Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: 9FDhBuLVHftFKff+l3LpfKHDv/aM/MEBS3Gs+9C5Rn0=
Subject key identifier: 6A:FA:3F:66:B1:E5:5B:BE:7F:C0:E8:0B:FC:CA:1F:EE:99:1C:02:16
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019747E7DA74EE4100355E450D5B9643EF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 11EF
Signing time: Sat 07 Jun 2025 01:01:06 +0000
Manifest this update: Sat 07 Jun 2025 01:01:06 +0000
Manifest next update: Sun 08 Jun 2025 01:01:06 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: WhNGBhGx6nDhbjboJpKc4u+0lIa6kNG/pHzZHDis+1w=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:da:74:ee:41:00:35:5e:45:0d:5b:96:43:ef:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jun 7 01:01:06 2025 GMT
Not After : Jun 8 01:01:06 2025 GMT
Subject: CN=6afa3f66b1e55bbe7fc0e80bfcca1fee991c0216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:3a:ee:cb:99:b5:19:9d:0d:49:e3:70:cb:
d2:58:67:f5:ca:79:41:81:23:f4:ae:4e:c8:d6:73:
fb:31:a0:9c:cc:d4:66:e7:92:4c:7c:20:c9:26:0c:
d9:df:12:08:20:4d:6c:27:82:02:29:bc:03:01:a8:
7d:16:23:65:73:b2:9e:df:d6:3a:31:8c:d5:c3:67:
b8:21:79:af:31:e2:0f:7d:6a:e5:2b:7c:0c:78:5a:
27:34:9b:18:36:d3:a9:fc:4e:e3:ce:e3:8f:59:e3:
c7:99:ab:40:a6:b0:5c:91:5f:e9:74:49:57:0b:e9:
e7:de:36:e9:31:0c:ad:9b:47:78:45:27:5a:d2:a5:
b6:96:7a:57:13:e2:0f:b7:a4:37:e0:9a:b5:3e:bf:
38:16:94:47:38:9d:14:cf:cf:1b:f9:cd:1f:e4:6c:
55:ff:46:0a:d4:d6:1d:63:89:aa:68:0f:ec:16:20:
58:dc:16:d5:d6:8e:bd:e1:ab:72:59:7f:72:b9:1d:
5a:12:46:11:4f:2f:a3:3c:80:69:eb:3d:fa:69:26:
48:2e:8c:9d:d7:32:4d:da:8f:ef:1e:43:7b:b0:e8:
5f:50:b1:47:38:c3:4f:94:00:4a:85:2b:ce:8a:a3:
0a:02:37:88:38:e7:2c:18:6e:a1:14:75:1c:6f:08:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FA:3F:66:B1:E5:5B:BE:7F:C0:E8:0B:FC:CA:1F:EE:99:1C:02:16
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7f:65:b6:f3:18:16:31:0f:fe:2a:39:b0:6a:97:6e:2e:81:
f3:b2:cb:12:be:79:e5:ca:af:18:6b:07:a4:af:27:43:18:d6:
b9:51:8a:8b:76:ff:0a:93:73:90:b6:10:89:7b:d8:44:a9:c2:
85:39:54:2f:8c:d4:c6:69:4c:2b:31:bc:fb:c9:25:63:39:40:
38:ac:15:58:21:c7:cb:03:37:de:20:3f:cd:3a:f5:13:93:21:
35:f7:c6:92:f2:c6:bd:76:46:69:5e:84:cb:ca:ab:b6:df:cc:
9e:44:58:01:cb:27:e9:a8:4f:bc:90:03:d7:ce:3e:ce:3b:98:
8d:38:89:72:aa:00:75:8a:99:c7:ad:0e:fb:85:04:55:b5:ab:
55:be:2e:28:13:a4:b1:f3:1e:6a:b7:f3:68:af:1d:c2:fd:fa:
4e:ec:d1:a7:32:b4:aa:06:79:f0:1f:ce:82:c7:fa:b8:2a:6d:
39:b6:84:5c:b8:18:40:25:e3:ae:cd:3e:f8:73:06:9b:c1:27:
21:76:fc:1d:c0:d1:ac:c8:ba:3d:1c:14:2a:6f:33:e1:a3:2d:
3f:ee:c7:56:d9:9e:b2:03:53:05:36:c8:94:57:d0:21:05:cd:
dd:75:8e:46:42:9c:ca:02:c9:57:60:85:ea:06:6f:d7:d2:54:
67:da:da:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH59p07kEANV5FDVuWQ+9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz
MDU1MmQwHhcNMjUwNjA3MDEwMTA2WhcNMjUwNjA4MDEwMTA2WjAzMTEwLwYDVQQD
Eyg2YWZhM2Y2NmIxZTU1YmJlN2ZjMGU4MGJmY2NhMWZlZTk5MWMwMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa467suZtRmdDUnjcMvSWGf1ynlB
gSP0rk7I1nP7MaCczNRm55JMfCDJJgzZ3xIIIE1sJ4ICKbwDAah9FiNlc7Ke39Y6
MYzVw2e4IXmvMeIPfWrlK3wMeFonNJsYNtOp/E7jzuOPWePHmatAprBckV/pdElX
C+nn3jbpMQytm0d4RSda0qW2lnpXE+IPt6Q34Jq1Pr84FpRHOJ0Uz88b+c0f5GxV
/0YK1NYdY4mqaA/sFiBY3BbV1o694atyWX9yuR1aEkYRTy+jPIBp6z36aSZILoyd
1zJN2o/vHkN7sOhfULFHOMNPlABKhSvOiqMKAjeIOOcsGG6hFHUcbwjY6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGr6P2ax5Vu+f8DoC/zKH+6ZHAIWMB8GA1UdIwQY
MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It
NjlhNDRmMDQ4ZGI4LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4
LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF39ltvMY
FjEP/io5sGqXbi6B87LLEr555cqvGGsHpK8nQxjWuVGKi3b/CpNzkLYQiXvYRKnC
hTlUL4zUxmlMKzG8+8klYzlAOKwVWCHHywM33iA/zTr1E5MhNffGkvLGvXZGaV6E
y8qrtt/MnkRYAcsn6ahPvJAD184+zjuYjTiJcqoAdYqZx60O+4UEVbWrVb4uKBOk
sfMearfzaK8dwv36TuzRpzK0qgZ58B/Ogsf6uCptObaEXLgYQCXjrs0++HMGm8En
IXb8HcDRrMi6PRwUKm8z4aMtP+7HVtmesgNTBTbIlFfQIQXN3XWORkKcygLJV2CF
6gZv19JUZ9ra4A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:16:26 2025 by rpki-client