Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: zryIdvp1TApAX5VWLW9Ha4GQG5/4TXhgOXu3JPWYPls=
Subject key identifier: 9C:76:DE:EE:DE:21:ED:71:46:DD:F1:A6:3F:52:D3:F6:12:37:ED:57
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 0197470BA75D7B54AF73E1DFFA10AC68494F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 21:00:35 +0000
Manifest this update: Fri 06 Jun 2025 21:00:35 +0000
Manifest next update: Sat 07 Jun 2025 21:00:35 +0000
Files and hashes: 1: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (hash: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=)
2: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: Q3TmxpSmwihH1oswy6iTfPe+h5hpa4UZGdWeC3HeVWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:a7:5d:7b:54:af:73:e1:df:fa:10:ac:68:49:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Jun 6 21:00:35 2025 GMT
Not After : Jun 7 21:00:35 2025 GMT
Subject: CN=9c76deeede21ed7146ddf1a63f52d3f61237ed57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:84:e5:2f:6b:0c:ae:dd:2d:d7:23:51:a7:d4:
e5:79:51:71:78:25:43:37:c7:b1:d3:43:68:cb:e8:
f2:c8:b8:e2:c7:ee:22:dd:9f:5f:70:5a:d8:c1:77:
87:3d:4c:7e:dd:ac:00:95:40:f2:64:f5:47:78:22:
c7:60:6d:8c:2e:9d:0c:ed:8e:35:9c:77:6f:07:7a:
46:31:5d:3b:b9:0b:8e:d1:36:06:67:e5:66:43:56:
bf:50:8c:2b:d5:d6:71:38:1e:29:59:66:9e:e8:bc:
a4:60:19:5f:a1:42:33:9a:bd:ef:0f:01:98:2b:2b:
e8:35:4e:a3:cb:11:a6:39:1b:df:31:99:bf:61:13:
03:aa:93:3a:ed:f0:16:e7:f1:31:35:54:f7:36:71:
be:68:27:62:95:0a:e0:ca:0b:81:52:3f:fc:12:64:
26:12:ba:41:e2:82:56:2b:b8:07:8b:01:59:90:a9:
95:d5:0f:36:e6:89:b7:0e:61:44:9d:16:53:6a:76:
00:da:d1:d8:e1:fe:fc:81:d3:57:ad:89:a2:94:e3:
8b:20:57:fc:6d:01:81:63:f1:21:c0:e9:d2:a1:cc:
5e:01:dd:3d:d3:52:c5:d0:8f:7f:53:56:11:50:5a:
3e:ff:a1:2c:fd:30:c0:eb:f9:de:0e:e3:a6:5b:ab:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:76:DE:EE:DE:21:ED:71:46:DD:F1:A6:3F:52:D3:F6:12:37:ED:57
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fb:50:eb:6a:11:d0:71:dd:34:6d:88:89:f1:84:01:c5:75:
33:fe:4f:07:82:e2:96:5d:0a:fd:82:f4:de:3c:00:91:16:72:
d3:d2:2d:6d:c7:14:de:38:76:4f:69:66:42:e6:9e:66:ca:d6:
d6:b9:f3:db:7f:a4:04:c6:49:46:eb:f0:3c:2d:a7:1a:97:df:
a4:82:f1:e7:57:ed:4b:36:31:80:38:96:9d:7e:d1:d2:ba:e3:
5c:6f:43:21:fa:b2:76:87:df:c2:54:06:4f:9a:38:7c:96:1b:
90:69:87:cf:72:78:d5:b2:89:f2:99:ca:3a:c3:59:27:ca:b8:
5d:d2:89:77:f9:60:dd:a7:2c:90:24:60:d0:91:36:1f:33:4e:
47:cf:eb:72:9a:ef:ac:8d:3d:29:a2:ee:60:59:a9:55:2d:49:
fb:b2:d7:08:13:a8:98:27:f0:9b:da:ca:be:00:62:84:27:db:
c9:f8:d4:96:40:71:5d:f2:31:54:3e:e6:af:d5:82:6c:a3:ef:
d2:57:41:8d:82:f8:42:9a:50:ec:af:ac:7c:a8:54:92:df:2f:
c8:58:b1:4f:48:bc:1a:61:f9:4f:dc:63:bb:97:8e:33:7d:16:
99:64:87:0b:a7:d8:b9:8d:7e:57:91:9c:3b:56:e7:ca:06:7f:
09:58:b8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC6dde1Svc+Hf+hCsaElPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw
MzkzYWEwHhcNMjUwNjA2MjEwMDM1WhcNMjUwNjA3MjEwMDM1WjAzMTEwLwYDVQQD
Eyg5Yzc2ZGVlZWRlMjFlZDcxNDZkZGYxYTYzZjUyZDNmNjEyMzdlZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+YTlL2sMrt0t1yNRp9TleVFxeCVD
N8ex00Noy+jyyLjix+4i3Z9fcFrYwXeHPUx+3awAlUDyZPVHeCLHYG2MLp0M7Y41
nHdvB3pGMV07uQuO0TYGZ+VmQ1a/UIwr1dZxOB4pWWae6LykYBlfoUIzmr3vDwGY
KyvoNU6jyxGmORvfMZm/YRMDqpM67fAW5/ExNVT3NnG+aCdilQrgyguBUj/8EmQm
ErpB4oJWK7gHiwFZkKmV1Q825om3DmFEnRZTanYA2tHY4f78gdNXrYmilOOLIFf8
bQGBY/EhwOnSocxeAd0901LF0I9/U1YRUFo+/6Es/TDA6/neDuOmW6vRvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJx23u7eIe1xRt3xpj9S0/YSN+1XMB8GA1UdIwQY
MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt
YWRmNDNmMDRlYzljLzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj
LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPtQ62oR
0HHdNG2IifGEAcV1M/5PB4Lill0K/YL03jwAkRZy09ItbccU3jh2T2lmQuaeZsrW
1rnz23+kBMZJRuvwPC2nGpffpILx51ftSzYxgDiWnX7R0rrjXG9DIfqydoffwlQG
T5o4fJYbkGmHz3J41bKJ8pnKOsNZJ8q4XdKJd/lg3acskCRg0JE2HzNOR8/rcprv
rI09KaLuYFmpVS1J+7LXCBOomCfwm9rKvgBihCfbyfjUlkBxXfIxVD7mr9WCbKPv
0ldBjYL4QppQ7K+sfKhUkt8vyFixT0i8GmH5T9xju5eOM30WmWSHC6fYuY1+V5Gc
O1bnygZ/CVi4YA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:49 2025 by rpki-client