Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
File: AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft (raw, json)
Hash identifier: opOKOJHkYh0EKB/UhgYXR5wJGgnBOHVrFcOe2LvU9uo=
Subject key identifier: 2E:E4:D5:1D:85:49:F4:43:DD:29:42:AD:2C:D3:42:E8:87:D0:E8:9F
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Certificate issuer: /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial: 019749317235D8E96B1788C1AA8CBAD9719D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
Manifest number: 0E3E
Signing time: Sat 07 Jun 2025 07:01:06 +0000
Manifest this update: Sat 07 Jun 2025 07:01:06 +0000
Manifest next update: Sun 08 Jun 2025 07:01:06 +0000
Files and hashes: 1: AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl (hash: 1UzoSaAT2/esuGm0XRKRDux6/4wTLc016OCAMyBqV/Q=)
2: D6FQ_AOx7VEUAwBlUYJ5Pt1jupM.roa (hash: 4lHXyj3pRBx2LFAwlRyUS6mFr8ntH6TaBTAezCtdNUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:72:35:d8:e9:6b:17:88:c1:aa:8c:ba:d9:71:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Validity
Not Before: Jun 7 07:01:06 2025 GMT
Not After : Jun 8 07:01:06 2025 GMT
Subject: CN=2ee4d51d8549f443dd2942ad2cd342e887d0e89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:65:ce:87:3e:5d:dc:13:53:70:5e:13:b7:
1e:b6:36:66:5d:1a:77:72:60:f9:92:1e:e3:40:43:
51:26:30:86:0a:bf:a5:be:b1:e0:0b:ec:17:bd:a4:
8e:78:e1:5b:ec:39:dc:28:dc:7e:cf:41:a2:c9:46:
7e:13:3a:9d:2f:1e:71:23:f3:74:e0:c9:e2:ca:7e:
b3:76:8b:3b:89:37:8a:9c:4f:d1:d6:36:eb:c6:a6:
c3:c2:dd:d9:50:00:3c:38:8d:ee:fa:a2:f4:6b:49:
88:91:81:8e:90:a8:30:d0:42:b9:70:56:72:14:b3:
62:a5:a7:d5:05:4a:f1:2f:5b:b5:a3:71:1d:da:aa:
12:2c:13:84:3a:9b:c4:6a:d8:33:4c:44:a3:f0:96:
3e:53:0b:8e:82:63:7f:4d:52:0a:28:19:b4:2c:61:
e0:5d:57:0c:73:4d:a4:5f:63:e3:bd:55:58:1b:e8:
a3:f6:68:03:29:8f:16:c1:ee:a9:eb:b0:95:79:5f:
03:37:9b:32:18:65:b0:a5:b5:5c:1a:83:e6:91:b6:
45:72:ba:35:4f:6a:ea:7e:c4:3c:49:dd:c2:e1:e8:
64:78:d5:51:8f:55:97:8d:d6:f4:a5:50:11:6d:bf:
53:71:e3:1e:c4:ea:df:3c:db:97:f1:bc:3e:de:bd:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E4:D5:1D:85:49:F4:43:DD:29:42:AD:2C:D3:42:E8:87:D0:E8:9F
X509v3 Authority Key Identifier:
keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7f:a6:4e:53:94:61:08:cf:0c:1a:46:bd:8a:f4:5a:c4:7e:
4f:a2:0d:2f:6e:51:d3:aa:cf:6c:c9:85:8f:15:95:13:d8:02:
