Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json)
Hash identifier: wK3f8KmbRhN3YeRo5/ZH/8oJoCJMpaFGpMvWHvupEto=
Subject key identifier: F4:8B:D4:12:AB:1C:89:E7:8E:8C:04:57:69:0A:CE:AF:CC:C8:84:5D
Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Certificate serial: 01987D8AC2369792733A823B957060C0CF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
Manifest number: 0505
Signing time: Wed 06 Aug 2025 04:01:42 +0000
Manifest this update: Wed 06 Aug 2025 04:01:42 +0000
Manifest next update: Thu 07 Aug 2025 04:01:42 +0000
Files and hashes: 1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=)
2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: WDsPFA/D+5+iDeVUL5LNb0LZcH1FcGPviRA/Q9JAcrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:c2:36:97:92:73:3a:82:3b:95:70:60:c0:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Validity
Not Before: Aug 6 04:01:42 2025 GMT
Not After : Aug 7 04:01:42 2025 GMT
Subject: CN=f48bd412ab1c89e78e8c0457690aceafccc8845d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:a2:a4:d2:a0:98:e5:c4:0b:5a:3a:8d:1c:
aa:16:af:52:ae:41:82:e2:f9:12:23:4a:fa:89:db:
7b:d3:be:d7:07:8c:ef:41:4c:f9:0c:1c:1c:51:25:
fe:6e:88:1f:0a:80:c4:ab:7f:91:8e:87:a7:23:e4:
9b:a3:62:ab:c0:0d:97:44:30:56:a3:32:f2:82:9c:
10:6c:44:59:3b:df:b5:47:53:d3:b5:d2:12:1f:bc:
0e:54:ed:56:0e:bc:33:c0:0c:e3:21:be:5f:97:ae:
4a:71:de:43:57:8a:74:43:c2:99:ec:bc:7e:b7:f7:
fc:a4:de:ed:b1:da:c4:b7:94:4a:7c:33:ef:0b:09:
6b:29:99:64:f2:43:3d:68:35:da:cf:54:eb:2e:f2:
b9:6d:e7:b6:40:2e:89:6c:d1:93:e5:47:b4:40:07:
1e:41:9e:40:72:13:45:a1:f8:83:16:36:a9:d5:ce:
8a:b1:0c:d0:8e:de:a2:52:8d:a9:36:91:87:0e:a3:
22:54:0e:fa:c0:e8:28:d5:a4:70:0e:56:84:66:ba:
d1:ff:e3:85:46:6f:69:b4:50:d0:d8:a6:9a:75:10:
69:57:df:e1:9a:76:2d:9d:88:4b:40:c3:3d:20:39:
4c:f4:87:c2:ce:c7:9a:60:a3:68:6b:86:45:2a:8a:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8B:D4:12:AB:1C:89:E7:8E:8C:04:57:69:0A:CE:AF:CC:C8:84:5D
X509v3 Authority Key Identifier:
keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ea:b1:5a:b4:8b:d4:db:38:cd:ce:3b:21:68:85:37:c3:01:
a8:63:64:23:aa:c4:d4:b2:f7:48:0c:02:97:58:7b:2a:22:65:
8b:55:9f:63:c0:a8:04:d9:7e:d6:9d:92:32:9a:58:99:66:0c:
ca:f8:bb:b8:e9:87:79:c9:32:66:91:f8:aa:3b:df:ac:3d:d8:
d8:5f:bb:ed:1f:b5:58:37:bb:62:56:bc:e8:f9:51:ee:c6:81:
79:e3:9b:e8:82:16:06:45:ae:24:e3:a5:79:04:03:d0:0d:a4:
43:9b:74:04:9a:e3:55:e9:de:33:1f:bf:94:77:a9:bb:b4:e4:
bb:cf:89:83:7a:d5:84:bc:8f:6e:65:2f:7b:93:98:20:7f:77:
d0:fd:8d:0f:b4:8e:20:97:d9:7d:92:d1:a0:4e:71:16:a1:db:
6c:30:40:a7:ba:34:e6:03:3b:be:81:03:b2:0a:01:92:e5:6c:
70:6e:10:00:a0:81:ea:09:4a:72:2c:0d:77:c8:c8:62:85:ec:
81:19:f9:1d:7e:03:84:e8:2f:b9:f2:a3:13:9e:ee:3e:25:5f:
6c:03:20:61:e1:27:da:0a:6f:10:9d:91:32:15:0c:62:c0:ec:
48:95:ee:db:dc:c7:99:da:57:4d:db:69:2e:83:69:ed:3a:cb:
d5:28:be:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9isI2l5JzOoI7lXBgwM9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjBiYTc1ZmNlNTU3MjFjMzA2Mzc1ODliZTNkMzRmYTI1
OWMyYjUwHhcNMjUwODA2MDQwMTQyWhcNMjUwODA3MDQwMTQyWjAzMTEwLwYDVQQD
EyhmNDhiZDQxMmFiMWM4OWU3OGU4YzA0NTc2OTBhY2VhZmNjYzg4NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+uipNKgmOXEC1o6jRyqFq9SrkGC
4vkSI0r6idt7077XB4zvQUz5DBwcUSX+bogfCoDEq3+RjoenI+Sbo2KrwA2XRDBW
ozLygpwQbERZO9+1R1PTtdISH7wOVO1WDrwzwAzjIb5fl65Kcd5DV4p0Q8KZ7Lx+
t/f8pN7tsdrEt5RKfDPvCwlrKZlk8kM9aDXaz1TrLvK5bee2QC6JbNGT5Ue0QAce
QZ5AchNFofiDFjap1c6KsQzQjt6iUo2pNpGHDqMiVA76wOgo1aRwDlaEZrrR/+OF
Rm9ptFDQ2KaadRBpV9/hmnYtnYhLQMM9IDlM9IfCzseaYKNoa4ZFKoq7gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSL1BKrHInnjowEV2kKzq/MyIRdMB8GA1UdIwQY
MBaAFGiwunX85VchwwY3WJvj00+iWcK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQt
NDk5ZWYxNmUyMDgyLzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQtNDk5ZWYxNmUyMDgy
LzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+qxWrSL
1Ns4zc47IWiFN8MBqGNkI6rE1LL3SAwCl1h7KiJli1WfY8CoBNl+1p2SMppYmWYM
yvi7uOmHeckyZpH4qjvfrD3Y2F+77R+1WDe7Yla86PlR7saBeeOb6IIWBkWuJOOl
eQQD0A2kQ5t0BJrjVeneMx+/lHepu7Tku8+Jg3rVhLyPbmUve5OYIH930P2ND7SO
IJfZfZLRoE5xFqHbbDBAp7o05gM7voEDsgoBkuVscG4QAKCB6glKciwNd8jIYoXs
gRn5HX4DhOgvufKjE57uPiVfbAMgYeEn2gpvEJ2RMhUMYsDsSJXu29zHmdpXTdtp
LoNp7TrL1Si+Nw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:16 2025 by rpki-client