Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: F2vc621QzhjSomE+rh5cMl6BgfpPVhVif+Cikq+ZdRU=
Subject key identifier: AE:12:3F:C3:5A:C2:8C:2A:30:C3:06:11:32:5A:B8:27:7C:54:58:6C
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 01975912146BD9EC4948BC38F6E5095536DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 1581
Signing time: Tue 10 Jun 2025 09:00:46 +0000
Manifest this update: Tue 10 Jun 2025 09:00:46 +0000
Manifest next update: Wed 11 Jun 2025 09:00:46 +0000
Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=)
2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: WAzeOE9kbicahC4zcoolyASu2Wm7L1NGJjqYGIFmCLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:14:6b:d9:ec:49:48:bc:38:f6:e5:09:55:36:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Jun 10 09:00:46 2025 GMT
Not After : Jun 11 09:00:46 2025 GMT
Subject: CN=ae123fc35ac28c2a30c30611325ab8277c54586c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:ce:d9:d1:01:43:50:2a:07:02:0f:93:86:
b1:c7:07:27:ce:53:c0:a7:5e:fe:61:d0:57:ef:43:
1e:79:ec:9a:8b:53:e6:8f:53:93:e4:e8:78:6f:ef:
6d:42:fa:d8:4b:28:b4:95:48:95:d8:02:41:a0:25:
a4:81:86:71:2b:df:46:69:7b:cd:2f:cc:1e:4d:de:
c9:79:30:3a:62:a6:cb:a2:c4:31:59:41:50:e7:be:
4a:03:a0:40:17:a9:24:c1:60:ac:bf:30:9a:e1:03:
fa:b1:15:6f:c0:76:4a:c3:a3:63:98:c8:b4:9b:67:
f9:4f:4c:10:01:0e:17:a0:7e:11:59:31:cd:9c:c6:
ad:b9:1b:be:67:4d:10:41:b3:fc:68:82:66:e0:89:
dc:cf:a3:3f:75:ba:aa:1d:ee:68:4a:c1:f4:0c:64:
99:5a:52:c0:ed:8e:93:2e:1b:c5:68:d6:ad:cb:87:
5c:9d:5c:af:6b:0d:fc:dd:62:29:6a:e0:86:db:21:
08:e1:15:14:e6:66:ec:cb:0d:e0:93:fb:2a:ee:34:
e3:ee:e1:f7:f1:3b:2e:f7:7f:9c:e1:8c:f0:6c:67:
ee:98:e1:59:2a:70:91:c3:1b:2c:6f:b0:e1:a6:48:
15:be:a0:41:77:73:06:c4:52:73:3d:15:47:27:42:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:12:3F:C3:5A:C2:8C:2A:30:C3:06:11:32:5A:B8:27:7C:54:58:6C
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:60:9c:fc:d4:27:11:c3:07:29:1a:09:dd:d0:ae:60:4f:6a:
ee:22:32:33:2a:16:74:4d:cf:7b:3f:d9:d0:01:3d:72:61:a2:
08:e8:22:e4:bc:d5:d8:68:66:b2:ae:70:6a:b9:a7:2e:b7:43:
95:21:cb:42:d4:95:84:6a:58:c4:df:f3:c4:a0:5d:b9:39:9d:
d2:ee:87:df:b4:bb:f2:6c:a5:87:ec:29:b7:8d:5f:24:28:47:
9e:42:45:00:47:0b:41:09:37:34:47:51:29:97:61:93:23:e1:
c0:29:c2:fc:21:4d:36:e9:46:ba:a5:61:2f:f4:ca:a0:2a:0c:
ce:27:1e:02:49:26:fa:f5:68:48:3d:49:03:cf:07:fc:38:01:
c7:9e:bc:46:13:78:d6:ed:8a:2c:dc:9d:6c:d6:38:b1:ce:09:
84:53:bb:3a:3c:bc:9d:d9:e6:74:73:72:db:b0:7d:1b:44:24:
c1:f5:83:c9:1c:48:12:d0:28:b9:94:db:65:3b:f2:36:3e:c4:
67:f0:7c:cf:cf:af:81:8a:fb:82:04:82:84:19:8d:a5:0f:5f:
fb:b5:52:f0:03:04:1d:13:c5:63:7c:c5:e7:83:3a:f4:69:99:
9d:e3:e3:a4:6d:9d:b0:7a:19:d2:5c:8e:e6:fb:c3:15:68:1e:
1c:8c:b7:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZEhRr2exJSLw49uUJVTbdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2I0YTA1NGE3MjFhMGZkYTYwMTI5MDdjYzViNTZlODEy
MGE3M2UwHhcNMjUwNjEwMDkwMDQ2WhcNMjUwNjExMDkwMDQ2WjAzMTEwLwYDVQQD
EyhhZTEyM2ZjMzVhYzI4YzJhMzBjMzA2MTEzMjVhYjgyNzdjNTQ1ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JDO2dEBQ1AqBwIPk4axxwcnzlPA
p17+YdBX70Meeeyai1Pmj1OT5Oh4b+9tQvrYSyi0lUiV2AJBoCWkgYZxK99GaXvN
L8weTd7JeTA6YqbLosQxWUFQ575KA6BAF6kkwWCsvzCa4QP6sRVvwHZKw6NjmMi0
m2f5T0wQAQ4XoH4RWTHNnMatuRu+Z00QQbP8aIJm4Incz6M/dbqqHe5oSsH0DGSZ
WlLA7Y6TLhvFaNaty4dcnVyvaw383WIpauCG2yEI4RUU5mbsyw3gk/sq7jTj7uH3
8Tsu93+c4YzwbGfumOFZKnCRwxssb7DhpkgVvqBBd3MGxFJzPRVHJ0KiOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4SP8NawowqMMMGETJauCd8VFhsMB8GA1UdIwQY
MBaAFGt7SgVKchoP2mASkHzFtW6BIKc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YWJlMWQtMzAzNi00MmI4LWJlMzYt
ZTc5OWVmNTRmMGM0LzEvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80YWJlMWQtMzAzNi00MmI4LWJlMzYtZTc5OWVmNTRmMGM0
LzEvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWCc/NQn
EcMHKRoJ3dCuYE9q7iIyMyoWdE3Pez/Z0AE9cmGiCOgi5LzV2Ghmsq5warmnLrdD
lSHLQtSVhGpYxN/zxKBduTmd0u6H37S78mylh+wpt41fJChHnkJFAEcLQQk3NEdR
KZdhkyPhwCnC/CFNNulGuqVhL/TKoCoMziceAkkm+vVoSD1JA88H/DgBx568RhN4
1u2KLNydbNY4sc4JhFO7Ojy8ndnmdHNy27B9G0QkwfWDyRxIEtAouZTbZTvyNj7E
Z/B8z8+vgYr7ggSChBmNpQ9f+7VS8AMEHRPFY3zF54M69GmZnePjpG2dsHoZ0lyO
5vvDFWgeHIy3aQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 12:23:28 2025 by rpki-client