Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
File: aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json)
Hash identifier: Ftfm9BVZTqqqpblUPTo3MQ2sT4e9AlNepvH+AqxCzao=
Subject key identifier: 9C:37:ED:A7:4A:48:60:EE:2C:4C:35:A4:BF:1C:BC:9A:7E:B9:58:06
Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7
Certificate serial: 019769979CEA934E534874CA3477E9FFCC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 14:00:33 +0000
Manifest this update: Fri 13 Jun 2025 14:00:33 +0000
Manifest next update: Sat 14 Jun 2025 14:00:33 +0000
Files and hashes: 1: 2sc4xknukJW-o5vl5Fz96F0QucA.roa (hash: MbYv6i++8VmdaYHm6adLazhX2ff10i5IN4qgNm5FoPs=)
2: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: rmrFS1504Rr/PE7SkCLtLgvW9PDARzdpCEjo57ClXlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:9c:ea:93:4e:53:48:74:ca:34:77:e9:ff:cc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7
Validity
Not Before: Jun 13 14:00:33 2025 GMT
Not After : Jun 14 14:00:33 2025 GMT
Subject: CN=9c37eda74a4860ee2c4c35a4bf1cbc9a7eb95806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:79:0d:19:4e:dc:8d:35:82:18:68:17:93:
bb:ab:e3:0e:d9:a1:6d:48:41:b7:02:a4:f1:2c:a9:
15:3d:73:0e:c3:e5:ac:1e:a7:d5:99:04:3b:a0:6b:
e9:85:3c:51:99:36:da:a5:a1:73:88:77:e9:13:ec:
72:f8:fc:ee:c8:ef:b8:83:e5:f4:07:a0:4f:a4:4e:
d5:e3:22:8f:a9:5e:a0:a8:0e:bc:8f:f1:be:83:66:
cd:8b:62:bd:92:89:44:69:f6:73:09:1b:07:f0:1c:
98:08:07:e6:5c:08:1e:60:77:32:6a:5a:36:5a:da:
39:0f:df:ef:03:a5:b8:54:a4:9b:36:d4:1a:58:b3:
bb:8d:13:bf:35:92:71:51:4f:21:7c:29:55:49:b8:
9f:f9:14:0d:ef:9d:fa:48:40:d1:be:b8:99:9b:d2:
99:13:46:f3:bb:1e:54:e6:f3:be:c1:2b:0f:6f:a1:
06:65:cd:f9:a5:0b:a7:27:30:bc:9d:69:3b:34:9a:
db:1a:78:f9:a8:6b:16:c5:21:25:5e:06:a1:7e:27:
00:a9:b0:c0:ed:2e:b0:54:d7:e4:6a:d8:b0:cd:fb:
e6:0d:08:da:d5:b2:53:63:97:d2:1e:84:6d:e5:30:
02:e5:62:0d:d2:ca:55:48:29:c1:e3:38:39:ed:c5:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:37:ED:A7:4A:48:60:EE:2C:4C:35:A4:BF:1C:BC:9A:7E:B9:58:06
X509v3 Authority Key Identifier:
keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:84:82:6f:55:76:b7:2a:1b:b1:86:d7:06:b7:7d:e3:05:e5:
d6:a2:fd:58:10:26:c0:1d:47:b1:e4:48:2b:02:df:14:63:7d:
1a:22:36:a6:fc:5b:82:86:bd:95:39:66:1c:3f:2c:ca:51:3c:
ec:42:81:12:31:61:2e:81:98:53:7e:bb:ab:6f:b7:25:4c:70:
85:b8:c9:64:97:23:92:b7:0d:eb:46:b5:cc:1a:4e:a8:f7:5f:
a7:34:f5:ad:7d:69:39:69:2d:f7:8f:23:61:cf:4e:cf:21:8e:
a9:50:c0:17:a9:b1:3c:78:6b:d3:51:50:ae:66:bc:de:89:11:
48:3d:c4:29:92:ee:6c:4c:72:09:3d:c8:aa:4d:18:c2:0c:1a:
76:00:56:5f:fd:f0:b8:b4:1c:fb:7f:bf:98:df:99:8e:b4:ba:
77:01:84:fe:71:86:fe:6a:fe:b9:04:32:46:2e:2e:07:ad:86:
b2:60:fe:39:03:c0:a0:b6:e1:41:df:e6:35:bd:b2:0b:c3:fc:
01:83:e7:36:d4:38:9b:88:31:81:9e:ed:64:ed:50:b5:8e:46:
f2:fa:83:10:72:4b:4f:5c:35:cb:d9:e5:b3:68:4e:2c:74:fb:
2a:1f:3c:1b:9b:82:c9:0c:91:91:bb:21:1b:ae:86:88:4c:b8:
8e:d9:a6:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl5zqk05TSHTKNHfp/8w7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NDAyNThhMWE2OGFlNjA1YzA3M2ZiNTgzYjEzZTEzNzZi
Nzc4YTcwHhcNMjUwNjEzMTQwMDMzWhcNMjUwNjE0MTQwMDMzWjAzMTEwLwYDVQQD
Eyg5YzM3ZWRhNzRhNDg2MGVlMmM0YzM1YTRiZjFjYmM5YTdlYjk1ODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp15DRlO3I01ghhoF5O7q+MO2aFt
SEG3AqTxLKkVPXMOw+WsHqfVmQQ7oGvphTxRmTbapaFziHfpE+xy+PzuyO+4g+X0
B6BPpE7V4yKPqV6gqA68j/G+g2bNi2K9kolEafZzCRsH8ByYCAfmXAgeYHcyalo2
Wto5D9/vA6W4VKSbNtQaWLO7jRO/NZJxUU8hfClVSbif+RQN7536SEDRvriZm9KZ
E0bzux5U5vO+wSsPb6EGZc35pQunJzC8nWk7NJrbGnj5qGsWxSElXgahficAqbDA
7S6wVNfkatiwzfvmDQja1bJTY5fSHoRt5TAC5WIN0spVSCnB4zg57cXJHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJw37adKSGDuLEw1pL8cvJp+uVgGMB8GA1UdIwQY
MBaAFGlAJYoaaK5gXAc/tYOxPhN2t3inMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xNDM0Y2QtYTNkNi00NDg4LTg4ODgt
NzQ5ZTk4MGVjMGI3LzEvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xNDM0Y2QtYTNkNi00NDg4LTg4ODgtNzQ5ZTk4MGVjMGI3
LzEvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyYSCb1V2
tyobsYbXBrd94wXl1qL9WBAmwB1HseRIKwLfFGN9GiI2pvxbgoa9lTlmHD8sylE8
7EKBEjFhLoGYU367q2+3JUxwhbjJZJcjkrcN60a1zBpOqPdfpzT1rX1pOWkt948j
Yc9OzyGOqVDAF6mxPHhr01FQrma83okRSD3EKZLubExyCT3Iqk0YwgwadgBWX/3w
uLQc+3+/mN+ZjrS6dwGE/nGG/mr+uQQyRi4uB62GsmD+OQPAoLbhQd/mNb2yC8P8
AYPnNtQ4m4gxgZ7tZO1QtY5G8vqDEHJLT1w1y9nls2hOLHT7Kh88G5uCyQyRkbsh
G66GiEy4jtmm7A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:20 2025 by rpki-client