Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: dbcAirzxKwC33EPJi8ny3Ou55m8B2Xst0fEmNkNrKio=
Subject key identifier: 02:7F:CB:01:34:36:07:48:11:D3:F7:8F:1F:C7:AB:03:0F:9B:FF:FF
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 01976094E6718C9FB9E8D03D97CD670D1CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0CFE
Signing time: Wed 11 Jun 2025 20:01:00 +0000
Manifest this update: Wed 11 Jun 2025 20:01:00 +0000
Manifest next update: Thu 12 Jun 2025 20:01:00 +0000
Files and hashes: 1: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (hash: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=)
2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: 7OXGl6E9FQHW8R4dyGQqAVEPu6EQkSfRUeAgXKGEE3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:e6:71:8c:9f:b9:e8:d0:3d:97:cd:67:0d:1c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Jun 11 20:01:00 2025 GMT
Not After : Jun 12 20:01:00 2025 GMT
Subject: CN=027fcb013436074811d3f78f1fc7ab030f9bffff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:b2:ec:72:ad:b7:b0:e3:73:db:dc:8b:1c:
4c:a6:e0:8a:0c:7b:0e:7a:7e:d4:0d:9a:92:ff:1d:
5d:14:c2:11:66:6a:5a:0e:db:f9:bf:e8:bf:48:3e:
a0:2d:42:eb:e3:c4:aa:ff:ba:e8:5b:18:b3:24:63:
04:16:c8:71:79:b3:02:cc:37:41:c9:92:b4:36:70:
18:71:83:52:2d:7d:94:bb:c4:b0:0b:ab:19:b4:28:
84:13:a6:1f:f9:48:d9:b9:94:57:c6:72:7a:23:81:
3e:3a:40:84:96:53:7d:f8:89:11:55:12:00:00:3d:
97:9d:b4:7d:ba:c6:9f:3c:6c:d6:0c:4d:70:2e:09:
d5:6f:25:17:10:a7:ca:da:3a:e4:aa:59:66:5f:3a:
e0:96:89:83:06:f9:53:4b:fa:38:e7:06:fa:6a:59:
e3:2c:82:7e:f9:06:ca:87:a1:82:29:55:b8:9e:16:
90:81:0a:2e:b8:cf:5d:84:a9:12:65:38:39:19:c7:
19:88:7d:47:22:48:38:06:cd:10:28:69:a6:04:41:
b9:ec:15:01:2f:49:18:18:9b:89:54:7c:c1:c4:79:
b2:1e:74:70:e2:69:4f:a9:ba:a3:d2:dc:2e:e6:a9:
c9:a0:3c:c1:c1:04:17:01:bc:0d:fc:41:2b:38:5c:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7F:CB:01:34:36:07:48:11:D3:F7:8F:1F:C7:AB:03:0F:9B:FF:FF
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1c:74:55:1a:48:d3:bb:c8:81:20:ef:57:99:9d:fa:6c:2e:
52:a9:1c:2b:a1:32:a6:cf:df:f5:e9:e8:60:1f:1e:93:2b:a9:
04:a1:70:ad:52:e2:b4:48:73:48:9a:2c:e3:dd:97:1e:51:1e:
16:15:3c:1b:c8:db:c0:18:80:cd:6b:f9:09:af:b7:7f:fc:46:
59:07:f6:30:59:38:17:40:61:08:bb:34:d6:2f:b5:7a:d4:8d:
8b:ba:f9:da:67:bc:c0:b3:a6:e1:0f:f1:28:36:ee:fa:34:db:
0f:81:84:65:48:10:b1:f2:2e:a4:7a:e7:cb:66:3b:f3:4d:cd:
ba:e7:26:2e:6f:d9:92:3c:95:17:30:b2:2a:c5:47:f5:e7:6f:
a4:5a:27:24:df:92:9c:91:e2:a9:78:41:d0:89:96:6e:ed:1f:
f2:17:d2:d9:96:48:80:d9:b1:ba:c1:d9:a2:2b:64:b5:3f:0a:
bf:f7:0a:b1:10:14:ea:5d:9d:12:21:10:6d:6c:a5:8b:d3:ad:
ac:63:b6:1e:1e:a1:ac:d4:11:cd:88:7e:d4:2b:85:68:96:7d:
24:d1:5a:19:9e:e5:14:9d:cd:54:83:81:1d:15:87:7d:4f:77:
25:4d:5d:af:63:af:37:ea:d6:08:62:f2:42:1d:a0:2d:20:13:
3f:a1:3d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdglOZxjJ+56NA9l81nDRznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMzc5ODIyMDdlNjJkZWQwNjkxZGNiMThlZjZlYTMyZDQx
M2YzZjYwHhcNMjUwNjExMjAwMTAwWhcNMjUwNjEyMjAwMTAwWjAzMTEwLwYDVQQD
EygwMjdmY2IwMTM0MzYwNzQ4MTFkM2Y3OGYxZmM3YWIwMzBmOWJmZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzImy7HKtt7Djc9vcixxMpuCKDHsO
en7UDZqS/x1dFMIRZmpaDtv5v+i/SD6gLULr48Sq/7roWxizJGMEFshxebMCzDdB
yZK0NnAYcYNSLX2Uu8SwC6sZtCiEE6Yf+UjZuZRXxnJ6I4E+OkCEllN9+IkRVRIA
AD2XnbR9usafPGzWDE1wLgnVbyUXEKfK2jrkqllmXzrglomDBvlTS/o45wb6alnj
LIJ++QbKh6GCKVW4nhaQgQouuM9dhKkSZTg5GccZiH1HIkg4Bs0QKGmmBEG57BUB
L0kYGJuJVHzBxHmyHnRw4mlPqbqj0twu5qnJoDzBwQQXAbwN/EErOFzfywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ/ywE0NgdIEdP3jx/HqwMPm///MB8GA1UdIwQY
MBaAFGo3mCIH5i3tBpHcsY726jLUE/P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYt
MjM1MzE2NTRlNTg5LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYtMjM1MzE2NTRlNTg5
LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBx0VRpI
07vIgSDvV5md+mwuUqkcK6Eyps/f9enoYB8ekyupBKFwrVLitEhzSJos492XHlEe
FhU8G8jbwBiAzWv5Ca+3f/xGWQf2MFk4F0BhCLs01i+1etSNi7r52me8wLOm4Q/x
KDbu+jTbD4GEZUgQsfIupHrny2Y7803NuucmLm/ZkjyVFzCyKsVH9edvpFonJN+S
nJHiqXhB0ImWbu0f8hfS2ZZIgNmxusHZoitktT8Kv/cKsRAU6l2dEiEQbWyli9Ot
rGO2Hh6hrNQRzYh+1CuFaJZ9JNFaGZ7lFJ3NVIOBHRWHfU93JU1dr2OvN+rWCGLy
Qh2gLSATP6E9qg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 03:25:08 2025 by rpki-client