Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: M5dmZqlNO7CYSV6ABq6Jg0UsDn+YveyxJq8jSHQ/I9o=
Subject key identifier: 07:AC:4A:E2:52:58:00:4A:62:20:C6:5B:4D:7E:C4:B9:D3:F9:4A:3F
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 01984AAED265297C22E380367E2C75E2A716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 131C
Signing time: Sun 27 Jul 2025 07:00:27 +0000
Manifest this update: Sun 27 Jul 2025 07:00:27 +0000
Manifest next update: Mon 28 Jul 2025 07:00:27 +0000
Files and hashes: 1: CcO4X5owbp8OTsQUAi4Se0U0bGo.roa (hash: Rjhil4a1bZ7IivISF1+emC+myyX4/SSXPPEDg9r6bJ4=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: ei7w2HRIx2kcJbbUUpj13b+bcjTQuPayUrXyCK2nETw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:d2:65:29:7c:22:e3:80:36:7e:2c:75:e2:a7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Jul 27 07:00:27 2025 GMT
Not After : Jul 28 07:00:27 2025 GMT
Subject: CN=07ac4ae25258004a6220c65b4d7ec4b9d3f94a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:81:04:eb:85:84:9e:62:35:23:f7:72:64:
f9:5e:42:2f:76:10:ed:53:12:ed:3f:c0:2f:b3:89:
69:43:0b:22:83:5e:87:a9:31:f5:eb:29:63:27:21:
e4:cc:49:a0:b4:bf:c3:b7:e6:3c:47:36:36:67:3f:
64:3d:b0:12:52:1e:9e:1e:8d:7f:c9:e8:ef:c3:7a:
6e:d5:e7:a1:ae:97:43:38:2e:7d:2f:81:d9:5b:03:
88:e7:82:03:07:86:1d:96:2f:e3:9b:f0:b4:6b:36:
c1:74:bf:ce:24:c0:ea:bc:e0:df:63:79:16:69:c8:
a8:1f:6b:4b:0b:93:ea:cf:95:a6:f1:0e:02:1d:e5:
84:c1:94:30:15:7e:70:09:20:54:23:a5:35:12:ca:
c8:82:3d:cf:e0:3a:3c:7c:f9:15:dc:a5:35:db:b6:
1f:d8:3d:dd:df:d4:b2:bb:1b:32:04:e1:60:0b:72:
e9:fa:d8:c5:6c:6d:0e:60:99:f1:d0:b0:ca:e3:c9:
9d:b1:4b:cd:54:85:dd:89:41:fe:e0:95:fa:91:18:
fe:7d:38:a1:c7:1d:52:b3:44:ec:13:63:bd:7e:13:
78:99:b9:ff:c2:ea:cf:db:eb:00:87:16:e3:24:15:
39:ce:e8:bd:de:af:92:57:ff:7f:15:be:93:a5:22:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:4A:E2:52:58:00:4A:62:20:C6:5B:4D:7E:C4:B9:D3:F9:4A:3F
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e4:92:18:5a:5e:ba:24:62:f9:e0:28:e0:dc:96:7b:87:38:
09:ec:d2:08:37:0b:d1:09:bf:4b:ff:bf:8e:53:90:3f:fd:6c:
4d:7e:71:22:7b:1d:5c:f2:fe:ad:fb:f7:97:ac:ab:ad:ca:ce:
0c:42:4f:11:bb:22:78:c5:7b:b9:33:1a:55:2d:8f:d6:88:02:
ae:2d:7d:25:42:83:ea:e4:ce:cd:ae:68:84:dc:c7:98:18:f2:
01:54:e8:cd:9e:24:1a:c5:9d:61:c5:ee:ec:4b:65:f8:bc:83:
b5:cd:f0:8c:31:8f:a5:ed:82:dc:a1:88:10:8b:3e:cc:95:01:
26:fd:68:cd:84:5e:e7:e9:07:09:f5:fd:56:93:14:9e:cc:f7:
58:e1:65:8e:2b:59:da:2f:6a:ed:10:2f:86:30:16:db:8c:a9:
43:a1:ea:1e:a6:e5:8e:8f:d8:95:1d:3b:b7:da:5d:fa:73:0e:
af:2b:c2:5e:00:16:4c:c4:88:cc:f5:91:23:94:a3:af:2c:1f:
48:b2:83:1d:ab:1c:93:48:29:b0:3f:24:9b:8f:16:0c:bd:a5:
63:be:f6:75:16:70:65:8c:b1:35:4d:dd:b9:ab:d5:75:cb:96:
23:28:63:d2:fb:6c:b1:91:2c:fc:5c:ab:c8:20:15:58:e6:9c:
4d:c0:8b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrtJlKXwi44A2fix14qcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YWRiODI1ZjlmZGJjYTBjZDdjNzkwMWRlYjdhMjJhZTE3
OTdjMDYwHhcNMjUwNzI3MDcwMDI3WhcNMjUwNzI4MDcwMDI3WjAzMTEwLwYDVQQD
EygwN2FjNGFlMjUyNTgwMDRhNjIyMGM2NWI0ZDdlYzRiOWQzZjk0YTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7SBBOuFhJ5iNSP3cmT5XkIvdhDt
UxLtP8Avs4lpQwsig16HqTH16yljJyHkzEmgtL/Dt+Y8RzY2Zz9kPbASUh6eHo1/
yejvw3pu1eehrpdDOC59L4HZWwOI54IDB4Ydli/jm/C0azbBdL/OJMDqvODfY3kW
acioH2tLC5Pqz5Wm8Q4CHeWEwZQwFX5wCSBUI6U1EsrIgj3P4Do8fPkV3KU127Yf
2D3d39SyuxsyBOFgC3Lp+tjFbG0OYJnx0LDK48mdsUvNVIXdiUH+4JX6kRj+fTih
xx1Ss0TsE2O9fhN4mbn/wurP2+sAhxbjJBU5zui93q+SV/9/Fb6TpSK7WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAesSuJSWABKYiDGW01+xLnT+Uo/MB8GA1UdIwQY
MBaAFGmtuCX5/bygzXx5Ad63oirheXwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hZjZiN2EtOWE3MC00OTRlLThhOTAt
MzIzNjI2N2M4Nzk5LzEvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hZjZiN2EtOWE3MC00OTRlLThhOTAtMzIzNjI2N2M4Nzk5
LzEvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOSSGFpe
uiRi+eAo4NyWe4c4CezSCDcL0Qm/S/+/jlOQP/1sTX5xInsdXPL+rfv3l6yrrcrO
DEJPEbsieMV7uTMaVS2P1ogCri19JUKD6uTOza5ohNzHmBjyAVTozZ4kGsWdYcXu
7Etl+LyDtc3wjDGPpe2C3KGIEIs+zJUBJv1ozYRe5+kHCfX9VpMUnsz3WOFljitZ
2i9q7RAvhjAW24ypQ6HqHqbljo/YlR07t9pd+nMOryvCXgAWTMSIzPWRI5Sjrywf
SLKDHasck0gpsD8km48WDL2lY772dRZwZYyxNU3duavVdcuWIyhj0vtssZEs/Fyr
yCAVWOacTcCLrw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:33:21 2025 by rpki-client