Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: IIyzsichDMqfHUf2R2nEZCb2dlnbA+GY3K6suuJLzus=
Subject key identifier: 61:FF:29:6B:77:48:E6:A8:D7:24:04:EE:FC:99:94:0F:E8:AF:69:72
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 01974A43BA88DBFF8EE61FACED2303EDA903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 12:00:41 +0000
Manifest this update: Sat 07 Jun 2025 12:00:41 +0000
Manifest next update: Sun 08 Jun 2025 12:00:41 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: Hmof1CjtmWbYCpGyrYx53g80u3+Uy01v4//IGYPShqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ba:88:db:ff:8e:e6:1f:ac:ed:23:03:ed:a9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Jun 7 12:00:41 2025 GMT
Not After : Jun 8 12:00:41 2025 GMT
Subject: CN=61ff296b7748e6a8d72404eefc99940fe8af6972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:72:a7:27:ce:1e:11:43:41:4b:0a:fc:14:
30:55:3e:34:98:75:a9:86:4a:44:5d:e8:00:12:0e:
9d:81:66:33:07:22:8e:4c:f1:04:a4:f9:4a:86:ca:
c8:a5:b2:04:42:57:38:a9:33:ca:31:80:b9:79:fd:
58:d1:bc:91:77:d9:fe:9f:90:6e:03:79:48:59:32:
e8:76:6b:9b:50:81:40:57:28:00:d9:dc:1b:ab:b1:
69:c7:0a:58:2f:9a:5e:42:33:cd:f2:c4:b8:ff:b1:
6c:cc:49:d6:e2:2d:45:fa:85:12:56:b7:7b:c1:4c:
a4:b8:98:1e:ca:d9:34:52:fe:ee:52:75:d3:a7:e0:
09:53:ae:dd:ad:56:39:4a:78:00:ee:a2:56:01:4e:
06:b5:24:84:f9:ac:b4:40:d7:84:0c:66:b5:41:67:
e3:7b:5b:bb:f9:f9:4e:48:95:58:65:2d:57:70:2e:
24:4e:a3:68:f0:dd:a8:92:20:fa:bd:5b:54:bc:72:
cc:e9:8a:2f:a0:27:91:f9:21:5e:50:98:a0:fe:b0:
d5:5a:8e:d3:d4:8b:bb:6f:e3:0a:57:f8:31:e0:7e:
f1:18:16:f0:bd:c1:09:25:69:2b:ed:f9:5b:e4:ba:
f3:19:21:ab:a3:c7:c8:25:ce:e6:e7:b4:d6:ae:b0:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FF:29:6B:77:48:E6:A8:D7:24:04:EE:FC:99:94:0F:E8:AF:69:72
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:36:6f:6b:a9:10:1e:df:82:5d:a6:3a:2e:65:d3:2a:70:92:
68:13:cf:6c:02:1b:bd:cc:10:e2:bd:bc:49:e5:29:b5:be:aa:
68:5f:a3:8f:03:2b:20:ea:af:d5:05:c0:4f:3b:fc:78:b3:69:
71:d1:55:d7:7f:9f:97:53:cf:25:4c:66:f2:66:4b:0d:5a:75:
cf:dd:d3:c8:3e:a5:06:7a:f3:07:4e:1c:c8:cf:18:06:45:f3:
27:35:62:01:2e:4a:7f:29:1a:0e:fd:ad:02:3b:58:31:12:a8:
3e:8a:c8:75:a8:bc:97:18:19:1c:f7:3a:a6:82:af:21:52:03:
b0:39:3e:bc:1a:cd:b7:e9:47:b0:52:96:3e:a9:da:b1:bb:e3:
15:6c:74:ab:a1:3c:64:78:a4:84:6a:70:cb:c3:1f:f3:33:20:
76:cc:84:ad:c8:c1:ad:fc:d0:c8:d0:bb:38:15:0f:d1:50:f0:
7b:e9:d8:90:fd:f2:87:bc:84:16:64:48:19:84:64:4f:96:6c:
40:bd:15:f3:1f:e5:86:26:45:da:d9:dc:41:70:ec:8f:c0:08:
94:b7:36:8a:89:83:cc:e2:0c:21:61:41:ea:9b:4a:a9:c2:bc:
81:81:a4:f7:08:8a:39:26:9f:ae:bd:0e:4f:7f:c4:87:74:70:
f6:0e:b1:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ7qI2/+O5h+s7SMD7akDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5N2VhNjBhY2EwZGRhZTVlZGRmYmMyNjBjYjdkYTI2MTYy
NGU5MWQwHhcNMjUwNjA3MTIwMDQxWhcNMjUwNjA4MTIwMDQxWjAzMTEwLwYDVQQD
Eyg2MWZmMjk2Yjc3NDhlNmE4ZDcyNDA0ZWVmYzk5OTQwZmU4YWY2OTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAullypyfOHhFDQUsK/BQwVT40mHWp
hkpEXegAEg6dgWYzByKOTPEEpPlKhsrIpbIEQlc4qTPKMYC5ef1Y0byRd9n+n5Bu
A3lIWTLodmubUIFAVygA2dwbq7FpxwpYL5peQjPN8sS4/7FszEnW4i1F+oUSVrd7
wUykuJgeytk0Uv7uUnXTp+AJU67drVY5SngA7qJWAU4GtSSE+ay0QNeEDGa1QWfj
e1u7+flOSJVYZS1XcC4kTqNo8N2okiD6vVtUvHLM6YovoCeR+SFeUJig/rDVWo7T
1Iu7b+MKV/gx4H7xGBbwvcEJJWkr7flb5LrzGSGro8fIJc7m57TWrrBqrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH/KWt3SOao1yQE7vyZlA/or2lyMB8GA1UdIwQY
MBaAFGl+pgrKDdrl7d+8Jgy32iYWJOkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYjQ5MzQtYTkzNy00MzI0LTlmMTct
ZWVhZDNiOGJjY2I5LzEvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mYjQ5MzQtYTkzNy00MzI0LTlmMTctZWVhZDNiOGJjY2I5
LzEvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTZva6kQ
Ht+CXaY6LmXTKnCSaBPPbAIbvcwQ4r28SeUptb6qaF+jjwMrIOqv1QXATzv8eLNp
cdFV13+fl1PPJUxm8mZLDVp1z93TyD6lBnrzB04cyM8YBkXzJzViAS5KfykaDv2t
AjtYMRKoPorIdai8lxgZHPc6poKvIVIDsDk+vBrNt+lHsFKWPqnasbvjFWx0q6E8
ZHikhGpwy8Mf8zMgdsyErcjBrfzQyNC7OBUP0VDwe+nYkP3yh7yEFmRIGYRkT5Zs
QL0V8x/lhiZF2tncQXDsj8AIlLc2iomDzOIMIWFB6ptKqcK8gYGk9wiKOSafrr0O
T3/Eh3Rw9g6xDA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:13:50 2025 by rpki-client