b7:b2:56:f1:3b:01:08:db:a6:5a:ff:8a:28:cb:5f:df:a3:2b:
fd:32:5f:83:2b:73:19:6c:4f:fa:63:bd:3a:86:03:fd:6a:8e:
5e:ce:ed:be:61:ae:09:97:50:ee:71:4c:99:ec:1a:95:5b:33:
5c:e7:d3:91:b2:7e:6a:69:fb:ed:cd:78:bb:55:b6:04:eb:72:
dc:9f:eb:6f:e3:99:43:8f:b2:4d:50:c2:1c:23:1d:c1:85:62:
2d:e5:9d:70:53:df:08:f2:e2:63:3e:a9:c9:88:1a:2b:d8:7a:
4e:e8:16:48:b6:d2:9d:09:c7:7d:ae:c0:80:4c:a8:1d:f2:8c:
12:8b:ce:13:dd:58:e4:dc:d3:d5:e5:1b:8e:14:4c:a9:d4:2a:
27:4b:cd:9b:4a:ed:bd:4d:34:84:79:6f:1b:fd:6d:00:06:0c:
82:90:e2:20:a2:d8:7d:55:ff:b0:59:05:2d:15:7d:a9:ea:3e:
ef:02:10:a7:ff:a5:e1:f2:22:62:ab:3a:ae:e6:3b:38:d5:8c:
27:b6:5a:03:f3:94:e1:c4:39:01:6e:16:16:7d:e5:c5:83:b6:
8d:91:2b:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMXI12OlrF4jBqoy62XGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDg1ODk0OTZiZjg2ZDJkMGY4ODc0Yjc2Y2FjODQzMDI1
YmNkM2IwHhcNMjUwNjA3MDcwMTA2WhcNMjUwNjA4MDcwMTA2WjAzMTEwLwYDVQQD
EygyZWU0ZDUxZDg1NDlmNDQzZGQyOTQyYWQyY2QzNDJlODg3ZDBlODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa1lzoc+XdwTU3BeE7cetjZmXRp3
cmD5kh7jQENRJjCGCr+lvrHgC+wXvaSOeOFb7DncKNx+z0GiyUZ+EzqdLx5xI/N0
4Mniyn6zdos7iTeKnE/R1jbrxqbDwt3ZUAA8OI3u+qL0a0mIkYGOkKgw0EK5cFZy
FLNipafVBUrxL1u1o3Ed2qoSLBOEOpvEatgzTESj8JY+UwuOgmN/TVIKKBm0LGHg
XVcMc02kX2PjvVVYG+ij9mgDKY8Wwe6p67CVeV8DN5syGGWwpbVcGoPmkbZFcro1
T2rqfsQ8Sd3C4ehkeNVRj1WXjdb0pVARbb9TceMexOrfPNuX8bw+3r3c2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7k1R2FSfRD3SlCrSzTQuiH0OifMB8GA1UdIwQY
MBaAFAAIWJSWv4bS0PiHS3bKyEMCW807MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFoWWxKYV9odExRLUlkTGRzcklRd0pielRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kMWMwNmEtZGZhNS00Yzc4LTk4MGEt
NmJlMmY0ZDI0Yzk2LzEvQUFoWWxKYV9odExRLUlkTGRzcklRd0pielRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kMWMwNmEtZGZhNS00Yzc4LTk4MGEtNmJlMmY0ZDI0Yzk2
LzEvQUFoWWxKYV9odExRLUlkTGRzcklRd0pielRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3+mTlOU
YQjPDBpGvYr0WsR+T6INL25R06rPbMmFjxWVE9gCt7JW8TsBCNumWv+KKMtf36Mr
/TJfgytzGWxP+mO9OoYD/WqOXs7tvmGuCZdQ7nFMmewalVszXOfTkbJ+amn77c14
u1W2BOty3J/rb+OZQ4+yTVDCHCMdwYViLeWdcFPfCPLiYz6pyYgaK9h6TugWSLbS
nQnHfa7AgEyoHfKMEovOE91Y5NzT1eUbjhRMqdQqJ0vNm0rtvU00hHlvG/1tAAYM
gpDiIKLYfVX/sFkFLRV9qeo+7wIQp/+l4fIiYqs6ruY7ONWMJ7ZaA/OU4cQ5AW4W
Fn3lxYO2jZErMg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:41:49 2025 by rpki-client