Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: sZrz3S0wyOYh+aJ8rxwyUw98SBoxEmBorSR9+SyUMBw=
Subject key identifier: 7C:01:A1:F8:AD:42:8E:7B:7F:26:CC:9A:8A:9D:A9:E6:FF:0A:9E:CE
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 01976471A23C29026EE89791CA2293E89BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 14:00:58 +0000
Manifest this update: Thu 12 Jun 2025 14:00:58 +0000
Manifest next update: Fri 13 Jun 2025 14:00:58 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: dQ75Im819mtkkTeLU2YWYGP3I/aaBU5X3fztLlkxkpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:a2:3c:29:02:6e:e8:97:91:ca:22:93:e8:9b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jun 12 14:00:58 2025 GMT
Not After : Jun 13 14:00:58 2025 GMT
Subject: CN=7c01a1f8ad428e7b7f26cc9a8a9da9e6ff0a9ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:7f:a6:20:4e:f7:57:d1:a3:46:53:85:38:
30:a2:7d:1c:78:8a:2a:a2:11:3a:09:c6:40:45:a7:
87:91:f2:42:44:bf:64:01:16:05:05:4a:be:9e:bc:
42:75:46:fe:5c:51:fc:f0:bf:a6:2e:a3:7b:52:37:
e0:96:7c:ec:8f:3a:59:93:6f:ec:38:32:b7:d2:8e:
a8:be:90:43:0d:58:57:aa:d9:d2:ea:7c:b5:7f:b7:
10:e5:86:03:2a:fc:b2:c1:e2:64:2f:5b:72:81:66:
93:87:6f:ef:e2:33:4b:d1:26:c8:c5:62:35:b3:4b:
b9:cf:f7:94:8d:29:9c:b9:05:a4:b8:74:8d:e8:b4:
64:3c:9f:44:45:ae:c8:dd:a7:c3:75:61:47:e5:ca:
5a:f1:f2:2c:3a:71:97:25:37:5e:bd:a5:9f:e4:78:
fe:2b:a7:30:79:8c:64:e0:c8:86:79:de:30:8e:27:
fc:88:88:3b:6f:69:82:66:8a:04:2a:df:9f:fe:02:
8a:79:81:05:d2:49:db:b2:c3:0e:23:75:bf:6a:42:
8a:4c:19:1a:23:b0:39:d9:00:79:33:ae:47:ed:9c:
b5:b4:bb:28:97:e8:b8:bb:cb:c5:e9:e1:a3:d5:12:
a4:1d:f1:79:c5:e3:77:b9:cc:dc:43:0a:68:f1:c3:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:01:A1:F8:AD:42:8E:7B:7F:26:CC:9A:8A:9D:A9:E6:FF:0A:9E:CE
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:60:89:0b:47:80:ba:78:a3:e8:8c:b3:13:fa:68:1f:b8:48:
28:e8:8d:5c:fd:14:94:4b:d4:db:5d:de:3a:e1:b1:82:e4:8f:
97:96:87:f5:85:ac:30:cb:f2:69:c4:cf:00:af:97:11:93:79:
8b:44:17:c8:e4:9f:78:eb:85:cc:58:80:24:2d:32:3a:0a:52:
7f:62:db:7b:af:da:ae:a8:24:85:ab:6e:52:2e:34:20:d5:8e:
54:5f:d4:e0:10:a9:9c:2b:fb:d3:c0:45:e0:88:76:48:22:7f:
ae:7c:69:e0:63:43:1b:cd:83:8a:0d:5a:97:f9:16:de:f6:52:
5a:99:1f:c5:2f:e2:68:f2:12:07:af:3d:b6:d0:d4:fb:c8:c5:
84:46:b9:6b:86:ee:6b:6c:a1:60:70:3c:2d:b0:12:25:34:b4:
ce:65:e7:d3:0c:79:89:ae:94:c6:e2:c3:d8:e4:19:a4:30:6d:
a9:0e:b0:ca:b0:76:cb:40:8d:b8:68:56:d7:ae:9c:b7:98:7d:
6f:05:e3:76:ae:1f:81:ef:03:27:22:26:fb:32:f2:b1:3d:b0:
9a:99:d9:d2:b6:f5:63:5b:40:91:ba:31:d1:a9:96:cb:91:72:
4d:81:78:65:cd:d5:61:f3:ce:54:43:87:08:d8:46:9e:c2:dc:
d2:6d:f9:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkcaI8KQJu6JeRyiKT6JuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzIxNTYwYjEyMjE5Y2Y4ZWFiNTVmNzRkOThmMmU5YWVk
NTE3NDYwHhcNMjUwNjEyMTQwMDU4WhcNMjUwNjEzMTQwMDU4WjAzMTEwLwYDVQQD
Eyg3YzAxYTFmOGFkNDI4ZTdiN2YyNmNjOWE4YTlkYTllNmZmMGE5ZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxd/piBO91fRo0ZThTgwon0ceIoq
ohE6CcZARaeHkfJCRL9kARYFBUq+nrxCdUb+XFH88L+mLqN7UjfglnzsjzpZk2/s
ODK30o6ovpBDDVhXqtnS6ny1f7cQ5YYDKvyyweJkL1tygWaTh2/v4jNL0SbIxWI1
s0u5z/eUjSmcuQWkuHSN6LRkPJ9ERa7I3afDdWFH5cpa8fIsOnGXJTdevaWf5Hj+
K6cweYxk4MiGed4wjif8iIg7b2mCZooEKt+f/gKKeYEF0knbssMOI3W/akKKTBka
I7A52QB5M65H7Zy1tLsol+i4u8vF6eGj1RKkHfF5xeN3uczcQwpo8cO94wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwBofitQo57fybMmoqdqeb/Cp7OMB8GA1UdIwQY
MBaAFGjCFWCxIhnPjqtV902Y8umu1RdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0Yjkt
YWMxZWRiYjQ3N2MwLzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0YjktYWMxZWRiYjQ3N2Mw
LzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGCJC0eA
unij6IyzE/poH7hIKOiNXP0UlEvU213eOuGxguSPl5aH9YWsMMvyacTPAK+XEZN5
i0QXyOSfeOuFzFiAJC0yOgpSf2Lbe6/arqgkhatuUi40INWOVF/U4BCpnCv708BF
4Ih2SCJ/rnxp4GNDG82Dig1al/kW3vZSWpkfxS/iaPISB689ttDU+8jFhEa5a4bu
a2yhYHA8LbASJTS0zmXn0wx5ia6UxuLD2OQZpDBtqQ6wyrB2y0CNuGhW166ct5h9
bwXjdq4fge8DJyIm+zLysT2wmpnZ0rb1Y1tAkbox0amWy5FyTYF4Zc3VYfPOVEOH
CNhGnsLc0m35WQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 20:17:14 2025 by rpki-client