Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
File: aLw5QAVdFXTyY7X5arCQDGu0xfk.mft (raw, json)
Hash identifier: Fe2+UN694X2e0HDBY2KMCIULNlq83xEUQFx4tCjX9C0=
Subject key identifier: 0B:ED:35:86:BA:DE:5B:E9:74:45:6F:B7:7B:E5:AA:94:02:FA:AE:31
Authority key identifier: 68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
Certificate issuer: /CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Certificate serial: 019849662CB7D9CAA1A7F81A47C554FCAD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
Manifest number: 036C
Signing time: Sun 27 Jul 2025 01:01:29 +0000
Manifest this update: Sun 27 Jul 2025 01:01:29 +0000
Manifest next update: Mon 28 Jul 2025 01:01:29 +0000
Files and hashes: 1: UTuku2NoRg5M3213fHsTSechO5U.roa (hash: mmVExhdm+qlv5wjD1nNIr2CTIIUIWrulidPSaVkzZdU=)
2: aLw5QAVdFXTyY7X5arCQDGu0xfk.crl (hash: 1NHMRfkCblPgM0cy5O6/HkVFSOJO/BlK7V8hf29tXg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:2c:b7:d9:ca:a1:a7:f8:1a:47:c5:54:fc:ad:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Validity
Not Before: Jul 27 01:01:29 2025 GMT
Not After : Jul 28 01:01:29 2025 GMT
Subject: CN=0bed3586bade5be974456fb77be5aa9402faae31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:75:68:3d:3e:21:93:fd:87:c0:f8:5d:ae:69:
16:ad:88:44:00:54:8c:dc:b3:f3:59:d3:58:cf:5f:
31:97:4a:f9:c8:50:e2:e7:a1:62:f7:c9:3f:43:14:
51:b7:a9:27:e5:38:44:89:1b:48:fc:0e:85:b5:ea:
6b:f1:9b:28:88:5c:ff:6b:ca:a0:6e:ae:d4:b8:76:
bf:06:9b:00:f0:c8:20:1d:24:00:3b:b9:20:0d:ef:
67:4d:5f:4d:b5:69:27:17:95:8a:d0:97:aa:3d:8e:
a3:5a:66:6e:fa:2c:d4:85:57:d6:d7:58:e3:a0:b3:
73:e1:a4:e4:99:66:68:58:3f:6e:54:9b:7c:b9:dd:
20:04:a3:4b:48:f7:55:2e:31:98:98:1f:e7:b8:7d:
12:0e:47:27:8b:bf:77:ba:e3:fc:de:69:fa:dc:7a:
a1:f5:64:65:a4:13:20:e6:b9:30:6c:e4:b1:dc:63:
b7:81:61:2d:f6:3b:ec:79:b6:21:aa:a5:50:60:6a:
1b:db:bd:ff:c3:ac:e8:bf:47:06:65:b0:ce:b5:e2:
51:8b:8a:51:0c:37:4e:59:43:ce:bb:f5:60:5c:07:
97:22:25:8b:33:76:7c:d7:c2:4e:43:cd:82:f9:12:
47:64:8d:f8:10:d3:bb:ad:a2:60:9b:60:19:e5:34:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:ED:35:86:BA:DE:5B:E9:74:45:6F:B7:7B:E5:AA:94:02:FA:AE:31
X509v3 Authority Key Identifier:
keyid:68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:06:fa:6b:a7:cc:9e:1e:56:a9:2d:7b:da:41:54:6d:b2:6a:
24:bc:ac:bf:7d:a0:f7:94:e5:8d:4e:ca:b0:02:30:29:dc:8b:
