Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: 5q45UfLIEv5Z1LN7pLe9JyShVScpjJM17uBEt2K2rQ4=
Subject key identifier: E3:C2:A4:AE:00:21:F6:40:A3:7B:62:1E:9F:D1:A6:5F:FC:1A:09:6C
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 01974A0CA157EF8BD372547397AB51EA53CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 11:00:31 +0000
Manifest this update: Sat 07 Jun 2025 11:00:31 +0000
Manifest next update: Sun 08 Jun 2025 11:00:31 +0000
Files and hashes: 1: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (hash: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=)
2: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: pRgwqf+jHZ2bxbjaeyc/E5FZU80naxg3y4fgI+RXXhI=)
3: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (hash: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=)
4: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (hash: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:a1:57:ef:8b:d3:72:54:73:97:ab:51:ea:53:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Jun 7 11:00:31 2025 GMT
Not After : Jun 8 11:00:31 2025 GMT
Subject: CN=e3c2a4ae0021f640a37b621e9fd1a65ffc1a096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:17:b3:51:e7:a5:17:39:d3:69:bd:ad:9b:
92:eb:26:00:a1:f2:82:72:32:6a:d8:d4:c2:b9:82:
a5:38:99:9e:fa:75:83:ae:de:06:c7:ae:7e:c7:f8:
e2:be:21:53:17:a8:ac:db:fd:08:98:e4:ab:17:f0:
b3:a4:72:ed:5d:79:37:77:3f:53:c8:85:6a:83:6d:
e0:71:47:aa:a5:50:3c:c0:f5:6a:4d:9e:0d:13:dc:
83:ab:d9:89:c9:ed:f6:5a:1e:85:fd:ac:31:d7:7a:
e2:bd:25:70:84:49:b6:6e:be:10:61:a5:60:b3:ba:
fe:26:e2:23:b9:79:da:16:41:b7:00:d6:02:a4:84:
77:cf:7e:e7:7d:37:e4:34:34:55:2e:c9:b1:a0:e8:
5d:7b:21:37:d4:19:48:5b:f5:0b:a1:b8:7c:71:ef:
e1:16:9b:cf:3c:94:08:8f:13:22:cd:71:0c:36:c1:
2b:85:41:fa:51:b1:a7:e4:55:6b:a0:b4:1d:0b:8c:
44:6d:59:32:c7:86:48:73:c4:37:b4:7d:94:19:55:
d8:d4:37:12:2d:19:f4:1e:59:c5:83:ec:3a:fc:62:
67:80:bd:ea:6a:42:95:48:ca:0c:84:2a:c8:15:7c:
e2:9b:15:ca:f0:4e:bc:e3:0e:e3:30:1e:ed:60:10:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:A4:AE:00:21:F6:40:A3:7B:62:1E:9F:D1:A6:5F:FC:1A:09:6C
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:09:bf:c7:57:ff:f5:68:d2:79:f3:54:b5:42:f7:ee:ac:e2:
3a:d1:7a:d4:a0:1e:2e:c6:af:be:0b:af:88:ee:d6:b6:5d:42:
5d:24:57:8a:9e:90:ab:bc:d0:65:8c:92:13:bc:df:23:3c:49:
b2:f2:d3:38:e2:a8:d1:e5:a2:ef:c1:d2:a3:1a:a6:72:8a:6f:
90:78:09:cb:8e:75:24:9a:0d:9f:0d:b2:0f:96:d7:65:86:88:
9a:43:5d:29:12:3e:e4:10:ce:ea:ff:e0:73:f3:76:9a:70:ed:
b5:d2:45:2b:32:c7:fe:48:5f:d6:78:a6:28:44:72:31:7b:2e:
e1:8a:08:c5:20:89:b8:fb:67:cf:47:5d:dc:86:09:4f:01:3d:
73:11:94:4c:c9:14:0e:25:03:f3:bb:75:49:72:89:60:d4:9e:
51:30:00:96:77:05:3b:ca:01:7c:bb:2e:b2:75:f2:e3:58:e1:
52:c3:d6:e1:a2:61:af:41:ff:ac:5f:bb:e6:e0:84:31:14:71:
56:1f:2a:7e:54:b0:60:c3:73:9f:66:01:aa:48:80:3f:d9:07:
7d:b8:ac:0b:c2:1d:8b:7d:a9:09:e3:73:36:12:c6:ce:12:36:
5d:6c:a2:76:90:16:dc:74:f1:43:95:98:41:14:2d:40:98:e7:
3f:5c:86:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDKFX74vTclRzl6tR6lPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzM5NDAyYzQyYjNmODQ5OTVjNGQ1OGVmNjcwZThkMTZj
MmFmZTIwHhcNMjUwNjA3MTEwMDMxWhcNMjUwNjA4MTEwMDMxWjAzMTEwLwYDVQQD
EyhlM2MyYTRhZTAwMjFmNjQwYTM3YjYyMWU5ZmQxYTY1ZmZjMWEwOTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjYXs1HnpRc502m9rZuS6yYAofKC
cjJq2NTCuYKlOJme+nWDrt4Gx65+x/jiviFTF6is2/0ImOSrF/CzpHLtXXk3dz9T
yIVqg23gcUeqpVA8wPVqTZ4NE9yDq9mJye32Wh6F/awx13rivSVwhEm2br4QYaVg
s7r+JuIjuXnaFkG3ANYCpIR3z37nfTfkNDRVLsmxoOhdeyE31BlIW/ULobh8ce/h
FpvPPJQIjxMizXEMNsErhUH6UbGn5FVroLQdC4xEbVkyx4ZIc8Q3tH2UGVXY1DcS
LRn0HlnFg+w6/GJngL3qakKVSMoMhCrIFXzimxXK8E684w7jMB7tYBD7VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPCpK4AIfZAo3tiHp/Rpl/8GglsMB8GA1UdIwQY
MBaAFAIzlALEKz+EmVxNWO9nDo0Wwq/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2It
ZmM2NGJmYzNkMmY5LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2ItZmM2NGJmYzNkMmY5
LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAm/x1f/
9WjSefNUtUL37qziOtF61KAeLsavvguviO7Wtl1CXSRXip6Qq7zQZYySE7zfIzxJ
svLTOOKo0eWi78HSoxqmcopvkHgJy451JJoNnw2yD5bXZYaImkNdKRI+5BDO6v/g
c/N2mnDttdJFKzLH/khf1nimKERyMXsu4YoIxSCJuPtnz0dd3IYJTwE9cxGUTMkU
DiUD87t1SXKJYNSeUTAAlncFO8oBfLsusnXy41jhUsPW4aJhr0H/rF+75uCEMRRx
Vh8qflSwYMNzn2YBqkiAP9kHfbisC8Idi32pCeNzNhLGzhI2XWyidpAW3HTxQ5WY
QRQtQJjnP1yGqQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:48 2025 by rpki-client