Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: 1m2d/FKmR9ezbJT09XwHX4CgDw84qqllFMO6EJPAPC8=
Subject key identifier: B2:3E:36:70:FD:63:F4:80:4F:1F:EF:4D:BE:C9:5D:40:63:4D:12:FE
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 019923D5BD67CC0DDF1A7FF97846B14A8BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 1604
Signing time: Sun 07 Sep 2025 11:00:34 +0000
Manifest this update: Sun 07 Sep 2025 11:00:34 +0000
Manifest next update: Mon 08 Sep 2025 11:00:34 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: s620Qv7Z1nvdr+Tkvr4NqST0uwECMUTzUm6lbDGGi7o=)
2: gvJBtDmrBY4y1m9tVe-S6ndjy20.roa (hash: e9qz/rQIxQf43DTjLpdblCilaun5V9rCKHAnrG6oKJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:bd:67:cc:0d:df:1a:7f:f9:78:46:b1:4a:8b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Sep 7 11:00:34 2025 GMT
Not After : Sep 8 11:00:34 2025 GMT
Subject: CN=b23e3670fd63f4804f1fef4dbec95d40634d12fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:16:b1:19:a4:2a:3e:ed:c9:5c:31:b5:81:
8d:b5:e1:19:5a:ee:ff:9d:89:01:f4:cb:d5:0a:c2:
66:c2:81:e7:ab:dc:c7:da:d4:3c:06:0a:c2:3e:ff:
f6:38:14:04:22:11:8c:45:90:d3:f0:b3:34:62:c8:
03:c2:51:b3:6c:39:73:a3:93:4b:35:48:1f:9f:3e:
05:30:67:84:9d:fa:00:65:72:83:f2:8c:a7:41:37:
45:b1:c2:ea:f7:da:6f:ce:38:98:3d:aa:39:54:e2:
4d:2f:ad:a1:0d:c9:f1:21:e5:0a:11:c8:e9:35:06:
81:38:f9:25:b3:70:09:28:2a:12:d5:c7:c7:8e:dc:
62:29:99:4d:40:f5:4f:d8:72:4d:c6:95:e4:b8:8e:
44:62:dc:55:50:c3:fe:48:33:75:e3:dc:41:22:eb:
50:4d:1d:50:5e:19:b4:18:d5:30:aa:4c:e8:e4:c1:
d9:9a:f2:46:f4:92:ce:1e:40:f9:c5:bd:5d:a4:95:
b4:d5:2b:c3:38:71:21:c9:31:0e:b6:15:f0:d8:7a:
e8:b4:90:bd:8c:3c:9b:71:e0:78:8c:8f:0c:b9:ab:
99:c4:3b:42:16:2a:5c:c5:1b:64:d6:d6:9a:47:ff:
72:f9:a9:38:e8:9b:fb:15:24:12:8f:b7:ba:f6:59:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:36:70:FD:63:F4:80:4F:1F:EF:4D:BE:C9:5D:40:63:4D:12:FE
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e2:1d:6b:fb:74:30:75:9e:a1:8b:c5:55:5d:0e:71:5c:7d:
44:9d:20:c1:1b:af:90:18:5b:98:d3:cf:f6:2c:b4:7d:fc:1f:
30:89:84:03:be:d9:6a:be:29:c8:85:9a:26:1e:57:ff:1a:31:
54:ac:a6:06:91:9c:81:7a:7d:e7:6b:96:00:7a:c3:c2:ae:84:
90:41:59:a9:87:69:07:1a:5e:18:6f:42:54:51:c5:fc:a7:1b:
23:db:24:5b:8c:1e:df:17:3c:5e:03:19:6b:bc:29:4f:e1:a0:
51:75:c9:09:c2:c7:d7:fb:64:6f:20:b0:79:e6:c5:60:b5:b1:
58:ff:3c:9a:3d:21:2b:36:94:ff:71:3c:cc:63:4f:d5:fe:3b:
62:76:14:0f:41:3a:92:8f:82:a6:03:ed:d8:06:16:65:05:14:
11:8f:57:a5:bd:cc:73:5b:37:9b:91:a9:b1:c2:86:de:9d:7c:
55:9c:48:bd:63:21:79:63:51:b4:0f:16:32:c8:43:96:6a:5f:
be:a6:f4:92:02:f5:9a:eb:9e:2a:e4:32:30:38:ab:51:05:31:
b2:a8:20:9b:5c:56:f6:01:c7:03:5f:0c:7c:8e:65:27:cc:3f:
5d:60:01:87:4b:b6:76:07:db:ce:ed:b9:cd:66:26:f3:55:4f:
1e:5f:08:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1b1nzA3fGn/5eEaxSovxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjUwOTA3MTEwMDM0WhcNMjUwOTA4MTEwMDM0WjAzMTEwLwYDVQQD
EyhiMjNlMzY3MGZkNjNmNDgwNGYxZmVmNGRiZWM5NWQ0MDYzNGQxMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcMWsRmkKj7tyVwxtYGNteEZWu7/
nYkB9MvVCsJmwoHnq9zH2tQ8BgrCPv/2OBQEIhGMRZDT8LM0YsgDwlGzbDlzo5NL
NUgfnz4FMGeEnfoAZXKD8oynQTdFscLq99pvzjiYPao5VOJNL62hDcnxIeUKEcjp
NQaBOPkls3AJKCoS1cfHjtxiKZlNQPVP2HJNxpXkuI5EYtxVUMP+SDN149xBIutQ
TR1QXhm0GNUwqkzo5MHZmvJG9JLOHkD5xb1dpJW01SvDOHEhyTEOthXw2HrotJC9
jDybceB4jI8MuauZxDtCFipcxRtk1taaR/9y+ak46Jv7FSQSj7e69lke/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLI+NnD9Y/SATx/vTb7JXUBjTRL+MB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeIda/t0
MHWeoYvFVV0OcVx9RJ0gwRuvkBhbmNPP9iy0ffwfMImEA77Zar4pyIWaJh5X/xox
VKymBpGcgXp952uWAHrDwq6EkEFZqYdpBxpeGG9CVFHF/KcbI9skW4we3xc8XgMZ
a7wpT+GgUXXJCcLH1/tkbyCweebFYLWxWP88mj0hKzaU/3E8zGNP1f47YnYUD0E6
ko+CpgPt2AYWZQUUEY9Xpb3Mc1s3m5GpscKG3p18VZxIvWMheWNRtA8WMshDlmpf
vqb0kgL1muueKuQyMDirUQUxsqggm1xW9gHHA18MfI5lJ8w/XWABh0u2dgfbzu25
zWYm81VPHl8I+A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:46 2025 by rpki-client