Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
File: aQvbGIma-yf-H_eAUW_MC5PIuA0.mft (raw, json)
Hash identifier: 0D25nFpxfGC+2ENLPLKvgMH3mHxd17Cl3Xj4Ukf2nps=
Subject key identifier: B0:43:7F:77:00:57:5F:6A:DF:9B:AE:86:53:A3:D5:96:34:2D:17:DE
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Certificate issuer: /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial: 0198A2DFFBA41967DC2C9CD1CA911068F014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
Manifest number: 07B7
Signing time: Wed 13 Aug 2025 10:00:44 +0000
Manifest this update: Wed 13 Aug 2025 10:00:44 +0000
Manifest next update: Thu 14 Aug 2025 10:00:44 +0000
Files and hashes: 1: 5qlyqHqHN9fm7YIJbWQAFC8mvBE.roa (hash: i7ncddTAht6A90LZTtfDRpJSDX/ZI6t1vgckOHtmIjg=)
2: aQvbGIma-yf-H_eAUW_MC5PIuA0.crl (hash: 0fUp2MnC51x6mY8zQWZ/0q+ggXgwzlwRL0eO2ak2pY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:df:fb:a4:19:67:dc:2c:9c:d1:ca:91:10:68:f0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Validity
Not Before: Aug 13 10:00:44 2025 GMT
Not After : Aug 14 10:00:44 2025 GMT
Subject: CN=b0437f7700575f6adf9bae8653a3d596342d17de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:06:26:05:42:79:13:ee:01:b9:54:cc:69:
77:51:60:10:fc:b7:2b:7c:aa:e7:bd:14:3b:88:e3:
04:cc:e6:eb:75:51:8f:ad:d6:54:1a:5f:84:e0:ca:
ad:ae:42:fd:e3:0a:e0:1d:d6:94:63:8d:26:29:42:
99:27:8d:3b:06:cf:f5:78:34:16:22:42:1f:5c:05:
75:08:ce:ea:6e:6c:a0:49:ea:68:89:9a:d2:b7:fd:
c8:bb:40:28:88:1a:28:23:24:0e:ff:90:79:bd:ad:
a1:3d:cd:c2:5a:c3:5f:1d:4b:55:f6:d6:ea:6c:d0:
58:5d:28:37:e1:86:8e:ea:95:7c:6d:cf:f0:c4:23:
e5:79:c7:1f:0d:9d:94:78:cb:b0:e3:b0:30:e0:0d:
d2:11:d2:c7:14:63:72:b4:cf:46:3c:88:7e:3b:79:
c0:10:9e:8d:dc:b5:bf:6b:3d:2b:bd:00:1c:f1:ae:
5f:87:af:d1:65:26:02:f9:63:74:12:2a:10:26:2d:
06:f3:41:51:60:da:c6:69:a8:13:33:8d:f9:5d:86:
f4:03:1d:5c:b2:74:62:26:ea:3f:0d:99:37:f4:0b:
14:e2:34:fd:23:e0:2f:c0:9a:43:dc:93:b2:1e:dc:
0c:5c:0b:b2:fa:eb:e6:f1:c0:6e:86:b2:6e:7f:06:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:43:7F:77:00:57:5F:6A:DF:9B:AE:86:53:A3:D5:96:34:2D:17:DE
X509v3 Authority Key Identifier:
keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d1:f7:44:2f:68:6b:f2:ee:07:c0:c6:f0:17:59:ab:a1:6c:
28:a1:ce:f6:1f:02:c3:bb:29:4e:d9:a7:8b:32:8a:80:dc:ff:
e2:4c:17:0b:48:fb:c6:02:10:fc:13:5e:91:c2:71:f2:0a:65:
a5:b4:47:34:17:a5:95:a8:f3:c8:e0:1e:91:fd:0a:96:4a:51:
2b:89:83:7c:b1:1e:da:db:f5:bb:f2:73:47:0e:16:65:60:3c:
3f:b1:b2:2b:c8:e8:fa:ff:50:2f:e3:b8:32:e6:bd:f8:87:f9:
d2:da:ef:5c:97:65:0d:3b:5a:bc:af:88:b4:15:9e:bf:bf:b2:
76:81:d4:31:00:90:e6:ee:e3:2a:73:8c:c5:9d:88:d2:6a:93:
51:d2:00:c8:50:f8:4f:5b:cd:a9:7e:df:a0:1f:f9:fb:b4:8a:
d2:8a:d4:4a:4c:de:5e:f7:b1:36:73:fb:39:1e:84:76:3e:a2:
97:67:0b:4b:23:4a:63:8a:75:84:ed:ba:52:73:93:6e:39:a3:
a6:32:b2:0e:4b:ad:1a:d7:58:dc:53:fc:13:78:e7:24:c2:9d:
0e:f2:17:cd:5e:ba:43:ed:0a:8c:2b:f8:ee:bc:af:4b:46:17:
b8:99:53:6b:35:15:58:50:7b:4b:58:05:96:2c:25:e8:76:4f:
f1:8e:1b:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZii3/ukGWfcLJzRypEQaPAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGJkYjE4ODk5YWZiMjdmZTFmZjc4MDUxNmZjYzBiOTNj
OGI4MGQwHhcNMjUwODEzMTAwMDQ0WhcNMjUwODE0MTAwMDQ0WjAzMTEwLwYDVQQD
EyhiMDQzN2Y3NzAwNTc1ZjZhZGY5YmFlODY1M2EzZDU5NjM0MmQxN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwIGJgVCeRPuAblUzGl3UWAQ/Lcr
fKrnvRQ7iOMEzObrdVGPrdZUGl+E4MqtrkL94wrgHdaUY40mKUKZJ407Bs/1eDQW
IkIfXAV1CM7qbmygSepoiZrSt/3Iu0AoiBooIyQO/5B5va2hPc3CWsNfHUtV9tbq
bNBYXSg34YaO6pV8bc/wxCPleccfDZ2UeMuw47Aw4A3SEdLHFGNytM9GPIh+O3nA
EJ6N3LW/az0rvQAc8a5fh6/RZSYC+WN0EioQJi0G80FRYNrGaagTM435XYb0Ax1c
snRiJuo/DZk39AsU4jT9I+AvwJpD3JOyHtwMXAuy+uvm8cBuhrJufwZ9cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBDf3cAV19q35uuhlOj1ZY0LRfeMB8GA1UdIwQY
MBaAFGkL2xiJmvsn/h/3gFFvzAuTyLgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82ZDg0NzAtNDg2MS00MTZkLWE3MmEt
MjhhZGVkOGRkZmFiLzEvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82ZDg0NzAtNDg2MS00MTZkLWE3MmEtMjhhZGVkOGRkZmFi
LzEvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNH3RC9o
a/LuB8DG8BdZq6FsKKHO9h8Cw7spTtmnizKKgNz/4kwXC0j7xgIQ/BNekcJx8gpl
pbRHNBellajzyOAekf0KlkpRK4mDfLEe2tv1u/JzRw4WZWA8P7GyK8jo+v9QL+O4
Mua9+If50trvXJdlDTtavK+ItBWev7+ydoHUMQCQ5u7jKnOMxZ2I0mqTUdIAyFD4
T1vNqX7foB/5+7SK0orUSkzeXvexNnP7OR6Edj6il2cLSyNKY4p1hO26UnOTbjmj
pjKyDkutGtdY3FP8E3jnJMKdDvIXzV66Q+0KjCv47ryvS0YXuJlTazUVWFB7S1gF
liwl6HZP8Y4b4w==
-----END CERTIFICATE-----
Generated at Wed Aug 13 19:41:03 2025 by rpki-client