Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: 1dIyGWiZ8CVgDvmQDSqd7CjnZW7PNjbVwUuXyRM0+r4=
Subject key identifier: F8:B4:FF:75:E2:21:D1:04:35:66:3E:E6:B1:D6:AF:2B:9C:3F:53:D6
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 019873E3F1D37851F7231435B020BE86ACD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 15AA
Signing time: Mon 04 Aug 2025 07:02:55 +0000
Manifest this update: Mon 04 Aug 2025 07:02:55 +0000
Manifest next update: Tue 05 Aug 2025 07:02:55 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: qakjINsydcXnQCH1d9mzZLV1PX2JFmqbNLA5nSFj9Wg=)
2: c3cfCpPele1fDi8UyS3_TO9IOZU.roa (hash: x4G7KBYVMCONibc2Rol9WiF29BGQsdbC/SUMmPlKdpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:f1:d3:78:51:f7:23:14:35:b0:20:be:86:ac:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Aug 4 07:02:55 2025 GMT
Not After : Aug 5 07:02:55 2025 GMT
Subject: CN=f8b4ff75e221d10435663ee6b1d6af2b9c3f53d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:7b:3f:34:61:df:f7:26:2f:85:bb:bb:53:
f4:0b:5a:58:24:c4:5f:2c:9f:bc:49:e3:0d:44:18:
9b:ad:b3:27:e3:0e:9c:a8:3e:4f:a9:b2:35:c8:ed:
2d:f0:d5:c5:b5:33:97:df:70:67:d3:fc:ed:e4:8e:
c8:14:44:88:e6:11:31:1a:fa:00:ed:32:a6:c1:01:
a2:18:ca:c6:24:75:bb:9f:23:46:f6:98:57:15:f8:
97:6e:06:28:e0:f4:a5:74:72:d7:37:e2:ea:0a:f4:
4d:23:d9:ac:83:e8:2a:43:9f:cb:0f:60:38:15:f2:
ca:79:99:14:70:f4:27:cc:59:10:ec:99:3f:55:f9:
08:a3:65:bd:e1:3b:6e:54:23:ab:f7:93:01:c0:92:
0a:3c:6a:bd:4d:c1:54:f4:51:99:b9:8a:24:83:0b:
90:4f:ad:fa:ca:7c:8d:25:6e:92:08:0a:6a:4f:0d:
21:c8:01:6d:68:2a:4c:e1:42:4c:62:1e:8d:f3:84:
ed:5a:85:d5:33:52:8a:0b:65:6b:98:92:c5:ae:dd:
10:e7:cf:ae:a1:48:61:aa:07:a8:be:6d:a3:39:96:
ab:30:20:bd:1f:03:82:dc:f1:8b:d6:73:42:dd:41:
5a:bc:b8:27:05:17:6b:32:2d:58:d1:00:94:6f:84:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B4:FF:75:E2:21:D1:04:35:66:3E:E6:B1:D6:AF:2B:9C:3F:53:D6
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9a:1b:6a:64:c7:44:c3:26:ee:73:7a:6f:2f:99:93:02:f3:
c7:00:e1:1a:c1:85:4c:40:5b:3b:19:cc:76:ca:d4:97:3e:f9:
09:40:0a:2c:a7:45:9b:73:01:dc:6a:02:a7:2d:be:d5:c2:d6:
14:88:9e:d0:7b:54:c9:e5:e0:92:29:7b:20:81:10:81:70:b5:
4d:2c:16:4e:b2:4c:31:8a:17:c9:46:01:5e:96:57:d5:d5:21:
de:cd:39:01:4a:65:93:6b:d9:a4:b9:42:6b:74:3b:fe:87:eb:
da:3c:72:a3:5c:f4:fd:5f:2f:08:56:d4:da:35:09:4a:9b:04:
f1:ef:1e:7f:d2:a9:7a:c3:74:5d:78:2d:a1:b8:90:40:53:8a:
4b:b3:70:66:50:ee:28:79:5b:4c:70:a8:71:5a:2b:09:f6:93:
84:b6:52:63:99:e1:25:33:83:0a:43:bf:bb:3b:9e:fa:8e:cc:
93:7e:19:47:94:07:11:21:56:30:13:93:62:99:65:28:15:df:
98:b0:a5:d4:14:1d:a7:6e:3c:22:bc:16:1c:66:a4:5d:ff:65:
b2:c2:ea:5f:6f:3c:0a:30:a2:87:df:11:c9:08:99:28:9a:18:
5e:d4:7f:ed:1a:77:08:84:56:be:9f:d1:eb:ff:f1:7d:53:63:
51:5d:25:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4/HTeFH3IxQ1sCC+hqzZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTZlNzYzZjg5YzcyMGU4N2NlNGQ3OWY4YzA5ZDA3ZjJm
YTYzOTIwHhcNMjUwODA0MDcwMjU1WhcNMjUwODA1MDcwMjU1WjAzMTEwLwYDVQQD
EyhmOGI0ZmY3NWUyMjFkMTA0MzU2NjNlZTZiMWQ2YWYyYjljM2Y1M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIB7PzRh3/cmL4W7u1P0C1pYJMRf
LJ+8SeMNRBibrbMn4w6cqD5PqbI1yO0t8NXFtTOX33Bn0/zt5I7IFESI5hExGvoA
7TKmwQGiGMrGJHW7nyNG9phXFfiXbgYo4PSldHLXN+LqCvRNI9msg+gqQ5/LD2A4
FfLKeZkUcPQnzFkQ7Jk/VfkIo2W94TtuVCOr95MBwJIKPGq9TcFU9FGZuYokgwuQ
T636ynyNJW6SCApqTw0hyAFtaCpM4UJMYh6N84TtWoXVM1KKC2VrmJLFrt0Q58+u
oUhhqgeovm2jOZarMCC9HwOC3PGL1nNC3UFavLgnBRdrMi1Y0QCUb4SpNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi0/3XiIdEENWY+5rHWryucP1PWMB8GA1UdIwQY
MBaAFGiW52P4nHIOh85NefjAnQfy+mOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEt
Yzg4NDBmYTg1MTQxLzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEtYzg4NDBmYTg1MTQx
LzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZobamTH
RMMm7nN6by+ZkwLzxwDhGsGFTEBbOxnMdsrUlz75CUAKLKdFm3MB3GoCpy2+1cLW
FIie0HtUyeXgkil7IIEQgXC1TSwWTrJMMYoXyUYBXpZX1dUh3s05AUplk2vZpLlC
a3Q7/ofr2jxyo1z0/V8vCFbU2jUJSpsE8e8ef9KpesN0XXgtobiQQFOKS7NwZlDu
KHlbTHCocVorCfaThLZSY5nhJTODCkO/uzue+o7Mk34ZR5QHESFWMBOTYpllKBXf
mLCl1BQdp248IrwWHGakXf9lssLqX288CjCih98RyQiZKJoYXtR/7Rp3CIRWvp/R
6//xfVNjUV0lHw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:49 2025 by rpki-client