Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: wgAGQmGs9adPKJvIgSrHL8md8kVRsO0BY66Qg10ucjY=
Subject key identifier: 30:8F:28:93:FA:22:3B:B2:FF:14:28:05:CB:45:6B:59:C4:A6:F8:B4
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 01974AE8E7DC6F6399B64A72D180C0E8FB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 15:01:07 +0000
Manifest this update: Sat 07 Jun 2025 15:01:07 +0000
Manifest next update: Sun 08 Jun 2025 15:01:07 +0000
Files and hashes: 1: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: 8KVqD2Mw6ac9Z9uov7RzkdWAYYEKfkBxOUktUMEsnRE=)
2: wIBTBVQwXEpg1VcEfToXz9-SzCM.roa (hash: eXQVXHA1mPOdG0CF4A2ulRbni+b23x4utE4DVukqO5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:e7:dc:6f:63:99:b6:4a:72:d1:80:c0:e8:fb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Jun 7 15:01:07 2025 GMT
Not After : Jun 8 15:01:07 2025 GMT
Subject: CN=308f2893fa223bb2ff142805cb456b59c4a6f8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:62:a4:7b:5f:2a:8c:e6:43:89:6a:0c:dd:
0e:44:52:6c:1e:1c:4a:46:23:69:4a:d7:ee:44:59:
57:bf:82:8e:03:01:a3:18:2b:93:22:63:21:b3:e3:
69:fe:b5:33:cb:e6:7d:af:64:d2:26:d7:62:23:02:
b4:b9:c1:98:c4:78:0b:1c:5b:49:ac:90:24:6e:07:
d3:e1:29:7a:99:75:16:f2:c9:a2:44:ec:d9:df:2e:
59:a7:1e:e3:da:27:e1:07:74:24:43:e0:cd:77:c9:
d8:b8:2e:59:a4:a5:0a:eb:69:7c:61:3b:c3:7d:2b:
28:9d:1e:f9:0b:b3:26:03:18:8f:4d:34:18:46:ca:
4b:f5:7d:b5:78:ee:f0:62:0a:d9:89:37:6d:3c:2d:
95:d2:fe:02:7a:9f:0f:5f:17:85:c1:b9:13:24:05:
36:dd:ed:e2:30:3e:dd:1d:d9:a1:a2:61:39:26:b5:
f1:cb:d4:48:02:d1:9d:e4:e8:0f:23:00:9c:a7:f4:
61:99:b8:2b:99:53:e7:f8:e3:57:6b:15:e5:e4:c1:
c5:56:b5:43:11:b1:21:9b:e3:5a:ea:07:71:6c:cb:
a9:7b:1b:cb:64:2a:c7:32:70:89:aa:1e:d1:9f:39:
a2:fb:d6:b1:83:4b:e9:09:a0:d4:29:3b:86:6a:4f:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8F:28:93:FA:22:3B:B2:FF:14:28:05:CB:45:6B:59:C4:A6:F8:B4
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f6:cc:92:b9:73:28:2e:bc:7f:3d:ab:c4:b8:1e:aa:c4:33:
bf:16:b5:bc:91:6a:93:d7:e3:42:23:4e:7e:75:ea:22:58:a7:
36:f1:41:4c:1a:f4:c7:c2:48:19:5f:83:da:11:d6:1a:9d:03:
46:4b:90:e2:ae:9d:0c:13:27:ea:7a:bb:a3:22:c9:7b:70:7d:
3b:ea:ce:08:27:43:69:72:2b:69:29:e4:f0:9c:f1:5a:95:07:
9c:88:6d:b3:c5:7f:b2:d3:1d:61:80:3d:f4:c2:ef:ef:cf:15:
29:2e:f3:cf:2c:a8:85:dc:eb:03:cd:da:c0:14:93:ec:8f:41:
bb:81:77:3f:eb:96:49:f6:ad:59:22:05:cd:15:fb:81:b0:57:
20:0d:4e:6e:15:b1:28:4a:0d:85:e4:fb:a6:9b:20:30:49:3b:
15:71:65:51:e3:38:ca:0e:da:94:10:8f:ce:eb:62:14:f0:d9:
70:1f:be:51:44:2e:79:7e:9b:fe:ad:24:74:97:d6:b3:dd:9f:
53:5e:3d:14:01:20:0f:f0:5d:25:f3:c1:62:18:02:ac:92:7d:
a4:79:6f:e2:cc:10:3a:a9:cf:d7:91:5b:cb:74:79:85:d0:88:
bb:45:06:eb:d4:ed:f7:21:6a:ed:fd:92:1e:6a:40:67:5f:10:
72:28:dc:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6Ofcb2OZtkpy0YDA6PtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw
YTViNmMwHhcNMjUwNjA3MTUwMTA3WhcNMjUwNjA4MTUwMTA3WjAzMTEwLwYDVQQD
EygzMDhmMjg5M2ZhMjIzYmIyZmYxNDI4MDVjYjQ1NmI1OWM0YTZmOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VlipHtfKozmQ4lqDN0ORFJsHhxK
RiNpStfuRFlXv4KOAwGjGCuTImMhs+Np/rUzy+Z9r2TSJtdiIwK0ucGYxHgLHFtJ
rJAkbgfT4Sl6mXUW8smiROzZ3y5Zpx7j2ifhB3QkQ+DNd8nYuC5ZpKUK62l8YTvD
fSsonR75C7MmAxiPTTQYRspL9X21eO7wYgrZiTdtPC2V0v4Cep8PXxeFwbkTJAU2
3e3iMD7dHdmhomE5JrXxy9RIAtGd5OgPIwCcp/RhmbgrmVPn+ONXaxXl5MHFVrVD
EbEhm+Na6gdxbMupexvLZCrHMnCJqh7Rnzmi+9axg0vpCaDUKTuGak8BPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCPKJP6Ijuy/xQoBctFa1nEpvi0MB8GA1UdIwQY
MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt
MTFkZmZlMTA4MTQ3LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2QtMTFkZmZlMTA4MTQ3
LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/bMkrlz
KC68fz2rxLgeqsQzvxa1vJFqk9fjQiNOfnXqIlinNvFBTBr0x8JIGV+D2hHWGp0D
RkuQ4q6dDBMn6nq7oyLJe3B9O+rOCCdDaXIraSnk8JzxWpUHnIhts8V/stMdYYA9
9MLv788VKS7zzyyohdzrA83awBST7I9Bu4F3P+uWSfatWSIFzRX7gbBXIA1ObhWx
KEoNheT7ppsgMEk7FXFlUeM4yg7alBCPzutiFPDZcB++UUQueX6b/q0kdJfWs92f
U149FAEgD/BdJfPBYhgCrJJ9pHlv4swQOqnP15Fby3R5hdCIu0UG69Tt9yFq7f2S
HmpAZ18QcijcVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:33:36 2025 by rpki-client