Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: xryGu6NNEqIJq7og4lVFgBEssxQDQVeSbN3XOXb60Ww=
Subject key identifier: CD:3F:92:F4:80:CE:50:69:EA:8F:49:E2:0E:39:BF:A0:27:88:EA:9B
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 01975911EAF293F8F295855D630F590C644B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 1380
Signing time: Tue 10 Jun 2025 09:00:35 +0000
Manifest this update: Tue 10 Jun 2025 09:00:35 +0000
Manifest next update: Wed 11 Jun 2025 09:00:35 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: mG6OgiehFRM5KANbRl0LehntD42JuRo3QMbyH2Xs/5I=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:11:ea:f2:93:f8:f2:95:85:5d:63:0f:59:0c:64:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Jun 10 09:00:35 2025 GMT
Not After : Jun 11 09:00:35 2025 GMT
Subject: CN=cd3f92f480ce5069ea8f49e20e39bfa02788ea9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:ac:ef:2b:89:67:a8:07:60:12:8c:ec:d8:
17:84:8a:4c:12:24:6a:fd:b4:e6:cc:7d:3c:41:eb:
1f:ff:8a:f1:28:88:02:00:ae:74:f3:bd:f2:62:ba:
3a:8d:c3:c2:20:57:39:1c:0c:82:6a:34:d4:6d:f4:
52:a7:14:89:75:f9:37:10:57:e4:91:bb:0f:bd:c6:
58:48:ad:ee:68:19:92:c6:59:b9:86:d2:a9:be:2e:
c6:f4:88:f7:79:6b:b9:da:05:60:02:3d:c3:f0:00:
a3:ad:54:8e:19:56:0d:32:65:a7:bb:4e:ce:67:7c:
96:f5:ef:52:73:07:5c:3d:c1:62:8e:aa:81:41:45:
b7:7f:af:f0:7e:fd:0e:f9:4a:79:44:12:50:a9:cf:
8d:e1:ec:a1:42:50:2f:9a:a6:7c:04:d7:9a:66:e6:
90:eb:b2:0d:0b:6a:27:39:5d:e7:18:6e:5b:1d:cd:
76:7a:2e:b6:42:d3:50:fb:0f:e0:9a:35:26:6f:f3:
40:b6:39:cc:bf:39:16:2d:c8:45:28:a7:71:6a:05:
54:84:24:2a:87:ef:0b:18:8d:6c:ed:45:05:4c:39:
b8:9a:38:e8:8c:ed:20:9f:58:84:ad:de:e6:ce:1f:
41:a9:11:f2:e5:a4:26:a7:06:09:a0:51:15:7d:40:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3F:92:F4:80:CE:50:69:EA:8F:49:E2:0E:39:BF:A0:27:88:EA:9B
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:75:e4:b3:83:34:02:92:cc:e1:24:bb:45:fc:44:b9:0c:52:
f3:b2:0d:d7:23:6f:7f:83:92:cb:31:89:89:0d:df:68:89:a3:
7e:8f:7f:32:6f:b1:20:e3:43:2e:31:5e:e8:7a:34:eb:05:50:
06:38:1c:45:2d:bf:4e:b1:ea:a6:3d:07:3b:0d:5e:0c:06:46:
fc:46:47:45:6a:ef:d9:9c:49:59:e9:31:42:45:6f:0c:4f:c5:
6a:d1:5e:8c:73:cc:9e:06:36:06:d9:24:6b:72:e9:5c:8b:cd:
f4:76:f3:72:e0:31:28:c0:92:b7:0a:3f:f5:d1:b8:b6:8f:a1:
38:1d:13:a6:ee:6b:68:d3:9d:ae:cc:63:49:45:31:87:28:f9:
50:d3:72:29:df:a5:c9:91:5c:01:07:97:d6:0e:63:83:ca:09:
63:d0:bd:7b:5e:a1:f2:29:d0:16:23:85:4c:7a:40:1e:68:c4:
61:3c:b8:74:d6:97:94:88:51:e6:d0:f5:29:c9:30:11:dd:9c:
53:b8:55:ba:d7:5c:4b:9b:fc:49:3d:99:33:4b:e3:e8:2a:72:
9a:9e:dc:1c:69:58:5e:af:6f:8b:44:25:d0:c8:07:f4:52:b3:
cd:7e:99:6b:7f:dd:e7:4c:e3:6b:47:f1:32:b3:58:d9:ca:0a:
43:4c:65:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZEeryk/jylYVdYw9ZDGRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYWU3YmM4ZDMzMTYzY2M0YjZkZGExNzFhMzg3ZmY5ODAy
MmEwZjYwHhcNMjUwNjEwMDkwMDM1WhcNMjUwNjExMDkwMDM1WjAzMTEwLwYDVQQD
EyhjZDNmOTJmNDgwY2U1MDY5ZWE4ZjQ5ZTIwZTM5YmZhMDI3ODhlYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiGs7yuJZ6gHYBKM7NgXhIpMEiRq
/bTmzH08Qesf/4rxKIgCAK50873yYro6jcPCIFc5HAyCajTUbfRSpxSJdfk3EFfk
kbsPvcZYSK3uaBmSxlm5htKpvi7G9Ij3eWu52gVgAj3D8ACjrVSOGVYNMmWnu07O
Z3yW9e9ScwdcPcFijqqBQUW3f6/wfv0O+Up5RBJQqc+N4eyhQlAvmqZ8BNeaZuaQ
67INC2onOV3nGG5bHc12ei62QtNQ+w/gmjUmb/NAtjnMvzkWLchFKKdxagVUhCQq
h+8LGI1s7UUFTDm4mjjojO0gn1iErd7mzh9BqRHy5aQmpwYJoFEVfUAulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0/kvSAzlBp6o9J4g45v6AniOqbMB8GA1UdIwQY
MBaAFGque8jTMWPMS23aFxo4f/mAIqD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lNWRiZjgtYjQxZC00YWNkLTk2YWMt
OGY1OWNmMDE2NDY2LzEvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lNWRiZjgtYjQxZC00YWNkLTk2YWMtOGY1OWNmMDE2NDY2
LzEvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnXks4M0
ApLM4SS7RfxEuQxS87IN1yNvf4OSyzGJiQ3faImjfo9/Mm+xIONDLjFe6Ho06wVQ
BjgcRS2/TrHqpj0HOw1eDAZG/EZHRWrv2ZxJWekxQkVvDE/FatFejHPMngY2Btkk
a3LpXIvN9HbzcuAxKMCStwo/9dG4to+hOB0Tpu5raNOdrsxjSUUxhyj5UNNyKd+l
yZFcAQeX1g5jg8oJY9C9e16h8inQFiOFTHpAHmjEYTy4dNaXlIhR5tD1KckwEd2c
U7hVutdcS5v8ST2ZM0vj6Cpymp7cHGlYXq9vi0Ql0MgH9FKzzX6Za3/d50zja0fx
MrNY2coKQ0xlyQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 18:54:56 2025 by rpki-client