Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: NuWn8VX995gYWcaOJ36CPty8lUsIbuZ5SpUpKwTJOcw=
Subject key identifier: D5:F3:F9:17:55:51:01:4C:29:79:4D:A9:77:B4:BB:C1:F1:3C:C6:85
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 0199350069EDB1A76332A74CE75840836D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 15C0
Signing time: Wed 10 Sep 2025 19:00:43 +0000
Manifest this update: Wed 10 Sep 2025 19:00:43 +0000
Manifest next update: Thu 11 Sep 2025 19:00:43 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: LehbWBFoEmaiGovAFi38qk2kSTGGOwaRDCY14UXh34k=)
2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=)
3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:69:ed:b1:a7:63:32:a7:4c:e7:58:40:83:6d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Sep 10 19:00:43 2025 GMT
Not After : Sep 11 19:00:43 2025 GMT
Subject: CN=d5f3f9175551014c29794da977b4bbc1f13cc685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:d9:d5:33:33:da:b0:b2:9a:17:f6:9b:bc:
da:15:50:c6:0b:b2:f9:79:07:18:e5:ff:e7:51:c6:
cf:bd:46:44:dd:fd:05:b1:5d:79:8c:e0:d9:2e:9b:
fe:88:bc:f5:ef:e4:c7:36:b7:0f:1f:41:de:d9:5f:
1e:73:ba:f4:c7:e7:cc:67:4d:da:c1:5a:ed:20:46:
04:43:0f:c4:05:87:56:86:74:07:22:b1:9d:66:4f:
94:fa:0c:68:c5:bf:43:86:cc:ad:1a:e9:68:73:c6:
68:b9:3f:0d:f3:a7:47:9a:62:b8:59:45:f5:e4:3f:
02:4e:a2:7d:90:dd:92:3c:a4:85:9b:8a:c6:39:a9:
8a:ef:31:2d:65:a6:b9:5f:a5:5f:f4:c5:2d:3c:12:
03:a9:1a:f6:92:d9:0a:39:53:e5:b4:ce:51:fa:fb:
cb:17:80:dd:c5:41:67:bb:db:7b:bc:af:2f:a8:5c:
53:f2:c6:c4:31:d5:96:68:00:c8:a9:ea:11:35:8e:
db:6d:97:f9:9f:02:78:25:cc:9d:2d:04:dc:2f:6b:
ae:32:8d:7e:34:31:b1:5d:7b:1b:76:32:8a:c9:33:
5f:69:83:27:e1:81:26:89:25:82:39:67:22:39:8e:
94:8e:37:ef:f9:47:14:99:0a:ed:18:e0:0f:81:01:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:F9:17:55:51:01:4C:29:79:4D:A9:77:B4:BB:C1:F1:3C:C6:85
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:ca:6b:65:6f:6d:e9:1f:af:a1:c1:9a:5f:ff:22:31:9f:
33:28:ea:4f:15:30:ef:cc:70:7a:1c:cb:05:4f:a5:e4:69:23:
4e:38:ae:e9:6b:f2:9b:1a:6c:91:6b:7b:f9:5b:4f:25:e8:af:
ca:78:62:2c:28:0f:31:49:5b:07:45:df:a0:84:c5:cf:4a:2d:
11:0b:25:c8:57:8f:ca:e2:6d:d2:ee:e9:73:c1:76:8a:d5:d3:
0e:2e:d2:15:b8:d2:ac:a1:c7:07:37:be:e4:e6:42:74:e5:91:
5d:79:71:9a:bc:ee:b0:06:9d:cc:a4:09:1b:d9:af:b4:5d:4d:
19:e7:a7:d7:ab:20:99:c3:7c:3e:14:0e:b6:9f:d0:dd:45:f7:
da:39:3f:cd:dc:fb:dd:9b:83:1d:92:e2:65:f0:42:1a:a3:f9:
d3:e2:09:a9:da:63:15:92:b0:5f:45:67:1e:e2:64:a2:22:52:
9a:80:49:1f:2f:10:e2:fb:c7:5a:86:7f:6b:9e:6b:cf:6d:69:
07:d0:28:89:98:43:8d:d7:fc:93:7c:47:72:fc:29:45:b2:38:
50:1b:2d:95:05:2b:9b:80:4f:f8:6b:ee:4c:15:fb:b7:a2:4e:
d0:d9:c4:c5:93:6c:cb:2a:ad:d2:87:c0:2c:2e:71:bc:9c:43:
a5:3d:fa:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1AGntsadjMqdM51hAg21mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWIwMDJmMDAwYmQ0MjZlNGE2NDBjNzFkNmMwMjAxYjUw
NTBlMzQwHhcNMjUwOTEwMTkwMDQzWhcNMjUwOTExMTkwMDQzWjAzMTEwLwYDVQQD
EyhkNWYzZjkxNzU1NTEwMTRjMjk3OTRkYTk3N2I0YmJjMWYxM2NjNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubPZ1TMz2rCymhf2m7zaFVDGC7L5
eQcY5f/nUcbPvUZE3f0FsV15jODZLpv+iLz17+THNrcPH0He2V8ec7r0x+fMZ03a
wVrtIEYEQw/EBYdWhnQHIrGdZk+U+gxoxb9DhsytGuloc8ZouT8N86dHmmK4WUX1
5D8CTqJ9kN2SPKSFm4rGOamK7zEtZaa5X6Vf9MUtPBIDqRr2ktkKOVPltM5R+vvL
F4DdxUFnu9t7vK8vqFxT8sbEMdWWaADIqeoRNY7bbZf5nwJ4JcydLQTcL2uuMo1+
NDGxXXsbdjKKyTNfaYMn4YEmiSWCOWciOY6Ujjfv+UcUmQrtGOAPgQECuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXz+RdVUQFMKXlNqXe0u8HxPMaFMB8GA1UdIwQY
MBaAFGnrAC8AC9Qm5KZAxx1sAgG1BQ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0Mzct
Nzg1NDc1YzIyYzliLzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0MzctNzg1NDc1YzIyYzli
LzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidfKa2Vv
bekfr6HBml//IjGfMyjqTxUw78xwehzLBU+l5GkjTjiu6WvymxpskWt7+VtPJeiv
ynhiLCgPMUlbB0XfoITFz0otEQslyFePyuJt0u7pc8F2itXTDi7SFbjSrKHHBze+
5OZCdOWRXXlxmrzusAadzKQJG9mvtF1NGeen16sgmcN8PhQOtp/Q3UX32jk/zdz7
3ZuDHZLiZfBCGqP50+IJqdpjFZKwX0VnHuJkoiJSmoBJHy8Q4vvHWoZ/a55rz21p
B9AoiZhDjdf8k3xHcvwpRbI4UBstlQUrm4BP+GvuTBX7t6JO0NnExZNsyyqt0ofA
LC5xvJxDpT36iA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 03:26:17 2025 by rpki-client