Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: op+3e3OjfUyRBWScj0gQUp874+z6UcpkzNc1akrTDLM=
Subject key identifier: CC:B3:55:95:51:43:D5:6D:BC:18:74:5F:F6:24:69:AA:43:51:E6:66
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019894B82789C09043FE1BA06567E244C3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 16:02:33 +0000
Manifest this update: Sun 10 Aug 2025 16:02:33 +0000
Manifest next update: Mon 11 Aug 2025 16:02:33 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: 7tTxyyHWgmj+hdHRMvEOAJcNfbQKqP0IuJknpqvBGbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:27:89:c0:90:43:fe:1b:a0:65:67:e2:44:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Aug 10 16:02:33 2025 GMT
Not After : Aug 11 16:02:33 2025 GMT
Subject: CN=ccb355955143d56dbc18745ff62469aa4351e666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:c9:f0:49:3f:25:4a:e2:63:5a:5d:fb:0b:
ac:99:5e:91:b5:66:ba:d8:e4:70:b2:42:26:15:4d:
ef:a2:b5:1f:98:c5:36:eb:4c:5a:2a:04:40:46:8d:
51:d9:2c:8f:ed:16:80:b4:dd:00:35:c8:a9:44:e1:
26:ab:4e:69:03:f2:ed:b9:18:38:20:8e:c4:44:7d:
43:93:a1:4d:b6:f4:3a:e9:16:58:47:9d:37:3a:68:
09:ae:be:5e:32:b5:c1:e8:34:ce:75:f4:fb:d2:30:
11:f7:b1:d1:e9:a1:a8:d2:45:68:db:d6:57:48:c0:
53:96:0b:44:72:65:15:bf:36:e9:bc:c0:f2:13:78:
e9:8f:f7:b8:1f:5a:23:d0:f1:87:7a:42:e5:cd:4d:
b5:08:94:5a:d5:d0:b8:19:4c:f8:73:cd:f8:51:82:
57:e5:3e:fd:f6:d1:ca:a2:88:3f:49:29:01:32:75:
ef:a4:36:f3:af:3e:48:8d:be:45:92:1a:eb:74:cc:
74:6c:85:bf:33:ec:62:77:b0:37:fc:02:88:cd:25:
0f:ff:7d:08:64:78:17:0d:66:a3:c4:03:69:57:89:
38:a5:72:f5:a1:0c:b1:14:31:bf:5e:0d:9b:b9:4a:
76:b5:e4:6f:75:ae:2a:07:e9:72:10:86:51:e4:e4:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:55:95:51:43:D5:6D:BC:18:74:5F:F6:24:69:AA:43:51:E6:66
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ff:e8:39:0a:89:41:63:79:6c:61:e9:59:cf:19:3d:a3:e4:
4f:10:55:d2:d3:f3:16:4c:ae:1f:4c:de:dd:c5:3e:be:7b:6f:
d0:2c:62:1d:14:84:ba:bb:14:a7:75:65:4e:3e:ad:b5:6d:a9:
bd:3e:d7:24:b2:d1:47:46:e5:0d:9d:6a:15:35:33:d4:0b:75:
a2:e3:19:3c:c6:ca:21:ed:1a:bc:35:b8:8e:64:fd:8a:51:9f:
cc:5d:ab:7f:0e:81:2b:05:2e:73:c3:c6:bc:cb:9b:99:cc:14:
86:8c:a6:85:40:84:87:54:ed:f9:fa:68:33:00:12:47:f8:1e:
26:6f:eb:ec:f8:d6:e3:53:ec:ae:fb:47:fc:2a:bc:db:8f:92:
df:03:78:17:ee:48:03:4e:ce:8c:e6:6f:5d:2a:f7:1b:af:7e:
e0:f2:c2:e8:fa:34:7f:1f:c1:cd:c4:00:a8:eb:18:04:bd:d2:
c2:dd:7d:1c:91:95:07:b0:ee:27:40:6d:bb:fc:76:15:04:89:
20:98:40:d5:c0:26:d8:8f:fa:73:74:4e:e2:7d:bd:97:06:77:
c6:89:ab:2e:16:f0:b7:1f:79:4b:73:c5:58:2e:0f:ef:70:84:
32:23:df:45:65:23:9d:ba:97:6d:a9:37:eb:81:42:98:79:2c:
c1:a3:37:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUuCeJwJBD/hugZWfiRMPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YWY3MGJkYTc3Y2Y4NThlMTY0ZDZiN2M3MDllODc4ZmQx
YTYwNDUwHhcNMjUwODEwMTYwMjMzWhcNMjUwODExMTYwMjMzWjAzMTEwLwYDVQQD
EyhjY2IzNTU5NTUxNDNkNTZkYmMxODc0NWZmNjI0NjlhYTQzNTFlNjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7jJ8Ek/JUriY1pd+wusmV6RtWa6
2ORwskImFU3vorUfmMU260xaKgRARo1R2SyP7RaAtN0ANcipROEmq05pA/LtuRg4
II7ERH1Dk6FNtvQ66RZYR503OmgJrr5eMrXB6DTOdfT70jAR97HR6aGo0kVo29ZX
SMBTlgtEcmUVvzbpvMDyE3jpj/e4H1oj0PGHekLlzU21CJRa1dC4GUz4c834UYJX
5T799tHKoog/SSkBMnXvpDbzrz5Ijb5FkhrrdMx0bIW/M+xid7A3/AKIzSUP/30I
ZHgXDWajxANpV4k4pXL1oQyxFDG/Xg2buUp2teRvda4qB+lyEIZR5OT7FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyzVZVRQ9VtvBh0X/YkaapDUeZmMB8GA1UdIwQY
MBaAFGmvcL2nfPhY4WTWt8cJ6Hj9GmBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgt
NjI4NzdmZTQ4NjE4LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgtNjI4NzdmZTQ4NjE4
LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf//oOQqJ
QWN5bGHpWc8ZPaPkTxBV0tPzFkyuH0ze3cU+vntv0CxiHRSEursUp3VlTj6ttW2p
vT7XJLLRR0blDZ1qFTUz1At1ouMZPMbKIe0avDW4jmT9ilGfzF2rfw6BKwUuc8PG
vMubmcwUhoymhUCEh1Tt+fpoMwASR/geJm/r7PjW41PsrvtH/Cq824+S3wN4F+5I
A07OjOZvXSr3G69+4PLC6Po0fx/BzcQAqOsYBL3Swt19HJGVB7DuJ0Btu/x2FQSJ
IJhA1cAm2I/6c3RO4n29lwZ3xomrLhbwtx95S3PFWC4P73CEMiPfRWUjnbqXbak3
64FCmHkswaM3Jg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:03 2025 by rpki-client