Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: kSCsE/FR3AXaLlobqCs6q+/PvIurAlFAv0XjOdmb1XU=
Subject key identifier: 34:3F:E8:75:69:73:7E:14:5D:16:6B:42:91:9A:3C:2E:27:1A:0F:7E
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019749D58EDAA6C32FE530308B66935D8A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 1295
Signing time: Sat 07 Jun 2025 10:00:21 +0000
Manifest this update: Sat 07 Jun 2025 10:00:21 +0000
Manifest next update: Sun 08 Jun 2025 10:00:21 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: FG6YGVBWpvPSoad3b9Q2klc6qy4546ueW6HB6IcUIKs=)
2: s3MszUL2Sssrqjezj_btDkPTmQg.roa (hash: rgkSdfEiUESbKFQA8EcHOyD2UnXv2kAlPQ3EqnLhSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:8e:da:a6:c3:2f:e5:30:30:8b:66:93:5d:8a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Jun 7 10:00:21 2025 GMT
Not After : Jun 8 10:00:21 2025 GMT
Subject: CN=343fe87569737e145d166b42919a3c2e271a0f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:82:d8:51:93:d9:b8:62:c6:fe:dd:89:65:
57:5d:d4:ce:38:3e:83:ee:cb:27:5a:40:c7:78:5a:
6a:c2:e0:40:98:27:18:1a:1e:c3:9b:44:2b:89:d5:
25:f8:0e:5d:02:f5:6a:48:b7:80:83:19:c7:04:6f:
68:d6:e1:16:f2:db:86:ee:97:00:40:a4:b4:c8:51:
45:0e:0d:78:3b:ea:d3:19:da:e3:68:44:6a:e3:13:
55:68:8e:e6:3f:c8:a8:e4:87:71:4e:60:c2:9a:12:
1d:7b:22:25:87:92:f7:fc:23:96:04:d6:84:8a:77:
59:13:26:5a:fe:6c:71:52:bf:69:f8:09:39:39:83:
75:2f:ff:e2:22:df:68:e3:c7:7f:01:17:dd:73:98:
f8:51:18:ed:98:90:47:19:8d:4d:ea:76:15:53:0b:
60:72:bb:eb:cf:7d:67:e0:9e:11:7b:ac:f8:d3:3e:
4f:24:13:ea:06:77:75:4d:39:da:80:48:31:f3:52:
b9:d8:3e:13:47:a8:87:f9:5c:12:1a:0d:e9:60:61:
7c:78:15:7b:cc:94:97:90:2c:66:c3:94:f0:63:e5:
ff:c4:69:ba:97:29:ba:e6:e2:ba:cc:87:5a:a3:28:
1b:11:04:0a:d5:3e:5d:bc:fb:dd:6c:99:8c:47:e2:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3F:E8:75:69:73:7E:14:5D:16:6B:42:91:9A:3C:2E:27:1A:0F:7E
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d2:1e:0f:7f:56:19:c0:9a:b5:f7:1b:08:79:72:48:db:5b:
f6:05:fe:4a:86:b9:b1:76:49:13:e3:70:e3:80:6f:0c:74:0e:
b9:9b:ff:8d:ce:38:29:e5:af:6a:a0:36:90:23:ba:39:12:46:
84:03:cf:08:f4:3b:11:a3:36:e5:d9:02:75:64:c7:ee:72:92:
f7:18:9a:07:65:31:08:71:a5:2f:30:c2:ff:9d:7f:8c:0c:98:
e1:54:c8:ff:ad:32:5f:88:83:c2:9a:7c:f9:87:6c:88:80:8a:
c0:4a:7b:5a:0c:96:23:ec:fd:f6:4a:26:fd:3e:0f:81:93:15:
4b:f6:01:86:a5:b9:62:98:d9:b8:23:c6:63:96:85:99:9a:34:
5d:5e:3c:69:4e:ad:f2:b2:67:e9:2b:4a:0f:fb:63:58:f7:c8:
b0:04:6a:b8:4b:13:b6:83:a0:24:68:e0:67:30:63:35:64:23:
da:86:3e:55:3d:bf:89:77:16:e5:88:b4:28:c2:03:56:a2:37:
6c:80:e5:a2:f2:22:74:3d:ba:6b:be:af:83:41:a4:4e:27:e0:
58:37:fa:83:37:d1:b5:d6:c5:bc:8c:89:f7:11:9c:d8:9d:cc:
ee:34:d5:ea:dd:7d:c8:ca:57:62:1e:54:d4:2e:60:eb:3d:ea:
81:41:78:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1Y7apsMv5TAwi2aTXYoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDY1YjljZmIzNjhjNjllY2IwZTNmZWEzYjU0MmJhOWM3
MzAxZjQwHhcNMjUwNjA3MTAwMDIxWhcNMjUwNjA4MTAwMDIxWjAzMTEwLwYDVQQD
EygzNDNmZTg3NTY5NzM3ZTE0NWQxNjZiNDI5MTlhM2MyZTI3MWEwZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gOC2FGT2bhixv7diWVXXdTOOD6D
7ssnWkDHeFpqwuBAmCcYGh7Dm0QridUl+A5dAvVqSLeAgxnHBG9o1uEW8tuG7pcA
QKS0yFFFDg14O+rTGdrjaERq4xNVaI7mP8io5IdxTmDCmhIdeyIlh5L3/COWBNaE
indZEyZa/mxxUr9p+Ak5OYN1L//iIt9o48d/ARfdc5j4URjtmJBHGY1N6nYVUwtg
crvrz31n4J4Re6z40z5PJBPqBnd1TTnagEgx81K52D4TR6iH+VwSGg3pYGF8eBV7
zJSXkCxmw5TwY+X/xGm6lym65uK6zIdaoygbEQQK1T5dvPvdbJmMR+KNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ/6HVpc34UXRZrQpGaPC4nGg9+MB8GA1UdIwQY
MBaAFGhGW5z7Noxp7LDj/qO1QrqccwH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yNjdmOWUtY2NjYy00NDNmLWJlYWMt
MWFlYTViZTE1MGZhLzEvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yNjdmOWUtY2NjYy00NDNmLWJlYWMtMWFlYTViZTE1MGZh
LzEvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNIeD39W
GcCatfcbCHlySNtb9gX+Soa5sXZJE+Nw44BvDHQOuZv/jc44KeWvaqA2kCO6ORJG
hAPPCPQ7EaM25dkCdWTH7nKS9xiaB2UxCHGlLzDC/51/jAyY4VTI/60yX4iDwpp8
+YdsiICKwEp7WgyWI+z99kom/T4PgZMVS/YBhqW5YpjZuCPGY5aFmZo0XV48aU6t
8rJn6StKD/tjWPfIsARquEsTtoOgJGjgZzBjNWQj2oY+VT2/iXcW5Yi0KMIDVqI3
bIDlovIidD26a76vg0GkTifgWDf6gzfRtdbFvIyJ9xGc2J3M7jTV6t19yMpXYh5U
1C5g6z3qgUF4dQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:46:03 2025 by rpki-client