Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: 3ZWYbghhkB5puabcfXOi8v3dMKFtN+dqksizWqedJ6k=
Subject key identifier: 6B:43:EF:5A:F1:E7:2F:5C:0E:9E:4E:FB:17:78:B5:CA:BD:44:5C:82
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019882B0F9F3261E177895F8B68F6ECF5EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 04:01:33 +0000
Manifest this update: Thu 07 Aug 2025 04:01:33 +0000
Manifest next update: Fri 08 Aug 2025 04:01:33 +0000
Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: 5vfpWuDqwNDenX1Qnzpm6UELcSq8qfoOths5PvtR4xM=)
3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:f9:f3:26:1e:17:78:95:f8:b6:8f:6e:cf:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Aug 7 04:01:33 2025 GMT
Not After : Aug 8 04:01:33 2025 GMT
Subject: CN=6b43ef5af1e72f5c0e9e4efb1778b5cabd445c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:9d:a2:9f:8c:01:dc:28:32:bc:6b:5d:99:
8a:a3:a7:8b:1c:1a:82:79:1a:53:ae:bf:8e:49:16:
a9:90:4d:e2:ac:e3:8d:b0:a3:c3:3b:fe:51:60:ce:
b5:bc:57:a1:a8:d1:32:f8:b0:83:4c:3f:64:41:7b:
e4:fc:f0:ba:39:9c:c2:ad:2d:d0:7e:08:da:39:d0:
f5:59:85:56:d8:23:e1:d5:c1:5c:7e:e8:7f:dc:f7:
78:60:d4:40:3a:a1:05:6b:cb:71:7d:25:da:42:95:
63:7b:ca:6f:32:9a:2a:01:55:af:4a:3e:5a:94:06:
b0:ca:00:74:64:9d:36:71:e0:9c:e8:18:60:e7:5e:
3d:6f:8f:44:59:5e:65:c6:65:28:15:ed:4f:ef:dc:
9a:2e:ee:bf:af:c8:e1:ad:5b:72:1c:e5:cd:17:8e:
e9:52:3a:12:e7:4e:df:97:2a:e8:bd:4e:de:59:6a:
78:3e:f3:c0:29:83:79:b1:c7:58:e7:93:8f:76:24:
a7:3a:34:eb:89:8e:5f:a8:6f:30:4f:57:19:1c:72:
c0:89:a0:1a:24:80:ae:df:47:f1:21:3c:c4:e5:43:
ec:d9:aa:b7:ae:78:13:02:8f:0a:69:6d:1d:b9:3c:
82:7b:01:96:04:ca:7b:2d:35:e2:fc:f9:3f:15:38:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:43:EF:5A:F1:E7:2F:5C:0E:9E:4E:FB:17:78:B5:CA:BD:44:5C:82
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fd:85:93:b8:32:6c:d7:a0:c7:1e:a4:45:cf:85:db:5a:b4:
a0:51:b5:0b:a4:a0:29:82:b7:ee:bb:17:3c:7b:1b:0d:40:b8:
10:c0:52:0a:03:fb:6d:2b:ef:fb:f6:a1:66:03:c7:54:de:be:
0e:5c:4b:ce:cf:5e:9d:8b:27:67:a9:4c:27:a9:db:51:ae:f3:
58:55:86:0d:ec:b5:ee:ea:9c:1e:f3:4d:b3:7d:0a:c2:3f:fb:
ce:7c:75:02:b9:29:0f:21:b0:e7:98:e2:ce:06:03:74:9a:d8:
3f:3a:b9:2c:77:54:18:d7:75:18:9b:9c:fd:45:28:00:5f:a5:
de:30:9c:7b:46:ca:1f:da:fc:2d:6f:f0:c6:25:2c:fe:d4:24:
c6:29:9b:dc:94:5f:18:50:43:73:26:8e:9e:43:47:ca:89:31:
d1:a7:86:27:80:58:f2:e2:22:be:9a:dc:34:fe:92:e2:25:d0:
84:bb:d8:5d:ab:ea:38:85:98:ad:6f:1f:a5:a4:cd:b3:4c:c9:
82:d9:cd:0b:45:46:f6:81:2e:5b:46:37:fb:9c:87:16:b2:c0:
36:50:fb:f3:11:03:3a:e6:82:65:f3:25:62:33:b4:5b:b1:f9:
02:3b:55:8c:62:a7:0d:52:95:76:f4:00:e4:84:84:cb:c1:67:
70:f9:ed:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCsPnzJh4XeJX4to9uz16lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm
YjEyMDkwHhcNMjUwODA3MDQwMTMzWhcNMjUwODA4MDQwMTMzWjAzMTEwLwYDVQQD
Eyg2YjQzZWY1YWYxZTcyZjVjMGU5ZTRlZmIxNzc4YjVjYWJkNDQ1YzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fOdop+MAdwoMrxrXZmKo6eLHBqC
eRpTrr+OSRapkE3irOONsKPDO/5RYM61vFehqNEy+LCDTD9kQXvk/PC6OZzCrS3Q
fgjaOdD1WYVW2CPh1cFcfuh/3Pd4YNRAOqEFa8txfSXaQpVje8pvMpoqAVWvSj5a
lAawygB0ZJ02ceCc6Bhg5149b49EWV5lxmUoFe1P79yaLu6/r8jhrVtyHOXNF47p
UjoS507flyrovU7eWWp4PvPAKYN5scdY55OPdiSnOjTriY5fqG8wT1cZHHLAiaAa
JICu30fxITzE5UPs2aq3rngTAo8KaW0duTyCewGWBMp7LTXi/Pk/FThe9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtD71rx5y9cDp5O+xd4tcq9RFyCMB8GA1UdIwQY
MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt
MGI4YjA3NWU4NmRiLzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi
LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjf2Fk7gy
bNegxx6kRc+F21q0oFG1C6SgKYK37rsXPHsbDUC4EMBSCgP7bSvv+/ahZgPHVN6+
DlxLzs9enYsnZ6lMJ6nbUa7zWFWGDey17uqcHvNNs30Kwj/7znx1ArkpDyGw55ji
zgYDdJrYPzq5LHdUGNd1GJuc/UUoAF+l3jCce0bKH9r8LW/wxiUs/tQkximb3JRf
GFBDcyaOnkNHyokx0aeGJ4BY8uIivprcNP6S4iXQhLvYXavqOIWYrW8fpaTNs0zJ
gtnNC0VG9oEuW0Y3+5yHFrLANlD78xEDOuaCZfMlYjO0W7H5AjtVjGKnDVKVdvQA
5ISEy8FncPntdg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:31:53 2025 by rpki-client