
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: EkqdSRUEig0hov/OjXF6W5u/G51zsp8rY6W4fud07ZM=
Subject key identifier: E4:8D:87:D9:FA:C0:92:19:D8:9E:7B:4B:38:12:2C:64:68:D9:F7:A9
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 01987ED3D4C03C0EC7E6206FF23B341A6FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 10:01:08 +0000
Manifest this update: Wed 06 Aug 2025 10:01:08 +0000
Manifest next update: Thu 07 Aug 2025 10:01:08 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: zQsHKnjFRwsxeuRns4DsaBN42420LNEwkbgYro++BwA=)
2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=)
3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:d4:c0:3c:0e:c7:e6:20:6f:f2:3b:34:1a:6f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Aug 6 10:01:08 2025 GMT
Not After : Aug 7 10:01:08 2025 GMT
Subject: CN=e48d87d9fac09219d89e7b4b38122c6468d9f7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5d:6e:76:b3:f4:37:8c:a2:30:46:57:b0:ef:
a1:08:18:a4:3e:c9:06:7f:4f:95:07:e2:6b:00:02:
f9:af:45:2a:32:ba:a6:86:e6:4a:dd:37:d9:c3:16:
fa:c4:ec:04:22:13:8c:ac:aa:5c:33:6a:9d:17:5a:
d3:14:23:b4:da:39:2a:3c:67:3d:ba:0b:e4:9e:86:
d7:9a:5f:c9:72:8d:a5:78:ee:dc:ba:6a:4a:c1:ba:
08:da:47:c9:9d:58:34:36:4e:e3:9b:59:89:e5:15:
76:5c:cc:85:ba:98:b3:57:9d:3c:9b:52:70:24:71:
39:ad:20:41:b3:d6:40:53:00:ac:7b:54:b3:5e:ce:
33:50:98:3c:50:9f:92:af:33:ba:98:74:34:7e:54:
19:1f:79:ce:c9:77:4f:a0:e6:35:9b:ef:11:1f:80:
63:3e:f9:72:cf:fa:de:51:e6:f9:2a:6e:64:26:6e:
7f:e9:8a:39:e4:6c:69:06:6a:a1:b6:a6:8c:af:f0:
c8:c6:27:e7:53:64:46:ff:13:3b:3f:f0:c6:ac:e8:
d1:fd:56:00:55:a1:67:c1:3d:1e:69:fd:1e:23:86:
ca:50:ad:d2:91:40:2e:e7:a1:97:f3:01:b4:40:9d:
ae:9d:b7:2c:08:49:12:8e:99:59:ff:b9:f4:08:b9:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:87:D9:FA:C0:92:19:D8:9E:7B:4B:38:12:2C:64:68:D9:F7:A9
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c2:2e:ae:87:20:08:0a:c8:f8:1a:06:4e:9e:22:6a:2d:52:
b8:71:44:50:de:46:78:29:18:a5:c2:c8:ff:45:ff:b9:f6:b5:
18:94:39:d0:9b:24:c3:40:e6:ed:75:3b:e1:82:a5:99:9d:f0:
e9:59:b9:a7:0e:97:9a:f4:28:da:74:d9:e7:e5:0f:14:b9:83:
55:f9:03:eb:c3:35:8d:9a:e4:3e:3c:c2:9d:1b:c7:ba:1e:fb:
ab:12:00:15:b1:8e:79:a6:24:f5:00:c3:62:97:95:fd:60:4a:
36:5b:7f:61:cf:ba:49:86:3e:0e:12:d7:18:75:3d:37:b3:7a:
e2:85:84:e2:be:2d:de:64:79:70:2e:47:40:d7:c7:f9:a3:c6:
1f:28:f5:bb:bc:22:a6:1b:4b:d4:ec:ac:e3:0e:67:a6:15:92:
04:97:ef:95:fd:1b:53:b3:25:98:94:90:71:84:08:9b:5b:37:
1a:6b:80:7d:c2:da:df:3f:7a:e0:ff:ef:e5:9a:1a:cd:b5:a5:
1b:a8:e9:fa:25:1d:03:80:a3:66:d3:0b:fb:b7:c4:72:2e:de:
3c:2c:cd:ce:27:3b:84:65:c8:d2:c0:0a:51:b5:18:bd:f5:f5:
78:01:7d:22:b7:9e:00:ab:46:fd:48:09:50:92:19:7f:c2:25:
a2:ec:b1:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+09TAPA7H5iBv8js0Gm+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkMTY5NzdlZWUyZjU4YmViMWJiN2FhMmY0YjJmYTFh
YmZjNDgwHhcNMjUwODA2MTAwMTA4WhcNMjUwODA3MTAwMTA4WjAzMTEwLwYDVQQD
EyhlNDhkODdkOWZhYzA5MjE5ZDg5ZTdiNGIzODEyMmM2NDY4ZDlmN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l1udrP0N4yiMEZXsO+hCBikPskG
f0+VB+JrAAL5r0UqMrqmhuZK3TfZwxb6xOwEIhOMrKpcM2qdF1rTFCO02jkqPGc9
ugvknobXml/Jco2leO7cumpKwboI2kfJnVg0Nk7jm1mJ5RV2XMyFupizV508m1Jw
JHE5rSBBs9ZAUwCse1SzXs4zUJg8UJ+SrzO6mHQ0flQZH3nOyXdPoOY1m+8RH4Bj
Pvlyz/reUeb5Km5kJm5/6Yo55GxpBmqhtqaMr/DIxifnU2RG/xM7P/DGrOjR/VYA
VaFnwT0eaf0eI4bKUK3SkUAu56GX8wG0QJ2unbcsCEkSjplZ/7n0CLmrKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSNh9n6wJIZ2J57SzgSLGRo2fepMB8GA1UdIwQY
MBaAFAMk0Wl37uL1i+sbt6ovSy+hq/xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMt
YzI1ZDdmY2EwMDM3LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMtYzI1ZDdmY2EwMDM3
LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMIurocg
CArI+BoGTp4iai1SuHFEUN5GeCkYpcLI/0X/ufa1GJQ50Jskw0Dm7XU74YKlmZ3w
6Vm5pw6XmvQo2nTZ5+UPFLmDVfkD68M1jZrkPjzCnRvHuh77qxIAFbGOeaYk9QDD
YpeV/WBKNlt/Yc+6SYY+DhLXGHU9N7N64oWE4r4t3mR5cC5HQNfH+aPGHyj1u7wi
phtL1Oys4w5nphWSBJfvlf0bU7MlmJSQcYQIm1s3GmuAfcLa3z964P/v5ZoazbWl
G6jp+iUdA4CjZtML+7fEci7ePCzNzic7hGXI0sAKUbUYvfX1eAF9IreeAKtG/UgJ
UJIZf8IlouyxyQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:32 2025 by rpki-client