Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
File: aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json)
Hash identifier: bNxOY4cxkCaW0sF7RRHxecn5Vj0iGaHGSFFrb78q+dY=
Subject key identifier: 78:57:EC:8E:EE:D2:24:28:81:5B:F2:84:AB:3C:BB:20:83:65:B3:05
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 0199221E3B05771643373B78B941ED0609DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
Manifest number: 167E
Signing time: Sun 07 Sep 2025 03:00:30 +0000
Manifest this update: Sun 07 Sep 2025 03:00:30 +0000
Manifest next update: Mon 08 Sep 2025 03:00:30 +0000
Files and hashes: 1: NUwDMl0uceCiZ1NG2N5fFGq-BY0.roa (hash: W5ChUYN7fI8J46aNSrBpqKGe97TpyG1Z0u4eXPpkx48=)
2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: 2rEjxOCo/9tlQCwSNIwklihT00qifH/oE0XS8GdQXxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:3b:05:77:16:43:37:3b:78:b9:41:ed:06:09:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Sep 7 03:00:30 2025 GMT
Not After : Sep 8 03:00:30 2025 GMT
Subject: CN=7857ec8eeed22428815bf284ab3cbb208365b305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:d7:fd:e4:47:6e:b9:2b:cd:16:b6:01:ab:
22:bd:2b:2d:cf:3d:86:0a:17:b8:ed:9f:0b:fc:92:
c1:b6:5a:07:6f:f4:01:c5:5e:d8:e6:54:27:44:d5:
04:29:e5:d0:7b:7b:f8:84:21:ff:0d:ed:88:ed:4b:
e3:aa:58:00:c6:6c:73:99:cf:56:8e:05:3e:16:2c:
82:83:7b:9e:ea:94:39:7f:fe:62:db:cb:e0:f2:dd:
de:bc:b6:a9:45:8f:0f:c5:94:e0:42:f7:c7:d8:de:
63:d4:20:9c:1d:4e:0a:d2:1f:7f:b2:7a:91:c7:44:
d5:1c:58:10:05:23:56:f4:f3:f6:4e:c9:de:b2:ce:
df:04:cc:e2:60:48:b2:32:12:2f:36:ba:d1:19:6b:
1a:bf:a0:1e:43:19:6b:a3:6c:d7:43:c6:d2:36:0b:
5a:84:7a:61:53:33:39:d7:ed:25:e2:cd:0b:74:e1:
94:5b:ba:0d:fe:c0:26:e5:02:89:bc:1c:dc:e6:94:
5f:f6:67:08:f7:98:0a:7f:76:f4:ec:6d:d8:50:e4:
cf:0e:66:8d:3c:c2:95:6c:80:32:4e:04:6d:86:8b:
ed:00:45:63:36:5d:b0:26:d8:68:a0:ab:bd:3a:25:
29:62:64:58:ab:4b:83:a0:d9:04:fe:c3:d6:b3:17:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:57:EC:8E:EE:D2:24:28:81:5B:F2:84:AB:3C:BB:20:83:65:B3:05
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:b5:b3:6d:b0:f8:81:15:67:2e:62:7c:43:46:34:4c:c3:
15:1d:bb:5a:9b:b2:79:89:b1:fa:57:f9:20:e4:e7:6b:f4:da:
69:af:db:c4:65:a3:98:8a:18:55:b7:98:bc:f0:65:43:3a:e9:
b0:55:b2:b9:dc:ff:02:84:a7:b8:1a:ce:93:71:29:d4:78:64:
20:1c:e9:73:58:0a:96:53:1e:aa:78:72:c4:18:e8:4c:3c:01:
b5:8f:60:d4:49:2b:30:39:63:53:fe:5f:95:b7:c5:64:f7:16:
0e:0d:0d:d0:1e:77:da:b5:3a:c1:16:9b:5b:fd:66:1a:92:6e:
8f:30:00:28:84:78:6a:3f:bb:26:e0:0c:17:dd:f0:e6:39:f8:
d6:87:a0:d4:b7:c3:3f:27:08:80:7c:c0:15:cb:f0:1b:b8:af:
c7:00:9b:93:c9:3d:69:c2:b5:a7:fd:19:50:f7:f2:a1:d8:d4:
33:9a:21:82:6d:a7:3f:e4:22:27:ee:35:b0:7b:17:f7:19:1d:
f7:22:55:5c:84:62:1d:22:c7:9b:ac:fe:da:bb:e5:36:3e:00:
12:76:c3:c0:9a:03:5c:5c:96:75:c7:6b:01:bc:05:09:63:e4:
07:98:2f:38:24:08:36:c6:7d:27:34:e5:3e:42:8a:da:16:ba:
bd:2b:76:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHjsFdxZDNzt4uUHtBgneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MWNlNGQ5OWJhOGViYjkxYTc5NGFiZmNiZGQxNWJkZTA5
Yzk5ZjgwHhcNMjUwOTA3MDMwMDMwWhcNMjUwOTA4MDMwMDMwWjAzMTEwLwYDVQQD
Eyg3ODU3ZWM4ZWVlZDIyNDI4ODE1YmYyODRhYjNjYmIyMDgzNjViMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqXX/eRHbrkrzRa2AasivSstzz2G
Che47Z8L/JLBtloHb/QBxV7Y5lQnRNUEKeXQe3v4hCH/De2I7UvjqlgAxmxzmc9W
jgU+FiyCg3ue6pQ5f/5i28vg8t3evLapRY8PxZTgQvfH2N5j1CCcHU4K0h9/snqR
x0TVHFgQBSNW9PP2Tsness7fBMziYEiyMhIvNrrRGWsav6AeQxlro2zXQ8bSNgta
hHphUzM51+0l4s0LdOGUW7oN/sAm5QKJvBzc5pRf9mcI95gKf3b07G3YUOTPDmaN
PMKVbIAyTgRthovtAEVjNl2wJthooKu9OiUpYmRYq0uDoNkE/sPWsxd0KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhX7I7u0iQogVvyhKs8uyCDZbMFMB8GA1UdIwQY
MBaAFGgc5NmbqOu5GnlKv8vdFb3gnJn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82YjllZTgtOTI0Yi00YTMxLWE0NjQt
OWY5OWMxNDc3ZmJlLzEvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82YjllZTgtOTI0Yi00YTMxLWE0NjQtOWY5OWMxNDc3ZmJl
LzEvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCK1s22w
+IEVZy5ifENGNEzDFR27WpuyeYmx+lf5IOTna/Taaa/bxGWjmIoYVbeYvPBlQzrp
sFWyudz/AoSnuBrOk3Ep1HhkIBzpc1gKllMeqnhyxBjoTDwBtY9g1EkrMDljU/5f
lbfFZPcWDg0N0B532rU6wRabW/1mGpJujzAAKIR4aj+7JuAMF93w5jn41oeg1LfD
PycIgHzAFcvwG7ivxwCbk8k9acK1p/0ZUPfyodjUM5ohgm2nP+QiJ+41sHsX9xkd
9yJVXIRiHSLHm6z+2rvlNj4AEnbDwJoDXFyWdcdrAbwFCWPkB5gvOCQINsZ9JzTl
PkKK2ha6vSt2LA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:37 2025 by rpki-client