
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: 5YC6+xMunY/cT1vnskHrMdYMZnjhop/iVamcy9NdhL0=
Subject key identifier: 99:CD:EC:6E:BD:5C:E3:FF:2E:0B:23:2D:1A:B0:76:C4:85:95:57:B7
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 01984BC1D67E9016B0D403F8F3D4917A8122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0760
Signing time: Sun 27 Jul 2025 12:00:51 +0000
Manifest this update: Sun 27 Jul 2025 12:00:51 +0000
Manifest next update: Mon 28 Jul 2025 12:00:51 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: mhBcGlccIwsgDGP9B5ybw/5BjG5BnfVEBgq3zxiK/YA=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:d6:7e:90:16:b0:d4:03:f8:f3:d4:91:7a:81:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jul 27 12:00:51 2025 GMT
Not After : Jul 28 12:00:51 2025 GMT
Subject: CN=99cdec6ebd5ce3ff2e0b232d1ab076c4859557b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:ad:00:c0:ac:0a:ba:4a:4e:91:a3:d6:8a:
4c:37:fb:30:0d:a5:3b:7f:7e:fb:85:86:6d:2c:1e:
92:bb:cb:07:c0:55:2f:68:11:db:58:71:7d:31:1e:
de:fc:52:af:1a:64:ea:e1:ce:76:97:c2:49:8d:29:
25:d1:c0:0b:31:e5:8d:7e:c2:c2:d4:66:42:8a:2c:
9b:a5:47:28:13:12:fe:b2:26:97:ad:6b:8c:35:4e:
a6:91:3a:ea:ea:37:31:98:95:a2:5b:8a:18:12:ab:
e9:71:67:71:35:ea:93:4f:ce:3e:df:ef:d4:9c:e6:
c3:f7:a4:1a:2b:56:d0:18:1e:11:29:26:6d:f6:3d:
93:7d:cb:8d:35:11:22:a4:a7:77:49:5f:bf:36:78:
05:39:c5:db:fe:33:e2:9c:61:87:bd:81:cc:0e:80:
e4:a3:32:c3:93:69:c2:3d:6b:17:ef:3e:fa:97:f2:
f7:3a:64:17:9d:be:86:69:9f:ad:02:89:46:b9:4a:
76:e9:40:74:71:9a:5a:c0:c0:4a:78:a8:63:81:3a:
f9:b1:60:4e:4a:f0:0f:f9:53:ac:1e:ce:bc:c5:83:
d1:ce:68:5d:2f:49:9b:22:7d:cf:5c:76:b1:5e:f5:
78:d5:ef:88:43:ba:a9:14:b8:f6:78:39:e0:b1:1a:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CD:EC:6E:BD:5C:E3:FF:2E:0B:23:2D:1A:B0:76:C4:85:95:57:B7
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cf:90:aa:ec:18:0e:94:e1:91:13:06:d7:65:d5:75:fb:a4:
dd:43:f1:49:40:c4:9f:a8:8e:b4:7e:c5:39:2a:39:96:f7:3b:
57:a5:96:d3:36:6e:2d:a6:da:25:6c:ab:95:36:65:0a:00:a8:
30:15:35:63:fa:aa:97:3e:36:3b:47:4f:06:37:c5:3f:f0:5a:
10:11:69:bf:5b:d0:ec:6e:3d:82:8f:c0:e5:04:62:f0:b8:4e:
4e:e9:3a:79:82:cc:cf:3f:9a:b1:9f:02:2f:10:34:e3:d1:c6:
8f:52:a8:28:72:d1:c9:4d:77:7e:2b:0f:15:1d:89:51:ca:48:
27:17:d5:6a:b0:f1:54:3e:6a:4a:c1:a8:a5:30:7e:4c:ad:74:
56:4a:e8:6b:91:d3:5e:77:6b:41:e8:31:8a:e3:cb:03:f6:fb:
bb:7d:bf:00:23:61:d9:01:eb:10:77:d8:da:9f:e4:6a:51:5a:
17:41:c0:a7:4c:1d:cb:19:9d:88:37:e9:ce:80:c1:ad:42:68:
39:34:d4:54:12:34:2e:c2:55:fc:0b:0f:ab:38:0e:34:7c:7d:
cb:fa:dd:b4:3a:52:a5:39:3d:ef:24:36:3e:a4:db:e6:5a:cb:
1c:42:a4:c0:1c:fb:6c:9d:e2:4b:4e:63:f2:b3:1a:f9:dc:78:
98:66:45:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwdZ+kBaw1AP489SReoEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2Nzg2N2UwZTIwMjI0OGU3ZjVlM2NiZDU3NGJkMWEz
MmZlM2YwHhcNMjUwNzI3MTIwMDUxWhcNMjUwNzI4MTIwMDUxWjAzMTEwLwYDVQQD
Eyg5OWNkZWM2ZWJkNWNlM2ZmMmUwYjIzMmQxYWIwNzZjNDg1OTU1N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0qtAMCsCrpKTpGj1opMN/swDaU7
f377hYZtLB6Su8sHwFUvaBHbWHF9MR7e/FKvGmTq4c52l8JJjSkl0cALMeWNfsLC
1GZCiiybpUcoExL+siaXrWuMNU6mkTrq6jcxmJWiW4oYEqvpcWdxNeqTT84+3+/U
nObD96QaK1bQGB4RKSZt9j2TfcuNNREipKd3SV+/NngFOcXb/jPinGGHvYHMDoDk
ozLDk2nCPWsX7z76l/L3OmQXnb6GaZ+tAolGuUp26UB0cZpawMBKeKhjgTr5sWBO
SvAP+VOsHs68xYPRzmhdL0mbIn3PXHaxXvV41e+IQ7qpFLj2eDngsRqKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnN7G69XOP/LgsjLRqwdsSFlVe3MB8GA1UdIwQY
MBaAFGlsZ4Z+DiAiSOf148vVdL0aMv4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEt
MWNiMWE4ZjgwMjM4LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEtMWNiMWE4ZjgwMjM4
LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhc+QquwY
DpThkRMG12XVdfuk3UPxSUDEn6iOtH7FOSo5lvc7V6WW0zZuLabaJWyrlTZlCgCo
MBU1Y/qqlz42O0dPBjfFP/BaEBFpv1vQ7G49go/A5QRi8LhOTuk6eYLMzz+asZ8C
LxA049HGj1KoKHLRyU13fisPFR2JUcpIJxfVarDxVD5qSsGopTB+TK10Vkroa5HT
XndrQegxiuPLA/b7u32/ACNh2QHrEHfY2p/kalFaF0HAp0wdyxmdiDfpzoDBrUJo
OTTUVBI0LsJV/AsPqzgONHx9y/rdtDpSpTk97yQ2PqTb5lrLHEKkwBz7bJ3iS05j
8rMa+dx4mGZFng==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:25:38 2025 by rpki-client