Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier: TQXsnbPw0i/PDAYIZR2Ig8JUwbd6ZtG7GMeYptXo8o8=
Subject key identifier: 7E:3D:2F:63:FE:10:85:00:21:8C:AE:8F:25:AD:51:C5:99:C2:99:C9
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 0197B9A14E6144D5FBE7DC22C2E5507CFBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number: 0AAB
Signing time: Sun 29 Jun 2025 03:00:45 +0000
Manifest this update: Sun 29 Jun 2025 03:00:45 +0000
Manifest next update: Mon 30 Jun 2025 03:00:45 +0000
Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: ODelHXG3OSwDXpRkH1ErQebD6KEN2rUIxyMLnGEwWgE=)
2: vSD8XToST3_PVTIy1XwVerhMPWI.roa (hash: Yvhr0/CtepPwOm3ynZwacKeoADnHcOUi9JQFKNsVsJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:4e:61:44:d5:fb:e7:dc:22:c2:e5:50:7c:fb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Jun 29 03:00:45 2025 GMT
Not After : Jun 30 03:00:45 2025 GMT
Subject: CN=7e3d2f63fe108500218cae8f25ad51c599c299c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:02:4b:ed:79:63:01:d4:39:81:0e:7e:e0:
32:f4:d9:d9:68:96:5d:75:29:7b:47:0a:25:ab:5a:
b0:c9:38:37:61:03:e8:f8:3c:76:60:ce:54:65:73:
e2:d1:20:42:6a:a6:af:cd:95:6e:5f:be:92:44:ef:
d2:ba:21:36:0e:3b:47:cb:24:20:db:05:58:93:36:
99:10:39:9e:e6:a8:62:38:a8:79:05:95:c7:7a:22:
84:ee:17:9b:20:12:9a:d4:9a:5b:f2:1e:96:5d:e3:
59:ca:b9:2a:51:b6:f9:68:be:c6:7b:cf:b6:af:e3:
12:43:7e:ce:61:13:29:cf:a6:d9:e5:62:b7:17:28:
84:d7:1f:6c:93:de:51:74:93:72:e1:ef:c6:b2:33:
20:2a:4b:28:46:65:9b:27:bc:4a:b4:14:1f:ee:77:
cd:ba:83:b7:10:83:8f:51:a2:9a:f1:61:22:55:85:
90:e6:58:2c:91:e4:a3:3c:35:47:4f:6d:7d:1e:a5:
b4:e5:2f:7e:89:83:b0:d3:fb:fa:d0:97:ed:ec:21:
37:4a:b9:30:76:75:a7:28:53:14:81:d3:2f:e0:4a:
b2:bb:30:fd:26:9a:4e:18:81:b1:ca:ad:fd:70:aa:
22:c4:46:80:01:10:55:a2:b9:7c:a6:29:dc:b1:51:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3D:2F:63:FE:10:85:00:21:8C:AE:8F:25:AD:51:C5:99:C2:99:C9
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d5:85:47:fd:6e:95:3d:eb:2c:47:5e:21:b2:ff:09:7e:6d:
4f:a4:90:eb:af:5b:43:30:c6:f6:df:d0:f0:d8:56:6d:1e:55:
15:83:34:4c:40:dc:ef:c2:12:4b:f9:3a:af:36:18:6f:4c:54:
df:2a:30:16:21:61:a9:19:0a:3b:cd:4f:81:cf:07:44:c2:38:
82:39:ee:65:32:12:7b:35:06:dd:fc:53:64:79:5c:14:a5:00:
da:42:8f:76:84:24:38:d6:e0:29:53:27:8d:79:42:dd:1d:9f:
2c:5e:09:20:ec:52:ed:39:d8:0f:6e:5b:8a:71:b6:7e:dc:33:
1f:cf:19:11:dc:da:60:2e:bd:6a:41:36:89:9d:4d:f3:59:1e:
ea:89:e3:75:21:27:b2:9c:92:ec:ce:7d:4e:ba:1c:59:ce:ae:
34:2a:02:d2:17:53:ac:78:f3:45:0d:4a:e8:20:27:f9:94:6c:
9a:06:60:69:79:2a:89:7d:fb:55:f1:72:d5:83:ad:79:ba:e2:
a6:5b:da:16:16:91:19:a4:d6:f1:2b:fb:1e:14:ad:81:d0:f0:
07:83:20:d1:65:9b:dc:30:46:b7:2d:c2:70:20:78:e4:b4:95:
4a:d1:c1:0c:d2:b0:bb:d4:ae:c7:35:cb:43:b2:13:48:61:15:
3f:b6:2e:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oU5hRNX759wiwuVQfPvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzJjMTg3ZDk4YjQ2MDM4MDRlZDExNjVhZGI0NTA5YjYz
MGE4M2EwHhcNMjUwNjI5MDMwMDQ1WhcNMjUwNjMwMDMwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZTNkMmY2M2ZlMTA4NTAwMjE4Y2FlOGYyNWFkNTFjNTk5YzI5OWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArskCS+15YwHUOYEOfuAy9NnZaJZd
dSl7Rwolq1qwyTg3YQPo+Dx2YM5UZXPi0SBCaqavzZVuX76SRO/SuiE2DjtHyyQg
2wVYkzaZEDme5qhiOKh5BZXHeiKE7hebIBKa1Jpb8h6WXeNZyrkqUbb5aL7Ge8+2
r+MSQ37OYRMpz6bZ5WK3FyiE1x9sk95RdJNy4e/GsjMgKksoRmWbJ7xKtBQf7nfN
uoO3EIOPUaKa8WEiVYWQ5lgskeSjPDVHT219HqW05S9+iYOw0/v60Jft7CE3Srkw
dnWnKFMUgdMv4EqyuzD9JppOGIGxyq39cKoixEaAARBVorl8pincsVFYCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH49L2P+EIUAIYyujyWtUcWZwpnJMB8GA1UdIwQY
MBaAFALCwYfZi0YDgE7RFlrbRQm2MKg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83MjllYTQtNmE2OC00ODM4LThmZWMt
N2ZlYjE4YjlmNTUyLzEvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83MjllYTQtNmE2OC00ODM4LThmZWMtN2ZlYjE4YjlmNTUy
LzEvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdWFR/1u
lT3rLEdeIbL/CX5tT6SQ669bQzDG9t/Q8NhWbR5VFYM0TEDc78ISS/k6rzYYb0xU
3yowFiFhqRkKO81Pgc8HRMI4gjnuZTISezUG3fxTZHlcFKUA2kKPdoQkONbgKVMn
jXlC3R2fLF4JIOxS7TnYD25binG2ftwzH88ZEdzaYC69akE2iZ1N81ke6onjdSEn
spyS7M59TrocWc6uNCoC0hdTrHjzRQ1K6CAn+ZRsmgZgaXkqiX37VfFy1YOtebri
plvaFhaRGaTW8Sv7HhStgdDwB4Mg0WWb3DBGty3CcCB45LSVStHBDNKwu9SuxzXL
Q7ITSGEVP7YuPg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:33 2025 by rpki-client