Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: YaTodtA1sLATze8knjPzPC+PYikuBECIRw6MW+iUZLg=
Subject key identifier: 06:53:0B:8E:A6:4C:A8:FE:6E:8F:3D:20:47:BC:5D:EF:E8:74:77:D0
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 01984A4196E2F6186BD0169F4C415AA79A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 052D
Signing time: Sun 27 Jul 2025 05:01:09 +0000
Manifest this update: Sun 27 Jul 2025 05:01:09 +0000
Manifest next update: Mon 28 Jul 2025 05:01:09 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: yQv994T9h/zCIur/bvAcUl9RrZHfRCJi3NrTAJeU1/U=)
2: H60TtWd0YinCrHFItkOy4Q09gMg.roa (hash: DyKdKi+xe67HQcM0pe0CES2i6G0OdRxtjONYY5E8R+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:96:e2:f6:18:6b:d0:16:9f:4c:41:5a:a7:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Jul 27 05:01:09 2025 GMT
Not After : Jul 28 05:01:09 2025 GMT
Subject: CN=06530b8ea64ca8fe6e8f3d2047bc5defe87477d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:36:1b:55:e2:cb:26:e1:1f:8c:e3:1a:df:
21:b6:28:91:ac:ac:19:af:d5:2c:8e:cc:d1:8c:5e:
45:99:bf:a1:6d:4f:93:c2:96:55:7a:7b:36:1c:06:
89:8c:25:43:ba:07:65:d4:9b:0b:ac:dc:46:c6:46:
2e:1e:b8:42:69:89:fc:81:c4:a7:1b:bf:2a:21:d8:
5d:42:7e:84:e3:09:0a:16:c4:f3:aa:be:6a:41:05:
59:df:e4:dc:0e:da:c1:f7:23:de:19:8b:62:57:90:
22:a7:d3:e3:a7:11:90:24:34:cf:bc:54:bb:ab:7f:
dc:8f:4f:12:37:87:9e:ab:42:6b:b1:a3:97:25:69:
06:54:c1:89:a3:af:d1:8e:ef:af:ee:5c:15:e0:eb:
10:53:a7:dd:67:25:f3:01:b9:ba:9f:8b:c6:04:25:
b5:9c:63:f3:6b:4f:26:15:89:18:c4:d1:e8:59:d4:
46:65:4a:99:d3:62:5d:e2:c8:10:c1:42:29:2b:68:
d3:08:b7:ae:54:d6:32:6f:c7:ee:38:70:62:9b:6c:
50:94:c3:de:14:7c:fc:b5:ba:c2:1a:ef:11:41:37:
b1:09:5f:ba:cc:f7:50:aa:76:1a:83:de:79:5c:96:
92:24:39:8a:83:b5:3b:57:7b:36:9f:0e:99:d4:b2:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:0B:8E:A6:4C:A8:FE:6E:8F:3D:20:47:BC:5D:EF:E8:74:77:D0
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:95:87:72:6a:32:d0:2b:1e:69:0a:64:c8:f4:af:be:6f:2d:
a4:ab:45:db:52:8e:9c:49:6e:8b:21:1c:07:ea:70:00:fb:33:
4e:a3:2c:d0:69:19:f4:cf:ab:68:0b:d3:12:f9:d7:ff:b2:72:
1e:d5:02:39:3e:f1:83:42:11:bd:35:f4:f1:84:4a:59:2a:b1:
a4:d2:1e:61:ab:5d:ce:16:c5:ba:8b:32:3d:12:bd:94:01:0f:
ee:61:6e:ad:06:e9:5c:fc:90:83:28:dd:4e:0a:ee:61:db:c0:
c7:76:7b:8c:f8:f2:f1:b5:71:e3:f1:7f:e4:0f:c2:05:9c:88:
09:64:17:96:9c:5f:4e:fe:9a:e3:4b:d8:8c:ca:c6:70:2a:37:
30:4b:6e:84:1e:68:e1:41:14:d7:60:bb:5b:08:1c:97:b6:99:
28:c7:a7:41:63:a4:0e:a6:71:e8:0c:64:2d:aa:1b:34:b9:e0:
8e:8e:6b:0f:44:b4:68:6f:49:49:c0:64:fb:cf:8d:80:bc:d1:
9d:31:8e:a6:03:f7:76:a0:87:72:92:7b:58:cc:43:c6:7b:b8:
45:2d:19:17:9c:c2:74:2c:ee:b5:f3:70:84:10:58:03:dd:d2:
74:a5:99:0f:b9:80:db:a0:82:27:ff:49:2a:ac:11:55:e9:09:
ce:02:da:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQZbi9hhr0BafTEFap5qOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2
MTg4MzAwHhcNMjUwNzI3MDUwMTA5WhcNMjUwNzI4MDUwMTA5WjAzMTEwLwYDVQQD
EygwNjUzMGI4ZWE2NGNhOGZlNmU4ZjNkMjA0N2JjNWRlZmU4NzQ3N2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05U2G1XiyybhH4zjGt8htiiRrKwZ
r9UsjszRjF5Fmb+hbU+TwpZVens2HAaJjCVDugdl1JsLrNxGxkYuHrhCaYn8gcSn
G78qIdhdQn6E4wkKFsTzqr5qQQVZ3+TcDtrB9yPeGYtiV5Aip9PjpxGQJDTPvFS7
q3/cj08SN4eeq0JrsaOXJWkGVMGJo6/Rju+v7lwV4OsQU6fdZyXzAbm6n4vGBCW1
nGPza08mFYkYxNHoWdRGZUqZ02Jd4sgQwUIpK2jTCLeuVNYyb8fuOHBim2xQlMPe
FHz8tbrCGu8RQTexCV+6zPdQqnYag955XJaSJDmKg7U7V3s2nw6Z1LJHOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZTC46mTKj+bo89IEe8Xe/odHfQMB8GA1UdIwQY
MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt
Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5
LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZWHcmoy
0CseaQpkyPSvvm8tpKtF21KOnEluiyEcB+pwAPszTqMs0GkZ9M+raAvTEvnX/7Jy
HtUCOT7xg0IRvTX08YRKWSqxpNIeYatdzhbFuosyPRK9lAEP7mFurQbpXPyQgyjd
TgruYdvAx3Z7jPjy8bVx4/F/5A/CBZyICWQXlpxfTv6a40vYjMrGcCo3MEtuhB5o
4UEU12C7Wwgcl7aZKMenQWOkDqZx6AxkLaobNLngjo5rD0S0aG9JScBk+8+NgLzR
nTGOpgP3dqCHcpJ7WMxDxnu4RS0ZF5zCdCzutfNwhBBYA93SdKWZD7mA26CCJ/9J
KqwRVekJzgLaGA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:13:51 2025 by rpki-client