Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: AVtDLQA00px2lvtc9f3KK/L2NWd6HcwBB1/kKdkHI5s=
Subject key identifier: B2:85:07:66:8F:89:C9:6E:D1:71:F8:68:50:40:70:11:07:66:21:FC
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 01984708EC7D49854A0C3557DD206E0C9CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 08F1
Signing time: Sat 26 Jul 2025 14:00:23 +0000
Manifest this update: Sat 26 Jul 2025 14:00:23 +0000
Manifest next update: Sun 27 Jul 2025 14:00:23 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: ZXexzcnfCRCF0KRFXuDdfevPjjkUY1wnSacDU/X5DnA=)
2: b5qYlj2pGelCE8iMTZgVzkLgjZ4.roa (hash: Q1LSediVZtUJxlECrGud2jZUPviShybaGQ27nBC5c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:ec:7d:49:85:4a:0c:35:57:dd:20:6e:0c:9c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Jul 26 14:00:23 2025 GMT
Not After : Jul 27 14:00:23 2025 GMT
Subject: CN=b28507668f89c96ed171f86850407011076621fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:22:13:c9:b5:a0:10:87:58:dc:d0:74:2c:
5d:05:7e:83:ef:ee:fe:d6:ff:d4:f6:e4:f3:e4:dc:
27:55:d5:d0:38:cb:1e:91:41:ce:ab:bd:d6:e6:2f:
2a:d4:98:cc:0f:ce:47:35:c3:59:0c:56:e4:b7:f2:
bb:60:ed:b7:a9:dd:1e:d3:08:df:d1:35:c8:a1:ee:
72:03:5f:e8:ee:90:0a:f7:54:66:3c:e3:1a:e9:6f:
ec:e3:7b:7e:82:71:d5:23:33:d3:13:43:5b:52:05:
89:c0:80:af:cd:b4:51:2e:e7:29:4e:8b:b7:71:06:
da:c6:cd:4e:e6:df:1c:ed:11:a5:42:fe:7f:e7:d1:
ad:fe:af:87:82:4c:c7:08:4a:d1:15:0c:fe:be:7a:
a8:cf:31:06:08:66:4b:28:a5:ba:5a:e5:d4:56:d8:
28:af:a0:ed:46:fb:62:6d:35:5a:08:ed:07:ee:4c:
7c:70:fc:17:2f:11:a1:6e:9c:91:96:bd:f5:5d:6e:
5b:c8:c3:fb:4d:75:37:61:f7:1d:41:d7:4f:89:d4:
fd:7c:fe:0f:fb:47:12:00:a0:73:12:d0:06:fe:77:
d7:86:1d:02:a0:4b:08:cc:e6:82:03:f6:5a:44:7b:
bb:28:26:43:17:c1:7a:ae:66:ba:0f:7f:67:ba:64:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:85:07:66:8F:89:C9:6E:D1:71:F8:68:50:40:70:11:07:66:21:FC
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:55:79:2c:15:34:34:1f:92:d8:1d:0a:3f:81:b6:f1:70:aa:
95:94:58:05:81:eb:7f:2f:c5:f2:14:c0:fd:7d:5f:e2:10:6d:
91:15:89:95:5e:0d:79:2c:b8:59:5a:f4:ca:c6:ee:7e:4f:e6:
ac:0d:1a:86:63:c7:3e:16:bf:d1:31:c5:60:2a:13:cb:36:8e:
24:42:a7:ea:7d:53:ea:5d:18:ca:a9:96:6c:af:43:bb:4a:e9:
0a:7d:0b:05:28:9f:e5:74:86:5b:6a:da:73:08:a3:a2:f0:1d:
1e:6c:b4:af:93:56:10:8b:cb:36:d1:ad:03:e2:ba:1e:b2:44:
15:78:95:67:3c:03:d7:c6:f5:d8:45:10:dc:0e:ef:47:2a:2a:
50:4f:ed:36:ac:0c:42:70:62:2d:ec:e6:22:23:a1:f6:3b:52:
5c:60:37:0c:6b:d4:49:aa:90:1e:6d:1b:66:91:66:3d:d8:e1:
75:5e:99:7d:1f:49:5b:27:f3:6e:99:6c:7e:06:94:30:62:11:
14:8a:6b:46:df:3d:5b:c5:a3:83:a5:5c:6a:e5:b0:16:3e:fc:
f8:0b:ab:96:73:7f:ed:b3:ad:d5:ad:fe:86:62:70:f8:ee:0c:
11:63:55:4e:f2:aa:cd:8e:9c:0e:8e:e3:e7:d5:6c:c7:ce:85:
e2:c8:41:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCOx9SYVKDDVX3SBuDJz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGM5ZDU1NDJhNWFhOGNkNWUwMTk4YWI4M2ZjZTBmOTQ3
MmE0NjEwHhcNMjUwNzI2MTQwMDIzWhcNMjUwNzI3MTQwMDIzWjAzMTEwLwYDVQQD
EyhiMjg1MDc2NjhmODljOTZlZDE3MWY4Njg1MDQwNzAxMTA3NjYyMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj4iE8m1oBCHWNzQdCxdBX6D7+7+
1v/U9uTz5NwnVdXQOMsekUHOq73W5i8q1JjMD85HNcNZDFbkt/K7YO23qd0e0wjf
0TXIoe5yA1/o7pAK91RmPOMa6W/s43t+gnHVIzPTE0NbUgWJwICvzbRRLucpTou3
cQbaxs1O5t8c7RGlQv5/59Gt/q+HgkzHCErRFQz+vnqozzEGCGZLKKW6WuXUVtgo
r6DtRvtibTVaCO0H7kx8cPwXLxGhbpyRlr31XW5byMP7TXU3YfcdQddPidT9fP4P
+0cSAKBzEtAG/nfXhh0CoEsIzOaCA/ZaRHu7KCZDF8F6rma6D39numSXWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKFB2aPiclu0XH4aFBAcBEHZiH8MB8GA1UdIwQY
MBaAFAAMnVVCpaqM1eAZirg/zg+UcqRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEt
ZGRjYzI1ODgxMTI4LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEtZGRjYzI1ODgxMTI4
LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFV5LBU0
NB+S2B0KP4G28XCqlZRYBYHrfy/F8hTA/X1f4hBtkRWJlV4NeSy4WVr0ysbufk/m
rA0ahmPHPha/0THFYCoTyzaOJEKn6n1T6l0YyqmWbK9Du0rpCn0LBSif5XSGW2ra
cwijovAdHmy0r5NWEIvLNtGtA+K6HrJEFXiVZzwD18b12EUQ3A7vRyoqUE/tNqwM
QnBiLezmIiOh9jtSXGA3DGvUSaqQHm0bZpFmPdjhdV6ZfR9JWyfzbplsfgaUMGIR
FIprRt89W8Wjg6VcauWwFj78+AurlnN/7bOt1a3+hmJw+O4MEWNVTvKqzY6cDo7j
59Vsx86F4shBzg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:55:15 2025 by rpki-client