Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier: eBdqUNj79GTMbw+VFs+JW8ifU4tmgvBQElxsL2WGIUU=
Subject key identifier: 65:80:89:FB:7D:98:D9:B8:EB:D2:CC:A5:0F:A6:4F:53:28:55:B2:AC
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial: 0198752BDBF05AB72EB7D5852AF76495CDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number: 14DE
Signing time: Mon 04 Aug 2025 13:01:05 +0000
Manifest this update: Mon 04 Aug 2025 13:01:05 +0000
Manifest next update: Tue 05 Aug 2025 13:01:05 +0000
Files and hashes: 1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: U/aYLirpL9mfJbH3mHEyBt3Oh+byzA3EPpxkhl31Gjs=)
2: fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa (hash: ctYinvsmftRWQTXHwlWnEmWM2W9y6/GDBjzyDD3IcGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:db:f0:5a:b7:2e:b7:d5:85:2a:f7:64:95:cd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Validity
Not Before: Aug 4 13:01:05 2025 GMT
Not After : Aug 5 13:01:05 2025 GMT
Subject: CN=658089fb7d98d9b8ebd2cca50fa64f532855b2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:9b:b5:18:a9:ab:56:7a:90:8d:b4:60:7a:
88:09:75:df:da:cc:e2:c8:87:99:c1:a8:b3:40:86:
8b:85:7a:d4:7d:de:90:c1:0d:c2:a7:1d:bb:ad:36:
be:c4:ba:f4:b5:b3:4d:72:80:8c:f2:7f:c6:67:0f:
ab:ec:c7:35:82:eb:a8:2a:f8:f2:6e:03:b1:f1:09:
33:79:06:b5:d1:1a:d5:a6:f6:20:5f:cd:87:1a:1b:
cb:1c:8e:0b:02:05:82:bc:84:65:00:53:d4:6d:c1:
49:ac:25:e6:e0:b1:e3:78:8a:8d:d1:fb:0b:a4:5b:
2b:65:ab:54:6b:4a:d3:f5:9d:54:dd:2d:c5:b8:23:
43:ff:28:fb:aa:3c:a7:1f:6b:b8:1c:18:d9:c2:f0:
ad:d2:d3:fa:61:30:a3:6d:d4:c8:08:8b:3d:b3:e5:
3e:14:94:81:ad:2f:dd:11:39:3a:45:f7:6e:c8:36:
b6:31:bd:a8:e2:44:4b:15:9e:9c:98:2c:08:b5:78:
b3:0f:57:5f:ae:03:06:05:83:59:33:c4:22:1d:00:
00:82:39:f3:5f:91:3b:4b:6d:78:6f:c2:e5:a5:57:
20:ea:af:cf:d8:35:a6:75:b2:fa:35:bb:c1:bb:26:
16:03:64:bc:6f:c8:59:3f:85:03:29:f2:cb:af:e2:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:80:89:FB:7D:98:D9:B8:EB:D2:CC:A5:0F:A6:4F:53:28:55:B2:AC
X509v3 Authority Key Identifier:
keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:88:3b:2a:a0:fa:81:77:4b:68:52:d1:9e:90:69:1b:5d:77:
bd:f5:e4:44:f1:d9:fb:72:13:66:e1:5d:a6:26:07:5d:bc:10:
84:ac:0b:6b:0b:89:e6:91:e4:52:d9:98:ff:06:8c:99:2f:0f:
1e:c7:4c:5c:7a:b6:10:aa:3c:44:f9:b4:ee:10:cb:e6:ae:c7:
67:e6:aa:98:39:ac:23:50:69:26:d1:2c:7d:56:e3:15:89:fa:
1a:61:b9:4c:81:20:c8:37:d2:47:68:3f:cc:76:a0:70:df:f5:
f8:cd:bd:33:37:83:60:0f:a5:3a:b3:0c:27:b6:30:b4:19:4c:
87:a6:04:6d:aa:0f:95:da:d8:c1:d9:83:54:bf:cf:90:a5:fc:
26:04:4b:13:1d:c6:b6:12:07:52:25:07:c5:6b:fe:c8:4d:0a:
dd:38:8a:c8:15:28:71:27:ae:1d:02:37:c6:80:61:3e:2a:06:
ce:a8:e7:22:e9:30:fc:d0:90:ab:f8:56:7a:72:22:b4:95:e4:
a5:3a:76:f1:65:46:30:2b:d5:ba:10:51:1b:5b:c5:d9:54:6b:
f3:2f:c5:df:d2:cf:b9:6c:91:2f:19:b8:52:49:fb:52:57:06:
88:2a:06:21:73:39:c5:15:ed:6e:d3:0b:0f:89:7c:39:4e:05:
97:15:0b:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K9vwWrcut9WFKvdklc3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDhkMmNhOGEyYjQzYjZjYWQyNWIyMjI2NTM1NGZlMzAz
OTExYTAwHhcNMjUwODA0MTMwMTA1WhcNMjUwODA1MTMwMTA1WjAzMTEwLwYDVQQD
Eyg2NTgwODlmYjdkOThkOWI4ZWJkMmNjYTUwZmE2NGY1MzI4NTViMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21ibtRipq1Z6kI20YHqICXXf2szi
yIeZwaizQIaLhXrUfd6QwQ3Cpx27rTa+xLr0tbNNcoCM8n/GZw+r7Mc1guuoKvjy
bgOx8QkzeQa10RrVpvYgX82HGhvLHI4LAgWCvIRlAFPUbcFJrCXm4LHjeIqN0fsL
pFsrZatUa0rT9Z1U3S3FuCND/yj7qjynH2u4HBjZwvCt0tP6YTCjbdTICIs9s+U+
FJSBrS/dETk6RfduyDa2Mb2o4kRLFZ6cmCwItXizD1dfrgMGBYNZM8QiHQAAgjnz
X5E7S214b8LlpVcg6q/P2DWmdbL6NbvBuyYWA2S8b8hZP4UDKfLLr+JZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWAift9mNm469LMpQ+mT1MoVbKsMB8GA1UdIwQY
MBaAFAFI0sqKK0O2ytJbIiZTVP4wORGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjct
MWJmODY4YTAzNTM4LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjctMWJmODY4YTAzNTM4
LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIg7KqD6
gXdLaFLRnpBpG113vfXkRPHZ+3ITZuFdpiYHXbwQhKwLawuJ5pHkUtmY/waMmS8P
HsdMXHq2EKo8RPm07hDL5q7HZ+aqmDmsI1BpJtEsfVbjFYn6GmG5TIEgyDfSR2g/
zHagcN/1+M29MzeDYA+lOrMMJ7YwtBlMh6YEbaoPldrYwdmDVL/PkKX8JgRLEx3G
thIHUiUHxWv+yE0K3TiKyBUocSeuHQI3xoBhPioGzqjnIukw/NCQq/hWenIitJXk
pTp28WVGMCvVuhBRG1vF2VRr8y/F39LPuWyRLxm4Ukn7UlcGiCoGIXM5xRXtbtML
D4l8OU4FlxULPA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:16 2025 by rpki-client