Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: i/z+UI67NY8qbn2whflLphhxodEgy6UDGgjU8rgsCl4=
Subject key identifier: CB:F7:BB:87:B2:3B:F9:79:9F:82:1B:1C:69:E6:F5:3B:AF:F5:64:CC
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 01976BBD80A190956D8CF339E3FC382BBBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 1285
Signing time: Sat 14 Jun 2025 00:01:10 +0000
Manifest this update: Sat 14 Jun 2025 00:01:10 +0000
Manifest next update: Sun 15 Jun 2025 00:01:10 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: HuX2l1jwRZ5eAieyY2044TmeC+kDVMJ5qLwlmbhBwn8=)
3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:80:a1:90:95:6d:8c:f3:39:e3:fc:38:2b:bb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Jun 14 00:01:10 2025 GMT
Not After : Jun 15 00:01:10 2025 GMT
Subject: CN=cbf7bb87b23bf9799f821b1c69e6f53baff564cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:21:13:00:bf:35:f1:25:fb:f3:28:62:fb:
84:7e:19:89:2c:45:67:44:2a:b5:53:8d:0b:ac:0b:
fa:8d:85:05:67:5c:fd:f6:24:3e:89:cc:2b:e2:06:
31:d3:6f:c7:0e:7f:b3:83:fb:64:d9:39:8a:a5:90:
7e:1d:35:6a:c5:1b:e3:d1:33:ab:46:2c:d3:a5:a2:
ba:76:1a:3a:29:13:c0:bb:55:8d:0c:81:a9:ca:ac:
b6:5e:42:cf:fe:bc:92:d5:2d:e7:7e:29:68:2f:b5:
76:fa:46:a0:1b:f8:b7:d7:80:7f:88:52:f6:ae:59:
ad:a7:35:c0:93:f0:dd:20:39:f6:d1:46:4d:33:8b:
41:49:7e:3f:ea:8d:8b:e6:57:bf:7b:5a:67:5e:4d:
58:c1:ab:83:b2:f8:e4:7c:a2:2f:8b:06:06:b5:22:
6c:4d:f0:76:b3:8c:d5:74:9c:9f:2d:1a:e3:3d:bb:
c6:21:35:62:b2:55:fa:81:8d:82:1e:39:e9:22:15:
62:a3:37:a6:c5:c7:b1:bd:7a:5b:6e:1c:e7:85:fd:
3c:f0:8e:91:96:8a:fa:8b:9b:86:22:64:8a:09:22:
1a:96:cb:fe:55:2a:2e:a5:d0:a4:ea:28:e1:4c:19:
e2:08:27:3f:84:a1:02:14:f4:51:fc:d5:5b:5b:90:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:BB:87:B2:3B:F9:79:9F:82:1B:1C:69:E6:F5:3B:AF:F5:64:CC
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1f:4e:be:3e:13:86:6f:42:06:69:94:a7:9c:44:32:62:18:
d7:8e:17:5f:ab:14:99:56:20:97:5f:86:e5:c9:43:a3:d8:5a:
36:67:a9:17:19:e6:67:42:05:07:e7:7e:92:db:9f:7b:ca:16:
84:68:07:24:cf:6c:3e:22:15:d0:7f:67:ee:d2:19:43:f0:63:
33:cf:cd:1b:64:3d:f6:b1:fc:55:e1:0d:ef:c2:38:f5:a1:01:
0f:97:7d:b0:f0:d0:01:4a:b2:ac:bc:1f:b8:c9:be:10:21:56:
7a:86:ac:af:46:93:0c:4e:53:75:e4:b2:ee:83:f6:b1:2b:d2:
59:a1:99:7a:f9:27:2b:9d:6d:ed:52:43:de:d7:e7:cb:a7:e7:
00:4e:6e:95:02:28:9c:3d:31:b7:13:c1:11:1f:f7:f8:cf:31:
eb:06:12:65:00:e5:c5:19:98:4f:1e:f2:05:1e:1d:78:86:4e:
cd:71:fe:6e:f5:bf:e2:a3:43:2e:07:0e:23:69:8a:50:41:fc:
09:0b:85:49:70:8d:fe:4e:aa:4e:d4:f8:f8:b4:29:c4:b7:7b:
37:a9:b2:69:ff:64:66:7a:97:e4:5b:e8:3f:25:02:2d:ab:4e:
39:6d:e2:1e:57:5b:89:91:e0:0b:2c:60:c1:4e:40:32:dc:d2:
14:3e:1f:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvYChkJVtjPM54/w4K7ulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4
ZjYzMTAwHhcNMjUwNjE0MDAwMTEwWhcNMjUwNjE1MDAwMTEwWjAzMTEwLwYDVQQD
EyhjYmY3YmI4N2IyM2JmOTc5OWY4MjFiMWM2OWU2ZjUzYmFmZjU2NGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2UhEwC/NfEl+/MoYvuEfhmJLEVn
RCq1U40LrAv6jYUFZ1z99iQ+icwr4gYx02/HDn+zg/tk2TmKpZB+HTVqxRvj0TOr
RizTpaK6dho6KRPAu1WNDIGpyqy2XkLP/ryS1S3nfiloL7V2+kagG/i314B/iFL2
rlmtpzXAk/DdIDn20UZNM4tBSX4/6o2L5le/e1pnXk1YwauDsvjkfKIviwYGtSJs
TfB2s4zVdJyfLRrjPbvGITVislX6gY2CHjnpIhViozemxcexvXpbbhznhf088I6R
lor6i5uGImSKCSIalsv+VSoupdCk6ijhTBniCCc/hKECFPRR/NVbW5CscQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv3u4eyO/l5n4IbHGnm9Tuv9WTMMB8GA1UdIwQY
MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt
YjMxNmRiNTkzOGZmLzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm
LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh9Ovj4T
hm9CBmmUp5xEMmIY144XX6sUmVYgl1+G5clDo9haNmepFxnmZ0IFB+d+ktufe8oW
hGgHJM9sPiIV0H9n7tIZQ/BjM8/NG2Q99rH8VeEN78I49aEBD5d9sPDQAUqyrLwf
uMm+ECFWeoasr0aTDE5TdeSy7oP2sSvSWaGZevknK51t7VJD3tfny6fnAE5ulQIo
nD0xtxPBER/3+M8x6wYSZQDlxRmYTx7yBR4deIZOzXH+bvW/4qNDLgcOI2mKUEH8
CQuFSXCN/k6qTtT4+LQpxLd7N6myaf9kZnqX5FvoPyUCLatOOW3iHldbiZHgCyxg
wU5AMtzSFD4fRg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:41:41 2025 by rpki-client