Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: lwDlSck2XSkneWGlY4HPMD++xO/0IQJDThw+hpCP6jk=
Subject key identifier: B0:BA:02:1F:D9:68:C8:72:66:AF:0F:C1:D5:87:D8:3F:B6:A1:D4:57
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 019845F6D529CE00B4EC0C1756F952775985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 09:01:00 +0000
Manifest this update: Sat 26 Jul 2025 09:01:00 +0000
Manifest next update: Sun 27 Jul 2025 09:01:00 +0000
Files and hashes: 1: BFGJmraQBgGavzIeZHO0bfSXFRI.roa (hash: e3IZCe3SbuLp2264XxRVhIYJHbqFuU1UA3gCIN6FJhs=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: iNSwcZcxa3Lbjq5UHvv1S18EshuNoRfMs7G0xq+PmVU=)
3: yIpbFqb6UtZ_6rW_FDbCQTH3LMk.roa (hash: YWCevYeGrsDTRNW9HGKxCubEWRJxVpXV1huOUXJtDd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:d5:29:ce:00:b4:ec:0c:17:56:f9:52:77:59:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Jul 26 09:01:00 2025 GMT
Not After : Jul 27 09:01:00 2025 GMT
Subject: CN=b0ba021fd968c87266af0fc1d587d83fb6a1d457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:ab:4b:83:b0:ac:4d:0b:ea:6b:ee:d8:27:
d1:e6:97:43:1c:20:5f:5c:09:43:8d:ea:64:86:82:
27:5b:6d:f7:a8:61:bf:25:cf:34:42:92:bc:73:50:
2d:0b:90:09:48:74:3c:00:a1:c7:2c:23:99:a4:0f:
05:f3:5e:2f:5d:82:fa:f3:5a:89:b1:43:34:6d:c4:
3b:02:1f:bd:e0:8f:56:8a:42:a1:dd:1c:eb:80:9b:
f3:bc:81:d1:6d:ea:06:96:07:70:8c:74:55:b8:29:
aa:c5:bc:af:28:64:03:8c:fd:ec:d7:73:e9:a0:57:
ca:d2:19:bb:f4:3a:25:a4:a9:6b:04:d3:0d:b0:4b:
4f:74:74:5b:a3:0a:40:6f:cc:24:ae:7c:e7:70:42:
ec:84:4a:c9:1a:34:a0:04:bd:d3:f0:d5:b2:18:4e:
0f:cf:9f:c5:55:ea:37:31:19:ed:2f:9f:f3:c0:5a:
65:1e:fc:d0:f8:79:1a:c3:94:17:07:33:c8:05:34:
9f:ac:e1:25:00:83:5c:8e:ba:89:04:b6:a7:1f:2c:
f9:37:2c:5e:15:9a:32:a8:3d:8b:d6:c7:7a:f8:f3:
14:56:73:66:43:16:9e:19:5b:87:e8:1f:91:01:90:
8b:20:42:b4:a0:4a:df:10:b6:bf:26:9c:39:38:97:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BA:02:1F:D9:68:C8:72:66:AF:0F:C1:D5:87:D8:3F:B6:A1:D4:57
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:71:c1:e1:fe:6e:03:52:23:f8:70:a8:79:e0:0f:03:e3:c1:
4f:3d:a6:33:88:6f:6e:e0:e5:fb:82:f1:31:49:94:3e:d2:16:
81:5d:0f:42:8b:ec:63:89:f2:17:3c:2b:c4:16:c0:c1:cb:93:
ad:09:e2:f9:db:78:de:d9:15:46:f1:cb:cf:b4:97:c8:67:39:
21:10:1e:4e:66:fa:5c:da:5b:e0:da:cb:ad:30:9c:52:fb:50:
3b:ac:26:7c:58:58:26:66:d3:83:6f:ec:0c:c2:b5:73:d8:af:
cf:1c:73:45:7c:f2:5b:2f:2c:a1:4b:30:af:47:34:78:d8:8b:
80:c9:29:00:37:a9:04:51:8e:3d:05:2b:5b:16:71:b3:99:45:
6f:ee:33:9d:e2:fd:15:e2:74:10:de:32:e2:24:4d:f3:73:7d:
1c:77:51:db:5e:f8:ea:96:19:87:1b:74:2e:9c:7b:f3:75:4a:
9f:43:2e:7f:7f:b8:fc:0f:9d:78:6d:f4:67:a0:ae:d2:c0:ee:
55:33:58:28:06:60:c0:4a:0b:1c:39:7d:c5:ca:08:42:5a:ef:
4f:be:4f:96:57:e4:78:ef:db:22:c5:16:78:d2:93:71:b2:de:
09:80:8e:86:1e:8f:9f:94:c0:29:45:aa:7a:5e:2e:9c:1c:ee:
4f:ff:c5:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9tUpzgC07AwXVvlSd1mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYjdiOWNlZTAwNDMwMGVhZmUwOWJmMTJmY2I2ZGExZGQz
MGE0ZDcwHhcNMjUwNzI2MDkwMTAwWhcNMjUwNzI3MDkwMTAwWjAzMTEwLwYDVQQD
EyhiMGJhMDIxZmQ5NjhjODcyNjZhZjBmYzFkNTg3ZDgzZmI2YTFkNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJKrS4OwrE0L6mvu2CfR5pdDHCBf
XAlDjepkhoInW233qGG/Jc80QpK8c1AtC5AJSHQ8AKHHLCOZpA8F814vXYL681qJ
sUM0bcQ7Ah+94I9WikKh3RzrgJvzvIHRbeoGlgdwjHRVuCmqxbyvKGQDjP3s13Pp
oFfK0hm79DolpKlrBNMNsEtPdHRbowpAb8wkrnzncELshErJGjSgBL3T8NWyGE4P
z5/FVeo3MRntL5/zwFplHvzQ+Hkaw5QXBzPIBTSfrOElAINcjrqJBLanHyz5Nyxe
FZoyqD2L1sd6+PMUVnNmQxaeGVuH6B+RAZCLIEK0oErfELa/Jpw5OJeyxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC6Ah/ZaMhyZq8PwdWH2D+2odRXMB8GA1UdIwQY
MBaAFGq3uc7gBDAOr+Cb8S/LbaHdMKTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZDExZTItNTI3NC00NDdlLTlmZTYt
ODhhYTZmZDBhYThlLzEvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83ZDExZTItNTI3NC00NDdlLTlmZTYtODhhYTZmZDBhYThl
LzEvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzHHB4f5u
A1Ij+HCoeeAPA+PBTz2mM4hvbuDl+4LxMUmUPtIWgV0PQovsY4nyFzwrxBbAwcuT
rQni+dt43tkVRvHLz7SXyGc5IRAeTmb6XNpb4NrLrTCcUvtQO6wmfFhYJmbTg2/s
DMK1c9ivzxxzRXzyWy8soUswr0c0eNiLgMkpADepBFGOPQUrWxZxs5lFb+4zneL9
FeJ0EN4y4iRN83N9HHdR21746pYZhxt0Lpx783VKn0Muf3+4/A+deG30Z6Cu0sDu
VTNYKAZgwEoLHDl9xcoIQlrvT75PllfkeO/bIsUWeNKTcbLeCYCOhh6Pn5TAKUWq
el4unBzuT//FQw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:27:59 2025 by rpki-client