Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: 6mlQ8izFiNz0M4T23kL9mc0KOqW2hAU/O8ZlNHXtN9U=
Subject key identifier: C8:6B:BB:A3:77:10:10:4F:25:26:64:AC:6B:7E:43:6A:69:6A:7F:80
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 01984AAE9F4C54691991067C3658C2521E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0A6E
Signing time: Sun 27 Jul 2025 07:00:14 +0000
Manifest this update: Sun 27 Jul 2025 07:00:14 +0000
Manifest next update: Mon 28 Jul 2025 07:00:14 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: Fpmye1/4qX32ukA5LXF9snj+/F4FP99cwqG43MvXWiE=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:9f:4c:54:69:19:91:06:7c:36:58:c2:52:1e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Jul 27 07:00:14 2025 GMT
Not After : Jul 28 07:00:14 2025 GMT
Subject: CN=c86bbba37710104f252664ac6b7e436a696a7f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ff:6b:1c:21:f8:2a:c5:81:68:3e:b2:86:76:
39:da:73:f5:c6:57:23:2e:d1:62:12:f3:54:ca:58:
6d:e6:9e:df:2e:fb:6b:02:02:f7:ee:bb:8d:a1:96:
68:79:27:86:47:d7:0c:c9:f4:a7:be:92:41:a2:91:
40:9a:e0:94:6d:48:64:dd:59:73:39:78:9f:ed:a8:
13:c2:c5:0c:15:43:5c:7a:c3:9a:8e:a6:6e:99:22:
a1:59:ff:b1:64:01:fd:92:b9:ac:f4:18:a3:cb:7a:
69:0c:50:4c:c6:00:e1:fc:49:bd:59:db:d1:72:a9:
7c:60:e4:77:72:87:49:e5:a4:b7:54:5d:13:0a:9a:
e6:09:bf:5e:d2:71:64:11:fa:7b:d5:0d:c0:23:09:
b9:8e:61:10:76:77:eb:e6:c2:65:bf:eb:16:f9:1a:
2a:58:c2:fb:91:0c:c0:a2:8c:40:e8:09:30:92:b8:
e4:a4:07:df:79:f6:97:d8:2c:a4:84:99:49:0f:e6:
f0:fe:0c:3b:a5:0a:e8:01:e8:3a:6e:db:1f:56:39:
4c:33:12:c1:ac:f5:12:56:e7:50:56:d6:80:57:0e:
ff:c4:a7:5e:ab:b4:bd:25:b5:8f:21:cf:9d:f4:97:
af:e9:d2:6b:96:b9:20:b1:81:b5:d7:82:5f:03:da:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6B:BB:A3:77:10:10:4F:25:26:64:AC:6B:7E:43:6A:69:6A:7F:80
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:13:62:44:15:77:23:bf:d8:ad:27:22:00:79:e3:e3:ee:d6:
b5:e6:9d:db:3e:67:b3:09:56:c8:89:fe:83:0b:2e:10:97:ec:
06:90:cb:c2:ab:c3:37:6c:a0:2f:74:b9:42:f7:22:42:60:ab:
e3:79:83:8f:a1:53:19:ec:57:b0:c0:10:01:1e:06:6e:b7:93:
35:e9:7c:2e:cd:41:8e:22:cf:3c:57:bc:7d:f4:c0:0f:61:06:
28:28:d8:b5:e2:33:bf:8e:a9:fc:65:2e:3e:5f:cb:c0:3d:08:
32:4c:ec:17:13:c6:4e:6c:7c:88:36:ec:42:0b:7f:c2:cd:79:
6e:85:eb:6e:aa:db:6c:fc:9c:88:bd:00:79:98:ba:07:38:32:
ff:c0:1a:85:90:c0:aa:4b:28:b2:7e:68:b8:d1:12:17:de:f8:
31:72:05:ef:d9:da:4a:7d:e0:bf:16:80:84:a2:0a:fa:28:83:
7a:4f:ca:75:34:ab:73:d7:fa:d8:18:f2:03:60:e4:e4:0d:f1:
a3:74:ed:fa:fc:b0:4c:e7:8f:27:7a:b0:05:5e:de:34:14:e9:
3a:03:c7:9e:04:76:be:7e:a1:bc:41:d4:59:a0:75:27:7c:41:
63:35:56:27:18:f7:d5:ef:75:3d:4c:ed:7e:63:97:80:53:3b:
75:28:e4:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrp9MVGkZkQZ8NljCUh5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjU5NmIzM2I0OGMyOTM1ZGQxMjlmYWM2ZTYxZGJjMDA4
MTkzZmYwHhcNMjUwNzI3MDcwMDE0WhcNMjUwNzI4MDcwMDE0WjAzMTEwLwYDVQQD
EyhjODZiYmJhMzc3MTAxMDRmMjUyNjY0YWM2YjdlNDM2YTY5NmE3ZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+f9rHCH4KsWBaD6yhnY52nP1xlcj
LtFiEvNUylht5p7fLvtrAgL37ruNoZZoeSeGR9cMyfSnvpJBopFAmuCUbUhk3Vlz
OXif7agTwsUMFUNcesOajqZumSKhWf+xZAH9krms9Bijy3ppDFBMxgDh/Em9WdvR
cql8YOR3codJ5aS3VF0TCprmCb9e0nFkEfp71Q3AIwm5jmEQdnfr5sJlv+sW+Roq
WML7kQzAooxA6AkwkrjkpAffefaX2CykhJlJD+bw/gw7pQroAeg6btsfVjlMMxLB
rPUSVudQVtaAVw7/xKdeq7S9JbWPIc+d9Jev6dJrlrkgsYG114JfA9pS5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhru6N3EBBPJSZkrGt+Q2ppan+AMB8GA1UdIwQY
MBaAFGhllrM7SMKTXdEp+sbmHbwAgZP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEt
NDUxY2RhMDc3ZDg2LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEtNDUxY2RhMDc3ZDg2
LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhNiRBV3
I7/YrSciAHnj4+7Wtead2z5nswlWyIn+gwsuEJfsBpDLwqvDN2ygL3S5QvciQmCr
43mDj6FTGexXsMAQAR4GbreTNel8Ls1BjiLPPFe8ffTAD2EGKCjYteIzv46p/GUu
Pl/LwD0IMkzsFxPGTmx8iDbsQgt/ws15boXrbqrbbPyciL0AeZi6Bzgy/8AahZDA
qksosn5ouNESF974MXIF79naSn3gvxaAhKIK+iiDek/KdTSrc9f62BjyA2Dk5A3x
o3Tt+vywTOePJ3qwBV7eNBTpOgPHngR2vn6hvEHUWaB1J3xBYzVWJxj31e91PUzt
fmOXgFM7dSjk3w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:47 2025 by rpki-client