
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File: AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier: LIhv73KN3G8sjxqhmx1bDjIND9MgrgsmKqWH+EQDul4=
Subject key identifier: B6:6E:FA:9C:50:23:4C:7B:FB:E0:20:36:EA:52:89:A2:42:3A:74:58
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer: /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial: 019880C299E4FE1E0B0FA97C0512F2C9FE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number: 08D7
Signing time: Wed 06 Aug 2025 19:01:33 +0000
Manifest this update: Wed 06 Aug 2025 19:01:33 +0000
Manifest next update: Thu 07 Aug 2025 19:01:33 +0000
Files and hashes: 1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: WWyvZQu7C0jK7G98GcB4B+UiLAwmLpe1F7xxNbkLcvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:99:e4:fe:1e:0b:0f:a9:7c:05:12:f2:c9:fe:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
Validity
Not Before: Aug 6 19:01:33 2025 GMT
Not After : Aug 7 19:01:33 2025 GMT
Subject: CN=b66efa9c50234c7bfbe02036ea5289a2423a7458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:bb:4c:ea:31:c2:24:f9:13:17:a0:77:41:
e6:d0:b6:62:de:5b:8d:81:50:8c:ad:c2:cc:7d:2c:
26:75:55:aa:cf:73:5f:6f:8a:6f:cb:44:69:2c:b1:
b4:1d:42:ec:85:b7:8f:e2:5f:c3:86:08:da:64:84:
e7:5a:7f:2d:84:60:c0:7a:9b:56:58:8b:56:43:dc:
b4:de:ca:c3:68:38:72:d3:c1:8c:87:f7:da:0a:39:
7a:54:90:03:9d:bf:18:a8:38:cf:41:de:e8:10:44:
b3:92:13:5f:ff:f3:bd:06:e3:ba:21:22:d6:78:8e:
d8:b5:b7:4f:4f:3f:ca:4b:be:0e:a6:d5:54:bd:a6:
f7:69:19:e0:90:a6:95:ea:2c:26:fc:32:dc:0d:be:
4d:c3:0c:f7:73:b8:52:84:7d:49:17:8e:03:b7:6c:
14:91:8b:5a:9e:f3:82:59:bd:ae:11:1a:7a:fa:47:
70:9e:ec:5a:c0:d6:7b:d4:00:37:7a:7d:ba:95:bc:
e5:d2:25:84:03:9d:2b:4d:32:2f:5e:b1:99:be:ca:
5d:50:0d:fb:b2:c2:a6:9f:d3:41:38:80:25:24:8a:
0b:2e:df:a5:0f:11:c5:45:ff:aa:0e:d9:1d:4b:f0:
ec:a2:ec:8e:2b:e1:2c:69:29:ce:fb:a2:23:0c:ef:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6E:FA:9C:50:23:4C:7B:FB:E0:20:36:EA:52:89:A2:42:3A:74:58
X509v3 Authority Key Identifier:
keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:43:8d:0a:49:fa:91:ba:86:ca:4d:c0:e8:e1:26:d4:1a:25:
5a:d0:a1:19:11:95:e6:ef:06:ca:77:64:f2:74:a1:15:ec:a3:
b3:2d:0a:f8:2b:07:a3:c3:33:32:04:49:7f:ef:7c:3e:cc:9a:
ff:4a:f9:89:86:34:2a:45:85:4e:03:dd:ea:3d:ab:af:f4:51:
41:85:79:20:97:43:f0:c3:2d:2c:83:62:94:0a:dc:e3:44:78:
9c:4c:93:70:8d:e1:92:06:d7:a0:01:db:9d:b7:1f:81:e9:ad:
12:e6:95:2e:32:c1:28:e5:b3:b4:65:7a:a3:ce:ad:a7:2c:73:
95:b8:57:ae:3d:4a:cf:68:6e:93:ad:7d:95:d1:4f:a9:ae:a1:
61:ee:ce:82:94:ea:2f:e2:e9:3f:51:21:e2:e4:bb:db:84:eb:
7a:84:50:4f:57:bf:98:85:80:5e:91:7d:41:73:0d:ab:0d:c0:
37:fd:9e:83:be:57:37:0c:d6:17:bd:59:c0:67:29:3d:87:8b:
1f:43:ae:34:03:d4:b8:6e:fa:91:f4:e8:b2:a2:77:a2:99:29:
b2:e5:ba:21:ad:22:8f:3d:95:7d:22:d3:57:03:e9:39:93:ea:
54:16:b4:9d:5e:5b:f1:18:41:7e:1b:d4:17:00:50:ec:df:fd:
a9:a3:f6:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwpnk/h4LD6l8BRLyyf6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODBkNWFhYjhlZTcyZGFhMzUyODcxZmJhNzJlY2E0NTFh
NzBlZGMwHhcNMjUwODA2MTkwMTMzWhcNMjUwODA3MTkwMTMzWjAzMTEwLwYDVQQD
EyhiNjZlZmE5YzUwMjM0YzdiZmJlMDIwMzZlYTUyODlhMjQyM2E3NDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqru7TOoxwiT5Exegd0Hm0LZi3luN
gVCMrcLMfSwmdVWqz3Nfb4pvy0RpLLG0HULshbeP4l/DhgjaZITnWn8thGDAeptW
WItWQ9y03srDaDhy08GMh/faCjl6VJADnb8YqDjPQd7oEESzkhNf//O9BuO6ISLW
eI7YtbdPTz/KS74OptVUvab3aRngkKaV6iwm/DLcDb5Nwwz3c7hShH1JF44Dt2wU
kYtanvOCWb2uERp6+kdwnuxawNZ71AA3en26lbzl0iWEA50rTTIvXrGZvspdUA37
ssKmn9NBOIAlJIoLLt+lDxHFRf+qDtkdS/DsouyOK+EsaSnO+6IjDO+AHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZu+pxQI0x7++AgNupSiaJCOnRYMB8GA1UdIwQY
MBaAFAKA1aq47nLao1KHH7py7KRRpw7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEt
ZjQwNmUwODc4ZDU0LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEtZjQwNmUwODc4ZDU0
LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0ONCkn6
kbqGyk3A6OEm1BolWtChGRGV5u8Gyndk8nShFeyjsy0K+CsHo8MzMgRJf+98Psya
/0r5iYY0KkWFTgPd6j2rr/RRQYV5IJdD8MMtLINilArc40R4nEyTcI3hkgbXoAHb
nbcfgemtEuaVLjLBKOWztGV6o86tpyxzlbhXrj1Kz2huk619ldFPqa6hYe7OgpTq
L+LpP1Eh4uS724TreoRQT1e/mIWAXpF9QXMNqw3AN/2eg75XNwzWF71ZwGcpPYeL
H0OuNAPUuG76kfTosqJ3opkpsuW6Ia0ijz2VfSLTVwPpOZPqVBa0nV5b8RhBfhvU
FwBQ7N/9qaP2qA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:06:52 2025 by rpki-client