMMP77W30d6nSBTOUFULAxvf
zWIvaofiGBfWbPYxCoSNLz1O/nUnU1+8otoNHtwoqXlzlozkd7Ojf1snlleDM8Gx
OjUjQPKcR8p/4we8C+X8Ltmp9OTnqfzhCjgCTd4IJ/26qc29ZIfXd1+cS1SnN2/B
TbDlpucP7/92WLC5voHeXe1O0n6h8MO2mqp5StDOKP0KtICo0woG5ztue9MMWnOD
DL4phsIKnjNnt9QZ0BzDQizD4Uzof3RF8XziwNeMT0O519JsDdve2Cf0AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6h730P6IaCG+LkPNC4nOWJuC9wMB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvrdlQx5
avBL1jjTTv8LeGTW5wSc42bz1lPrjsb+q/a4ezMkkOW2YbAx/EQFo+i2lfSQsh5P
r+3oR3FEefK8OkLgZrnzM0JqHhcs5yaCXkkGRXL/fRuCJV9Q3lMKzg+e+SNuVFef
ZDc1ZaCSau7yCKyzZ33FoaGWwLxOQa6hXfiVnVr9qiI1B537ZHc1DcUjk9276VVE
o+PYIeLAOM+6gyrj5TjbKjQ5zR5X5NBr+O7paPr1KZyck8SS07lZl3cDoPjThQy3
lrPtQLZBFYXWNdmgzzW//kcNA2e5QQbitrJ/ELqyXOWaqtW30D7Lvv3pd9fjr5B1
Vb/xR3W+mOp/ag==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:28 2025 by rpki-client