Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File: ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier: tHo6ds5c3UjJ31BgbtCgMpmddxf4xhNZnqGesIblBlw=
Subject key identifier: D2:C6:9E:19:20:1B:2E:85:FE:38:FF:23:31:34:72:46:8D:E7:7C:17
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 0197B88F309543697F6520EBFEB11A3EA98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number: 0C2A
Signing time: Sat 28 Jun 2025 22:01:21 +0000
Manifest this update: Sat 28 Jun 2025 22:01:21 +0000
Manifest next update: Sun 29 Jun 2025 22:01:21 +0000
Files and hashes: 1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: GiELCSVf7UQFt+FilDqfHZhcoH+eOTxbIq1oThos5Wc=)
2: _GSW-DelEaPKU0jnYZYgZjzHWbE.roa (hash: pkcF+nXYhLnPPj/p92wHFinmwHpFMLg3KgigTAMrKPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:30:95:43:69:7f:65:20:eb:fe:b1:1a:3e:a9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Jun 28 22:01:21 2025 GMT
Not After : Jun 29 22:01:21 2025 GMT
Subject: CN=d2c69e19201b2e85fe38ff23313472468de77c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:5b:ba:b6:60:44:31:24:d5:08:7e:2b:84:
42:6f:c2:6d:40:cc:7b:d7:bf:a8:b7:28:fb:71:3e:
1d:43:c7:f0:2e:b1:55:4f:df:f8:5a:22:8d:9e:64:
c3:ad:66:2b:ec:bf:27:86:1c:a8:44:c6:04:a6:d6:
1b:c7:ed:18:b3:82:73:1a:5d:1b:f1:e4:c9:19:57:
97:c1:63:dc:fc:18:55:27:ae:51:19:8a:7b:9f:e7:
8b:c1:16:01:cd:47:82:c0:00:9b:71:58:96:70:8a:
05:e8:d5:24:b9:9f:69:1d:6d:d8:40:f8:0a:f3:10:
42:95:21:1d:6f:d9:a3:b1:d8:f6:40:b4:5a:25:2e:
76:cc:c8:73:ac:d0:7e:44:d6:b2:6a:1b:c9:13:35:
fa:74:49:1d:fa:bc:3d:ea:ab:0e:60:d0:fd:b9:02:
c4:76:20:0e:2b:9e:b6:39:a0:ba:8b:da:4f:3c:30:
a8:fb:e7:79:ce:96:4b:39:5e:c5:cc:49:c4:eb:e5:
d9:f0:81:83:c0:85:8b:41:a6:de:9b:a6:9d:19:bf:
c4:3a:26:10:e8:f5:b5:a1:eb:c2:9c:47:93:0f:d1:
ee:cc:ee:1a:fe:25:dc:68:57:f7:01:00:81:e3:f4:
22:e5:54:2e:a4:f3:b8:c0:93:3e:5d:d8:5f:a5:63:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C6:9E:19:20:1B:2E:85:FE:38:FF:23:31:34:72:46:8D:E7:7C:17
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:23:f1:0c:df:2e:92:fd:24:3f:dc:f6:a2:06:55:e1:4d:31:
bd:c3:ae:05:53:96:31:f1:0f:cc:f2:94:61:a5:29:ce:1d:c0:
9d:ee:94:09:6c:78:d6:41:c5:c2:a9:41:1d:a3:76:13:52:77:
b5:59:8c:62:05:ce:f6:cf:27:1f:d4:c4:10:b8:57:33:cb:89:
91:8a:4f:85:b9:df:33:94:bf:89:52:ce:3e:05:de:d6:5c:ee:
12:43:3b:11:6f:06:0f:22:f2:23:4e:4c:a2:5f:f8:19:89:1b:
64:68:d4:e9:a3:5c:c6:ce:ce:ff:97:2e:ea:8c:d4:34:30:cc:
04:2c:86:b3:53:4f:ee:38:46:e4:db:82:15:78:75:14:f6:eb:
75:07:42:2f:86:57:fc:61:f7:c7:71:63:09:af:68:cb:e3:81:
28:4c:42:bd:9f:80:76:75:27:0d:c2:23:c0:42:64:a1:c6:9b:
d5:42:05:d8:33:e3:5c:e7:bd:d0:48:8f:d5:c5:4b:21:b4:ed:
eb:4c:bd:e8:3f:c9:f7:55:11:c7:5f:fd:bc:16:42:1e:1f:dc:
4e:8e:d7:c7:62:3c:21:1a:71:01:8e:04:f0:b4:c5:c7:38:43:
52:4a:a0:6f:37:4f:fb:cb:c7:6c:e0:21:3a:56:c0:5e:a6:ad:
0c:95:d0:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jzCVQ2l/ZSDr/rEaPqmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjA1NzQ4NTJjNmJiOTIzZmNiMzgwNDI1YzRmZDNlZDVj
MGJhOTMwHhcNMjUwNjI4MjIwMTIxWhcNMjUwNjI5MjIwMTIxWjAzMTEwLwYDVQQD
EyhkMmM2OWUxOTIwMWIyZTg1ZmUzOGZmMjMzMTM0NzI0NjhkZTc3YzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBlburZgRDEk1Qh+K4RCb8JtQMx7
17+otyj7cT4dQ8fwLrFVT9/4WiKNnmTDrWYr7L8nhhyoRMYEptYbx+0Ys4JzGl0b
8eTJGVeXwWPc/BhVJ65RGYp7n+eLwRYBzUeCwACbcViWcIoF6NUkuZ9pHW3YQPgK
8xBClSEdb9mjsdj2QLRaJS52zMhzrNB+RNayahvJEzX6dEkd+rw96qsOYND9uQLE
diAOK562OaC6i9pPPDCo++d5zpZLOV7FzEnE6+XZ8IGDwIWLQabem6adGb/EOiYQ
6PW1oevCnEeTD9HuzO4a/iXcaFf3AQCB4/Qi5VQupPO4wJM+XdhfpWNj0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLGnhkgGy6F/jj/IzE0ckaN53wXMB8GA1UdIwQY
MBaAFAEgV0hSxruSP8s4BCXE/T7VwLqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2Qt
ZDViMWRiZGQxYjVmLzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2QtZDViMWRiZGQxYjVm
LzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyPxDN8u
kv0kP9z2ogZV4U0xvcOuBVOWMfEPzPKUYaUpzh3Ane6UCWx41kHFwqlBHaN2E1J3
tVmMYgXO9s8nH9TEELhXM8uJkYpPhbnfM5S/iVLOPgXe1lzuEkM7EW8GDyLyI05M
ol/4GYkbZGjU6aNcxs7O/5cu6ozUNDDMBCyGs1NP7jhG5NuCFXh1FPbrdQdCL4ZX
/GH3x3FjCa9oy+OBKExCvZ+AdnUnDcIjwEJkocab1UIF2DPjXOe90EiP1cVLIbTt
60y96D/J91URx1/9vBZCHh/cTo7Xx2I8IRpxAY4E8LTFxzhDUkqgbzdP+8vHbOAh
OlbAXqatDJXQiA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:40 2025 by rpki-client