Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: WNjL1actiN0Yg5gRP06g74y8Kp5u7t4ITO4TU3UTsbA=
Subject key identifier: 32:6B:C7:34:DE:C2:56:79:A1:52:28:14:94:B7:59:2A:C4:24:F3:A9
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 019921E7F166F520FEDD06BA47CEA378742E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 59
Signing time: Sun 07 Sep 2025 02:01:12 +0000
Manifest this update: Sun 07 Sep 2025 02:01:12 +0000
Manifest next update: Mon 08 Sep 2025 02:01:12 +0000
Files and hashes: 1: Ft7Frn9ocyQeuHjXMeEeGoh_tdk.roa (hash: +hbGdiT9EB+gQ7hEwq4X6SV+6RnEdb4t2Cal6rg6Zcw=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: zkRO1/pwwNkOaRUJn82REFuYQDTO36ynuJH9/Z9ArSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:f1:66:f5:20:fe:dd:06:ba:47:ce:a3:78:74:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Sep 7 02:01:12 2025 GMT
Not After : Sep 8 02:01:12 2025 GMT
Subject: CN=326bc734dec25679a152281494b7592ac424f3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:ef:ab:f5:69:be:cd:16:59:7d:c9:bb:6e:
7e:7e:eb:8f:17:dc:9e:9f:b4:32:c3:27:61:3a:a0:
3f:bf:a9:4b:0f:4f:ff:0c:b0:66:42:90:3b:ea:82:
98:de:b6:78:67:e2:41:19:36:de:63:12:c1:00:54:
62:cb:a9:90:d9:52:ed:2c:15:9c:7a:00:03:85:e7:
c6:c1:de:7a:bd:13:ec:1a:e4:23:5a:7e:eb:ed:6e:
dd:33:79:21:e3:85:4f:3c:30:b4:c7:51:f2:f7:96:
79:9c:9c:d4:7a:6e:f8:21:b3:a4:bf:32:e1:48:fc:
2a:c8:27:d1:0a:f2:ab:9c:df:00:d6:1c:3d:9a:8c:
6d:09:96:67:45:c2:eb:41:30:77:f9:25:2e:af:2c:
4d:38:0d:39:ef:6e:3b:d9:5c:19:39:0f:61:7a:2c:
6d:0a:cd:17:fa:40:5f:ce:19:05:4d:1f:11:7b:f7:
d2:12:11:78:5d:66:a7:8e:c6:82:68:3a:bd:fc:6b:
f2:67:42:e4:97:97:7f:d9:ce:ec:bd:81:01:e3:e4:
b8:b8:00:e3:46:0b:f8:52:ff:10:60:00:6a:8c:06:
44:a6:4a:34:1c:4e:78:5a:06:83:50:93:f2:1f:e4:
98:84:02:4d:6f:b4:22:50:87:34:c5:ae:f5:91:60:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6B:C7:34:DE:C2:56:79:A1:52:28:14:94:B7:59:2A:C4:24:F3:A9
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a3:e7:86:38:eb:9a:06:8d:ef:dc:91:ff:28:5a:8f:b8:51:
da:69:d3:9a:71:77:28:4e:54:a6:8d:74:f6:71:80:27:fc:e7:
03:16:47:0b:7c:7e:64:ec:21:b5:44:53:f8:32:13:42:42:e2:
70:82:14:87:de:f4:21:e0:5b:79:49:d8:45:0d:de:be:af:1c:
fc:fe:13:a5:51:4d:61:5c:a3:4c:57:7e:23:67:a7:53:8b:b1:
d3:53:5a:79:cf:cd:1d:6c:f8:ae:00:7e:31:c7:4c:e0:29:1c:
1d:ed:48:cd:c2:b4:bc:b5:5f:d5:7b:89:e5:e4:fd:38:79:9c:
32:55:89:54:aa:44:b1:0a:08:41:a1:00:c0:e2:89:c9:66:e7:
2a:b7:fb:c3:c7:8d:cb:b7:78:c6:63:cf:2b:06:8b:d5:a9:e1:
19:f6:aa:9f:9d:4e:76:42:1e:46:21:9b:b2:3d:91:34:e3:57:
32:df:18:83:d3:27:cd:28:84:18:a1:a3:90:a7:f6:63:6b:f3:
cc:b3:5e:d8:0e:e5:8d:78:09:7d:e8:c3:ec:44:f0:08:13:ec:
6c:f8:bb:1a:23:6e:2b:7f:71:ec:22:75:3b:e3:ca:1c:2b:37:
5a:33:e9:81:d6:65:ef:eb:f9:c7:17:73:48:a3:ef:04:b9:54:
25:80:33:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5/Fm9SD+3Qa6R86jeHQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGFlMTc1ZmJlNjNiMGU5MzA0NjkwOTdjOTQ5MmQ0MmVk
NzkyNDkwHhcNMjUwOTA3MDIwMTEyWhcNMjUwOTA4MDIwMTEyWjAzMTEwLwYDVQQD
EygzMjZiYzczNGRlYzI1Njc5YTE1MjI4MTQ5NGI3NTkyYWM0MjRmM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJrvq/Vpvs0WWX3Ju25+fuuPF9ye
n7QywydhOqA/v6lLD0//DLBmQpA76oKY3rZ4Z+JBGTbeYxLBAFRiy6mQ2VLtLBWc
egADhefGwd56vRPsGuQjWn7r7W7dM3kh44VPPDC0x1Hy95Z5nJzUem74IbOkvzLh
SPwqyCfRCvKrnN8A1hw9moxtCZZnRcLrQTB3+SUuryxNOA0572472VwZOQ9heixt
Cs0X+kBfzhkFTR8Re/fSEhF4XWanjsaCaDq9/GvyZ0Lkl5d/2c7svYEB4+S4uADj
Rgv4Uv8QYABqjAZEpko0HE54WgaDUJPyH+SYhAJNb7QiUIc0xa71kWAqKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJrxzTewlZ5oVIoFJS3WSrEJPOpMB8GA1UdIwQY
MBaAFGkK4XX75jsOkwRpCXyUktQu15JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iODg0YzAtNGQwNS00NDAxLTk4NTgt
OGEwODZlYTk0YmU1LzEvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iODg0YzAtNGQwNS00NDAxLTk4NTgtOGEwODZlYTk0YmU1
LzEvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKPnhjjr
mgaN79yR/yhaj7hR2mnTmnF3KE5Upo109nGAJ/znAxZHC3x+ZOwhtURT+DITQkLi
cIIUh970IeBbeUnYRQ3evq8c/P4TpVFNYVyjTFd+I2enU4ux01Naec/NHWz4rgB+
McdM4CkcHe1IzcK0vLVf1XuJ5eT9OHmcMlWJVKpEsQoIQaEAwOKJyWbnKrf7w8eN
y7d4xmPPKwaL1anhGfaqn51OdkIeRiGbsj2RNONXMt8Yg9MnzSiEGKGjkKf2Y2vz
zLNe2A7ljXgJfejD7ETwCBPsbPi7GiNuK39x7CJ1O+PKHCs3WjPpgdZl7+v5xxdz
SKPvBLlUJYAzXQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:58 2025 by rpki-client