
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: C5H4DDiBQ/hrDYLp8i8zFrjEu2wL5osUQcO7PhYpfmY=
Subject key identifier: D6:A7:21:92:72:7F:EA:62:21:87:72:29:3A:6D:32:18:2A:52:6C:2C
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 019844E35D68E9A6FB1D8E7DF2220EC3924A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 04:00:07 +0000
Manifest this update: Sat 26 Jul 2025 04:00:07 +0000
Manifest next update: Sun 27 Jul 2025 04:00:07 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: wfxERfypqG5P9l8Ga84DBmM5F7MBpSilqgxUYut1tns=)
2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=)
3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:5d:68:e9:a6:fb:1d:8e:7d:f2:22:0e:c3:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Jul 26 04:00:07 2025 GMT
Not After : Jul 27 04:00:07 2025 GMT
Subject: CN=d6a72192727fea62218772293a6d32182a526c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f1:b5:b3:a7:c4:71:99:4a:16:df:2c:02:c9:
1c:7b:b5:e5:99:49:e6:10:f4:4f:60:1f:f5:20:bd:
f5:ca:70:8b:63:c1:b1:83:e2:60:2f:f4:de:e9:b2:
c7:e8:b0:e6:01:92:92:5e:b7:04:5e:d3:c2:20:01:
42:85:f8:f5:bc:b0:57:cb:a5:68:70:5c:74:48:53:
8a:91:f0:73:44:24:c4:3b:0c:ec:a0:07:5d:15:fb:
aa:0c:45:37:fd:80:0c:77:39:68:1a:35:e0:3f:35:
83:38:b0:34:6d:da:4f:4c:16:9e:69:d5:98:cb:a2:
de:fe:24:89:79:a3:11:d1:24:08:75:3f:50:bd:b3:
a7:dc:69:ae:82:a8:f0:b4:54:7d:a6:e8:e4:7d:fa:
bf:3b:f4:67:b1:c3:37:65:4a:29:3c:99:47:0c:91:
7c:f0:ca:44:3c:7c:78:5d:3f:66:9e:5f:7f:99:9b:
47:8e:9c:e5:75:59:2c:bb:a6:7b:9e:35:09:09:14:
c4:ab:a5:c9:e1:d4:93:3a:cc:bc:bb:4f:be:bf:4c:
9a:e5:54:fa:45:d6:01:0f:a5:47:11:00:d5:fa:72:
9e:7d:f7:27:2c:ce:7c:c0:56:60:49:fa:e8:46:73:
32:60:58:b6:fc:6a:01:d3:6f:e7:5d:a6:9d:39:f8:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A7:21:92:72:7F:EA:62:21:87:72:29:3A:6D:32:18:2A:52:6C:2C
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:eb:96:3e:3c:91:cc:21:9d:4c:6e:e0:cc:0f:f3:88:ff:c5:
13:a6:40:6c:94:45:56:3b:3a:1b:f7:73:ab:2f:e3:f0:ed:01:
4d:8b:ba:14:7a:bd:2b:50:26:5f:3d:54:9f:64:fe:e8:e4:05:
34:bd:07:dc:0e:cf:45:24:68:0e:50:a1:8f:49:94:a6:63:26:
2f:d8:68:c2:42:f6:0a:af:48:f2:a0:29:35:7f:5d:09:d7:26:
11:51:b2:e0:aa:36:5f:b1:63:c5:0b:85:49:dc:d3:10:b8:82:
95:4c:a8:b7:81:be:9e:c7:85:d5:77:52:e3:75:68:21:ac:65:
ab:a0:09:4c:6c:36:f8:0a:b9:7c:57:88:f4:e0:f7:93:58:4a:
52:71:f6:d0:bc:56:ea:a7:29:04:78:8a:4b:81:a2:d1:fe:66:
06:e3:66:84:b7:73:00:66:a6:81:bd:a6:07:4b:92:1e:86:0e:
e4:95:13:e0:88:ba:ab:36:f4:10:9e:2b:ec:27:27:28:05:d8:
dd:ba:3c:a5:57:39:bd:77:1a:1a:08:0a:9a:dc:50:93:fd:7f:
77:70:89:75:2e:91:b9:ee:50:01:30:cf:93:66:f1:4f:b7:ef:
b8:2a:90:fa:7b:f3:c7:fe:72:51:d2:b0:f5:77:af:67:52:81:
2f:6a:ee:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhE411o6ab7HY598iIOw5JKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkMTY5NzdlZWUyZjU4YmViMWJiN2FhMmY0YjJmYTFh
YmZjNDgwHhcNMjUwNzI2MDQwMDA3WhcNMjUwNzI3MDQwMDA3WjAzMTEwLwYDVQQD
EyhkNmE3MjE5MjcyN2ZlYTYyMjE4NzcyMjkzYTZkMzIxODJhNTI2YzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/G1s6fEcZlKFt8sAskce7XlmUnm
EPRPYB/1IL31ynCLY8Gxg+JgL/Te6bLH6LDmAZKSXrcEXtPCIAFChfj1vLBXy6Vo
cFx0SFOKkfBzRCTEOwzsoAddFfuqDEU3/YAMdzloGjXgPzWDOLA0bdpPTBaeadWY
y6Le/iSJeaMR0SQIdT9QvbOn3GmugqjwtFR9pujkffq/O/RnscM3ZUopPJlHDJF8
8MpEPHx4XT9mnl9/mZtHjpzldVksu6Z7njUJCRTEq6XJ4dSTOsy8u0++v0ya5VT6
RdYBD6VHEQDV+nKeffcnLM58wFZgSfroRnMyYFi2/GoB02/nXaadOfh5mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNanIZJyf+piIYdyKTptMhgqUmwsMB8GA1UdIwQY
MBaAFAMk0Wl37uL1i+sbt6ovSy+hq/xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMt
YzI1ZDdmY2EwMDM3LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMtYzI1ZDdmY2EwMDM3
LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuuWPjyR
zCGdTG7gzA/ziP/FE6ZAbJRFVjs6G/dzqy/j8O0BTYu6FHq9K1AmXz1Un2T+6OQF
NL0H3A7PRSRoDlChj0mUpmMmL9howkL2Cq9I8qApNX9dCdcmEVGy4Ko2X7FjxQuF
SdzTELiClUyot4G+nseF1XdS43VoIaxlq6AJTGw2+Aq5fFeI9OD3k1hKUnH20LxW
6qcpBHiKS4Gi0f5mBuNmhLdzAGamgb2mB0uSHoYO5JUT4Ii6qzb0EJ4r7CcnKAXY
3bo8pVc5vXcaGggKmtxQk/1/d3CJdS6Rue5QATDPk2bxT7fvuCqQ+nvzx/5yUdKw
9XevZ1KBL2ruRg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:14:49 2025 by rpki-client