Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: ynS7OOGUa3M3Q+wc9Kc55RBT7A2rDAq7pGqpBUkoHEM=
Subject key identifier: 02:DB:05:4D:38:AF:A4:CB:D1:DE:28:D4:75:9A:23:26:24:83:97:44
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 0197C45C0FE85EDBC02E018C99927A9CAB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: A1
Signing time: Tue 01 Jul 2025 05:00:57 +0000
Manifest this update: Tue 01 Jul 2025 05:00:57 +0000
Manifest next update: Wed 02 Jul 2025 05:00:57 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: fMnMPFhDKikh+SXtpO2Agfmipkq3PQc5X5hyhg81l6I=)
2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:0f:e8:5e:db:c0:2e:01:8c:99:92:7a:9c:ab:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Jul 1 05:00:57 2025 GMT
Not After : Jul 2 05:00:57 2025 GMT
Subject: CN=02db054d38afa4cbd1de28d4759a232624839744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:26:c9:98:33:35:a4:d3:8d:ef:de:c0:82:
0f:92:bb:7b:96:40:9e:55:bb:24:51:b1:48:12:8b:
52:e8:e5:b7:49:60:bd:38:50:e8:a2:ef:75:ff:5b:
bf:78:2e:88:1d:98:72:94:3b:aa:a6:3d:fd:15:b1:
3a:b3:c5:2f:60:f9:ef:c1:85:ee:fb:07:f5:43:f4:
d7:fe:49:cf:fd:8d:97:f1:2c:28:13:07:8b:3c:37:
ec:84:91:78:b4:8a:3f:72:96:58:7a:c2:4c:71:81:
74:1a:9b:a7:ab:b3:e8:97:c7:56:89:27:7e:dc:06:
d8:86:71:a6:a2:9c:08:3d:87:71:35:87:e4:83:57:
d9:42:c8:e3:fc:9c:e1:c1:c4:ef:50:63:28:f9:96:
64:ec:e6:54:55:e3:25:f2:aa:2f:e3:f1:21:d5:12:
03:88:10:7a:dc:80:05:56:01:5d:95:04:10:53:b2:
84:d3:98:60:7f:e2:3c:71:a1:11:b9:16:ad:21:83:
d9:21:66:c9:bd:fe:c3:ea:af:a0:b1:28:07:a5:f3:
5e:66:13:f2:3f:55:07:97:1b:36:46:24:be:b0:24:
a9:00:a6:3c:4b:e6:79:ba:76:c3:28:c3:3a:b8:60:
22:07:cd:2d:88:7f:5f:26:87:02:25:c8:62:73:40:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DB:05:4D:38:AF:A4:CB:D1:DE:28:D4:75:9A:23:26:24:83:97:44
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:85:7a:19:a2:a7:f6:b2:7a:f0:7b:43:ca:e7:d9:02:5f:06:
60:4d:1b:4c:6b:8c:e1:4c:16:78:58:3a:6c:48:c2:fc:fa:72:
d9:01:83:99:52:e7:8c:83:20:25:0c:d9:65:b2:60:40:e1:6d:
84:c5:26:02:bc:94:0d:6a:b4:d3:bc:d2:95:97:9d:c8:dd:18:
3f:f1:3a:ff:b5:d5:24:ab:41:cc:d6:03:3a:50:04:e6:8e:a1:
3e:48:d7:2d:bf:53:f8:25:71:1d:f7:8c:ac:8f:1f:b8:ee:d5:
eb:ef:c2:6e:30:d1:99:25:5a:e3:45:28:e6:8f:cb:38:b1:f9:
dd:b0:37:36:68:93:7e:a7:c8:e8:5e:e3:f1:eb:5a:fd:67:11:
9f:6d:24:6e:a6:ea:c3:73:4f:5f:4b:10:0b:8d:18:d5:6e:df:
2e:3b:f6:61:b4:77:c3:14:e9:24:7e:08:ae:ee:96:d8:c6:c0:
fc:02:4d:c8:3a:a9:e4:ec:71:3b:38:1c:f2:1c:47:4e:c9:bb:
70:06:14:a8:b8:7e:f5:9d:c6:1b:77:ec:b6:e5:ac:79:c4:d2:
3e:f7:1c:a2:73:c8:67:fb:1d:be:5b:75:03:15:f2:af:23:e5:
62:67:b6:fe:59:7c:ff:0d:f7:38:15:28:5e:f2:28:2e:d3:41:
0e:6b:61:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEXA/oXtvALgGMmZJ6nKseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTYxNzFiM2Y5MWIxZDEwYjA0NDU5ODdmNjExNDI4YWJm
MTNlMWEwHhcNMjUwNzAxMDUwMDU3WhcNMjUwNzAyMDUwMDU3WjAzMTEwLwYDVQQD
EygwMmRiMDU0ZDM4YWZhNGNiZDFkZTI4ZDQ3NTlhMjMyNjI0ODM5NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTcmyZgzNaTTje/ewIIPkrt7lkCe
VbskUbFIEotS6OW3SWC9OFDoou91/1u/eC6IHZhylDuqpj39FbE6s8UvYPnvwYXu
+wf1Q/TX/knP/Y2X8SwoEweLPDfshJF4tIo/cpZYesJMcYF0Gpunq7Pol8dWiSd+
3AbYhnGmopwIPYdxNYfkg1fZQsjj/JzhwcTvUGMo+ZZk7OZUVeMl8qov4/Eh1RID
iBB63IAFVgFdlQQQU7KE05hgf+I8caERuRatIYPZIWbJvf7D6q+gsSgHpfNeZhPy
P1UHlxs2RiS+sCSpAKY8S+Z5unbDKMM6uGAiB80tiH9fJocCJchic0A1MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALbBU04r6TL0d4o1HWaIyYkg5dEMB8GA1UdIwQY
MBaAFGgWFxs/kbHRCwRFmH9hFCir8T4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2Yt
ZjBhN2UxY2EzYzg1LzEvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2YtZjBhN2UxY2EzYzg1
LzEvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoV6GaKn
9rJ68HtDyufZAl8GYE0bTGuM4UwWeFg6bEjC/Ppy2QGDmVLnjIMgJQzZZbJgQOFt
hMUmAryUDWq007zSlZedyN0YP/E6/7XVJKtBzNYDOlAE5o6hPkjXLb9T+CVxHfeM
rI8fuO7V6+/CbjDRmSVa40Uo5o/LOLH53bA3NmiTfqfI6F7j8eta/WcRn20kbqbq
w3NPX0sQC40Y1W7fLjv2YbR3wxTpJH4Iru6W2MbA/AJNyDqp5OxxOzgc8hxHTsm7
cAYUqLh+9Z3GG3fstuWsecTSPvcconPIZ/sdvlt1AxXyryPlYme2/ll8/w33OBUo
XvIoLtNBDmthjg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:20:27 2025 by rpki-client