Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: BV1M4IQal2ahbN8Vsy0ajj3D1xstQbTLYdFxgJwKr1w=
Subject key identifier: E5:4E:38:42:0C:7C:68:63:DB:21:C8:91:37:13:FF:17:58:46:D3:99
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 01976C2AA46CF6475C98B14BFE61FC52F163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 04B9
Signing time: Sat 14 Jun 2025 02:00:23 +0000
Manifest this update: Sat 14 Jun 2025 02:00:23 +0000
Manifest next update: Sun 15 Jun 2025 02:00:23 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: I6HS1hKSrnicfsYUjoEPqR3TOMEUVf6YFfTd7+fLkJg=)
2: sLxsX6Cbb-vY4bHw_tkYIvxMuQw.roa (hash: jzOX8F6aWJBmJnIobD4iFPA1Ti0n0pNTIWWWaqzxlUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:a4:6c:f6:47:5c:98:b1:4b:fe:61:fc:52:f1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Jun 14 02:00:23 2025 GMT
Not After : Jun 15 02:00:23 2025 GMT
Subject: CN=e54e38420c7c6863db21c8913713ff175846d399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:06:c8:f6:f2:52:72:74:ae:27:d3:ef:50:
8c:91:73:71:9b:a1:77:03:29:8e:8c:27:3a:43:f4:
8d:04:5f:f0:34:34:3e:3e:ee:82:36:72:da:b1:a5:
87:6c:bb:3f:73:97:97:d3:45:c1:b6:05:ea:53:cf:
0e:8f:05:41:b3:d6:83:94:b6:1c:68:8d:51:0e:a9:
59:1b:3f:21:02:1c:f0:ef:af:56:55:ae:ad:56:d4:
44:f7:d8:97:05:e5:74:44:d2:7e:27:0c:9f:29:67:
f5:11:7e:69:6f:c4:44:4b:f2:b5:a7:dc:0c:26:6b:
f2:be:f1:e4:5f:98:90:a9:85:c1:2d:15:d1:95:60:
77:11:da:1f:78:ed:ec:3e:e5:42:2a:1c:98:ee:6b:
18:96:33:b7:23:59:c0:b4:7a:1a:d5:22:a6:a0:49:
32:40:91:24:63:65:d4:50:8e:61:d5:46:a3:9e:63:
c2:16:66:fa:6a:47:fe:1a:9f:b7:e5:6b:c4:66:c9:
f8:d7:fc:fd:3b:cd:1a:45:18:15:bf:17:2a:40:41:
a3:b7:ae:12:1e:6b:86:22:4e:0b:65:b7:09:8f:72:
51:df:b7:fc:1d:5b:dc:64:be:57:d4:92:b1:66:83:
07:62:3d:12:3b:73:0c:05:94:bf:9c:44:82:a9:49:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:38:42:0C:7C:68:63:DB:21:C8:91:37:13:FF:17:58:46:D3:99
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:81:a7:23:70:ae:01:f0:4e:56:d7:c4:12:96:4c:a2:8d:c7:
67:87:05:88:76:24:16:0d:34:18:d9:84:0f:c0:be:ae:73:72:
46:58:c7:30:ba:af:b1:31:0e:0a:64:a7:dd:52:89:99:f7:68:
5f:32:10:6e:27:ec:8c:a5:43:61:96:bd:1e:c9:a4:30:06:39:
76:ef:b3:e0:b3:86:31:3f:30:91:1e:61:42:99:70:6f:fe:6d:
e4:b7:2c:a4:18:3c:c4:f1:16:0b:38:fc:f0:94:fe:36:d0:2a:
80:56:06:45:df:07:2b:5d:da:1f:a9:20:18:9e:e0:82:21:53:
03:bd:b4:ba:93:94:40:91:c6:7e:9c:8a:90:02:4c:a8:86:cc:
73:5c:bb:54:f7:62:be:99:d8:bc:60:7c:99:f4:4c:5a:23:1d:
ff:df:8d:eb:22:10:e0:e3:7d:f7:ae:d5:65:7f:20:4e:95:e8:
25:55:2d:e2:54:7d:e1:7e:93:4b:11:a6:c7:53:d5:9c:e1:37:
82:2f:d1:d2:bf:bd:eb:10:47:37:f6:63:b1:99:86:69:88:7d:
a7:ec:11:ed:0c:96:dc:2b:55:46:45:b0:5f:d0:14:08:22:02:
c4:db:bf:62:54:96:44:9c:8f:15:d6:e5:16:14:b1:e2:06:9e:
51:e2:9f:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKqRs9kdcmLFL/mH8UvFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2
MTg4MzAwHhcNMjUwNjE0MDIwMDIzWhcNMjUwNjE1MDIwMDIzWjAzMTEwLwYDVQQD
EyhlNTRlMzg0MjBjN2M2ODYzZGIyMWM4OTEzNzEzZmYxNzU4NDZkMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnMGyPbyUnJ0rifT71CMkXNxm6F3
AymOjCc6Q/SNBF/wNDQ+Pu6CNnLasaWHbLs/c5eX00XBtgXqU88OjwVBs9aDlLYc
aI1RDqlZGz8hAhzw769WVa6tVtRE99iXBeV0RNJ+JwyfKWf1EX5pb8RES/K1p9wM
JmvyvvHkX5iQqYXBLRXRlWB3EdofeO3sPuVCKhyY7msYljO3I1nAtHoa1SKmoEky
QJEkY2XUUI5h1UajnmPCFmb6akf+Gp+35WvEZsn41/z9O80aRRgVvxcqQEGjt64S
HmuGIk4LZbcJj3JR37f8HVvcZL5X1JKxZoMHYj0SO3MMBZS/nESCqUkx5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVOOEIMfGhj2yHIkTcT/xdYRtOZMB8GA1UdIwQY
MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt
Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5
LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYGnI3Cu
AfBOVtfEEpZMoo3HZ4cFiHYkFg00GNmED8C+rnNyRljHMLqvsTEOCmSn3VKJmfdo
XzIQbifsjKVDYZa9HsmkMAY5du+z4LOGMT8wkR5hQplwb/5t5LcspBg8xPEWCzj8
8JT+NtAqgFYGRd8HK13aH6kgGJ7ggiFTA720upOUQJHGfpyKkAJMqIbMc1y7VPdi
vpnYvGB8mfRMWiMd/9+N6yIQ4ON9967VZX8gTpXoJVUt4lR94X6TSxGmx1PVnOE3
gi/R0r+96xBHN/ZjsZmGaYh9p+wR7QyW3CtVRkWwX9AUCCICxNu/YlSWRJyPFdbl
FhSx4gaeUeKfBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:39:38 2025 by rpki-client