Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: RFQycT8xy0hr2nSjyoSH3Ym2zOEomqh2za44qFpKXPo=
Subject key identifier: 46:25:1E:72:C3:A4:17:9C:3E:1A:28:2F:75:B8:08:39:11:C0:36:F7
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 019749D6001C5FCEB739DDA67C44BB683095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:50 +0000
Manifest this update: Sat 07 Jun 2025 10:00:50 +0000
Manifest next update: Sun 08 Jun 2025 10:00:50 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: Augl2v1ArW1l4PVGD/oINuxQVGi4612dCstWyl4DhOk=)
2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=)
3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:00:1c:5f:ce:b7:39:dd:a6:7c:44:bb:68:30:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Jun 7 10:00:50 2025 GMT
Not After : Jun 8 10:00:50 2025 GMT
Subject: CN=46251e72c3a4179c3e1a282f75b8083911c036f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:41:4a:90:d1:97:58:68:03:db:2f:70:6d:
7b:3f:3b:a2:11:20:58:d2:85:47:f4:26:36:49:b6:
a3:ce:dd:0a:97:6e:c3:9d:3d:28:4c:97:2b:23:5e:
40:94:0b:8a:bf:65:f5:c3:2d:c9:4d:9c:94:2a:b0:
3d:56:c8:9a:6a:6d:80:43:d1:65:85:8b:db:e3:ed:
d9:08:60:8e:ca:3e:cd:d3:de:a7:20:c8:fe:f5:45:
e9:b1:3a:67:2b:a6:67:6b:a3:d6:1d:6a:65:dd:09:
ba:4e:85:fd:db:5f:6d:9c:2d:42:36:55:a3:57:16:
e8:eb:1e:4b:91:08:40:bd:ad:f1:8a:68:56:4e:60:
6b:43:11:2f:ac:67:fd:7b:38:32:0d:25:ed:92:f5:
a9:22:bd:e4:b6:e6:53:23:41:e0:2d:16:da:a5:ca:
2f:3d:ab:89:37:03:77:b5:14:2b:28:21:bc:d8:f1:
9b:17:4a:f0:07:a3:a5:53:cd:ca:f8:af:a1:ba:05:
f5:4a:9c:96:e3:9e:15:7e:65:98:e4:ad:62:b5:54:
5d:4e:e9:c2:df:df:8b:9e:f7:b4:56:fe:02:35:01:
4a:5e:f6:8c:af:aa:9e:57:b2:5b:60:f1:60:25:6b:
b7:b1:42:07:cf:21:07:5a:46:90:7d:59:81:c3:71:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:25:1E:72:C3:A4:17:9C:3E:1A:28:2F:75:B8:08:39:11:C0:36:F7
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ee:c6:77:37:9d:94:e5:51:99:f9:78:da:2b:c4:59:e8:e7:
10:69:0f:f7:2b:90:31:d2:21:e1:3d:a5:f9:2a:18:ce:cd:5a:
77:be:99:85:a5:9f:aa:c7:e5:a3:04:de:c0:09:65:86:7d:f3:
b5:b8:4d:88:e6:9e:0c:3a:c9:e5:36:d3:9b:9c:6f:92:66:39:
77:db:5b:c3:58:ad:f8:f8:25:0c:af:d7:61:77:e7:28:65:31:
c9:48:2d:6d:10:39:1c:d9:71:cd:00:19:da:86:da:58:a0:7a:
f4:a3:07:5b:2b:95:92:88:b0:dd:6a:bb:dd:4b:51:32:6a:7b:
41:e4:f7:33:4e:0e:a4:00:a8:8b:20:52:83:4d:14:ca:0c:c6:
9f:a7:5a:80:d6:61:dc:83:86:6f:8c:ec:6c:92:1b:10:bc:bf:
c3:79:2e:e1:75:06:cf:f9:aa:5d:5b:ec:8d:23:ab:8c:1d:ca:
af:bb:b3:88:41:64:1d:fe:85:b5:75:a9:e6:94:3f:35:6b:4f:
cb:79:ea:06:f4:91:82:8b:1d:c1:e0:71:a9:ce:01:41:0b:46:
97:45:84:79:de:8b:b8:72:30:4d:cb:c0:fb:fb:60:b0:f1:da:
f8:c6:6c:4a:5d:f0:ab:d7:2b:97:d3:1d:3f:25:25:12:8a:c5:
57:7a:23:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1gAcX863Od2mfES7aDCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkMTY5NzdlZWUyZjU4YmViMWJiN2FhMmY0YjJmYTFh
YmZjNDgwHhcNMjUwNjA3MTAwMDUwWhcNMjUwNjA4MTAwMDUwWjAzMTEwLwYDVQQD
Eyg0NjI1MWU3MmMzYTQxNzljM2UxYTI4MmY3NWI4MDgzOTExYzAzNmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9JBSpDRl1hoA9svcG17PzuiESBY
0oVH9CY2Sbajzt0Kl27DnT0oTJcrI15AlAuKv2X1wy3JTZyUKrA9Vsiaam2AQ9Fl
hYvb4+3ZCGCOyj7N096nIMj+9UXpsTpnK6Zna6PWHWpl3Qm6ToX9219tnC1CNlWj
Vxbo6x5LkQhAva3ximhWTmBrQxEvrGf9ezgyDSXtkvWpIr3ktuZTI0HgLRbapcov
PauJNwN3tRQrKCG82PGbF0rwB6OlU83K+K+hugX1SpyW454VfmWY5K1itVRdTunC
39+Lnve0Vv4CNQFKXvaMr6qeV7JbYPFgJWu3sUIHzyEHWkaQfVmBw3GdCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYlHnLDpBecPhooL3W4CDkRwDb3MB8GA1UdIwQY
MBaAFAMk0Wl37uL1i+sbt6ovSy+hq/xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMt
YzI1ZDdmY2EwMDM3LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMtYzI1ZDdmY2EwMDM3
LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHu7Gdzed
lOVRmfl42ivEWejnEGkP9yuQMdIh4T2l+SoYzs1ad76ZhaWfqsflowTewAllhn3z
tbhNiOaeDDrJ5TbTm5xvkmY5d9tbw1it+PglDK/XYXfnKGUxyUgtbRA5HNlxzQAZ
2obaWKB69KMHWyuVkoiw3Wq73UtRMmp7QeT3M04OpACoiyBSg00UygzGn6dagNZh
3IOGb4zsbJIbELy/w3ku4XUGz/mqXVvsjSOrjB3Kr7uziEFkHf6FtXWp5pQ/NWtP
y3nqBvSRgosdweBxqc4BQQtGl0WEed6LuHIwTcvA+/tgsPHa+MZsSl3wq9crl9Md
PyUlEorFV3ojfA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:20:52 2025 by rpki-client