45:53:f7:76:d5:89:dc:11:70:65:49:30:ec:2f:b6:69:3e:4e:
e0:c4:5f:64:c4:00:6e:d3:42:38:63:96:76:b2:43:df:d4:f4:
4f:08:7b:0e:5c:57:ea:fd:f2:0a:7b:f6:fe:ac:42:39:20:5f:
71:05:6f:ce:6d:7b:2d:ea:e3:06:e6:4c:38:60:4f:7c:22:22:
60:56:e6:f6:ed:4f:8b:a9:5a:71:fa:7f:b9:08:15:f2:9f:99:
fb:67:50:3d:e1:75:e8:8f:23:23:60:57:86:fb:9c:fd:fa:8c:
da:9b:a9:dc:38:78:26:93:f9:97:06:72:fd:bf:fe:d8:cf:3e:
1c:b0:87:1e:99:39:a6:12:6b:5b:a1:bf:d1:1d:06:d0:17:74:
99:df:83:42:4e:fe:96:13:4f:d6:02:74:a8:e6:08:d8:fd:6c:
93:84:d0:e4:ae:f9:ee:7f:1b:00:93:83:69:bc:ee:03:fb:da:
3e:b5:21:83:73:79:95:27:9d:f6:58:cd:43:e1:78:ba:d3:35:
84:86:d0:2c:b2:e6:36:de:2c:8a:7e:fe:d8:e1:62:bc:91:ec:
5e:c2:66:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZiy32cqhp/gaR8VU/K2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YmMzOTQwMDU1ZDE1NzRmMjYzYjVmOTZhYjA5MDBjNmJi
NGM1ZjkwHhcNMjUwNzI3MDEwMTI5WhcNMjUwNzI4MDEwMTI5WjAzMTEwLwYDVQQD
EygwYmVkMzU4NmJhZGU1YmU5NzQ0NTZmYjc3YmU1YWE5NDAyZmFhZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3VoPT4hk/2HwPhdrmkWrYhEAFSM
3LPzWdNYz18xl0r5yFDi56Fi98k/QxRRt6kn5ThEiRtI/A6Ftepr8ZsoiFz/a8qg
bq7UuHa/BpsA8MggHSQAO7kgDe9nTV9NtWknF5WK0JeqPY6jWmZu+izUhVfW11jj
oLNz4aTkmWZoWD9uVJt8ud0gBKNLSPdVLjGYmB/nuH0SDkcni793uuP83mn63Hqh
9WRlpBMg5rkwbOSx3GO3gWEt9jvsebYhqqVQYGob273/w6zov0cGZbDOteJRi4pR
DDdOWUPOu/VgXAeXIiWLM3Z818JOQ82C+RJHZI34ENO7raJgm2AZ5TSouwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvtNYa63lvpdEVvt3vlqpQC+q4xMB8GA1UdIwQY
MBaAFGi8OUAFXRV08mO1+WqwkAxrtMX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUx3NVFBVmRGWFR5WTdYNWFyQ1FER3UweGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kMDJiMzItOTY3ZC00NzUxLTgyZDMt
MTIxYTE0YTlhNDBlLzEvYUx3NVFBVmRGWFR5WTdYNWFyQ1FER3UweGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9kMDJiMzItOTY3ZC00NzUxLTgyZDMtMTIxYTE0YTlhNDBl
LzEvYUx3NVFBVmRGWFR5WTdYNWFyQ1FER3UweGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgb6a6fM
nh5WqS172kFUbbJqJLysv32g95TljU7KsAIwKdyLRVP3dtWJ3BFwZUkw7C+2aT5O
4MRfZMQAbtNCOGOWdrJD39T0Twh7DlxX6v3yCnv2/qxCOSBfcQVvzm17LerjBuZM
OGBPfCIiYFbm9u1Pi6lacfp/uQgV8p+Z+2dQPeF16I8jI2BXhvuc/fqM2pup3Dh4
JpP5lwZy/b/+2M8+HLCHHpk5phJrW6G/0R0G0Bd0md+DQk7+lhNP1gJ0qOYI2P1s
k4TQ5K757n8bAJODabzuA/vaPrUhg3N5lSed9ljNQ+F4utM1hIbQLLLmNt4sin7+
2OFivJHsXsJm4w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:14 2025 by rpki-client