Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: urrdirf0EvzMvt0BEZ/+n6+r5ZSJD9WSPrB+pug41ag=
Subject key identifier: 38:4D:54:69:20:75:36:6A:05:31:02:8C:44:02:20:EE:3D:6E:59:1A
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 01974EC5E1070236F01BAD24FB6F405E60F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 09:01:20 +0000
Manifest this update: Sun 08 Jun 2025 09:01:20 +0000
Manifest next update: Mon 09 Jun 2025 09:01:20 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: kwaw2g44+102ktJjiGBfBAyNSQ8n2IVwaKY8Aj0i6DQ=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:e1:07:02:36:f0:1b:ad:24:fb:6f:40:5e:60:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jun 8 09:01:20 2025 GMT
Not After : Jun 9 09:01:20 2025 GMT
Subject: CN=384d54692075366a0531028c440220ee3d6e591a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:68:04:0f:52:23:42:20:b8:45:22:b2:d1:
3f:61:49:0c:cd:ee:59:b1:fa:60:5f:f9:1c:2f:1f:
a8:f0:de:c2:10:12:d9:57:79:d1:c0:74:cb:1a:db:
9b:31:e9:7c:4f:a9:f6:97:6c:e6:38:e1:7b:e5:1d:
aa:f7:d4:cf:6d:63:9c:2c:99:65:bf:6f:30:a2:38:
f2:26:b7:35:73:26:1e:2e:18:26:33:73:65:01:d5:
fa:a5:76:a5:8f:a0:5a:df:89:8e:60:e9:bb:95:35:
96:8f:75:5a:51:8a:12:c2:c6:26:23:c5:6b:99:c3:
57:aa:f2:fd:94:75:57:50:fc:49:70:79:c5:66:7f:
29:69:90:fe:fc:cd:8d:40:3f:a1:31:1a:d5:8f:c9:
0b:2d:4d:60:74:d9:15:01:0d:01:3c:0a:61:b4:d2:
c0:2c:3d:0d:fd:84:4b:f3:7e:66:0a:25:b5:32:40:
cd:86:7d:cd:e3:56:6c:82:ff:73:ca:65:ec:4c:a7:
57:42:bc:5f:e7:a6:6e:a9:4c:86:93:c4:42:d2:33:
8c:6b:50:34:71:2f:62:e5:ce:a4:79:53:57:e9:dd:
d0:aa:ca:b4:46:c1:84:ee:0a:4f:dc:18:30:36:c3:
d6:d2:8d:fa:7a:06:4a:2b:9f:c9:54:d3:43:a6:b2:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4D:54:69:20:75:36:6A:05:31:02:8C:44:02:20:EE:3D:6E:59:1A
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:19:c5:b9:d1:a4:18:09:96:cb:90:c8:48:a0:6d:af:9e:13:
bc:9e:9b:14:c2:3e:f1:88:c0:33:91:b8:56:3e:7f:7f:8a:7b:
16:74:8a:ae:8b:9e:4f:87:97:50:dd:4a:fb:83:8a:f3:7b:01:
bc:dd:7a:fa:72:66:de:9d:51:c3:ec:50:b2:d6:9a:dc:26:b4:
84:53:ac:85:86:39:85:a7:fc:b3:36:36:8b:9b:05:8c:c9:8b:
04:23:ee:e3:a0:44:53:af:72:25:d7:81:85:ed:bf:39:57:84:
1d:b8:ec:30:19:7c:d1:09:fa:b3:ec:50:77:cb:8a:3c:6b:d7:
11:15:8b:d3:9b:78:f0:16:1d:10:27:ba:a7:d8:e1:4f:4f:d2:
9b:e5:35:4f:79:59:44:89:14:1e:c9:7d:9e:df:a4:99:81:ef:
ed:0a:1f:28:74:31:76:57:b5:79:69:0d:a0:8a:c8:82:a7:6b:
4b:0a:6e:f5:f0:44:33:89:c6:82:66:9c:d7:76:33:77:59:b9:
cf:61:77:2d:3c:22:60:0d:2e:e5:f6:66:da:4c:fe:47:81:2c:
08:87:12:0f:44:a3:ac:d0:75:b0:d3:6d:d7:c0:ad:ca:25:c7:
7e:64:44:37:f4:ce:6d:50:e9:93:cf:12:b5:83:6c:f2:4b:55:
af:4a:c6:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxeEHAjbwG60k+29AXmD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjIyYTFhYWRmNzllNzExZDFlN2U0MzE5ZjczMmMwYjJk
YTgwMWUwHhcNMjUwNjA4MDkwMTIwWhcNMjUwNjA5MDkwMTIwWjAzMTEwLwYDVQQD
EygzODRkNTQ2OTIwNzUzNjZhMDUzMTAyOGM0NDAyMjBlZTNkNmU1OTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkshoBA9SI0IguEUistE/YUkMze5Z
sfpgX/kcLx+o8N7CEBLZV3nRwHTLGtubMel8T6n2l2zmOOF75R2q99TPbWOcLJll
v28wojjyJrc1cyYeLhgmM3NlAdX6pXalj6Ba34mOYOm7lTWWj3VaUYoSwsYmI8Vr
mcNXqvL9lHVXUPxJcHnFZn8paZD+/M2NQD+hMRrVj8kLLU1gdNkVAQ0BPAphtNLA
LD0N/YRL835mCiW1MkDNhn3N41Zsgv9zymXsTKdXQrxf56ZuqUyGk8RC0jOMa1A0
cS9i5c6keVNX6d3Qqsq0RsGE7gpP3BgwNsPW0o36egZKK5/JVNNDprI0PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhNVGkgdTZqBTECjEQCIO49blkaMB8GA1UdIwQY
MBaAFGliKhqt955xHR5+Qxn3MsCy2oAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMt
Y2MyMGY0MTcyY2VkLzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMtY2MyMGY0MTcyY2Vk
LzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhnFudGk
GAmWy5DISKBtr54TvJ6bFMI+8YjAM5G4Vj5/f4p7FnSKroueT4eXUN1K+4OK83sB
vN16+nJm3p1Rw+xQstaa3Ca0hFOshYY5haf8szY2i5sFjMmLBCPu46BEU69yJdeB
he2/OVeEHbjsMBl80Qn6s+xQd8uKPGvXERWL05t48BYdECe6p9jhT0/Sm+U1T3lZ
RIkUHsl9nt+kmYHv7QofKHQxdle1eWkNoIrIgqdrSwpu9fBEM4nGgmac13Yzd1m5
z2F3LTwiYA0u5fZm2kz+R4EsCIcSD0SjrNB1sNNt18CtyiXHfmREN/TObVDpk88S
tYNs8ktVr0rGag==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:53:42 2025 by rpki-client