Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: zGdpQiLlUztmgrtstj+XZTaZgsMXIjEqzJ+KuGSGlEw=
Subject key identifier: 1D:95:97:90:F1:C4:EB:84:A0:7A:04:F9:C3:E2:C2:B7:3E:3C:B0:06
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 01987418EA641324CC2EFE2E2635B9AA493F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 1156
Signing time: Mon 04 Aug 2025 08:00:46 +0000
Manifest this update: Mon 04 Aug 2025 08:00:46 +0000
Manifest next update: Tue 05 Aug 2025 08:00:46 +0000
Files and hashes: 1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=)
2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: V6F8YVtPYvw6enB2XlmZl+ctZWEQJZisRb4G8QVIzXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ea:64:13:24:cc:2e:fe:2e:26:35:b9:aa:49:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Aug 4 08:00:46 2025 GMT
Not After : Aug 5 08:00:46 2025 GMT
Subject: CN=1d959790f1c4eb84a07a04f9c3e2c2b73e3cb006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:0c:7c:89:7f:88:1c:f5:f4:cd:2e:14:95:
0b:5d:4d:b4:03:2f:2b:b3:57:09:7e:ae:d9:6f:b4:
c4:1a:e7:db:f0:64:39:fc:8f:6d:a2:7c:95:4f:f6:
20:8c:df:ce:6e:ad:78:b7:dd:23:59:48:c1:2f:06:
fc:d5:5b:96:62:b7:a0:e1:f4:4f:f8:e8:2b:f7:aa:
e1:58:7a:bd:73:c5:1d:60:44:4e:ad:eb:91:62:2f:
a8:c6:57:8d:59:f5:ca:03:d3:1d:66:bf:15:b5:15:
48:8c:ab:da:0b:5d:e7:95:23:47:f1:92:66:c8:6d:
39:f9:ef:16:27:72:2c:7b:18:dd:d1:ff:49:22:98:
2b:20:7c:a2:e2:d5:dd:bb:be:eb:a0:55:6f:00:3d:
1b:37:34:10:a1:e8:cb:70:8b:71:b3:e7:57:51:af:
13:93:f1:ce:c1:47:32:74:6c:5c:c8:be:fd:42:f1:
0d:4e:87:1a:f2:3f:fb:8e:b1:38:eb:38:88:73:31:
36:2f:a4:34:da:dc:53:71:5f:4f:ac:ce:62:53:73:
5b:b7:cf:ed:83:25:6f:0f:81:bf:f3:f1:25:9c:13:
42:39:d5:c1:93:00:83:ab:9e:33:87:0e:f5:8a:e2:
d6:d3:b2:a2:00:e6:50:84:c5:15:fe:e0:08:6c:31:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:95:97:90:F1:C4:EB:84:A0:7A:04:F9:C3:E2:C2:B7:3E:3C:B0:06
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e1:e6:94:d9:27:6a:37:e7:7f:8e:fe:61:58:f9:bd:d0:80:
66:aa:ee:7b:dd:a3:ed:2a:5f:eb:81:34:c8:55:28:a0:19:e8:
0d:5d:89:0b:5f:ce:9e:da:27:25:b1:b1:62:0b:b3:21:1b:37:
9c:9e:39:50:73:9b:3e:5f:24:e0:8f:97:b4:f5:10:e4:31:4b:
85:dd:f6:b1:85:b5:2e:44:ce:1a:81:ab:79:c5:95:d9:95:5e:
70:6a:3c:f8:fc:7e:c3:42:d1:a1:ee:e7:ed:08:7a:78:2a:1f:
14:15:0c:37:c8:e0:bc:20:91:40:e7:c4:cd:72:8d:07:75:fe:
c5:b1:c8:8b:45:23:ac:dc:fd:95:ef:a7:e6:4a:de:6e:b4:7f:
0a:0b:8d:95:2e:2e:18:9a:4c:0f:f8:9c:2f:60:ab:8e:1f:be:
8e:aa:12:a0:09:3a:0f:41:ec:e3:db:1f:06:9a:90:49:15:cd:
10:1f:c6:52:00:29:1a:62:ab:47:6b:0d:01:ac:1a:f4:c5:2d:
a6:9b:6c:49:32:8a:50:49:f9:65:48:de:63:26:3c:e1:75:e5:
96:12:7f:47:05:60:06:b4:e7:8a:89:7e:e3:30:4c:e1:fd:7a:
b9:dd:ff:ef:67:8d:de:5e:a5:c8:38:a1:a8:59:73:1f:2b:5b:
10:71:58:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GOpkEyTMLv4uJjW5qkk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYzcyYTczNDM5MmY2Y2Y3OTJiM2QwYzNlZDExODIwMjg2
ZjE5ZjQwHhcNMjUwODA0MDgwMDQ2WhcNMjUwODA1MDgwMDQ2WjAzMTEwLwYDVQQD
EygxZDk1OTc5MGYxYzRlYjg0YTA3YTA0ZjljM2UyYzJiNzNlM2NiMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnokMfIl/iBz19M0uFJULXU20Ay8r
s1cJfq7Zb7TEGufb8GQ5/I9tonyVT/YgjN/Obq14t90jWUjBLwb81VuWYreg4fRP
+Ogr96rhWHq9c8UdYEROreuRYi+oxleNWfXKA9MdZr8VtRVIjKvaC13nlSNH8ZJm
yG05+e8WJ3Isexjd0f9JIpgrIHyi4tXdu77roFVvAD0bNzQQoejLcItxs+dXUa8T
k/HOwUcydGxcyL79QvENToca8j/7jrE46ziIczE2L6Q02txTcV9PrM5iU3Nbt8/t
gyVvD4G/8/ElnBNCOdXBkwCDq54zhw71iuLW07KiAOZQhMUV/uAIbDGmjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2Vl5DxxOuEoHoE+cPiwrc+PLAGMB8GA1UdIwQY
MBaAFGrHKnNDkvbPeSs9DD7RGCAobxn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mY2Q1MTYtODhmNS00ZTQ4LTlhYjQt
OTNkZjQ1MDAzZTdlLzEvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mY2Q1MTYtODhmNS00ZTQ4LTlhYjQtOTNkZjQ1MDAzZTdl
LzEvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+HmlNkn
ajfnf47+YVj5vdCAZqrue92j7Spf64E0yFUooBnoDV2JC1/OntonJbGxYguzIRs3
nJ45UHObPl8k4I+XtPUQ5DFLhd32sYW1LkTOGoGrecWV2ZVecGo8+Px+w0LRoe7n
7Qh6eCofFBUMN8jgvCCRQOfEzXKNB3X+xbHIi0UjrNz9le+n5krebrR/CguNlS4u
GJpMD/icL2Crjh++jqoSoAk6D0Hs49sfBpqQSRXNEB/GUgApGmKrR2sNAawa9MUt
pptsSTKKUEn5ZUjeYyY84XXllhJ/RwVgBrTniol+4zBM4f16ud3/72eN3l6lyDih
qFlzHytbEHFY+Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:35 2025 by rpki-client