Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json)
Hash identifier: DFMCZP9z7xLYYSPwicduAtMB4qYEQWy8C7EQ6111W9c=
Subject key identifier: D7:67:69:07:4A:53:59:15:25:6A:13:36:26:D2:79:F6:BE:DD:43:BB
Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93
Certificate serial: 01976D3DC38A0350B2DAB46C870559B283BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
Manifest number: 0930
Signing time: Sat 14 Jun 2025 07:00:53 +0000
Manifest this update: Sat 14 Jun 2025 07:00:53 +0000
Manifest next update: Sun 15 Jun 2025 07:00:53 +0000
Files and hashes: 1: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: D/UM87uHLcKVkHzK7nDQVbmaoUcXnLwnc7bHhlaM7bQ=)
2: fUaeEEckRfBNE0XG7eTK1gjPW_w.roa (hash: sw5+wxsLZVOQhkR/KheuEdoMzOUAkFrmAKd0BU+FbcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:c3:8a:03:50:b2:da:b4:6c:87:05:59:b2:83:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93
Validity
Not Before: Jun 14 07:00:53 2025 GMT
Not After : Jun 15 07:00:53 2025 GMT
Subject: CN=d76769074a535915256a133626d279f6bedd43bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:f1:47:26:85:da:9d:c3:82:55:85:f5:2b:
92:b3:0c:70:8c:f3:54:cf:3d:99:52:65:2f:47:10:
d7:0f:0d:12:40:e8:c0:8f:b9:06:ef:f7:da:04:34:
d8:24:95:2c:b3:60:b1:fe:79:a6:2d:7e:fd:01:fa:
48:80:3a:15:38:ea:db:3c:d0:f4:e5:10:f5:d3:de:
5f:5b:5a:2d:b6:1a:88:ab:d4:9d:10:e6:60:ff:49:
d7:6a:a6:16:38:d6:2a:f3:23:ce:77:67:5b:f6:72:
81:ab:58:30:5f:47:ea:e9:7f:7e:5a:57:2a:4a:a6:
ee:b6:b3:90:0d:db:57:37:3b:1b:a7:f8:63:33:cb:
56:d2:74:74:df:1e:81:cd:65:f8:5f:eb:2b:42:b5:
9b:95:3a:33:14:2d:d3:b4:a0:34:71:26:59:8b:74:
4a:eb:26:a7:b4:dc:c1:87:b0:8b:54:b3:06:fb:e6:
ed:8f:fb:a3:5a:e0:a0:ed:77:6e:61:43:f0:ff:32:
c4:c8:4c:20:3d:d2:05:0d:23:ef:73:b4:68:e3:1e:
64:4b:30:57:ce:34:82:47:e4:94:a2:f4:1c:2f:98:
9d:96:21:db:e6:eb:ad:cf:df:24:fa:3a:e4:ee:6d:
53:80:31:e5:e3:26:3d:45:0e:b1:61:6e:29:92:56:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:67:69:07:4A:53:59:15:25:6A:13:36:26:D2:79:F6:BE:DD:43:BB
X509v3 Authority Key Identifier:
keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a2:96:04:1f:7e:f6:c8:fe:2a:71:02:e8:4f:ba:9c:18:3b:
ef:e5:f4:76:9d:d9:53:8a:da:16:6f:a0:7e:52:0b:e4:0b:f8:
dd:4d:b8:57:b4:f7:a7:91:c5:a5:95:f3:b2:91:93:67:0e:d0:
13:f6:37:dd:5d:cf:04:80:d7:2f:cb:a5:a5:3e:ba:99:4b:e8:
dc:20:5f:b2:a4:00:10:d4:78:5b:02:39:b8:e1:10:3e:2f:fb:
09:86:a7:52:e6:8e:a4:31:cf:73:83:48:f0:87:0e:88:17:ab:
4d:73:78:b0:31:9b:5d:cb:62:19:9f:50:18:ba:9d:75:d1:8e:
d8:99:62:91:3a:92:ab:f4:07:dd:d2:3f:31:78:81:85:d5:de:
cc:e9:6f:83:15:5e:76:45:cc:76:af:ff:8a:4e:e4:68:7b:d6:
11:5e:a8:60:be:fa:64:5d:01:23:8d:cb:75:e8:23:d3:78:fb:
30:69:3d:97:1b:fc:45:a9:50:18:27:2d:72:64:0a:29:8e:e7:
2b:bb:d5:1a:2d:a4:67:c5:58:7a:96:af:ce:1c:ba:00:f0:7f:
32:25:87:0f:2b:60:bb:09:e6:31:0d:33:d0:8a:37:8d:a0:13:
af:fd:95:cb:ab:58:75:65:db:18:8a:fc:c3:a5:82:e9:89:29:
4f:a3:7a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPcOKA1Cy2rRshwVZsoO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NmQ2ZjU2OTUwMGMyNTA3MGI2MTI0ZjFiODZmNjA5NTI2
NzdhOTMwHhcNMjUwNjE0MDcwMDUzWhcNMjUwNjE1MDcwMDUzWjAzMTEwLwYDVQQD
EyhkNzY3NjkwNzRhNTM1OTE1MjU2YTEzMzYyNmQyNzlmNmJlZGQ0M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJbxRyaF2p3DglWF9SuSswxwjPNU
zz2ZUmUvRxDXDw0SQOjAj7kG7/faBDTYJJUss2Cx/nmmLX79AfpIgDoVOOrbPND0
5RD1095fW1otthqIq9SdEOZg/0nXaqYWONYq8yPOd2db9nKBq1gwX0fq6X9+Wlcq
SqbutrOQDdtXNzsbp/hjM8tW0nR03x6BzWX4X+srQrWblTozFC3TtKA0cSZZi3RK
6yantNzBh7CLVLMG++btj/ujWuCg7XduYUPw/zLEyEwgPdIFDSPvc7Ro4x5kSzBX
zjSCR+SUovQcL5idliHb5uutz98k+jrk7m1TgDHl4yY9RQ6xYW4pklYA4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdnaQdKU1kVJWoTNibSefa+3UO7MB8GA1UdIwQY
MBaAFGhtb1aVAMJQcLYSTxuG9glSZ3qTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yZjUyNjktZDQzMy00N2VkLWJmMWIt
YWI2ZmM0ZTBmMWUwLzEvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8yZjUyNjktZDQzMy00N2VkLWJmMWItYWI2ZmM0ZTBmMWUw
LzEvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqKWBB9+
9sj+KnEC6E+6nBg77+X0dp3ZU4raFm+gflIL5Av43U24V7T3p5HFpZXzspGTZw7Q
E/Y33V3PBIDXL8ulpT66mUvo3CBfsqQAENR4WwI5uOEQPi/7CYanUuaOpDHPc4NI
8IcOiBerTXN4sDGbXctiGZ9QGLqdddGO2JlikTqSq/QH3dI/MXiBhdXezOlvgxVe
dkXMdq//ik7kaHvWEV6oYL76ZF0BI43Ldegj03j7MGk9lxv8RalQGCctcmQKKY7n
K7vVGi2kZ8VYepavzhy6APB/MiWHDytguwnmMQ0z0Io3jaATr/2Vy6tYdWXbGIr8
w6WC6YkpT6N62w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:52 2025 by rpki-client