Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
File: aXE7HKgNhb8WGCF_qS29R6NcW44.mft (raw, json)
Hash identifier: hiyXJQc7TbDchBZG0CIhw0FZQqCB6VG/iYUyYr1wBnk=
Subject key identifier: 37:18:F7:35:FA:C4:05:81:11:69:8C:6D:36:D6:C3:34:1E:ED:08:D6
Authority key identifier: 69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
Certificate issuer: /CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Certificate serial: 0197B6A0631D2D6EA20D706CB09A623FB7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
Manifest number: 6E
Signing time: Sat 28 Jun 2025 13:00:53 +0000
Manifest this update: Sat 28 Jun 2025 13:00:53 +0000
Manifest next update: Sun 29 Jun 2025 13:00:53 +0000
Files and hashes: 1: aXE7HKgNhb8WGCF_qS29R6NcW44.crl (hash: GRHDRadgGYbPZjrUbb+hFcFfZut6nTGS8o+dnS8mK1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:63:1d:2d:6e:a2:0d:70:6c:b0:9a:62:3f:b7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Validity
Not Before: Jun 28 13:00:53 2025 GMT
Not After : Jun 29 13:00:53 2025 GMT
Subject: CN=3718f735fac4058111698c6d36d6c3341eed08d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:0c:f5:54:51:4f:e8:28:6d:af:86:b3:67:
74:99:a9:47:af:2b:3a:7d:48:bd:74:2c:f8:b9:94:
e1:43:7a:ad:af:d0:17:50:65:76:75:a6:63:67:38:
84:0e:ba:04:96:d5:da:31:42:ba:15:6b:9e:cf:60:
34:89:04:3c:c9:69:bc:a2:fe:25:a2:9c:4f:a4:ad:
85:46:0d:3b:ba:f2:97:f0:98:d0:8b:82:79:be:f7:
9d:c4:7e:a7:41:01:14:5b:49:dd:28:00:66:7b:a4:
77:3e:4a:82:17:e2:08:42:fa:4b:2d:c7:79:30:d7:
0b:97:f6:7f:3f:9a:7b:20:40:35:b0:0b:82:72:27:
45:9f:25:bd:93:60:6b:42:62:26:66:05:eb:52:80:
e6:d1:3f:d7:b5:61:a0:37:fc:b0:ad:16:0a:c1:af:
ea:6e:20:f4:ed:2f:cf:41:fd:be:70:e7:ab:c3:31:
8d:99:5c:b5:28:fe:99:ea:97:84:a5:92:bc:25:3a:
4e:a1:d4:ec:21:b3:d0:f2:6f:b8:7a:23:5d:ee:26:
91:b2:6a:8d:02:40:7b:07:0a:22:76:f9:40:96:28:
ab:d5:d6:b5:92:bf:38:ed:b8:fa:ef:88:b4:fb:15:
44:eb:30:bb:b1:3c:56:7f:d8:3b:72:71:d9:8d:26:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:F7:35:FA:C4:05:81:11:69:8C:6D:36:D6:C3:34:1E:ED:08:D6
X509v3 Authority Key Identifier:
keyid:69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d0:7b:1a:df:2c:d5:1a:1e:21:6c:86:c3:6b:51:dc:d7:dc:
d9:7c:44:8a:13:8b:f1:7f:ea:15:70:29:3d:cb:d9:35:41:db:
79:c1:1f:82:41:89:df:e7:1f:3a:a8:06:07:d2:11:92:03:4c:
9e:e2:e7:d2:8c:ca:e4:96:f6:35:93:f3:6d:5e:b8:9a:d7:f7:
8a:16:92:a8:b6:f6:2b:72:c2:b0:e8:6a:17:73:68:7c:75:f3:
87:7b:91:d9:30:4c:38:82:b1:fd:1e:36:da:cd:a2:9f:fe:62:
f0:20:43:78:e2:9e:e6:d4:52:fe:74:1b:5a:37:ba:ef:6e:08:
35:a8:c3:2f:2c:c3:f2:fb:33:55:32:f5:ba:31:d8:df:1f:5f:
31:2e:78:68:78:91:24:37:3a:0c:3a:6c:ca:d8:72:6b:2d:6d:
76:1c:8b:12:be:d7:d9:e7:fd:96:29:6c:06:2a:49:d8:96:10:
26:b7:8d:7c:b7:5c:52:55:b3:08:b1:81:04:ce:03:3f:d0:44:
8e:df:4e:85:73:79:eb:4b:af:0c:cc:b1:6b:78:dd:d9:67:e3:
08:08:9d:9a:38:a4:dc:bd:e9:bb:2e:7a:c6:12:72:4f:6d:d5:
80:21:6c:f7:00:0f:57:41:9e:0b:f3:d5:57:33:15:a8:d9:72:
a5:8a:68:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oGMdLW6iDXBssJpiP7flMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzEzYjFjYTgwZDg1YmYxNjE4MjE3ZmE5MmRiZDQ3YTM1
YzViOGUwHhcNMjUwNjI4MTMwMDUzWhcNMjUwNjI5MTMwMDUzWjAzMTEwLwYDVQQD
EygzNzE4ZjczNWZhYzQwNTgxMTE2OThjNmQzNmQ2YzMzNDFlZWQwOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxkM9VRRT+goba+Gs2d0malHrys6
fUi9dCz4uZThQ3qtr9AXUGV2daZjZziEDroEltXaMUK6FWuez2A0iQQ8yWm8ov4l
opxPpK2FRg07uvKX8JjQi4J5vvedxH6nQQEUW0ndKABme6R3PkqCF+IIQvpLLcd5
MNcLl/Z/P5p7IEA1sAuCcidFnyW9k2BrQmImZgXrUoDm0T/XtWGgN/ywrRYKwa/q
biD07S/PQf2+cOerwzGNmVy1KP6Z6peEpZK8JTpOodTsIbPQ8m+4eiNd7iaRsmqN
AkB7BwoidvlAliir1da1kr847bj674i0+xVE6zC7sTxWf9g7cnHZjSavHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcY9zX6xAWBEWmMbTbWwzQe7QjWMB8GA1UdIwQY
MBaAFGlxOxyoDYW/Fhghf6ktvUejXFuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xOGMyNTktYmEwMy00M2E4LWJmMmMt
NDkzNmYwMmZjNzYwLzEvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xOGMyNTktYmEwMy00M2E4LWJmMmMtNDkzNmYwMmZjNzYw
LzEvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNB7Gt8s
1RoeIWyGw2tR3Nfc2XxEihOL8X/qFXApPcvZNUHbecEfgkGJ3+cfOqgGB9IRkgNM
nuLn0ozK5Jb2NZPzbV64mtf3ihaSqLb2K3LCsOhqF3NofHXzh3uR2TBMOIKx/R42
2s2in/5i8CBDeOKe5tRS/nQbWje6724INajDLyzD8vszVTL1ujHY3x9fMS54aHiR
JDc6DDpsythyay1tdhyLEr7X2ef9lilsBipJ2JYQJreNfLdcUlWzCLGBBM4DP9BE
jt9OhXN560uvDMyxa3jd2WfjCAidmjik3L3puy56xhJyT23VgCFs9wAPV0GeC/PV
VzMVqNlypYpoeg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:27 2025 by rpki-client