Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: CYHFWwsm34TxuhJzsYzQAJvInF97wfq27G8UYjCLXVE=
Subject key identifier: AC:DA:BB:FA:A5:5D:2D:9F:18:C0:B2:ED:A0:91:1C:24:0E:78:83:04
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 0197813245F5806ED87180D0DBF8D4C8D24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 0ED5
Signing time: Wed 18 Jun 2025 04:00:44 +0000
Manifest this update: Wed 18 Jun 2025 04:00:44 +0000
Manifest next update: Thu 19 Jun 2025 04:00:44 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: HqNgqcer2LZRRgpYgtHeAQojCAN46wTl5pgqCom/Odg=)
2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:32:45:f5:80:6e:d8:71:80:d0:db:f8:d4:c8:d2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Jun 18 04:00:44 2025 GMT
Not After : Jun 19 04:00:44 2025 GMT
Subject: CN=acdabbfaa55d2d9f18c0b2eda0911c240e788304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:39:79:f3:14:66:80:33:c6:bf:c7:10:67:
c5:c1:99:ae:97:67:1f:58:d7:6a:43:bf:f3:5f:dc:
72:9a:07:0d:0e:50:dd:85:5e:9a:87:f0:a2:75:e1:
6e:ae:67:81:2d:1b:18:45:16:f8:17:ee:b8:f3:2a:
79:c3:85:6f:74:0f:7d:4e:fa:65:e9:e8:a5:4d:86:
8f:0d:c8:50:fd:05:38:a5:35:aa:4a:bd:40:7b:a6:
fa:84:c1:c9:14:99:40:fd:da:f2:46:1b:fc:c6:bb:
3b:17:19:3f:10:d6:e1:cc:a6:ff:bb:9e:48:42:a4:
c7:e2:fc:93:e5:74:c2:3d:bf:68:c8:18:6d:44:ed:
14:b0:70:2b:60:59:8b:6d:1b:23:6e:82:07:38:5f:
49:48:fc:1c:81:5a:db:c9:32:bb:e8:1f:0f:fd:22:
45:54:57:35:bd:1b:59:73:84:94:f3:43:84:f7:56:
3f:61:a6:1f:d9:b3:3b:93:0f:92:17:30:5b:31:ef:
48:3c:83:6b:40:b9:a2:b4:cb:a6:9c:81:b9:63:ad:
e1:d5:d1:e7:6a:1a:86:0d:9a:8d:eb:80:0d:ce:df:
a4:04:6c:38:92:a6:d2:d5:58:44:ca:c0:e4:c7:dd:
f1:9c:ee:7d:37:3f:66:20:ab:56:6f:f0:66:5a:e4:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DA:BB:FA:A5:5D:2D:9F:18:C0:B2:ED:A0:91:1C:24:0E:78:83:04
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ba:85:98:2d:42:12:d8:0e:ff:b7:72:f8:c6:ef:38:eb:22:
fc:77:89:67:ba:2f:27:4d:1c:3e:58:22:28:37:4a:63:c9:01:
85:7b:d3:cd:a1:f1:a3:cc:15:85:6d:9d:e5:32:0e:fa:84:f2:
00:1b:5e:2a:7d:5b:00:7c:ac:f1:ce:0d:96:3c:4f:bd:de:91:
fc:be:3c:52:8e:22:5f:c9:1e:4e:1a:6b:67:b7:f5:fd:fa:8c:
88:fd:e1:a6:2e:b4:4b:45:89:0c:76:fa:65:7a:ac:4a:79:87:
d6:d1:a5:68:fe:33:9f:94:e3:60:fc:12:a8:00:06:de:cc:49:
78:b3:8f:8e:af:ff:df:da:5e:a1:18:1c:d7:9c:4e:52:33:aa:
ea:96:ff:51:14:17:96:c3:89:bd:7e:75:b2:06:2e:41:71:0a:
fe:48:ef:cb:04:81:e2:aa:cd:24:fa:87:e5:68:c0:cf:73:c5:
24:21:55:0e:7c:02:42:9e:d9:fb:90:a0:7c:1d:ba:d3:9e:4c:
56:a1:d7:b4:58:ca:f9:83:93:4c:f4:3c:73:f6:f0:02:1f:4f:
62:fe:87:8d:9f:24:3d:24:f3:80:9c:49:41:02:23:e8:d4:a6:
69:45:b7:cd:18:32:30:d0:7c:02:ae:59:03:79:40:40:89:1e:
55:3d:d0:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeBMkX1gG7YcYDQ2/jUyNJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh
NTQ0NmYwHhcNMjUwNjE4MDQwMDQ0WhcNMjUwNjE5MDQwMDQ0WjAzMTEwLwYDVQQD
EyhhY2RhYmJmYWE1NWQyZDlmMThjMGIyZWRhMDkxMWMyNDBlNzg4MzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukE5efMUZoAzxr/HEGfFwZmul2cf
WNdqQ7/zX9xymgcNDlDdhV6ah/CideFurmeBLRsYRRb4F+648yp5w4VvdA99Tvpl
6eilTYaPDchQ/QU4pTWqSr1Ae6b6hMHJFJlA/dryRhv8xrs7Fxk/ENbhzKb/u55I
QqTH4vyT5XTCPb9oyBhtRO0UsHArYFmLbRsjboIHOF9JSPwcgVrbyTK76B8P/SJF
VFc1vRtZc4SU80OE91Y/YaYf2bM7kw+SFzBbMe9IPINrQLmitMumnIG5Y63h1dHn
ahqGDZqN64ANzt+kBGw4kqbS1VhEysDkx93xnO59Nz9mIKtWb/BmWuQRmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzau/qlXS2fGMCy7aCRHCQOeIMEMB8GA1UdIwQY
MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt
ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx
LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAybqFmC1C
EtgO/7dy+MbvOOsi/HeJZ7ovJ00cPlgiKDdKY8kBhXvTzaHxo8wVhW2d5TIO+oTy
ABteKn1bAHys8c4NljxPvd6R/L48Uo4iX8keThprZ7f1/fqMiP3hpi60S0WJDHb6
ZXqsSnmH1tGlaP4zn5TjYPwSqAAG3sxJeLOPjq//39peoRgc15xOUjOq6pb/URQX
lsOJvX51sgYuQXEK/kjvywSB4qrNJPqH5WjAz3PFJCFVDnwCQp7Z+5CgfB26055M
VqHXtFjK+YOTTPQ8c/bwAh9PYv6HjZ8kPSTzgJxJQQIj6NSmaUW3zRgyMNB8Aq5Z
A3lAQIkeVT3Q9Q==
-----END CERTIFICATE-----
Generated at Wed Jun 18 11:14:00 2025 by rpki-client