Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: 9EkPVmVeIYP9z1nj+PjQXFNEKO5N9IQr4nbM60j7Eg4=
Subject key identifier: 10:B3:C7:3A:8E:3D:41:8B:A6:7F:86:84:81:10:1F:0E:81:6A:99:55
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 01985C11283AD631F37DE7ED41C0A9EECDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 160B
Signing time: Wed 30 Jul 2025 16:01:24 +0000
Manifest this update: Wed 30 Jul 2025 16:01:24 +0000
Manifest next update: Thu 31 Jul 2025 16:01:24 +0000
Files and hashes: 1: 1-wEZKS5ROln113VYj-rYIVv3HMw.roa (hash: zd3NK5lHmlo7IZCKvHCkj4ue/ewdTG041qEpUCwPhSg=)
2: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: Fh9N6fYn7Wx+RbW/C4wHOIUFcmtqesexgw8qT2IxymY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:11:28:3a:d6:31:f3:7d:e7:ed:41:c0:a9:ee:cd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Jul 30 16:01:24 2025 GMT
Not After : Jul 31 16:01:24 2025 GMT
Subject: CN=10b3c73a8e3d418ba67f868481101f0e816a9955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:f1:0c:5f:28:fd:ab:bc:df:d1:b2:ea:9b:
fc:93:e0:89:63:8b:39:5e:9c:dc:87:0c:82:41:f0:
50:dd:6c:b6:e3:97:ee:77:fc:37:a0:44:94:1f:43:
b5:ee:7d:8e:f4:05:76:f4:7e:25:b2:46:e5:e4:55:
80:9c:c2:be:48:af:bd:f5:a9:bc:a1:ca:69:16:60:
32:36:14:4c:88:8d:65:12:de:0f:21:8c:d1:74:d0:
5e:7c:8d:51:c0:78:aa:e7:94:a0:8a:74:4d:dc:ca:
68:50:cd:f1:d6:1d:2a:9a:cc:6a:8b:52:8f:f5:62:
28:51:0f:44:7a:90:a1:e5:3d:53:de:bf:ee:58:96:
11:f0:bf:a9:9d:f2:c8:ce:0c:f5:8e:89:3e:ad:1a:
76:1c:7c:02:36:43:55:68:85:0e:2d:72:d1:b0:42:
5c:c8:ca:41:d7:b3:9d:72:19:75:18:b9:f5:ff:78:
3a:6a:58:9f:8f:6f:e0:2d:a1:e9:be:45:f0:1e:f6:
21:30:32:1d:f0:04:0f:e5:3c:41:49:a0:1a:03:a6:
fb:ac:32:23:2a:31:d4:f4:87:02:d6:32:bd:a8:73:
9e:e5:ea:3c:3d:28:04:57:ce:20:a5:0f:01:43:12:
cd:3e:b1:1e:69:10:b0:bc:1d:90:79:4c:cc:2a:2f:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:C7:3A:8E:3D:41:8B:A6:7F:86:84:81:10:1F:0E:81:6A:99:55
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:51:0b:ca:f7:3e:5d:32:6f:cc:59:92:92:39:83:2d:8b:f1:
71:ce:92:32:8b:d0:9d:d7:c9:d5:b5:7f:e8:8c:d9:20:1e:2f:
a0:53:db:d7:1c:f0:a1:84:a8:f2:72:0a:3e:79:a5:75:d7:b3:
fc:6e:16:60:99:c1:b3:b1:81:45:83:04:5d:2a:5f:87:01:21:
88:eb:99:9c:40:86:ff:88:5b:f8:fd:55:ac:25:22:c8:3e:38:
31:7e:d1:cd:94:26:a1:52:fc:f8:b6:c8:a4:dc:cd:d3:dd:81:
85:f2:3a:0c:cd:77:ea:0e:18:fd:ad:fa:7a:2d:65:26:b1:8f:
07:f1:7b:36:28:12:3b:43:5d:19:23:99:2f:c5:8d:05:cc:6e:
29:c9:82:03:0f:e5:01:71:60:77:12:05:4a:ec:e8:5b:3d:10:
31:03:6a:89:33:e2:55:c1:c2:1a:55:36:2d:51:82:c7:d8:66:
a5:60:b3:24:1a:b2:af:1d:02:e8:52:2d:8f:04:08:93:65:bb:
ee:7e:60:84:ef:7b:53:11:fc:a9:41:f4:d0:25:1a:89:86:25:
73:16:70:0f:c0:13:ae:18:ea:5b:f8:8e:0e:77:64:e8:ee:eb:
12:74:41:31:4b:4c:94:ed:03:15:51:d2:90:98:64:bd:98:eb:
d5:95:66:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhcESg61jHzfeftQcCp7s26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjdmODE3YWI1MTQxYjVlMTM4MjgwY2RmNjE5MDE2NmJi
OWNiODcwHhcNMjUwNzMwMTYwMTI0WhcNMjUwNzMxMTYwMTI0WjAzMTEwLwYDVQQD
EygxMGIzYzczYThlM2Q0MThiYTY3Zjg2ODQ4MTEwMWYwZTgxNmE5OTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY7xDF8o/au839Gy6pv8k+CJY4s5
XpzchwyCQfBQ3Wy245fud/w3oESUH0O17n2O9AV29H4lskbl5FWAnMK+SK+99am8
ocppFmAyNhRMiI1lEt4PIYzRdNBefI1RwHiq55SginRN3MpoUM3x1h0qmsxqi1KP
9WIoUQ9EepCh5T1T3r/uWJYR8L+pnfLIzgz1jok+rRp2HHwCNkNVaIUOLXLRsEJc
yMpB17Odchl1GLn1/3g6alifj2/gLaHpvkXwHvYhMDId8AQP5TxBSaAaA6b7rDIj
KjHU9IcC1jK9qHOe5eo8PSgEV84gpQ8BQxLNPrEeaRCwvB2QeUzMKi+VBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCzxzqOPUGLpn+GhIEQHw6BaplVMB8GA1UdIwQY
MBaAFGi3+BerUUG14TgoDN9hkBZrucuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMt
MTY1MTcxMjZjMTMyLzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMtMTY1MTcxMjZjMTMy
LzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1ELyvc+
XTJvzFmSkjmDLYvxcc6SMovQndfJ1bV/6IzZIB4voFPb1xzwoYSo8nIKPnmlddez
/G4WYJnBs7GBRYMEXSpfhwEhiOuZnECG/4hb+P1VrCUiyD44MX7RzZQmoVL8+LbI
pNzN092BhfI6DM136g4Y/a36ei1lJrGPB/F7NigSO0NdGSOZL8WNBcxuKcmCAw/l
AXFgdxIFSuzoWz0QMQNqiTPiVcHCGlU2LVGCx9hmpWCzJBqyrx0C6FItjwQIk2W7
7n5ghO97UxH8qUH00CUaiYYlcxZwD8ATrhjqW/iODndk6O7rEnRBMUtMlO0DFVHS
kJhkvZjr1ZVmCw==
-----END CERTIFICATE-----
Generated at Wed Jul 30 18:13:53 2025 by rpki-client