Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: xgVzmMiBLjMsEKtq+3Mesi83qgGwgAFPciohwSF9WqQ=
Subject key identifier: 11:CA:D6:39:7E:52:9B:2C:AE:E0:59:5F:81:0C:C3:9A:90:88:71:91
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 01987B9BE134E4FDE4AB09B335A9DB0D9AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 1560
Signing time: Tue 05 Aug 2025 19:01:09 +0000
Manifest this update: Tue 05 Aug 2025 19:01:09 +0000
Manifest next update: Wed 06 Aug 2025 19:01:09 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: f0Os4Dp4djAQtdUatgn6BwJgRuWlim0+gR2I5YxsJYM=)
2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=)
3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:e1:34:e4:fd:e4:ab:09:b3:35:a9:db:0d:9a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Aug 5 19:01:09 2025 GMT
Not After : Aug 6 19:01:09 2025 GMT
Subject: CN=11cad6397e529b2caee0595f810cc39a90887191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:94:66:31:49:bd:22:4d:58:5e:e8:b4:95:
a9:83:59:0b:96:18:99:ab:85:b9:0e:ba:15:4e:fd:
56:af:92:1c:da:d5:6d:dd:ca:5f:cf:56:af:d2:21:
c5:d7:19:32:df:9a:bb:4d:a9:bc:f3:0c:f7:a6:7e:
e1:b8:8b:79:36:3a:02:ee:dc:56:bb:65:c6:22:35:
28:3a:25:25:bd:0d:c1:eb:68:d3:55:5a:47:56:a0:
8e:2c:19:80:8b:19:01:f4:d1:a1:1d:5f:99:41:6e:
16:05:53:aa:5f:a5:c6:05:b6:98:61:33:c4:d7:2e:
ad:5c:53:ec:d1:d0:58:e1:75:27:6c:03:09:39:9b:
12:79:d0:78:dc:50:12:37:54:1a:62:de:7a:8e:a8:
ce:17:67:3c:b0:95:cc:19:72:df:40:80:4e:b0:58:
dc:11:16:62:e1:7c:e4:27:90:c8:84:02:3a:41:10:
26:bc:8d:b0:3a:88:7e:26:43:d1:6b:06:30:82:44:
8d:59:0d:a7:89:78:52:54:b6:18:55:d0:d9:52:0f:
a6:3f:68:3f:17:ce:75:ef:12:79:a9:a1:53:24:07:
a3:83:d8:33:db:2f:30:3d:cc:c7:a7:93:b5:38:6e:
5b:b3:db:2a:ec:63:79:09:0b:47:cd:ff:66:37:50:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CA:D6:39:7E:52:9B:2C:AE:E0:59:5F:81:0C:C3:9A:90:88:71:91
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:38:8a:bb:15:8f:ba:3a:f2:4c:6d:aa:ee:b7:2a:57:a3:bc:
e3:40:db:0b:dd:18:8e:29:41:32:d9:e0:69:c1:32:6d:07:92:
ef:14:6d:01:7a:af:d0:2a:0f:ba:39:e5:95:26:43:d2:cc:7e:
f2:03:44:b7:7d:e9:66:ab:eb:99:6f:be:df:77:75:cd:d7:18:
36:1a:9b:56:44:e6:52:1d:16:75:30:85:28:d3:ef:7f:28:33:
a5:e3:f4:4b:9d:4a:2d:6b:9f:b2:07:84:75:eb:82:9b:8d:4c:
45:7f:83:04:2d:4d:ea:5a:a9:97:cc:71:78:1d:63:4c:67:3a:
2e:53:58:7b:96:33:27:ed:49:48:3f:28:4d:15:16:fb:ba:d5:
80:e2:46:1d:9c:fb:af:b2:65:4a:42:6c:fd:54:31:19:90:68:
f6:c7:71:42:99:09:72:9a:52:2a:87:2f:ce:ca:97:6f:9c:7f:
8b:a9:02:02:85:02:90:8e:82:3e:dc:a5:96:1a:c6:1b:53:55:
8f:9c:7b:90:5f:0e:96:c6:ff:27:20:35:10:54:53:d6:4d:7b:
0c:3f:14:b8:f2:9b:b1:76:25:d6:78:a1:ce:6f:35:43:a1:a3:
07:b0:75:10:73:19:72:da:12:24:ed:58:44:23:69:4c:01:1a:
b3:63:45:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7m+E05P3kqwmzNanbDZqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWIwMDJmMDAwYmQ0MjZlNGE2NDBjNzFkNmMwMjAxYjUw
NTBlMzQwHhcNMjUwODA1MTkwMTA5WhcNMjUwODA2MTkwMTA5WjAzMTEwLwYDVQQD
EygxMWNhZDYzOTdlNTI5YjJjYWVlMDU5NWY4MTBjYzM5YTkwODg3MTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QuUZjFJvSJNWF7otJWpg1kLlhiZ
q4W5DroVTv1Wr5Ic2tVt3cpfz1av0iHF1xky35q7Tam88wz3pn7huIt5NjoC7txW
u2XGIjUoOiUlvQ3B62jTVVpHVqCOLBmAixkB9NGhHV+ZQW4WBVOqX6XGBbaYYTPE
1y6tXFPs0dBY4XUnbAMJOZsSedB43FASN1QaYt56jqjOF2c8sJXMGXLfQIBOsFjc
ERZi4XzkJ5DIhAI6QRAmvI2wOoh+JkPRawYwgkSNWQ2niXhSVLYYVdDZUg+mP2g/
F8517xJ5qaFTJAejg9gz2y8wPczHp5O1OG5bs9sq7GN5CQtHzf9mN1BjHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHK1jl+UpssruBZX4EMw5qQiHGRMB8GA1UdIwQY
MBaAFGnrAC8AC9Qm5KZAxx1sAgG1BQ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0Mzct
Nzg1NDc1YzIyYzliLzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0MzctNzg1NDc1YzIyYzli
LzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDiKuxWP
ujryTG2q7rcqV6O840DbC90YjilBMtngacEybQeS7xRtAXqv0CoPujnllSZD0sx+
8gNEt33pZqvrmW++33d1zdcYNhqbVkTmUh0WdTCFKNPvfygzpeP0S51KLWufsgeE
deuCm41MRX+DBC1N6lqpl8xxeB1jTGc6LlNYe5YzJ+1JSD8oTRUW+7rVgOJGHZz7
r7JlSkJs/VQxGZBo9sdxQpkJcppSKocvzsqXb5x/i6kCAoUCkI6CPtyllhrGG1NV
j5x7kF8Olsb/JyA1EFRT1k17DD8UuPKbsXYl1nihzm81Q6GjB7B1EHMZctoSJO1Y
RCNpTAEas2NFcQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:17:19 2025 by rpki-client