Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: A+jL+bUAGJyyDsIsD9CzqZqwTHsm4CniHOOXOqepeXc=
Subject key identifier: 5F:40:0F:E4:A6:D2:8F:2F:04:B6:EE:32:1D:1B:59:A5:53:66:C8:95
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 0198496685BDC21C154A5AB46C1E147A1CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 09C0
Signing time: Sun 27 Jul 2025 01:01:52 +0000
Manifest this update: Sun 27 Jul 2025 01:01:52 +0000
Manifest next update: Mon 28 Jul 2025 01:01:52 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: xLrq+S7OAAQFWAjYhaTWcVNCqSyHALVT68pNtInM0uA=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:85:bd:c2:1c:15:4a:5a:b4:6c:1e:14:7a:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Jul 27 01:01:52 2025 GMT
Not After : Jul 28 01:01:52 2025 GMT
Subject: CN=5f400fe4a6d28f2f04b6ee321d1b59a55366c895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:09:1f:32:9f:6b:32:e1:03:80:f8:22:ff:7e:
55:35:b8:dc:bb:85:f7:79:5f:70:95:5b:53:87:34:
2e:77:6b:34:3e:f1:9f:21:3e:23:11:a8:24:d8:8f:
b3:7c:13:1a:eb:2d:ee:94:a5:c0:fd:aa:a4:b6:e5:
80:ef:23:a1:c8:f6:b2:84:3a:34:d2:47:54:f5:04:
1a:0b:bf:68:02:fd:d5:8a:d7:5c:8e:6d:4f:50:b7:
a7:cf:e3:40:46:2d:bc:bf:72:5d:b9:c7:f4:bd:f1:
8d:c1:2c:e1:d3:1f:b8:17:9c:20:70:ac:31:6b:61:
25:12:e1:40:d3:6b:fd:28:51:0e:13:d2:ad:43:43:
2e:d3:70:10:2d:a6:d4:2f:d8:2e:2c:33:4c:2d:dc:
d9:88:e4:8f:7c:a5:9f:5c:d4:5b:64:f5:ac:2d:b8:
da:89:f4:65:9e:79:36:8a:26:31:be:29:a7:c9:39:
c2:77:bc:01:d4:66:88:33:8b:75:90:a3:2f:59:30:
d8:7a:94:3b:02:c7:1b:b7:f9:1d:f4:5a:c7:a1:65:
ac:4a:a2:c0:37:e7:ab:05:ab:d1:b0:6c:a0:a7:34:
41:50:76:18:a3:7d:bd:47:83:46:3a:14:96:d7:18:
04:3c:8d:96:38:2a:ba:fa:a3:a8:b2:53:29:bb:7a:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:0F:E4:A6:D2:8F:2F:04:B6:EE:32:1D:1B:59:A5:53:66:C8:95
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b6:fa:1d:42:e3:57:a0:c3:60:e6:ec:20:db:d0:29:f2:99:
14:22:9f:3f:92:e9:3e:0e:ed:ff:be:ea:80:b2:32:ed:85:8c:
7d:39:10:90:83:6a:6e:1e:e3:97:d4:3d:e1:0b:fe:4f:3b:28:
d7:df:d4:08:a1:02:c5:9a:4b:2f:1a:1c:5f:80:64:a1:4f:3f:
eb:b1:8c:4b:a5:ee:4a:48:9a:96:2d:37:06:21:9f:db:af:4b:
7c:0c:46:e5:82:06:2a:a5:e0:68:1a:b6:65:fd:f0:37:c2:b3:
86:a6:d5:e4:d7:54:e5:c8:df:17:4e:55:3a:4d:06:bc:95:3a:
72:70:e4:e3:5d:70:8e:f6:16:15:31:09:d5:61:63:1e:e2:23:
ff:f5:97:5a:a2:ba:26:75:52:3f:09:87:80:e6:e3:8a:63:ce:
01:a8:2f:1f:37:05:43:55:ac:75:a4:e1:f6:fd:5f:c5:c9:c4:
24:9b:56:e9:69:ba:4e:3d:6e:4b:54:bd:d3:ca:ba:6a:1d:12:
cb:6e:2a:a5:c7:08:46:4c:28:f2:fc:fc:d4:7a:32:f9:e0:7f:
25:1e:fc:fc:92:21:93:6c:23:11:4e:3e:88:d1:40:e2:eb:c5:
0a:0e:d6:81:a2:54:2f:32:43:03:04:dc:e5:f7:9d:ea:ca:e9:
60:77:0c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZoW9whwVSlq0bB4Uehz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODA3ZTA4NjMxMDNmMDkxMmU3ZTAyNDc4MTFkMTY3Nzk3
ZDgxMDcwHhcNMjUwNzI3MDEwMTUyWhcNMjUwNzI4MDEwMTUyWjAzMTEwLwYDVQQD
Eyg1ZjQwMGZlNGE2ZDI4ZjJmMDRiNmVlMzIxZDFiNTlhNTUzNjZjODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQkfMp9rMuEDgPgi/35VNbjcu4X3
eV9wlVtThzQud2s0PvGfIT4jEagk2I+zfBMa6y3ulKXA/aqktuWA7yOhyPayhDo0
0kdU9QQaC79oAv3Vitdcjm1PULenz+NARi28v3Jducf0vfGNwSzh0x+4F5wgcKwx
a2ElEuFA02v9KFEOE9KtQ0Mu03AQLabUL9guLDNMLdzZiOSPfKWfXNRbZPWsLbja
ifRlnnk2iiYxvimnyTnCd7wB1GaIM4t1kKMvWTDYepQ7Ascbt/kd9FrHoWWsSqLA
N+erBavRsGygpzRBUHYYo329R4NGOhSW1xgEPI2WOCq6+qOoslMpu3pT+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9AD+Sm0o8vBLbuMh0bWaVTZsiVMB8GA1UdIwQY
MBaAFAKAfghjED8JEufgJHgR0Wd5fYEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjYwNDktOGQxZC00YmU4LTlmNTct
OGJhYjc4ZGUzMmM5LzEvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iZjYwNDktOGQxZC00YmU4LTlmNTctOGJhYjc4ZGUzMmM5
LzEvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7b6HULj
V6DDYObsINvQKfKZFCKfP5LpPg7t/77qgLIy7YWMfTkQkINqbh7jl9Q94Qv+Tzso
19/UCKECxZpLLxocX4BkoU8/67GMS6XuSkiali03BiGf269LfAxG5YIGKqXgaBq2
Zf3wN8KzhqbV5NdU5cjfF05VOk0GvJU6cnDk411wjvYWFTEJ1WFjHuIj//WXWqK6
JnVSPwmHgObjimPOAagvHzcFQ1WsdaTh9v1fxcnEJJtW6Wm6Tj1uS1S908q6ah0S
y24qpccIRkwo8vz81Hoy+eB/JR78/JIhk2wjEU4+iNFA4uvFCg7WgaJULzJDAwTc
5fed6srpYHcMVQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:19:47 2025 by rpki-client