Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: MwuDZLGuN4L33HMM01s0OIiPbYZbDWf0kVyw+cyoEyM=
Subject key identifier: 44:A4:A0:0C:D0:49:23:52:B2:0A:76:D7:DB:81:65:5B:E6:E4:E3:13
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 01984965A61B3548D3531258CFF19415AF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 1546
Signing time: Sun 27 Jul 2025 01:00:55 +0000
Manifest this update: Sun 27 Jul 2025 01:00:55 +0000
Manifest next update: Mon 28 Jul 2025 01:00:55 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: opjz95JIjux95nW8KzcqYIDtHqdzUddaCfXMIVvS/to=)
2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=)
3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:a6:1b:35:48:d3:53:12:58:cf:f1:94:15:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jul 27 01:00:55 2025 GMT
Not After : Jul 28 01:00:55 2025 GMT
Subject: CN=44a4a00cd0492352b20a76d7db81655be6e4e313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:e5:75:b0:b3:39:b7:aa:33:4a:2f:47:2b:
42:38:f3:63:e7:86:5b:5d:54:66:9a:e9:46:8e:6d:
b5:6f:1c:03:87:d6:44:32:c1:88:15:55:e9:8b:f0:
61:eb:ce:41:f5:04:f4:d6:87:06:b0:e7:f0:f6:36:
03:f7:b7:c5:65:b5:17:0d:6e:28:81:dc:c0:73:ef:
48:2f:ac:65:3d:e6:39:b7:a5:ff:2f:92:15:43:39:
53:80:e7:f5:f4:d5:f4:fe:1a:5f:94:f4:6a:1c:2c:
8d:84:62:cc:4c:a6:9d:1c:e8:05:de:7e:e0:79:05:
4f:11:d3:a8:6f:f7:32:47:57:1d:96:93:ff:c6:2f:
8f:f5:af:fa:d2:10:95:8a:b4:bf:57:7f:9a:8f:85:
50:96:a9:9f:cb:f6:67:e3:7f:44:bb:79:41:e9:3c:
e7:69:92:0a:e2:bd:bf:84:47:ce:ee:57:81:ac:c3:
e2:d1:4e:00:43:8d:83:96:15:d2:39:8d:76:8e:fc:
da:95:26:54:64:f8:61:01:df:db:9e:ea:a0:91:4e:
14:ec:da:22:bb:f6:fa:47:eb:73:87:4b:97:be:c4:
41:7b:28:ca:94:c2:ec:e0:f4:bd:72:47:de:b3:1b:
2a:ff:2e:66:58:74:db:00:d2:d9:66:67:aa:86:28:
0b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:A0:0C:D0:49:23:52:B2:0A:76:D7:DB:81:65:5B:E6:E4:E3:13
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a0:1d:bc:51:ef:28:b0:f9:f3:6f:d7:74:0f:51:ca:90:bb:
9a:eb:7a:b4:fc:9a:b6:8d:61:74:71:15:58:b7:ef:a6:92:fc:
89:bf:61:9f:2c:e4:4f:1d:1e:80:2a:13:e2:e9:be:aa:51:a5:
b9:ef:88:8e:7a:08:21:54:21:95:38:55:22:52:eb:d5:f5:98:
c9:03:47:6f:ca:8c:ae:0b:be:95:a3:6b:0c:23:75:bd:ae:d0:
3a:fb:7c:c4:5a:fe:50:e7:18:b3:f1:23:00:a8:ad:d3:7d:51:
f4:bb:c4:e4:85:32:3c:7c:b6:9e:ba:48:f4:fe:2f:e4:a3:6f:
3a:86:43:a2:24:77:9a:03:42:0f:07:63:32:66:10:ee:99:20:
92:8f:2e:f8:ad:56:6e:1a:e9:eb:41:29:e4:d4:27:32:0d:01:
66:9a:e9:f2:26:23:e0:bf:2a:b3:bc:71:ef:31:0b:ea:23:12:
91:a8:11:e4:0a:b7:be:c5:1e:30:aa:86:c1:64:24:1c:a7:d2:
69:7e:9f:64:44:0a:9d:81:7c:5e:ee:d2:bf:88:7c:c0:43:61:
35:67:f8:47:a7:1c:c2:bc:9e:0d:58:53:c7:05:e2:de:55:d8:
f6:ce:10:54:1f:63:68:eb:33:2e:77:35:62:be:d3:74:f2:2e:
8c:c7:76:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZaYbNUjTUxJYz/GUFa8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWIwMDJmMDAwYmQ0MjZlNGE2NDBjNzFkNmMwMjAxYjUw
NTBlMzQwHhcNMjUwNzI3MDEwMDU1WhcNMjUwNzI4MDEwMDU1WjAzMTEwLwYDVQQD
Eyg0NGE0YTAwY2QwNDkyMzUyYjIwYTc2ZDdkYjgxNjU1YmU2ZTRlMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofPldbCzObeqM0ovRytCOPNj54Zb
XVRmmulGjm21bxwDh9ZEMsGIFVXpi/Bh685B9QT01ocGsOfw9jYD97fFZbUXDW4o
gdzAc+9IL6xlPeY5t6X/L5IVQzlTgOf19NX0/hpflPRqHCyNhGLMTKadHOgF3n7g
eQVPEdOob/cyR1cdlpP/xi+P9a/60hCVirS/V3+aj4VQlqmfy/Zn439Eu3lB6Tzn
aZIK4r2/hEfO7leBrMPi0U4AQ42DlhXSOY12jvzalSZUZPhhAd/bnuqgkU4U7Noi
u/b6R+tzh0uXvsRBeyjKlMLs4PS9ckfesxsq/y5mWHTbANLZZmeqhigLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESkoAzQSSNSsgp219uBZVvm5OMTMB8GA1UdIwQY
MBaAFGnrAC8AC9Qm5KZAxx1sAgG1BQ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0Mzct
Nzg1NDc1YzIyYzliLzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0MzctNzg1NDc1YzIyYzli
LzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqAdvFHv
KLD582/XdA9RypC7mut6tPyato1hdHEVWLfvppL8ib9hnyzkTx0egCoT4um+qlGl
ue+IjnoIIVQhlThVIlLr1fWYyQNHb8qMrgu+laNrDCN1va7QOvt8xFr+UOcYs/Ej
AKit031R9LvE5IUyPHy2nrpI9P4v5KNvOoZDoiR3mgNCDwdjMmYQ7pkgko8u+K1W
bhrp60Ep5NQnMg0BZprp8iYj4L8qs7xx7zEL6iMSkagR5Aq3vsUeMKqGwWQkHKfS
aX6fZEQKnYF8Xu7Sv4h8wENhNWf4R6ccwryeDVhTxwXi3lXY9s4QVB9jaOszLnc1
Yr7TdPIujMd2yQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:38:37 2025 by rpki-client