Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
File: aaKML4THXo0DiGlDVRUt0rcx8kk.mft (raw, json)
Hash identifier: O36cW20tG5zAhOPMn19clhNfU9W0YedNtJMHlk4foXQ=
Subject key identifier: 7C:A6:DB:0D:8A:2B:12:C9:DB:DA:83:A5:A6:24:9F:EF:23:E3:77:75
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial: 019768BBD0064B75132154D74D929EE42845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 10:00:28 +0000
Manifest this update: Fri 13 Jun 2025 10:00:28 +0000
Manifest next update: Sat 14 Jun 2025 10:00:28 +0000
Files and hashes: 1: WdYc6wSLVkfUe7irxf4uyXxEIsM.roa (hash: dpYwLA3RR3eH0lZ7/JtVVQoaXF1Y2bKy7GfyH86APlE=)
2: aaKML4THXo0DiGlDVRUt0rcx8kk.crl (hash: o2AAaA2U7uzpzGTK5iXVu3Vi07/EipwDkzrjkUzyYts=)
3: tUMiGCgmsKV0vxqojlEA4oJxpRM.roa (hash: UydNeJbpnz/tc0fGV+RmvBf+BwmLoVjaXgDPrRLbpVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:d0:06:4b:75:13:21:54:d7:4d:92:9e:e4:28:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
Validity
Not Before: Jun 13 10:00:28 2025 GMT
Not After : Jun 14 10:00:28 2025 GMT
Subject: CN=7ca6db0d8a2b12c9dbda83a5a6249fef23e37775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:6d:fe:7d:72:97:d1:dd:49:b5:16:1f:41:
9f:86:ef:a5:99:19:f2:6f:1d:ba:38:a7:02:26:97:
f5:78:e1:8c:a7:1e:fe:27:b8:34:35:10:f5:2e:4b:
eb:93:64:d6:3f:1e:71:6a:ce:a0:4b:6c:e1:0c:b6:
70:b7:47:e3:68:de:cc:76:57:9a:10:92:15:83:9e:
64:f0:1b:5d:8f:90:65:62:2d:e4:b5:76:2c:0e:84:
48:33:02:cf:22:e0:0a:bf:92:64:9a:62:43:ba:f3:
7e:16:df:cf:09:48:bb:ae:21:53:ce:05:fa:7e:4b:
01:2b:3c:1a:22:12:65:ce:c2:3c:59:74:10:9d:32:
80:f7:21:bd:f4:fb:72:01:2f:cd:a1:31:66:10:02:
19:fc:d8:34:07:77:bc:df:8f:2e:1e:df:f8:90:32:
ec:5a:56:d3:29:eb:94:68:b0:76:a7:93:7f:1c:e8:
4c:e3:f8:14:33:4f:97:f3:ff:ca:35:b9:81:d0:d8:
f8:00:9b:70:61:ac:e3:40:58:26:b0:20:2c:be:87:
48:4c:5c:62:48:39:4a:cb:93:a3:9b:70:6f:53:61:
93:f8:0a:81:d4:6b:9c:39:bc:3d:8f:7d:6c:67:fa:
43:9f:30:52:2e:ac:f2:7f:43:95:f5:6c:74:35:dd:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A6:DB:0D:8A:2B:12:C9:DB:DA:83:A5:A6:24:9F:EF:23:E3:77:75
X509v3 Authority Key Identifier:
keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1e:a6:c8:85:5a:ba:d0:b0:7c:e1:12:2f:47:03:ce:89:07:
57:4b:b0:27:cf:21:1d:7c:0a:e9:1d:4f:52:e2:36:54:0b:12:
0a:d5:9f:7f:00:e6:42:1b:19:e7:7d:38:66:0a:67:9b:b5:18:
63:06:95:67:41:a6:26:9a:36:27:31:7c:d3:ac:76:9c:1e:82:
38:83:2e:63:57:6a:89:ab:bc:68:b1:ea:e1:0b:72:47:80:d0:
da:d8:76:1c:1e:b2:36:84:ce:eb:aa:b8:d7:31:f7:bf:f0:60:
a7:27:31:ba:73:8c:c9:19:0a:59:11:95:af:29:00:63:95:e8:
a1:d9:88:08:2d:0a:fd:e8:52:88:4e:41:80:ba:ee:81:8d:e5:
9b:cb:64:8f:31:4b:ad:f3:3c:df:7f:5c:75:e9:98:50:ff:cb:
07:bd:9a:59:e0:82:f4:3c:1a:3e:5f:a9:63:58:b6:12:93:f4:
19:72:fa:fa:87:81:37:a0:8b:59:ee:dd:73:c7:f7:c9:1d:3d:
3d:b5:6f:18:1d:2a:06:a1:9b:4f:5e:5e:54:69:28:20:6f:d9:
21:85:5e:3c:13:e4:b2:11:71:90:7d:a9:14:a7:40:96:ac:1b:
14:07:82:72:4a:e3:ae:17:60:a0:4d:fb:be:dd:48:ac:2f:84:
62:97:f3:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou9AGS3UTIVTXTZKe5ChFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTI4YzJmODRjNzVlOGQwMzg4Njk0MzU1MTUyZGQyYjcz
MWYyNDkwHhcNMjUwNjEzMTAwMDI4WhcNMjUwNjE0MTAwMDI4WjAzMTEwLwYDVQQD
Eyg3Y2E2ZGIwZDhhMmIxMmM5ZGJkYTgzYTVhNjI0OWZlZjIzZTM3Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r5t/n1yl9HdSbUWH0Gfhu+lmRny
bx26OKcCJpf1eOGMpx7+J7g0NRD1Lkvrk2TWPx5xas6gS2zhDLZwt0fjaN7Mdlea
EJIVg55k8Btdj5BlYi3ktXYsDoRIMwLPIuAKv5JkmmJDuvN+Ft/PCUi7riFTzgX6
fksBKzwaIhJlzsI8WXQQnTKA9yG99PtyAS/NoTFmEAIZ/Ng0B3e8348uHt/4kDLs
WlbTKeuUaLB2p5N/HOhM4/gUM0+X8//KNbmB0Nj4AJtwYazjQFgmsCAsvodITFxi
SDlKy5Ojm3BvU2GT+AqB1GucObw9j31sZ/pDnzBSLqzyf0OV9Wx0Nd1uIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHym2w2KKxLJ29qDpaYkn+8j43d1MB8GA1UdIwQY
MBaAFGmijC+Ex16NA4hpQ1UVLdK3MfJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYt
MmNiZDU1ZjlhOGVlLzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYtMmNiZDU1ZjlhOGVl
LzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgh6myIVa
utCwfOESL0cDzokHV0uwJ88hHXwK6R1PUuI2VAsSCtWffwDmQhsZ5304Zgpnm7UY
YwaVZ0GmJpo2JzF806x2nB6COIMuY1dqiau8aLHq4QtyR4DQ2th2HB6yNoTO66q4
1zH3v/BgpycxunOMyRkKWRGVrykAY5XoodmICC0K/ehSiE5BgLrugY3lm8tkjzFL
rfM8339cdemYUP/LB72aWeCC9DwaPl+pY1i2EpP0GXL6+oeBN6CLWe7dc8f3yR09
PbVvGB0qBqGbT15eVGkoIG/ZIYVePBPkshFxkH2pFKdAlqwbFAeCckrjrhdgoE37
vt1IrC+EYpfzmQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:26 2025 by rpki-client