Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier: w/PCa+JZRdKMgH6zgeUU33thgEsmNtFE7deho9Yos+A=
Subject key identifier: 54:58:01:07:8E:C9:84:2C:86:31:DD:48:CC:B6:DF:6F:74:1C:3D:4D
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 0199221EC151CDC05837FE67DF055D6751CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number: 1604
Signing time: Sun 07 Sep 2025 03:01:04 +0000
Manifest this update: Sun 07 Sep 2025 03:01:04 +0000
Manifest next update: Mon 08 Sep 2025 03:01:04 +0000
Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: 3/nsl9ba+OfVcBJ75BHynexes5pVhSdTagcOXgGJQ44=)
2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:c1:51:cd:c0:58:37:fe:67:df:05:5d:67:51:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Sep 7 03:01:04 2025 GMT
Not After : Sep 8 03:01:04 2025 GMT
Subject: CN=545801078ec9842c8631dd48ccb6df6f741c3d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:7e:9c:85:1f:55:88:72:cf:b0:0b:ae:f4:
d6:52:13:5f:cc:c2:75:5e:8a:38:d7:ac:0a:97:3e:
65:13:ae:05:f5:70:df:2e:2f:4f:1c:ea:d3:ba:96:
6d:e3:4b:41:a9:75:c1:d9:10:65:47:53:22:cb:2f:
fc:54:78:90:6a:b6:f7:81:b5:65:e2:76:5e:4a:86:
59:d9:c6:6a:ff:3e:f0:7b:d1:2b:be:e9:19:60:24:
2f:8b:58:32:f8:7c:f0:2e:d2:6d:9a:37:23:52:ea:
2b:14:32:7b:72:17:19:5d:a1:a5:6e:a1:d6:db:ba:
85:33:d0:c9:67:4a:ba:76:2c:f7:74:79:75:60:a1:
8e:ca:63:5d:dc:01:67:ad:a7:39:43:3a:05:c7:cd:
4d:0d:7f:71:68:42:74:77:42:7d:50:36:9c:06:55:
50:fd:69:c0:7e:63:8e:73:4b:27:2e:de:b1:d1:c4:
36:3e:8e:d9:18:8d:b3:de:91:1b:8d:7a:75:e6:7c:
7a:bf:4c:2f:d6:0c:a3:74:cd:89:d5:3d:fa:f7:b1:
b3:fa:5a:19:2e:4c:e2:f0:39:ee:11:3e:cf:90:d0:
fd:cc:ef:da:8b:03:95:4a:12:65:31:2d:3b:74:75:
41:0c:42:d0:c8:91:fe:15:d7:60:02:85:ea:36:65:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:01:07:8E:C9:84:2C:86:31:DD:48:CC:B6:DF:6F:74:1C:3D:4D
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:04:b0:4d:fe:5d:57:7a:fc:3e:c0:3a:3e:d0:61:57:f6:ce:
74:0e:97:94:1a:36:9a:b4:92:21:2b:50:6a:89:f3:1c:92:51:
da:a4:85:d4:54:f1:f4:57:56:7e:26:39:2b:05:0d:42:f6:88:
6b:a1:d6:72:51:94:3c:fb:2b:f4:c9:13:74:1d:a2:ed:c8:af:
c9:b9:d5:a0:15:b5:4d:33:6a:f3:9d:91:2f:68:cb:0e:b4:81:
5c:1e:c3:a6:b3:00:16:ca:53:98:b1:e8:a6:b4:86:60:1e:51:
38:c3:d0:6b:29:c8:4d:a3:41:0c:f7:e3:41:8c:b0:e9:c5:b9:
19:af:70:26:34:6d:18:4a:4b:ae:a5:bc:a3:7f:c5:a2:f7:b0:
5a:46:db:1e:cf:22:dc:9f:2d:1a:e5:55:84:53:10:da:ca:91:
15:2a:76:31:4f:29:3e:5a:e1:66:7f:f8:19:04:62:61:df:75:
f0:01:5f:4c:56:1d:f1:28:a2:68:01:65:ff:88:53:e8:09:03:
5d:98:e0:4b:06:e1:13:c7:e4:2f:1a:0b:d2:32:c0:34:0f:f0:
fa:33:2d:e9:34:a7:01:66:a2:62:74:41:42:67:90:e4:da:62:
2e:44:5d:35:47:b9:dd:87:ee:44:6f:4e:38:89:6f:3b:2a:f9:
5b:bf:a5:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHsFRzcBYN/5n3wVdZ1HPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTZlNjVlZDc0ZjA2YzIyM2E5YTQ5YzNlYTZkM2VlZWNi
MjM4NTAwHhcNMjUwOTA3MDMwMTA0WhcNMjUwOTA4MDMwMTA0WjAzMTEwLwYDVQQD
Eyg1NDU4MDEwNzhlYzk4NDJjODYzMWRkNDhjY2I2ZGY2Zjc0MWMzZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu5+nIUfVYhyz7ALrvTWUhNfzMJ1
Xoo416wKlz5lE64F9XDfLi9PHOrTupZt40tBqXXB2RBlR1Miyy/8VHiQarb3gbVl
4nZeSoZZ2cZq/z7we9ErvukZYCQvi1gy+HzwLtJtmjcjUuorFDJ7chcZXaGlbqHW
27qFM9DJZ0q6diz3dHl1YKGOymNd3AFnrac5QzoFx81NDX9xaEJ0d0J9UDacBlVQ
/WnAfmOOc0snLt6x0cQ2Po7ZGI2z3pEbjXp15nx6v0wv1gyjdM2J1T3697Gz+loZ
Lkzi8DnuET7PkND9zO/aiwOVShJlMS07dHVBDELQyJH+FddgAoXqNmVCeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRYAQeOyYQshjHdSMy23290HD1NMB8GA1UdIwQY
MBaAFADm5l7XTwbCI6mknD6m0+7ssjhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAt
MTZiOWVhZmViNGVhLzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAtMTZiOWVhZmViNGVh
LzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgSwTf5d
V3r8PsA6PtBhV/bOdA6XlBo2mrSSIStQaonzHJJR2qSF1FTx9FdWfiY5KwUNQvaI
a6HWclGUPPsr9MkTdB2i7civybnVoBW1TTNq852RL2jLDrSBXB7DprMAFspTmLHo
prSGYB5ROMPQaynITaNBDPfjQYyw6cW5Ga9wJjRtGEpLrqW8o3/FovewWkbbHs8i
3J8tGuVVhFMQ2sqRFSp2MU8pPlrhZn/4GQRiYd918AFfTFYd8SiiaAFl/4hT6AkD
XZjgSwbhE8fkLxoL0jLANA/w+jMt6TSnAWaiYnRBQmeQ5NpiLkRdNUe53YfuRG9O
OIlvOyr5W7+lvA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:03 2025 by rpki-client