Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: tOLPx9gq9HiS6WOGVokjmStdZFhGgY/4xwYQz2BBi4E=
Subject key identifier: 03:DA:A9:FA:48:7D:52:8E:30:17:42:41:44:14:8E:77:74:6B:A0:03
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 019921E7D6BDBE9F00EA283591E678957C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: BA
Signing time: Sun 07 Sep 2025 02:01:05 +0000
Manifest this update: Sun 07 Sep 2025 02:01:05 +0000
Manifest next update: Mon 08 Sep 2025 02:01:05 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: fle6Vu6/sqLxv4ooTePDUwpVg1hCjvLLftGsx8dcyQE=)
2: hNq3yGnPCHaydptWbrbgby3w7SM.roa (hash: TF/bJmN5adtoEqSxW4KjZfMJbH3NebJd9z02MI+Ip68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d6:bd:be:9f:00:ea:28:35:91:e6:78:95:7c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Sep 7 02:01:05 2025 GMT
Not After : Sep 8 02:01:05 2025 GMT
Subject: CN=03daa9fa487d528e3017424144148e77746ba003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:c5:eb:76:83:82:96:59:f0:cb:0a:49:5f:
c4:d5:1d:29:f7:0c:b9:82:90:81:4e:d3:17:fb:d4:
8c:7e:1a:b3:a2:83:1a:b2:6d:30:68:48:a2:9f:20:
46:37:16:b8:34:0d:2b:d9:d9:54:9e:19:c2:f3:47:
3b:0e:e3:93:24:63:d4:9a:b1:19:b0:ea:0b:ad:4c:
88:2d:38:e4:2f:15:7a:fe:43:89:2c:e6:be:18:fc:
11:9c:43:60:8d:be:de:e0:22:17:3f:83:2b:75:ac:
3e:57:cb:9e:97:31:89:1e:c1:25:70:2d:31:b3:d7:
76:ac:5d:a5:fc:16:e1:c8:fd:bd:3b:5f:af:7f:98:
a3:aa:ab:d8:0e:29:1a:91:f4:52:ab:23:b1:06:62:
34:1b:17:92:da:e6:1c:ec:78:e6:14:02:3d:03:a3:
55:06:24:d6:37:b7:56:25:d2:4a:67:c8:18:97:fe:
66:36:87:4a:d6:0d:8a:a8:03:8b:f4:00:ed:38:f1:
73:15:e6:da:86:a8:90:a2:ca:8d:f3:43:35:02:0c:
de:18:ec:2c:60:cb:13:0c:d3:1d:40:ca:97:0d:34:
54:90:c4:2b:fc:4f:79:c7:8e:c7:67:68:7a:de:57:
5d:43:95:f5:ba:a7:5c:60:7b:88:18:c8:b0:c8:88:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DA:A9:FA:48:7D:52:8E:30:17:42:41:44:14:8E:77:74:6B:A0:03
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ea:2b:22:5d:0b:d9:ed:67:4c:d8:c9:e5:d2:05:24:13:3c:
44:3b:83:77:2f:b6:49:98:ed:3e:bf:5e:bb:85:b5:25:57:82:
7f:f9:9c:11:70:ab:5e:9c:ab:e5:a0:39:79:ce:75:cd:3a:ec:
6e:ff:44:8f:6d:b2:85:e1:1f:4d:87:6a:75:05:2a:81:61:0a:
37:67:8a:28:80:00:43:e2:b7:40:f2:e8:ca:67:5e:80:6b:0c:
47:93:76:5e:c3:74:10:17:98:2a:f2:67:e7:bb:f6:67:b9:d1:
70:01:46:46:74:25:b7:c6:37:38:14:a9:08:be:cf:6f:bd:c0:
83:05:03:af:f3:9d:d9:24:b6:50:fa:6d:9d:43:2a:e6:40:fd:
0d:0f:f4:3a:83:ad:19:de:e2:b5:91:45:2f:12:c0:21:5a:71:
94:56:ef:74:07:d5:c2:17:20:34:97:e9:bf:28:26:b1:e0:dc:
4a:36:62:92:8a:88:b5:12:97:a8:92:b5:c4:34:4c:11:89:e8:
b6:75:9e:93:62:3d:cb:a5:42:00:25:3d:aa:86:f2:1c:b8:37:
92:ef:e0:4c:c7:ce:b1:18:2e:b2:ba:fb:cf:c0:ad:42:d5:52:
d8:cc:62:0a:8c:d3:67:4d:e3:90:5f:7b:fe:d5:e3:a7:5b:e7:
b7:58:e4:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh59a9vp8A6ig1keZ4lXxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOGNjYzhkODE3OGM5ZTlkMmZmYzUzMmZjYjVjZDY4YmVh
YTc3NmQwHhcNMjUwOTA3MDIwMTA1WhcNMjUwOTA4MDIwMTA1WjAzMTEwLwYDVQQD
EygwM2RhYTlmYTQ4N2Q1MjhlMzAxNzQyNDE0NDE0OGU3Nzc0NmJhMDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ3F63aDgpZZ8MsKSV/E1R0p9wy5
gpCBTtMX+9SMfhqzooMasm0waEiinyBGNxa4NA0r2dlUnhnC80c7DuOTJGPUmrEZ
sOoLrUyILTjkLxV6/kOJLOa+GPwRnENgjb7e4CIXP4Mrdaw+V8uelzGJHsElcC0x
s9d2rF2l/BbhyP29O1+vf5ijqqvYDikakfRSqyOxBmI0GxeS2uYc7HjmFAI9A6NV
BiTWN7dWJdJKZ8gYl/5mNodK1g2KqAOL9ADtOPFzFebahqiQosqN80M1AgzeGOws
YMsTDNMdQMqXDTRUkMQr/E95x47HZ2h63lddQ5X1uqdcYHuIGMiwyIgzfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPaqfpIfVKOMBdCQUQUjnd0a6ADMB8GA1UdIwQY
MBaAFAKMzI2BeMnp0v/FMvy1zWi+qndtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lNDY5NTEtOGZhNC00NWI2LTg3YmYt
NWE0YjdiNWU0MDA3LzEvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lNDY5NTEtOGZhNC00NWI2LTg3YmYtNWE0YjdiNWU0MDA3
LzEvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+orIl0L
2e1nTNjJ5dIFJBM8RDuDdy+2SZjtPr9eu4W1JVeCf/mcEXCrXpyr5aA5ec51zTrs
bv9Ej22yheEfTYdqdQUqgWEKN2eKKIAAQ+K3QPLoymdegGsMR5N2XsN0EBeYKvJn
57v2Z7nRcAFGRnQlt8Y3OBSpCL7Pb73AgwUDr/Od2SS2UPptnUMq5kD9DQ/0OoOt
Gd7itZFFLxLAIVpxlFbvdAfVwhcgNJfpvygmseDcSjZikoqItRKXqJK1xDRMEYno
tnWek2I9y6VCACU9qobyHLg3ku/gTMfOsRgusrr7z8CtQtVS2MxiCozTZ03jkF97
/tXjp1vnt1jk8w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:01 2025 by rpki-client