Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: +DWrhrYSpgscJzE/fMQ8qz1aYwi2bGjfSTf6wIxmcd8=
Subject key identifier: 70:F3:11:DC:C5:91:BF:0C:C8:5F:79:A5:EB:C4:CA:64:C3:BA:C7:C3
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 019847782FC80EA15E6DEA3267CD3F64C4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 16:01:55 +0000
Manifest this update: Sat 26 Jul 2025 16:01:55 +0000
Manifest next update: Sun 27 Jul 2025 16:01:55 +0000
Files and hashes: 1: 0JN2vyzDQDc8hqznZuHYx59iVgw.roa (hash: f3XiZFi6nbVWq/4L3lB2rfwMDECeZB1pzVtF3apTcoA=)
2: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: VfOUTUFz8GbGvUmA7OFzozK8OG10lWnKcnbtRlsUq5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:2f:c8:0e:a1:5e:6d:ea:32:67:cd:3f:64:c4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Jul 26 16:01:55 2025 GMT
Not After : Jul 27 16:01:55 2025 GMT
Subject: CN=70f311dcc591bf0cc85f79a5ebc4ca64c3bac7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:d0:31:9e:3c:05:46:66:6c:79:71:d9:19:
e0:36:6a:94:a5:a1:78:e1:47:26:d3:8c:cf:4b:7d:
d9:f3:d2:bf:54:ce:6a:54:34:2c:1b:d1:fb:6c:6c:
bd:80:e8:df:d9:e1:b7:76:5c:48:d4:6c:dd:26:d1:
cc:3c:28:af:6d:0d:27:c5:0c:03:39:77:0f:e0:9d:
88:da:a3:dd:00:1c:44:4c:a4:de:af:d7:8a:cd:fa:
ea:26:89:2d:d2:b7:a5:a9:6f:95:e3:41:9c:9c:da:
fe:8c:2d:db:22:a3:0c:63:d9:2e:df:14:08:54:59:
f7:4b:bc:5a:65:ac:f9:52:25:58:43:6f:a3:bc:62:
4a:b1:b2:89:e0:f8:ef:74:c6:16:ad:58:ea:44:55:
4b:8e:eb:a6:e2:1d:b0:29:a8:72:58:c4:65:de:ec:
c7:01:1c:0e:99:35:e5:f8:f6:17:dc:b1:50:77:da:
a2:34:ba:6b:19:35:aa:e8:aa:21:f8:95:69:cb:4f:
c9:5c:5a:31:f9:9d:cc:44:cf:42:eb:cd:e3:78:7e:
c3:0f:3a:70:b5:49:d5:24:26:23:7a:d9:9f:85:9c:
52:54:99:47:f6:8e:bb:fe:17:48:08:1f:03:8b:e2:
68:61:ce:07:c0:04:c7:94:b6:4f:23:27:62:19:60:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F3:11:DC:C5:91:BF:0C:C8:5F:79:A5:EB:C4:CA:64:C3:BA:C7:C3
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:06:58:47:0c:bb:9e:85:b4:b7:4a:ec:e6:d4:a6:f4:72:b6:
67:05:ce:85:68:b1:1d:9a:16:76:3e:80:0a:b0:46:0b:b4:b6:
01:f9:3a:29:37:e3:74:4b:33:ee:c3:a2:47:a7:c0:08:bc:58:
cc:a9:0d:60:98:2f:20:e3:86:0e:8c:5e:39:74:24:63:04:a0:
9e:23:2c:ac:35:44:58:b1:d4:04:c8:64:3d:74:1e:f1:fc:28:
17:5e:d4:ea:03:a2:b2:fe:b5:e2:c3:e0:c0:f9:c0:67:89:13:
3e:ff:02:53:ac:bf:16:8b:55:e1:96:3c:f1:19:2b:0a:7f:02:
34:47:99:76:b7:66:7a:79:24:d8:d5:49:7b:72:96:d3:c0:5e:
ec:26:8f:f5:9e:31:91:27:06:26:7b:2d:47:e9:27:7c:92:3b:
ec:41:88:3a:d2:25:a9:2a:20:e3:2d:31:eb:35:03:40:b6:13:
3f:8b:5f:bc:ea:75:8f:c1:c0:95:db:c4:39:94:c2:20:c9:a0:
0a:41:e0:eb:d3:99:bd:26:1b:70:2d:c0:d9:22:d7:09:3a:a9:
d6:45:db:da:0f:1b:d8:0c:13:89:9b:9b:e2:4b:79:63:09:8b:
4f:ff:6e:2c:e6:d9:c0:e9:fd:ce:7a:08:65:e7:1e:0c:91:4c:
bd:57:7b:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeC/IDqFebeoyZ80/ZMSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGNmMDdjN2QwNTkzMDJiNTYwNjZhYWY2Y2JlZWMxMzUx
ODZhNDQwHhcNMjUwNzI2MTYwMTU1WhcNMjUwNzI3MTYwMTU1WjAzMTEwLwYDVQQD
Eyg3MGYzMTFkY2M1OTFiZjBjYzg1Zjc5YTVlYmM0Y2E2NGMzYmFjN2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7rQMZ48BUZmbHlx2RngNmqUpaF4
4Ucm04zPS33Z89K/VM5qVDQsG9H7bGy9gOjf2eG3dlxI1GzdJtHMPCivbQ0nxQwD
OXcP4J2I2qPdABxETKTer9eKzfrqJokt0relqW+V40GcnNr+jC3bIqMMY9ku3xQI
VFn3S7xaZaz5UiVYQ2+jvGJKsbKJ4PjvdMYWrVjqRFVLjuum4h2wKahyWMRl3uzH
ARwOmTXl+PYX3LFQd9qiNLprGTWq6Koh+JVpy0/JXFox+Z3MRM9C683jeH7DDzpw
tUnVJCYjetmfhZxSVJlH9o67/hdICB8Di+JoYc4HwATHlLZPIydiGWBEVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDzEdzFkb8MyF95pevEymTDusfDMB8GA1UdIwQY
MBaAFABM8Hx9BZMCtWBmqvbL7sE1GGpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTIt
NmU1NDViNmM0M2IwLzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTItNmU1NDViNmM0M2Iw
LzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwZYRwy7
noW0t0rs5tSm9HK2ZwXOhWixHZoWdj6ACrBGC7S2Afk6KTfjdEsz7sOiR6fACLxY
zKkNYJgvIOOGDoxeOXQkYwSgniMsrDVEWLHUBMhkPXQe8fwoF17U6gOisv614sPg
wPnAZ4kTPv8CU6y/FotV4ZY88RkrCn8CNEeZdrdmenkk2NVJe3KW08Be7CaP9Z4x
kScGJnstR+knfJI77EGIOtIlqSog4y0x6zUDQLYTP4tfvOp1j8HAldvEOZTCIMmg
CkHg69OZvSYbcC3A2SLXCTqp1kXb2g8b2AwTiZub4kt5YwmLT/9uLObZwOn9znoI
ZeceDJFMvVd75Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:26 2025 by rpki-client