Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json)
Hash identifier: 1fXPnCecUhbuRSM5H5pYi5PZuiK2twOl2Z0tQt6f+SA=
Subject key identifier: D4:20:E8:6E:A4:00:97:89:94:70:63:0F:4E:D9:9D:B4:8A:55:54:6F
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial: 0197481E71ACCA9D8E81D05ACE43775B06D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
Manifest number: 122A
Signing time: Sat 07 Jun 2025 02:00:43 +0000
Manifest this update: Sat 07 Jun 2025 02:00:43 +0000
Manifest next update: Sun 08 Jun 2025 02:00:43 +0000
Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: kAzjVFcgd2K9w2ji7pUpw1zW+NMaWgU1rfiK9Amo2Eg=)
2: eEP1VypyuqVxmlLrgaA9LlVwYK4.roa (hash: 5dvQLaqP0vbYafUJXNT7sKTWbRstUgrMUzxGvHU5Rgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:71:ac:ca:9d:8e:81:d0:5a:ce:43:77:5b:06:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
Validity
Not Before: Jun 7 02:00:43 2025 GMT
Not After : Jun 8 02:00:43 2025 GMT
Subject: CN=d420e86ea40097899470630f4ed99db48a55546f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:11:69:cf:b2:5d:52:09:8f:01:e8:08:68:
82:88:1c:15:02:36:2e:2e:98:dc:8e:ce:3d:47:2d:
01:56:75:48:22:2b:4a:2a:16:2b:2c:7f:b7:d8:e9:
42:52:69:f1:2d:fd:68:18:76:07:82:e5:5e:d4:d1:
7f:25:5c:25:13:34:3f:18:a5:41:58:7f:82:7e:1b:
09:df:54:20:d0:c5:2a:a1:db:13:cb:82:e9:4e:43:
01:50:78:b7:bf:21:1a:ca:ef:d1:13:7c:c6:22:53:
90:3e:7e:a1:d3:43:5e:84:f9:f3:ee:cd:64:eb:e4:
2d:e5:97:5e:b1:f8:5f:2d:ad:78:cf:5a:fe:89:9c:
24:a2:b0:57:60:bd:1e:45:e6:22:8a:c8:0a:da:68:
e6:3a:45:41:c6:69:ce:c2:cd:d8:93:2d:42:33:ff:
5e:11:62:ff:85:5f:1b:5d:7d:5b:64:4a:2a:b1:39:
17:11:36:bd:31:98:64:e0:50:c0:4c:e0:1c:c2:62:
39:d6:ae:ca:f3:98:a0:9e:ff:e9:aa:e0:36:89:3b:
89:3d:e1:86:84:7f:81:06:9b:a9:5f:87:6c:18:44:
c6:89:82:62:3e:58:31:2b:cb:54:3c:19:20:00:26:
0b:f3:98:aa:43:4e:ce:96:71:20:1b:2c:5b:53:c0:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:20:E8:6E:A4:00:97:89:94:70:63:0F:4E:D9:9D:B4:8A:55:54:6F
X509v3 Authority Key Identifier:
keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d0:f6:27:29:2c:ee:19:03:35:6a:9f:a3:2e:02:c1:5d:92:
b1:2e:cb:56:5f:f4:56:fa:98:a6:ae:cf:1a:18:a7:56:da:bb:
05:c6:28:89:30:9c:3d:c5:3f:02:37:96:ca:d4:66:7d:07:bb:
e2:e5:07:ef:f7:26:ad:f1:12:cd:50:1a:01:e4:da:0a:cb:c5:
79:60:af:89:e0:f4:55:41:f4:5f:e8:b3:5b:41:0f:48:45:01:
e8:f8:be:81:a8:98:ad:ad:0f:9b:7f:2d:27:e5:f0:1a:c3:8b:
12:54:fa:a1:db:35:88:2d:9d:ea:61:46:57:45:55:a8:d0:e7:
25:73:b9:24:f0:0f:e1:29:6f:37:c1:91:f0:c7:29:f3:07:74:
80:1f:27:d7:2b:b1:e1:50:0d:4e:56:92:c8:0b:4a:d1:77:f3:
c3:11:9a:f1:a0:ba:cd:15:ac:e4:e9:d7:28:93:97:2c:94:8e:
bc:7f:13:81:fe:f5:53:e7:75:64:98:b1:f7:02:07:a7:43:2a:
c7:56:e7:ce:2f:af:3c:77:2a:b8:a7:45:6e:5a:b2:49:13:75:
1c:3e:6f:25:54:0a:36:6e:bf:7f:6b:10:af:fa:a5:88:45:21:
b3:df:26:3b:13:1e:8f:36:6a:9c:fa:cc:ed:dc:59:ab:5e:a6:
2d:af:79:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHnGsyp2OgdBazkN3WwbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NGFjOGEwMjEyNzA2ODI3NjVkMjNlZjAzMzhmMzVjNzg2
ZGRiMzUwHhcNMjUwNjA3MDIwMDQzWhcNMjUwNjA4MDIwMDQzWjAzMTEwLwYDVQQD
EyhkNDIwZTg2ZWE0MDA5Nzg5OTQ3MDYzMGY0ZWQ5OWRiNDhhNTU1NDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40cRac+yXVIJjwHoCGiCiBwVAjYu
Lpjcjs49Ry0BVnVIIitKKhYrLH+32OlCUmnxLf1oGHYHguVe1NF/JVwlEzQ/GKVB
WH+CfhsJ31Qg0MUqodsTy4LpTkMBUHi3vyEayu/RE3zGIlOQPn6h00NehPnz7s1k
6+Qt5ZdesfhfLa14z1r+iZwkorBXYL0eReYiisgK2mjmOkVBxmnOws3Yky1CM/9e
EWL/hV8bXX1bZEoqsTkXETa9MZhk4FDATOAcwmI51q7K85ignv/pquA2iTuJPeGG
hH+BBpupX4dsGETGiYJiPlgxK8tUPBkgACYL85iqQ07OlnEgGyxbU8AuwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQg6G6kAJeJlHBjD07ZnbSKVVRvMB8GA1UdIwQY
MBaAFGhKyKAhJwaCdl0j7wM481x4bds1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVySW9DRW5Cb0oyWFNQdkF6anpYSGh0MnpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kMzBiNWQtN2YzYi00YTVhLTk4OTct
MGMwMTFjOWM5MjdkLzEvYUVySW9DRW5Cb0oyWFNQdkF6anpYSGh0MnpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kMzBiNWQtN2YzYi00YTVhLTk4OTctMGMwMTFjOWM5Mjdk
LzEvYUVySW9DRW5Cb0oyWFNQdkF6anpYSGh0MnpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdD2Jyks
7hkDNWqfoy4CwV2SsS7LVl/0VvqYpq7PGhinVtq7BcYoiTCcPcU/AjeWytRmfQe7
4uUH7/cmrfESzVAaAeTaCsvFeWCvieD0VUH0X+izW0EPSEUB6Pi+gaiYra0Pm38t
J+XwGsOLElT6ods1iC2d6mFGV0VVqNDnJXO5JPAP4SlvN8GR8Mcp8wd0gB8n1yux
4VANTlaSyAtK0XfzwxGa8aC6zRWs5OnXKJOXLJSOvH8Tgf71U+d1ZJix9wIHp0Mq
x1bnzi+vPHcquKdFblqySRN1HD5vJVQKNm6/f2sQr/qliEUhs98mOxMejzZqnPrM
7dxZq16mLa959w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:39 2025 by rpki-client