Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: +EVwvpxcYJ1ryF/XnrglG8qhzdIH4lHnX5oD+PLjN8E=
Subject key identifier: 47:1A:92:D5:32:D9:74:2A:11:67:18:91:89:1A:4D:34:F7:12:56:5D
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 019848893B39B0BAB985C1E8E5F14EE0693A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 0CE6
Signing time: Sat 26 Jul 2025 21:00:09 +0000
Manifest this update: Sat 26 Jul 2025 21:00:09 +0000
Manifest next update: Sun 27 Jul 2025 21:00:09 +0000
Files and hashes: 1: KnUOYk5bdwDOyPRpWUFQ6FTo7gs.roa (hash: oV64n7K/Nu3TxpzkL+waUqCMMUTsVFeqTi3s1yY0Zn0=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: auQm3kDVHn4/Wk1uemmCC76VqSQJUwBKHBLwXm8Davk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:3b:39:b0:ba:b9:85:c1:e8:e5:f1:4e:e0:69:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Jul 26 21:00:09 2025 GMT
Not After : Jul 27 21:00:09 2025 GMT
Subject: CN=471a92d532d9742a11671891891a4d34f712565d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:f4:d4:5b:94:38:d4:7c:bf:01:2f:c9:a0:
fe:fc:0d:df:b7:24:f5:ea:39:cb:24:2a:66:5b:e8:
e4:7d:69:16:11:25:33:c2:a9:75:23:a8:fa:7d:f3:
40:bd:9a:2a:a1:d6:41:19:0b:2a:43:42:f1:b9:3c:
73:32:21:e7:aa:25:88:bb:9f:12:28:06:5c:36:61:
a5:34:1c:69:c4:f8:b5:05:63:fa:0f:cf:5e:03:b1:
0a:3e:f2:1d:44:19:d5:52:c7:aa:cf:70:02:a1:3d:
28:38:6e:2a:23:2a:cb:39:c4:f5:e0:43:6c:c4:9f:
bc:e2:c2:7b:72:f2:b7:47:3f:d9:2a:48:4f:1f:4f:
ab:31:68:90:98:74:b6:40:6f:e6:c2:60:3d:e3:b2:
eb:f2:fc:30:14:19:d7:34:9d:f1:4b:14:4e:95:98:
17:01:3d:19:6a:5f:15:0c:8c:1b:04:2c:7c:0c:96:
c0:24:a5:98:9b:eb:a0:a9:6a:08:be:d7:5b:fb:c5:
4a:6d:38:b4:b7:39:e6:77:62:f8:a7:06:ef:49:d8:
6f:b3:c6:6d:58:21:57:2a:de:9c:13:b1:a1:3a:a1:
fe:be:59:50:66:33:e4:0d:d4:c6:21:36:de:1a:83:
a3:1c:b2:ab:3e:fa:f9:12:90:ea:cc:f7:a3:ad:bf:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:92:D5:32:D9:74:2A:11:67:18:91:89:1A:4D:34:F7:12:56:5D
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1a:75:1a:06:4c:ff:6f:73:55:d1:9c:bb:39:4a:b1:f4:f8:
d1:f0:43:00:9b:8e:6f:5c:c3:f7:67:70:b2:af:15:b6:7b:1a:
58:f4:8f:eb:66:9b:fc:bc:58:61:f4:a0:eb:b6:e0:7b:d8:8b:
d1:de:d4:5d:bc:4c:03:0d:bb:56:0c:e7:33:da:f8:d8:54:c1:
b6:58:b6:ad:d1:1a:00:54:7e:69:2b:fe:a7:60:c6:0a:54:05:
34:ad:4c:ab:ef:9c:f0:fd:1c:3c:85:c1:94:ba:f6:ec:fb:17:
96:d4:88:35:2c:cb:88:bc:8e:8e:3c:e9:4f:6d:74:41:7a:21:
3c:70:11:b6:1c:a0:e6:e1:ca:f6:33:b0:45:36:d5:4b:0a:ce:
61:bf:6c:8a:31:8c:c2:c8:4b:e4:f9:ce:9e:eb:35:2b:42:0a:
18:30:e9:d4:bf:6c:1a:18:6a:27:0d:9d:59:63:0d:cf:d6:6a:
2f:f6:95:70:6b:0c:2f:e6:5d:99:62:2b:70:c8:ef:52:05:ee:
f5:b0:67:ee:24:74:d7:4b:60:03:b7:46:2c:03:03:30:33:7a:
36:cf:32:39:d0:a9:db:ae:ee:4b:5d:05:b1:b6:a4:03:01:ee:
1c:56:fd:e0:5f:7e:ad:84:53:2c:6e:1f:66:18:d3:9d:59:11:
e6:77:6d:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiTs5sLq5hcHo5fFO4Gk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YTdjMmM4NGZmYTQ5MzRjZjBmNzNlZjFhMWExYTMzNzg3
MzE4MjYwHhcNMjUwNzI2MjEwMDA5WhcNMjUwNzI3MjEwMDA5WjAzMTEwLwYDVQQD
Eyg0NzFhOTJkNTMyZDk3NDJhMTE2NzE4OTE4OTFhNGQzNGY3MTI1NjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09X01FuUONR8vwEvyaD+/A3ftyT1
6jnLJCpmW+jkfWkWESUzwql1I6j6ffNAvZoqodZBGQsqQ0LxuTxzMiHnqiWIu58S
KAZcNmGlNBxpxPi1BWP6D89eA7EKPvIdRBnVUseqz3ACoT0oOG4qIyrLOcT14ENs
xJ+84sJ7cvK3Rz/ZKkhPH0+rMWiQmHS2QG/mwmA947Lr8vwwFBnXNJ3xSxROlZgX
AT0Zal8VDIwbBCx8DJbAJKWYm+ugqWoIvtdb+8VKbTi0tznmd2L4pwbvSdhvs8Zt
WCFXKt6cE7GhOqH+vllQZjPkDdTGITbeGoOjHLKrPvr5EpDqzPejrb85WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcaktUy2XQqEWcYkYkaTTT3ElZdMB8GA1UdIwQY
MBaAFGinwshP+kk0zw9z7xoaGjN4cxgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUtmQ3lFXzZTVFRQRDNQdkdob2FNM2h6R0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mZTQ1NWQtZjZjZS00MzZjLTgzMjct
ZGI2ZGRiNGE0NGU1LzEvYUtmQ3lFXzZTVFRQRDNQdkdob2FNM2h6R0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mZTQ1NWQtZjZjZS00MzZjLTgzMjctZGI2ZGRiNGE0NGU1
LzEvYUtmQ3lFXzZTVFRQRDNQdkdob2FNM2h6R0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBp1GgZM
/29zVdGcuzlKsfT40fBDAJuOb1zD92dwsq8VtnsaWPSP62ab/LxYYfSg67bge9iL
0d7UXbxMAw27VgznM9r42FTBtli2rdEaAFR+aSv+p2DGClQFNK1Mq++c8P0cPIXB
lLr27PsXltSINSzLiLyOjjzpT210QXohPHARthyg5uHK9jOwRTbVSwrOYb9sijGM
wshL5PnOnus1K0IKGDDp1L9sGhhqJw2dWWMNz9ZqL/aVcGsML+ZdmWIrcMjvUgXu
9bBn7iR010tgA7dGLAMDMDN6Ns8yOdCp267uS10FsbakAwHuHFb94F9+rYRTLG4f
ZhjTnVkR5ndtww==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:37 2025 by rpki-client