Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: OzzCh8KBdrgQjuoZkf8kR4vMxMi1v1JubVBI2/tG/fQ=
Subject key identifier: BB:21:A2:FC:F8:FD:EA:60:EA:F9:B1:82:F3:4E:94:2D:C6:70:BE:C8
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 0198477686235A0F1AAD7E7806BE6F119932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 16:00:06 +0000
Manifest this update: Sat 26 Jul 2025 16:00:06 +0000
Manifest next update: Sun 27 Jul 2025 16:00:06 +0000
Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: LJKnWWi+uF77zTls+5u3r8aHWkwbhDTfFlyQ98i9n+E=)
3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:86:23:5a:0f:1a:ad:7e:78:06:be:6f:11:99:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Jul 26 16:00:06 2025 GMT
Not After : Jul 27 16:00:06 2025 GMT
Subject: CN=bb21a2fcf8fdea60eaf9b182f34e942dc670bec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:0f:68:2f:e8:47:f9:47:60:84:be:82:d9:
ae:06:aa:85:e8:6a:a4:c8:35:57:64:7b:e0:55:8e:
68:f3:4e:90:af:5b:bf:b1:22:c4:ea:ff:fd:8f:9a:
e1:6a:0a:25:2f:a9:c7:9f:63:db:03:dc:f8:ed:cc:
17:9d:88:8e:19:12:70:e3:86:38:e2:20:16:3d:d8:
4e:e7:19:2f:a7:39:5f:7f:b8:04:21:89:18:48:9b:
ea:ab:a0:4f:5c:27:14:7b:4f:ae:f8:1a:1c:f9:77:
f0:09:0d:af:23:24:45:97:19:d9:81:5a:0c:ac:82:
27:e0:7b:d8:bf:c6:4e:63:50:5a:2d:50:62:30:4e:
42:b3:70:e0:82:d7:76:38:56:ea:82:83:52:f6:62:
f6:bc:9a:64:2f:5d:46:02:39:f4:e3:84:6b:32:71:
1a:6a:91:55:af:bb:ee:e1:43:24:ec:4e:6c:0b:5a:
27:34:09:44:75:85:a4:ef:27:f0:eb:cb:cc:d5:b2:
ef:69:5d:73:cb:49:a4:c7:07:81:e1:f1:ea:2f:dd:
59:97:59:76:42:cd:68:fb:2f:0b:5d:2b:1d:b5:36:
44:c3:5d:8f:11:2f:3b:b7:e4:95:5f:46:07:40:6d:
71:3a:78:da:6d:40:ac:be:fd:7c:8c:03:52:4a:8c:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:21:A2:FC:F8:FD:EA:60:EA:F9:B1:82:F3:4E:94:2D:C6:70:BE:C8
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:63:d4:b8:17:4b:2d:04:eb:bc:28:bb:a9:be:cf:cb:d2:
3d:1d:22:b2:bf:4b:0d:e0:6b:15:9e:16:bc:43:76:a1:4b:49:
ff:ae:6a:65:b8:5f:1c:9b:00:83:40:b6:de:47:aa:fb:6b:92:
0a:c0:33:20:2a:fe:92:45:f0:2f:e8:f1:f3:71:f4:b8:fe:f8:
6f:6d:b0:f8:8a:45:26:c3:ec:e2:8b:8e:6d:45:1d:9d:a6:dc:
06:da:41:6e:47:bc:79:5c:e1:cc:36:9a:0d:da:46:d1:db:71:
61:ca:ae:4b:e6:6e:c9:82:9e:37:d9:17:89:75:ad:02:e0:26:
eb:47:40:76:c3:29:aa:59:1c:06:3e:61:48:e3:3a:30:1e:38:
74:c0:df:da:e3:15:e0:9f:8b:dc:9f:e2:83:a3:b1:3e:75:ee:
03:c9:5a:e4:1b:38:5d:cc:3e:d3:2a:40:ca:20:62:c3:e5:6b:
5d:af:9a:7d:1a:8f:4b:a0:87:69:e5:78:8d:85:6b:82:ce:a9:
c9:f2:37:53:37:c6:3c:a1:81:77:92:ef:6f:0c:2d:b6:5d:bc:
bc:9f:d7:0b:84:96:27:7c:2f:19:67:3b:2a:b1:01:e9:2c:62:
f1:f7:b9:a2:5c:e0:80:72:3e:81:52:9a:c2:06:72:d4:2c:c8:
1d:7b:00:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdoYjWg8arX54Br5vEZkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTRlOTA4OTlmZjI1NjQ0NTIwNzI0Y2RlOGMyMTE2MTM2
MDBiZWYwHhcNMjUwNzI2MTYwMDA2WhcNMjUwNzI3MTYwMDA2WjAzMTEwLwYDVQQD
EyhiYjIxYTJmY2Y4ZmRlYTYwZWFmOWIxODJmMzRlOTQyZGM2NzBiZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdsPaC/oR/lHYIS+gtmuBqqF6Gqk
yDVXZHvgVY5o806Qr1u/sSLE6v/9j5rhagolL6nHn2PbA9z47cwXnYiOGRJw44Y4
4iAWPdhO5xkvpzlff7gEIYkYSJvqq6BPXCcUe0+u+Boc+XfwCQ2vIyRFlxnZgVoM
rIIn4HvYv8ZOY1BaLVBiME5Cs3Dggtd2OFbqgoNS9mL2vJpkL11GAjn044RrMnEa
apFVr7vu4UMk7E5sC1onNAlEdYWk7yfw68vM1bLvaV1zy0mkxweB4fHqL91Zl1l2
Qs1o+y8LXSsdtTZEw12PES87t+SVX0YHQG1xOnjabUCsvv18jANSSowZowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLshovz4/epg6vmxgvNOlC3GcL7IMB8GA1UdIwQY
MBaAFGlU6QiZ/yVkRSByTN6MIRYTYAvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAt
M2Y2ZWU3MDU5MTViLzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAtM2Y2ZWU3MDU5MTVi
LzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5dj1LgX
Sy0E67wou6m+z8vSPR0isr9LDeBrFZ4WvEN2oUtJ/65qZbhfHJsAg0C23keq+2uS
CsAzICr+kkXwL+jx83H0uP74b22w+IpFJsPs4ouObUUdnabcBtpBbke8eVzhzDaa
DdpG0dtxYcquS+ZuyYKeN9kXiXWtAuAm60dAdsMpqlkcBj5hSOM6MB44dMDf2uMV
4J+L3J/ig6OxPnXuA8la5Bs4Xcw+0ypAyiBiw+VrXa+afRqPS6CHaeV4jYVrgs6p
yfI3UzfGPKGBd5Lvbwwttl28vJ/XC4SWJ3wvGWc7KrEB6Sxi8fe5olzggHI+gVKa
wgZy1CzIHXsA3A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:21:46 2025 by rpki-client