
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier: tXCQDnP3+Poc1LD+RT7qHwtN2jGzOfon6/OBQWSDz9M=
Subject key identifier: 34:D0:BF:16:2E:97:8A:0A:D3:76:DA:1D:C0:9A:AD:24:0C:9A:BA:A6
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 0197477A112E053D629312D3FAADB1960C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number: 0269
Signing time: Fri 06 Jun 2025 23:01:11 +0000
Manifest this update: Fri 06 Jun 2025 23:01:11 +0000
Manifest next update: Sat 07 Jun 2025 23:01:11 +0000
Files and hashes: 1: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (hash: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=)
2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: iSkfHkUKJWk+FT4clVSdUvN13ysnedfC7PvRpGjnd1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:11:2e:05:3d:62:93:12:d3:fa:ad:b1:96:0c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Jun 6 23:01:11 2025 GMT
Not After : Jun 7 23:01:11 2025 GMT
Subject: CN=34d0bf162e978a0ad376da1dc09aad240c9abaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:bb:67:2d:77:e3:81:c9:d9:88:fb:47:74:
a9:a0:7b:e7:e3:70:b2:70:bc:cb:6e:8b:93:f9:de:
de:b3:d9:e2:6b:39:e2:ec:ea:a4:4e:ab:d6:f8:50:
b8:59:e2:ee:89:73:50:20:b8:73:3d:22:6d:9c:18:
44:9f:ec:3d:7a:46:39:44:af:ad:10:6c:93:62:50:
a1:64:ea:c4:4b:d7:70:1a:1d:f3:25:4a:52:8f:80:
a9:d5:19:da:4c:a5:1d:9f:e2:99:2e:e3:48:21:3d:
a7:4b:ca:f6:f6:15:44:ce:0e:60:e1:e8:3b:4b:94:
e7:b4:8e:e9:c1:9c:c1:37:e4:7a:02:ba:ce:b3:b5:
a9:ee:cb:d0:8f:03:08:9c:48:d5:40:77:cf:c7:ea:
88:70:d2:9d:72:91:11:86:ce:36:5a:2f:05:53:5a:
d0:17:30:89:4c:60:4a:be:eb:ab:60:55:d2:d9:fd:
3d:14:bd:1a:74:8a:5f:53:ba:4d:0e:57:83:e9:fb:
da:3d:ac:4e:54:fc:e3:b1:78:0e:fc:9c:9f:2e:52:
6e:34:31:16:f3:41:ce:30:5e:20:d2:b9:d5:8d:b9:
3a:9b:15:f3:6b:3d:fa:92:8d:3b:2b:cf:4a:51:7a:
27:f5:e0:24:b0:3d:16:64:49:73:2b:c6:e7:22:78:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D0:BF:16:2E:97:8A:0A:D3:76:DA:1D:C0:9A:AD:24:0C:9A:BA:A6
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9a:88:aa:3e:8a:ea:66:77:ce:87:11:cf:fc:22:fe:36:81:
28:80:a8:46:e4:b3:d2:d6:b2:fd:b9:de:b9:d4:d0:63:aa:12:
00:3a:ed:92:90:f8:7b:ba:ed:b3:63:94:ea:1c:1b:46:56:c8:
fc:54:9d:61:5f:7d:ef:7e:fe:31:c6:e8:06:e6:35:5e:e3:ae:
8f:41:0f:88:20:31:25:16:5f:6f:fe:be:da:8d:1a:81:79:78:
64:3f:58:47:54:0f:31:0e:f2:6c:37:df:9d:e6:3a:b6:e4:f5:
65:25:48:dc:12:2e:7c:62:fe:9c:0b:53:96:a2:f7:91:a0:70:
cc:20:63:f4:a0:c8:24:15:97:44:05:72:3a:b4:de:97:18:54:
86:39:f7:b3:bb:64:ee:46:6c:25:d3:2d:f0:ba:bd:31:fb:e8:
68:67:11:a2:02:1b:46:c5:80:de:6f:51:28:cd:73:e2:63:d7:
6a:fb:93:5c:19:59:44:cc:d6:dc:b2:42:16:3b:a4:4d:7d:50:
80:fd:05:6c:e8:8f:55:94:e9:99:dd:66:f9:c0:94:ee:e7:ed:
89:e6:83:79:4d:28:5b:ab:80:fb:ed:e1:7e:be:b4:6a:2c:eb:
e5:f5:6c:fc:31:e9:bf:61:ad:f0:7e:8a:0a:0a:45:df:d1:e9:
52:d9:ee:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHehEuBT1ikxLT+q2xlgxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDhkYTEzOWI1NmY5OThiZTI0NjY1ZGIxNGFkMWUxNTY3
NjhmYzMwHhcNMjUwNjA2MjMwMTExWhcNMjUwNjA3MjMwMTExWjAzMTEwLwYDVQQD
EygzNGQwYmYxNjJlOTc4YTBhZDM3NmRhMWRjMDlhYWQyNDBjOWFiYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmly7Zy1344HJ2Yj7R3SpoHvn43Cy
cLzLbouT+d7es9niazni7OqkTqvW+FC4WeLuiXNQILhzPSJtnBhEn+w9ekY5RK+t
EGyTYlChZOrES9dwGh3zJUpSj4Cp1RnaTKUdn+KZLuNIIT2nS8r29hVEzg5g4eg7
S5TntI7pwZzBN+R6ArrOs7Wp7svQjwMInEjVQHfPx+qIcNKdcpERhs42Wi8FU1rQ
FzCJTGBKvuurYFXS2f09FL0adIpfU7pNDleD6fvaPaxOVPzjsXgO/JyfLlJuNDEW
80HOMF4g0rnVjbk6mxXzaz36ko07K89KUXon9eAksD0WZElzK8bnInj3AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTQvxYul4oK03baHcCarSQMmrqmMB8GA1UdIwQY
MBaAFKwI2hObVvmYviRmXbFK0eFWdo/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0Mzct
Njk5Y2Y3YjA5NTkwLzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0MzctNjk5Y2Y3YjA5NTkw
LzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJqIqj6K
6mZ3zocRz/wi/jaBKICoRuSz0tay/bneudTQY6oSADrtkpD4e7rts2OU6hwbRlbI
/FSdYV99737+McboBuY1XuOuj0EPiCAxJRZfb/6+2o0agXl4ZD9YR1QPMQ7ybDff
neY6tuT1ZSVI3BIufGL+nAtTlqL3kaBwzCBj9KDIJBWXRAVyOrTelxhUhjn3s7tk
7kZsJdMt8Lq9MfvoaGcRogIbRsWA3m9RKM1z4mPXavuTXBlZRMzW3LJCFjukTX1Q
gP0FbOiPVZTpmd1m+cCU7uftieaDeU0oW6uA++3hfr60aizr5fVs/DHpv2Gt8H6K
CgpF39HpUtnuWA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:40 2025 by rpki-client