Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: 0ucRriUETUI0wbMfKK+FMfsvmPNKBjE2ZaUqcJAKaw8=
Subject key identifier: 29:41:2A:E5:D6:69:02:78:DD:F8:78:EF:ED:4F:CE:CF:15:39:9A:3B
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 01976D06A9D9D70F7E81FAA0D2DF7C0C1231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 06:00:42 +0000
Manifest this update: Sat 14 Jun 2025 06:00:42 +0000
Manifest next update: Sun 15 Jun 2025 06:00:42 +0000
Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: rAzbkSHH7F1qSUk04SH+2vz8U3OTI36TaCTite6tupg=)
3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:a9:d9:d7:0f:7e:81:fa:a0:d2:df:7c:0c:12:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Jun 14 06:00:42 2025 GMT
Not After : Jun 15 06:00:42 2025 GMT
Subject: CN=29412ae5d6690278ddf878efed4fcecf15399a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:8d:ed:d5:ca:e7:24:1e:3d:34:82:f4:78:
8c:0c:d6:49:ec:48:b6:e9:b9:d8:4f:65:6b:c5:18:
89:af:84:44:35:04:ad:30:47:ea:3d:bd:14:48:7b:
67:54:22:de:71:59:fc:dc:8f:1c:2b:37:80:19:1d:
59:ff:92:b1:99:37:22:8e:58:f6:cd:ae:80:3c:c6:
a0:f6:b3:9a:64:a0:4b:a2:32:96:68:f5:31:24:aa:
95:fc:64:3f:bf:25:a3:0d:f0:f3:84:dc:61:67:a7:
67:0f:c5:96:1a:61:c6:16:18:72:ff:c8:e5:55:93:
3e:4b:b9:3e:64:8a:4a:23:7f:c4:91:66:f9:eb:6b:
e4:6f:87:45:98:ea:b8:e0:62:d4:b8:6b:81:34:31:
c8:15:e1:54:50:cd:7a:a8:fa:b0:55:5a:01:70:1a:
07:ca:53:93:61:d3:07:f3:93:6c:a8:ff:bc:21:40:
d7:f7:f6:8b:11:c4:17:ee:bb:a3:13:09:83:66:46:
b1:ad:ce:f6:33:ca:e9:b4:da:cc:a6:90:e9:3b:75:
63:75:ee:b2:d4:24:4d:2d:5d:90:f2:db:4f:ea:b0:
c7:ab:f8:b8:ea:32:ec:1f:64:1c:f1:e7:96:71:4f:
7e:c6:56:74:d6:af:31:41:8c:c5:22:55:e3:fa:e5:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:2A:E5:D6:69:02:78:DD:F8:78:EF:ED:4F:CE:CF:15:39:9A:3B
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3a:4c:82:f6:46:31:93:43:1c:9d:f0:c1:35:b4:cf:17:0f:
3a:a8:ac:3c:c0:d1:24:ca:f1:63:06:f5:47:fa:12:bc:79:0c:
cf:57:62:e2:d5:6d:c0:f8:11:f2:eb:ea:75:31:df:73:6d:7d:
c8:32:d1:ed:55:48:31:0f:b7:5c:77:e8:df:5d:fa:62:e6:29:
5a:25:d7:70:1f:a4:a1:89:75:76:e5:26:f4:df:c0:4f:d5:0c:
fd:4b:11:14:9b:61:96:6f:14:05:40:e6:d9:93:45:71:82:25:
c8:b4:6d:d6:77:d0:7d:69:27:28:c3:6c:37:f2:2b:ee:fb:1f:
8d:f8:d3:10:2c:b7:be:fe:dc:c1:87:ff:49:7c:a7:95:13:b7:
a9:ca:66:c8:e0:3c:f5:da:a7:f3:31:79:16:51:73:5b:2a:7d:
86:f2:76:ee:f9:2d:82:cc:ab:88:9d:2c:bd:79:38:ea:31:ca:
6b:fe:72:b7:75:1d:a6:d4:8b:f6:dd:65:af:65:0e:5c:d3:b6:
ad:63:c1:19:24:24:40:89:25:f7:44:0f:d2:1c:ea:fe:a6:fa:
79:34:ec:a2:e2:59:22:60:40:26:4c:10:37:f5:23:3f:9e:98:
b1:af:f0:fb:a2:1d:91:8d:b2:e3:6b:32:c6:22:52:8a:66:ac:
b7:f1:0f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBqnZ1w9+gfqg0t98DBIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTRlOTA4OTlmZjI1NjQ0NTIwNzI0Y2RlOGMyMTE2MTM2
MDBiZWYwHhcNMjUwNjE0MDYwMDQyWhcNMjUwNjE1MDYwMDQyWjAzMTEwLwYDVQQD
EygyOTQxMmFlNWQ2NjkwMjc4ZGRmODc4ZWZlZDRmY2VjZjE1Mzk5YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPmN7dXK5yQePTSC9HiMDNZJ7Ei2
6bnYT2VrxRiJr4RENQStMEfqPb0USHtnVCLecVn83I8cKzeAGR1Z/5KxmTcijlj2
za6APMag9rOaZKBLojKWaPUxJKqV/GQ/vyWjDfDzhNxhZ6dnD8WWGmHGFhhy/8jl
VZM+S7k+ZIpKI3/EkWb562vkb4dFmOq44GLUuGuBNDHIFeFUUM16qPqwVVoBcBoH
ylOTYdMH85NsqP+8IUDX9/aLEcQX7rujEwmDZkaxrc72M8rptNrMppDpO3Vjde6y
1CRNLV2Q8ttP6rDHq/i46jLsH2Qc8eeWcU9+xlZ01q8xQYzFIlXj+uU9bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClBKuXWaQJ43fh47+1Pzs8VOZo7MB8GA1UdIwQY
MBaAFGlU6QiZ/yVkRSByTN6MIRYTYAvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAt
M2Y2ZWU3MDU5MTViLzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAtM2Y2ZWU3MDU5MTVi
LzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTpMgvZG
MZNDHJ3wwTW0zxcPOqisPMDRJMrxYwb1R/oSvHkMz1di4tVtwPgR8uvqdTHfc219
yDLR7VVIMQ+3XHfo3136YuYpWiXXcB+koYl1duUm9N/AT9UM/UsRFJthlm8UBUDm
2ZNFcYIlyLRt1nfQfWknKMNsN/Ir7vsfjfjTECy3vv7cwYf/SXynlRO3qcpmyOA8
9dqn8zF5FlFzWyp9hvJ27vktgsyriJ0svXk46jHKa/5yt3UdptSL9t1lr2UOXNO2
rWPBGSQkQIkl90QP0hzq/qb6eTTsouJZImBAJkwQN/UjP56Ysa/w+6IdkY2y42sy
xiJSimast/EPzg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:34 2025 by rpki-client