Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File: AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier: fiJ1KDV06TTzRsitlACuWzwokSnob9W93cuu9tEAzAA=
Subject key identifier: 0C:C2:95:C2:AA:D9:17:3B:8F:49:D0:40:E1:88:55:0E:A4:9B:0A:D0
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer: /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial: 01977FE8E751E1BB2B71CD43BC144A4E38A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number: 0852
Signing time: Tue 17 Jun 2025 22:00:59 +0000
Manifest this update: Tue 17 Jun 2025 22:00:59 +0000
Manifest next update: Wed 18 Jun 2025 22:00:59 +0000
Files and hashes: 1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: /it924xoZmdl2zXTtVAAPgqi+4v5pzX0rGrxyG5Fefs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e8:e7:51:e1:bb:2b:71:cd:43:bc:14:4a:4e:38:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
Validity
Not Before: Jun 17 22:00:59 2025 GMT
Not After : Jun 18 22:00:59 2025 GMT
Subject: CN=0cc295c2aad9173b8f49d040e188550ea49b0ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:23:c7:36:e0:2f:ef:6b:af:41:f1:7f:a0:22:
e1:4a:46:30:ee:e1:76:ff:57:fe:42:f4:9f:fb:53:
21:df:13:d8:cd:b0:05:54:e8:15:47:e8:fc:df:4e:
7c:2a:7a:8c:59:18:00:a5:4f:1e:61:7b:fb:8e:04:
da:a0:32:55:bd:27:e8:60:fd:d6:8c:7f:df:ee:2b:
ae:05:ce:e5:99:55:fa:ff:62:d1:21:f8:89:9c:c9:
1a:0f:cd:a9:43:1d:04:b0:40:f3:ee:87:f6:dc:76:
16:d5:17:e7:2d:38:a1:54:1b:02:8c:5b:1b:ef:9c:
05:8e:b5:a8:71:3a:f0:e9:24:d5:00:93:e2:87:0e:
ef:15:34:42:64:25:07:b9:18:ee:1d:ae:e6:34:c6:
46:d4:8c:88:c5:30:41:4e:72:ae:f0:12:6e:1b:8f:
8f:42:d6:88:43:30:bf:24:0b:1d:ff:ec:25:c9:51:
dc:20:5d:cd:1d:d7:7c:a0:0f:35:80:2e:08:fe:2d:
ba:04:a2:a5:63:59:41:0a:9c:0a:40:ed:f4:2c:bc:
e3:e1:b9:5f:8e:42:af:80:46:7b:21:7d:dc:15:a2:
15:b6:a4:26:af:27:32:43:31:84:ad:1d:58:c8:26:
28:c8:18:8a:b2:af:d7:4c:76:eb:1c:fc:31:b3:d1:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:95:C2:AA:D9:17:3B:8F:49:D0:40:E1:88:55:0E:A4:9B:0A:D0
X509v3 Authority Key Identifier:
keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:91:c3:c3:21:5c:9c:0b:b4:dd:90:f4:72:6d:72:87:1c:5b:
89:22:14:9b:53:b0:85:76:84:77:6e:20:39:9c:52:a8:80:74:
13:96:b5:a1:86:ac:9f:af:7e:f6:2c:2b:3d:c6:2c:bf:4b:69:
69:c0:b2:1c:e0:33:32:35:cf:42:6f:34:a7:a5:7f:e2:d2:fd:
2f:49:88:33:ab:92:48:2b:96:c4:83:4e:de:f5:a3:d5:6d:e9:
8b:11:7e:c1:47:9f:cf:31:db:a8:ea:48:cb:d4:76:57:66:a6:
38:66:33:f8:01:d6:1c:38:50:43:98:0c:56:d7:40:d0:a4:34:
25:82:bb:8e:7f:29:49:fe:bd:62:54:ee:a4:1c:1e:61:6d:31:
17:e0:58:1d:63:38:a1:c3:a0:ae:30:7f:fb:87:91:5b:be:d7:
25:48:c4:44:6b:b8:7a:98:da:fb:8b:d3:17:a2:31:99:38:0e:
36:3d:74:51:d6:59:27:40:7b:b9:e9:70:e2:1e:94:aa:46:a5:
d8:27:67:fa:ec:06:92:6f:17:d1:2d:11:ab:26:e2:f3:68:7c:
57:47:c1:d0:f6:b5:de:e0:2e:72:86:ee:f7:b9:a3:d0:37:95:
d9:04:42:84:b0:97:a0:78:dc:98:3d:ac:e9:e9:e2:6e:65:ec:
de:c4:56:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/6OdR4bsrcc1DvBRKTjipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODBkNWFhYjhlZTcyZGFhMzUyODcxZmJhNzJlY2E0NTFh
NzBlZGMwHhcNMjUwNjE3MjIwMDU5WhcNMjUwNjE4MjIwMDU5WjAzMTEwLwYDVQQD
EygwY2MyOTVjMmFhZDkxNzNiOGY0OWQwNDBlMTg4NTUwZWE0OWIwYWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yPHNuAv72uvQfF/oCLhSkYw7uF2
/1f+QvSf+1Mh3xPYzbAFVOgVR+j83058KnqMWRgApU8eYXv7jgTaoDJVvSfoYP3W
jH/f7iuuBc7lmVX6/2LRIfiJnMkaD82pQx0EsEDz7of23HYW1RfnLTihVBsCjFsb
75wFjrWocTrw6STVAJPihw7vFTRCZCUHuRjuHa7mNMZG1IyIxTBBTnKu8BJuG4+P
QtaIQzC/JAsd/+wlyVHcIF3NHdd8oA81gC4I/i26BKKlY1lBCpwKQO30LLzj4blf
jkKvgEZ7IX3cFaIVtqQmrycyQzGErR1YyCYoyBiKsq/XTHbrHPwxs9FzXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzClcKq2Rc7j0nQQOGIVQ6kmwrQMB8GA1UdIwQY
MBaAFAKA1aq47nLao1KHH7py7KRRpw7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEt
ZjQwNmUwODc4ZDU0LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEtZjQwNmUwODc4ZDU0
LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5HDwyFc
nAu03ZD0cm1yhxxbiSIUm1OwhXaEd24gOZxSqIB0E5a1oYasn69+9iwrPcYsv0tp
acCyHOAzMjXPQm80p6V/4tL9L0mIM6uSSCuWxINO3vWj1W3pixF+wUefzzHbqOpI
y9R2V2amOGYz+AHWHDhQQ5gMVtdA0KQ0JYK7jn8pSf69YlTupBweYW0xF+BYHWM4
ocOgrjB/+4eRW77XJUjERGu4epja+4vTF6IxmTgONj10UdZZJ0B7uelw4h6Uqkal
2Cdn+uwGkm8X0S0Rqybi82h8V0fB0Pa13uAucobu97mj0DeV2QRChLCXoHjcmD2s
6enibmXs3sRW3g==
-----END CERTIFICATE-----
Generated at Wed Jun 18 04:09:58 2025 by rpki-client