Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: 3SdECPO1yedvGIWXX0O0sKGJcOPaS6Gw/6wxFiUSPok=
Subject key identifier: CF:C3:15:9B:73:21:86:D8:CF:FD:F1:D1:9D:3C:8D:5F:C5:1F:01:89
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 01975CEEE9791E1EF8AEB0FB76A7BB5239C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 0DB5
Signing time: Wed 11 Jun 2025 03:00:50 +0000
Manifest this update: Wed 11 Jun 2025 03:00:50 +0000
Manifest next update: Thu 12 Jun 2025 03:00:50 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: PwLjowrHKGS82VB/uJamkCzZz7QJ7lxo5gwEJowEg+U=)
2: B0Hd0utXPhNTqlbRxXDwmF9KHjs.roa (hash: 1ceb7F8O/NW3RMAYN486oZsriG91e3FFu7flF4b5QpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ee:e9:79:1e:1e:f8:ae:b0:fb:76:a7:bb:52:39:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Jun 11 03:00:50 2025 GMT
Not After : Jun 12 03:00:50 2025 GMT
Subject: CN=cfc3159b732186d8cffdf1d19d3c8d5fc51f0189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:8c:74:02:75:19:1d:cc:3c:29:dd:85:4c:
be:28:ab:97:ff:b5:76:03:1b:41:4d:ab:78:31:fa:
b9:52:04:2d:81:48:a3:ff:dd:53:ac:ef:57:58:0c:
97:29:bd:54:87:7f:3d:c5:3f:57:c7:59:aa:5a:7e:
9d:1f:bb:86:22:48:f7:a3:77:f9:f6:fb:d4:6b:56:
2d:56:8a:ab:5e:19:49:61:a0:02:86:8e:39:93:59:
b3:62:82:ab:2b:db:d4:80:a2:d8:67:0d:41:0e:2d:
e9:70:45:5e:37:c1:75:f4:30:31:0d:c7:b5:d5:dd:
98:97:e0:23:00:32:95:98:ea:97:bf:b3:56:e9:f0:
c2:66:ef:b4:ea:11:10:e0:b0:ce:f7:7b:eb:22:60:
96:bf:a3:b7:12:32:19:80:32:6c:13:f3:f0:12:f8:
89:33:a0:9f:74:10:83:9c:85:08:f2:a1:bf:60:a5:
e6:33:40:7d:e4:0a:24:a3:02:1d:8c:41:44:d0:86:
95:b2:97:c7:d5:82:c8:e6:d5:3a:31:3f:6a:6e:00:
6d:02:03:0e:90:45:9e:2c:ba:3b:41:29:a9:18:72:
53:e7:c9:87:6e:34:83:f5:f3:3a:17:53:1a:d8:e6:
d7:4b:9a:92:94:d1:a3:18:ea:66:4f:68:84:7d:8e:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:15:9B:73:21:86:D8:CF:FD:F1:D1:9D:3C:8D:5F:C5:1F:01:89
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b6:6b:66:06:8f:87:85:a7:c7:5c:09:59:fd:64:77:4e:1c:
34:9e:6d:b3:4c:26:b5:72:93:7a:63:eb:38:e9:38:dc:2d:e1:
3d:d8:78:76:36:76:25:9e:8f:55:ca:a2:44:5e:91:bf:bd:b2:
b7:66:e3:93:1d:c4:3e:ac:2f:26:88:a3:74:b3:25:c4:e0:9f:
db:f1:10:52:7a:fa:2c:2f:c9:12:ed:10:6a:4e:cd:95:d5:3b:
df:12:1b:5e:10:f5:8f:cd:af:15:c0:fa:46:f8:a4:b8:ea:7d:
cd:05:9d:a6:db:25:c2:1a:43:54:cb:30:c3:a1:9a:40:42:1a:
f1:69:ec:ca:55:0e:8e:ee:f7:68:dd:d3:bb:c7:72:8b:21:34:
a8:11:0e:f0:21:de:54:50:7a:39:52:5c:f5:ec:d2:43:2e:ed:
b5:c5:dc:a4:ff:18:80:39:e0:32:1c:6d:c0:22:6d:7c:2f:51:
80:de:f6:f7:f6:9b:77:98:36:dd:5c:c9:40:25:69:77:ea:c4:
c5:27:1f:72:8e:26:f6:1b:2e:78:10:0a:af:1e:f4:2c:11:cd:
a7:3d:5c:8a:ab:66:87:35:a9:48:28:1d:a1:81:51:f2:90:df:
43:e6:39:1d:41:42:3c:ef:0a:05:25:0f:00:41:d4:98:ae:99:
c2:29:5a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdc7ul5Hh74rrD7dqe7UjnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzI0ZTZhYTU4ODMyOWVhYzdhOTM4ZmI5ODc4ZDEzMmYy
YTg1YWYwHhcNMjUwNjExMDMwMDUwWhcNMjUwNjEyMDMwMDUwWjAzMTEwLwYDVQQD
EyhjZmMzMTU5YjczMjE4NmQ4Y2ZmZGYxZDE5ZDNjOGQ1ZmM1MWYwMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnGMdAJ1GR3MPCndhUy+KKuX/7V2
AxtBTat4Mfq5UgQtgUij/91TrO9XWAyXKb1Uh389xT9Xx1mqWn6dH7uGIkj3o3f5
9vvUa1YtVoqrXhlJYaACho45k1mzYoKrK9vUgKLYZw1BDi3pcEVeN8F19DAxDce1
1d2Yl+AjADKVmOqXv7NW6fDCZu+06hEQ4LDO93vrImCWv6O3EjIZgDJsE/PwEviJ
M6CfdBCDnIUI8qG/YKXmM0B95AokowIdjEFE0IaVspfH1YLI5tU6MT9qbgBtAgMO
kEWeLLo7QSmpGHJT58mHbjSD9fM6F1Ma2ObXS5qSlNGjGOpmT2iEfY4zKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/DFZtzIYbYz/3x0Z08jV/FHwGJMB8GA1UdIwQY
MBaAFAIyTmqliDKerHqTj7mHjRMvKoWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAt
NGRiOTg0ZTFjODMxLzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAtNGRiOTg0ZTFjODMx
LzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbZrZgaP
h4Wnx1wJWf1kd04cNJ5ts0wmtXKTemPrOOk43C3hPdh4djZ2JZ6PVcqiRF6Rv72y
t2bjkx3EPqwvJoijdLMlxOCf2/EQUnr6LC/JEu0Qak7NldU73xIbXhD1j82vFcD6
RvikuOp9zQWdptslwhpDVMsww6GaQEIa8WnsylUOju73aN3Tu8dyiyE0qBEO8CHe
VFB6OVJc9ezSQy7ttcXcpP8YgDngMhxtwCJtfC9RgN729/abd5g23VzJQCVpd+rE
xScfco4m9hsueBAKrx70LBHNpz1ciqtmhzWpSCgdoYFR8pDfQ+Y5HUFCPO8KBSUP
AEHUmK6ZwilaJw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 13:20:02 2025 by rpki-client