Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier: l6yLdbAJrqAqQf6FPnUfTb9EqKXhVYSPUKg/RaMyaOw=
Subject key identifier: 84:37:0A:DD:0D:D0:C5:77:DD:D6:FE:C4:D7:22:9E:04:A9:31:60:23
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial: 0198511E96368D868BF8BA8B95983F16F2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 13:00:15 +0000
Manifest this update: Mon 28 Jul 2025 13:00:15 +0000
Manifest next update: Tue 29 Jul 2025 13:00:15 +0000
Files and hashes: 1: 1-POC2nfhxokaO34U4IxxrQdEyHg.roa (hash: HGa5ESI5zwwldA7SOJhQSh4vTo8C4LN7Ht6oX1cZupU=)
2: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: qlD4VWsKbFoj7eBMmDbG/54tQ0PEDt/iQEKTglg9W5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1e:96:36:8d:86:8b:f8:ba:8b:95:98:3f:16:f2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Validity
Not Before: Jul 28 13:00:15 2025 GMT
Not After : Jul 29 13:00:15 2025 GMT
Subject: CN=84370add0dd0c577ddd6fec4d7229e04a9316023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:cf:e9:63:6d:8c:15:32:8f:ad:06:7c:f0:
cb:d6:e2:27:c4:d0:1c:17:c3:1b:7c:59:66:a9:b6:
dc:c8:cf:16:fd:d6:af:84:59:30:b1:3e:0e:a7:e3:
36:f1:f2:da:88:dc:59:08:30:85:bf:1d:c1:05:5b:
27:42:13:ce:3b:8c:d3:c7:38:7c:5b:b0:c1:43:af:
67:e2:f9:16:73:fb:2d:97:9a:01:a4:d7:a5:f0:2d:
5e:d5:8d:5d:f0:59:8f:28:00:99:f3:8e:7d:32:20:
7d:39:c1:5c:ac:10:0b:e6:51:97:1b:09:ac:2a:98:
5c:26:79:92:e2:10:7c:a1:71:72:39:a2:75:0a:4a:
3f:a0:db:9a:34:26:51:a4:16:a7:57:b2:49:fb:0c:
a9:33:f7:4f:b8:e3:5f:9b:27:dc:fa:d9:59:e5:98:
4f:33:5b:5e:3c:25:03:33:9a:20:d9:6c:a8:19:0b:
90:a0:27:06:ac:96:e3:21:a1:af:4d:a0:0f:fd:d5:
18:ab:19:6d:8b:e2:1f:e1:10:83:8e:12:7f:07:de:
e2:c1:73:d0:47:54:a4:24:2a:3a:19:ff:2a:b5:a9:
30:32:e2:49:56:57:dd:af:2c:ad:44:16:5c:c5:d3:
9c:ca:8f:be:8d:cd:92:46:cd:c5:87:81:8d:46:19:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:37:0A:DD:0D:D0:C5:77:DD:D6:FE:C4:D7:22:9E:04:A9:31:60:23
X509v3 Authority Key Identifier:
keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:26:36:71:d6:58:4e:2b:3d:2f:b4:55:6d:ce:08:4c:41:84:
22:02:85:08:f6:c3:60:fa:a0:08:d3:66:3c:17:57:83:f7:bd:
db:35:96:58:92:54:fa:6f:b9:44:3d:dd:b1:9c:f8:bf:60:85:
c6:b4:3b:47:54:b6:34:a4:c7:33:ef:f2:10:8c:17:9c:30:36:
dd:ff:ba:07:9f:97:a9:59:76:8f:e0:11:6a:0a:9a:f9:e4:91:
a0:cc:65:d9:fc:6f:33:5a:a0:c1:48:36:ab:c7:c7:22:02:4a:
5a:eb:d2:db:11:5a:2c:62:cf:84:79:87:42:7d:75:2e:cb:91:
cb:63:08:a1:c5:2f:96:1b:7d:20:b4:e1:4c:bb:df:3b:f5:29:
7d:50:12:60:4a:7d:31:aa:e7:69:63:88:30:34:7c:45:60:7d:
b5:15:6b:8f:74:62:94:d3:32:3a:3f:6e:af:90:0b:ea:89:c2:
56:e0:47:86:53:48:45:92:ea:20:ae:13:77:81:1a:e6:eb:6b:
f0:e4:75:69:4c:fc:ff:6d:15:e0:0c:43:42:31:dd:68:6e:5e:
ea:2a:7a:4d:17:71:4f:f9:26:b3:85:f9:c5:c5:81:6e:63:fc:
87:28:a6:fd:47:f8:bc:06:0b:98:df:9f:52:d0:ce:ae:5e:6c:
b6:a7:e9:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRHpY2jYaL+LqLlZg/FvLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTMxODhlYmZjZTIwZTViYzUzZjNhY2Y1N2Y0MDdkOWU1
N2FjMTcwHhcNMjUwNzI4MTMwMDE1WhcNMjUwNzI5MTMwMDE1WjAzMTEwLwYDVQQD
Eyg4NDM3MGFkZDBkZDBjNTc3ZGRkNmZlYzRkNzIyOWUwNGE5MzE2MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLnP6WNtjBUyj60GfPDL1uInxNAc
F8MbfFlmqbbcyM8W/davhFkwsT4Op+M28fLaiNxZCDCFvx3BBVsnQhPOO4zTxzh8
W7DBQ69n4vkWc/stl5oBpNel8C1e1Y1d8FmPKACZ8459MiB9OcFcrBAL5lGXGwms
KphcJnmS4hB8oXFyOaJ1Cko/oNuaNCZRpBanV7JJ+wypM/dPuONfmyfc+tlZ5ZhP
M1tePCUDM5og2WyoGQuQoCcGrJbjIaGvTaAP/dUYqxlti+If4RCDjhJ/B97iwXPQ
R1SkJCo6Gf8qtakwMuJJVlfdryytRBZcxdOcyo++jc2SRs3Fh4GNRhmV8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ3Ct0N0MV33db+xNcingSpMWAjMB8GA1UdIwQY
MBaAFGiTGI6/ziDlvFPzrPV/QH2eV6wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2Yt
MmQyYjRmNzBjM2EzLzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2YtMmQyYjRmNzBjM2Ez
LzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSY2cdZY
Tis9L7RVbc4ITEGEIgKFCPbDYPqgCNNmPBdXg/e92zWWWJJU+m+5RD3dsZz4v2CF
xrQ7R1S2NKTHM+/yEIwXnDA23f+6B5+XqVl2j+ARagqa+eSRoMxl2fxvM1qgwUg2
q8fHIgJKWuvS2xFaLGLPhHmHQn11LsuRy2MIocUvlht9ILThTLvfO/UpfVASYEp9
MarnaWOIMDR8RWB9tRVrj3RilNMyOj9ur5AL6onCVuBHhlNIRZLqIK4Td4Ea5utr
8OR1aUz8/20V4AxDQjHdaG5e6ip6TRdxT/kms4X5xcWBbmP8hyim/Uf4vAYLmN+f
UtDOrl5stqfpjQ==
-----END CERTIFICATE-----
Generated at Mon Jul 28 22:59:41 2025 by rpki-client