Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: x6FVnM1aQvpV/KvK8aP+ZpV1BdI/pgNvpSOuT7y2kKE=
Subject key identifier: 6E:BB:9D:C4:D0:BC:7F:60:9E:72:86:01:C2:F1:37:CA:F9:97:65:F3
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 01974BC4740BEF5906DEFBFD073E50191B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 19:00:55 +0000
Manifest this update: Sat 07 Jun 2025 19:00:55 +0000
Manifest next update: Sun 08 Jun 2025 19:00:55 +0000
Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: +rwQ3fVh9REh918DryecEupzvHH6y/r4zp8O4flBxWw=)
3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:74:0b:ef:59:06:de:fb:fd:07:3e:50:19:1b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Jun 7 19:00:55 2025 GMT
Not After : Jun 8 19:00:55 2025 GMT
Subject: CN=6ebb9dc4d0bc7f609e728601c2f137caf99765f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:28:57:87:64:f6:fa:e8:db:29:76:17:1d:
3b:ca:33:2d:7c:23:97:79:06:2f:4b:2b:77:cd:91:
97:25:dc:8e:9d:b5:12:52:49:fc:e9:41:f3:f6:33:
94:16:a7:1d:b4:03:33:7d:1f:4c:f7:30:61:60:87:
0f:42:0f:68:92:a6:3f:95:e0:de:71:f1:48:35:d4:
a5:47:f9:fa:75:7e:63:be:4b:a0:8c:4b:c2:f0:82:
85:12:30:34:29:10:bb:98:a3:9b:06:80:54:c6:02:
52:03:52:a3:57:68:64:c5:99:fb:39:7b:48:d1:e4:
fd:cf:72:d2:fd:8c:44:2a:c3:5d:41:a4:13:f9:ac:
db:48:2b:7f:cb:7e:25:62:8b:af:95:83:12:38:ca:
0f:77:79:81:0e:09:19:53:d9:fa:e7:f8:f0:76:e3:
20:8f:8d:27:45:12:f1:9e:c3:e4:bb:d4:1b:22:f4:
19:e6:e2:7c:1c:50:46:a9:79:62:55:4e:c2:94:aa:
6c:e9:6c:0e:5b:c2:fd:b1:ab:0a:ef:c2:e3:74:21:
23:4c:74:8d:8d:ae:3f:a4:a3:92:34:23:e7:a9:7c:
1c:81:09:e5:53:98:8a:a6:c8:6f:e6:f0:32:45:eb:
aa:6a:36:05:af:e7:2d:e5:c1:1f:9d:c7:32:01:b7:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BB:9D:C4:D0:BC:7F:60:9E:72:86:01:C2:F1:37:CA:F9:97:65:F3
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9c:20:1c:05:e1:35:1e:b6:29:18:64:08:61:16:e3:68:11:
13:7f:cb:de:5a:9e:ac:82:2a:e8:c4:ca:db:61:58:56:c4:fa:
07:63:de:9a:d2:1b:c3:b1:32:46:66:11:ef:2f:a7:d4:4b:5f:
31:0e:ee:75:37:ab:5f:19:43:ba:f5:f1:d3:55:76:e0:1b:bd:
49:90:52:81:7c:8f:74:19:bf:08:cd:9c:ed:43:23:3f:cd:a7:
4a:f9:9b:91:3d:2a:51:1e:18:c4:e3:8c:98:c6:5c:a7:6f:ca:
48:8a:9e:0d:84:c6:19:3f:44:2a:00:fa:75:5a:e1:f8:e8:48:
94:d6:c6:f9:df:35:7b:17:40:91:67:7d:98:79:13:d2:f6:cc:
6d:cb:a1:dd:af:12:89:5f:18:a9:c4:74:e6:c7:75:7a:f8:1f:
df:4c:b8:5f:93:1b:d8:77:c9:63:de:53:42:f3:28:22:e9:fa:
a4:3a:f8:5a:cd:25:aa:74:49:29:9b:e6:6f:5e:8e:3a:f8:10:
4c:da:ee:87:2f:31:f0:be:fb:a1:23:22:5a:a0:c1:44:1e:3e:
15:a2:8a:ad:98:70:70:2e:84:ea:29:ef:49:32:e7:8f:75:4f:
bc:ef:83:9d:35:05:f7:42:07:33:00:fe:13:da:20:6b:ed:19:
8b:37:2e:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxHQL71kG3vv9Bz5QGRtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm
YjEyMDkwHhcNMjUwNjA3MTkwMDU1WhcNMjUwNjA4MTkwMDU1WjAzMTEwLwYDVQQD
Eyg2ZWJiOWRjNGQwYmM3ZjYwOWU3Mjg2MDFjMmYxMzdjYWY5OTc2NWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKEoV4dk9vro2yl2Fx07yjMtfCOX
eQYvSyt3zZGXJdyOnbUSUkn86UHz9jOUFqcdtAMzfR9M9zBhYIcPQg9okqY/leDe
cfFINdSlR/n6dX5jvkugjEvC8IKFEjA0KRC7mKObBoBUxgJSA1KjV2hkxZn7OXtI
0eT9z3LS/YxEKsNdQaQT+azbSCt/y34lYouvlYMSOMoPd3mBDgkZU9n65/jwduMg
j40nRRLxnsPku9QbIvQZ5uJ8HFBGqXliVU7ClKps6WwOW8L9sasK78LjdCEjTHSN
ja4/pKOSNCPnqXwcgQnlU5iKpshv5vAyReuqajYFr+ct5cEfnccyAbcVFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG67ncTQvH9gnnKGAcLxN8r5l2XzMB8GA1UdIwQY
MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt
MGI4YjA3NWU4NmRiLzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi
LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZwgHAXh
NR62KRhkCGEW42gRE3/L3lqerIIq6MTK22FYVsT6B2PemtIbw7EyRmYR7y+n1Etf
MQ7udTerXxlDuvXx01V24Bu9SZBSgXyPdBm/CM2c7UMjP82nSvmbkT0qUR4YxOOM
mMZcp2/KSIqeDYTGGT9EKgD6dVrh+OhIlNbG+d81exdAkWd9mHkT0vbMbcuh3a8S
iV8YqcR05sd1evgf30y4X5Mb2HfJY95TQvMoIun6pDr4Ws0lqnRJKZvmb16OOvgQ
TNruhy8x8L77oSMiWqDBRB4+FaKKrZhwcC6E6invSTLnj3VPvO+DnTUF90IHMwD+
E9oga+0ZizcuDw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:39:28 2025 by rpki-client