Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: b2axOKUoWhLRqygpIA9tI5NFVgLe6GWShm7q0CswIJ8=
Subject key identifier: 02:D2:EF:07:FE:24:2D:85:64:72:6A:38:F6:6B:0C:8D:C5:15:B4:9E
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 019827ECAE7FC4E7889367C152097A717F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 15EF
Signing time: Sun 20 Jul 2025 13:01:19 +0000
Manifest this update: Sun 20 Jul 2025 13:01:19 +0000
Manifest next update: Mon 21 Jul 2025 13:01:19 +0000
Files and hashes: 1: G3jkppDUZ7UShIbg3wj67wwITjQ.roa (hash: IM9aMDCOjn2pDhh5r2plZvteAbzhdwZ0L/lTf4RJayk=)
2: Tz1CIM1JoghruWTN6nGpazj8zTs.roa (hash: VV/wpFoAA0PEYjeaECSEYgoe19Q1uDYWZTbwDnhLY+0=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: RK8W1Ibui6POXOdzWRNCudnbxWH4EK6HS02LC/nf9n8=)
4: qOyspdHf0vEJQuyvIz0XkgRHk_0.roa (hash: yR7LTFxNYmFcq/nxWYOH7mZupl2rRRW8SrPwUWcJB0k=)
5: uiGdfZv36ngdlEPtH0Dctu5_0kI.roa (hash: kwlBzu/ziaLKG7neS7FV84L3FCZ7YdUCR1fgHvPBMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:ae:7f:c4:e7:88:93:67:c1:52:09:7a:71:7f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Jul 20 13:01:19 2025 GMT
Not After : Jul 21 13:01:19 2025 GMT
Subject: CN=02d2ef07fe242d8564726a38f66b0c8dc515b49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:46:a3:fd:ab:9e:3d:85:d0:33:12:48:b5:
c9:52:1e:7c:08:c2:7f:ba:e2:62:88:58:8b:65:55:
9a:2d:0d:11:03:89:88:b2:6e:29:09:f2:21:8c:16:
3c:59:ac:38:1e:be:13:21:e2:21:d9:a4:1e:1e:02:
f5:09:9d:07:91:fb:19:3f:22:ae:e1:c3:3f:f8:30:
a1:e5:a4:db:f1:ed:c9:f0:62:60:e7:9d:81:52:d4:
35:90:b4:b9:48:be:15:af:d5:84:4e:f4:c9:60:5e:
ed:68:c3:2f:87:6d:2a:9b:26:c9:07:32:7c:f9:28:
d5:c9:c9:d5:d6:ef:e3:9d:2b:56:27:8c:14:56:a2:
4d:56:af:dd:15:0f:ab:06:a5:3b:e0:d5:89:8e:bd:
19:6a:55:7a:ea:2a:e0:f2:31:5e:f2:84:0b:19:83:
00:22:a3:57:4c:fd:20:d8:2a:3b:f6:70:5c:8e:29:
59:0b:49:c2:77:94:22:86:e0:00:ca:66:21:ec:68:
7d:31:8e:c9:bd:db:81:e0:52:1a:ee:97:4b:ac:24:
1f:b8:85:07:da:e3:ff:20:92:29:a7:de:41:f3:77:
14:43:79:6b:31:a8:86:31:5f:20:34:57:4a:e4:89:
2f:43:75:99:d3:ce:c7:4b:69:9e:a2:ec:a2:94:e4:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D2:EF:07:FE:24:2D:85:64:72:6A:38:F6:6B:0C:8D:C5:15:B4:9E
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5a:97:b9:9b:ea:c4:1f:99:9b:a8:56:69:52:3b:54:61:7e:
42:f4:1e:9c:c0:8c:83:e1:26:9e:6b:6a:e3:f6:ec:98:5b:06:
62:d4:05:4f:f1:ad:b7:c6:be:bb:a7:e0:8b:f1:63:49:d7:3b:
c4:40:30:32:ae:f0:74:18:a1:91:91:08:99:01:0a:4f:b2:d8:
88:a6:f5:d5:7f:48:d6:6e:9a:f9:46:d8:5d:61:58:80:6f:4a:
7a:9c:cb:a7:62:95:b2:74:1f:bd:26:fe:65:4a:b8:c7:d0:7f:
52:e4:14:91:7b:13:8e:47:a3:c1:a8:4b:75:9c:64:4b:a4:32:
3e:d5:6e:53:84:25:a7:e4:41:1a:d1:42:77:0f:14:32:01:ab:
c8:b2:92:50:ea:51:b8:78:9f:1a:29:22:49:00:de:ae:d7:1d:
f6:e5:e6:2f:cb:d1:9a:31:1f:4b:c6:01:d1:64:75:17:0a:fb:
15:94:63:3e:b9:d6:59:d5:3f:b2:2a:97:a0:1d:25:73:ce:7f:
46:27:06:53:49:8d:6b:bd:2a:22:11:39:c2:a6:16:b6:4b:33:
75:ff:84:83:1d:50:42:04:11:4c:92:8e:40:25:11:d6:44:d6:
03:8a:ee:b8:0e:4a:7f:a9:fc:28:77:ed:a1:7d:6b:5d:80:b3:
cb:bc:75:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgn7K5/xOeIk2fBUgl6cX80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZThiYWVhOTVkNDA0MDM0OGYwYTg5ZWM0ZTRiZDE1Mjc1
ZjZjMzkwHhcNMjUwNzIwMTMwMTE5WhcNMjUwNzIxMTMwMTE5WjAzMTEwLwYDVQQD
EygwMmQyZWYwN2ZlMjQyZDg1NjQ3MjZhMzhmNjZiMGM4ZGM1MTViNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiVGo/2rnj2F0DMSSLXJUh58CMJ/
uuJiiFiLZVWaLQ0RA4mIsm4pCfIhjBY8Waw4Hr4TIeIh2aQeHgL1CZ0HkfsZPyKu
4cM/+DCh5aTb8e3J8GJg552BUtQ1kLS5SL4Vr9WETvTJYF7taMMvh20qmybJBzJ8
+SjVycnV1u/jnStWJ4wUVqJNVq/dFQ+rBqU74NWJjr0ZalV66irg8jFe8oQLGYMA
IqNXTP0g2Co79nBcjilZC0nCd5QihuAAymYh7Gh9MY7JvduB4FIa7pdLrCQfuIUH
2uP/IJIpp95B83cUQ3lrMaiGMV8gNFdK5IkvQ3WZ087HS2meouyilOQtJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALS7wf+JC2FZHJqOPZrDI3FFbSeMB8GA1UdIwQY
MBaAFGjouuqV1AQDSPConsTkvRUnX2w5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2Ut
MzcxMWZhZThjYTc3LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2UtMzcxMWZhZThjYTc3
LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFqXuZvq
xB+Zm6hWaVI7VGF+QvQenMCMg+Emnmtq4/bsmFsGYtQFT/Gtt8a+u6fgi/FjSdc7
xEAwMq7wdBihkZEImQEKT7LYiKb11X9I1m6a+UbYXWFYgG9KepzLp2KVsnQfvSb+
ZUq4x9B/UuQUkXsTjkejwahLdZxkS6QyPtVuU4Qlp+RBGtFCdw8UMgGryLKSUOpR
uHifGikiSQDertcd9uXmL8vRmjEfS8YB0WR1Fwr7FZRjPrnWWdU/siqXoB0lc85/
RicGU0mNa70qIhE5wqYWtkszdf+Egx1QQgQRTJKOQCUR1kTWA4ruuA5Kf6n8KHft
oX1rXYCzy7x1yA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:41:07 2025 by rpki-client