Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: rB/RAD/2CCK5J4JAMXHYUXW447qtBp1GrqAJMSr6alg=
Subject key identifier: 4B:B5:8C:03:6D:05:00:77:3A:8A:58:13:97:AB:29:96:90:56:87:7B
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 0197B70EA1AF8D94F41C97023589A6BD2D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: W+gaal+PJRIz+KgQBdWTosNvlJpM/eqwafS/2GkrhkA=)
2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a1:af:8d:94:f4:1c:97:02:35:89:a6:bd:2d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=4bb58c036d0500773a8a581397ab29969056877b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:f2:64:92:e9:91:d3:d7:ab:88:18:ca:8d:
a9:a8:c8:7e:dd:99:1c:54:1f:2f:25:72:b7:a5:5a:
01:fd:b6:81:c9:eb:50:6b:a9:ac:06:f5:c9:d6:99:
e2:00:ab:bd:57:49:a9:6a:c5:db:99:25:bb:e8:27:
75:00:50:4c:af:0e:08:05:d7:16:a1:72:7f:f5:11:
61:a2:66:82:66:4d:7b:ab:33:95:a8:44:e5:ae:83:
84:2e:69:b9:67:1c:0e:03:ce:3d:7d:ab:4f:ca:cc:
4b:f6:3f:83:56:9d:d4:3c:9f:eb:eb:7f:99:5f:44:
64:3e:87:fa:a6:54:22:85:b2:2e:7c:dd:44:7a:b4:
a1:d0:bf:67:4d:bd:5a:08:99:da:d7:09:ff:d2:2b:
7c:f6:bd:f0:26:c3:a1:93:9c:a4:a7:03:99:b2:fe:
be:3f:04:2a:36:cd:50:d3:8e:72:19:86:d9:a8:f8:
49:83:8e:4d:e1:3a:33:a9:4c:af:55:16:80:e3:53:
17:7c:a2:d6:59:7e:cf:63:77:7c:88:82:f2:4a:37:
2a:37:68:97:8f:42:0c:19:ce:23:62:92:ab:2f:44:
aa:26:47:f2:b1:f1:b9:98:48:03:07:fb:60:c5:68:
9d:9f:e9:2b:90:56:91:ec:6a:17:4f:65:43:66:4c:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B5:8C:03:6D:05:00:77:3A:8A:58:13:97:AB:29:96:90:56:87:7B
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:92:78:6f:bc:c6:09:35:2e:cd:a0:e7:46:95:0b:87:a6:00:
09:27:4a:91:5c:1c:c3:89:9b:f4:82:57:ab:1e:5d:bb:45:34:
2c:b2:a9:2c:b6:ac:68:12:22:d8:6e:3e:c1:b1:a1:c5:fe:9c:
5e:ed:a0:5e:51:ce:31:d8:b4:bb:d2:b0:b5:88:9f:13:3e:5a:
6d:dd:2e:92:e9:11:58:6e:44:4c:b6:4d:1f:d3:27:b2:ec:91:
0a:cf:fb:25:a9:38:67:76:a6:e2:6a:40:b4:e1:31:09:19:61:
b7:8d:59:fa:5a:46:25:58:fd:a7:18:79:91:e3:6d:9f:7f:19:
28:df:57:98:ef:55:93:77:64:a5:79:01:40:c7:c2:85:a7:e1:
c2:4b:41:d2:ba:af:84:5d:f1:f2:33:52:d8:a5:39:21:78:56:
06:9f:15:46:ec:b2:16:6a:1f:ec:1f:45:f4:b0:b2:7b:ec:93:
dd:ba:43:b6:5f:94:45:81:16:73:f3:f7:10:b0:6d:d5:a5:48:
29:12:68:3e:c1:c7:bb:e8:19:27:22:ce:66:f8:02:15:ac:5c:
f3:21:1a:24:78:11:07:01:2b:e7:ac:18:37:58:53:b4:c4:02:
46:b4:f2:7a:8b:d4:3d:d1:bc:c2:98:cc:f7:57:6c:11:67:19:
8b:0a:98:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqGvjZT0HJcCNYmmvS0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OGU3MTNiMDdjNzlmOTdiNDdlOWYwMzIxNzY4YjA5NDg4
YjdhMDMwHhcNMjUwNjI4MTUwMTE4WhcNMjUwNjI5MTUwMTE4WjAzMTEwLwYDVQQD
Eyg0YmI1OGMwMzZkMDUwMDc3M2E4YTU4MTM5N2FiMjk5NjkwNTY4NzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MryZJLpkdPXq4gYyo2pqMh+3Zkc
VB8vJXK3pVoB/baByetQa6msBvXJ1pniAKu9V0mpasXbmSW76Cd1AFBMrw4IBdcW
oXJ/9RFhomaCZk17qzOVqETlroOELmm5ZxwOA849fatPysxL9j+DVp3UPJ/r63+Z
X0RkPof6plQihbIufN1EerSh0L9nTb1aCJna1wn/0it89r3wJsOhk5ykpwOZsv6+
PwQqNs1Q045yGYbZqPhJg45N4TozqUyvVRaA41MXfKLWWX7PY3d8iILySjcqN2iX
j0IMGc4jYpKrL0SqJkfysfG5mEgDB/tgxWidn+krkFaR7GoXT2VDZky77wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu1jANtBQB3OopYE5erKZaQVod7MB8GA1UdIwQY
MBaAFGiOcTsHx5+XtH6fAyF2iwlIi3oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYt
Njk1ZjRhOTI3NjEwLzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYtNjk1ZjRhOTI3NjEw
LzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpJ4b7zG
CTUuzaDnRpULh6YACSdKkVwcw4mb9IJXqx5du0U0LLKpLLasaBIi2G4+wbGhxf6c
Xu2gXlHOMdi0u9KwtYifEz5abd0ukukRWG5ETLZNH9MnsuyRCs/7Jak4Z3am4mpA
tOExCRlht41Z+lpGJVj9pxh5keNtn38ZKN9XmO9Vk3dkpXkBQMfChafhwktB0rqv
hF3x8jNS2KU5IXhWBp8VRuyyFmof7B9F9LCye+yT3bpDtl+URYEWc/P3ELBt1aVI
KRJoPsHHu+gZJyLOZvgCFaxc8yEaJHgRBwEr56wYN1hTtMQCRrTyeovUPdG8wpjM
91dsEWcZiwqYrQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:13 2025 by rpki-client