Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
File: aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft (raw, json)
Hash identifier: xBm0XfG71MFeVSZv8QD7GreUziuHkPNivhSmYD4gHS4=
Subject key identifier: 63:87:B0:79:FD:BA:02:A1:3F:62:FB:DF:95:24:D4:70:08:7F:E6:D1
Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Certificate serial: 01987C09C3893744A5772A6075418ABACB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
Manifest number: 0D2F
Signing time: Tue 05 Aug 2025 21:01:11 +0000
Manifest this update: Tue 05 Aug 2025 21:01:11 +0000
Manifest next update: Wed 06 Aug 2025 21:01:11 +0000
Files and hashes: 1: aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl (hash: rx38bu9jV30G6HCX6a5DlzWftf+f5BJ+4UNVRdy8D/g=)
2: jT8P4HyIvKh8r7FQFBaidUndh0Q.roa (hash: Wroxjw87hFNcZdv8/bJmsCuX0IjtBBcn8Xp1138BSK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:c3:89:37:44:a5:77:2a:60:75:41:8a:ba:cb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Validity
Not Before: Aug 5 21:01:11 2025 GMT
Not After : Aug 6 21:01:11 2025 GMT
Subject: CN=6387b079fdba02a13f62fbdf9524d470087fe6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:57:84:1f:be:16:ce:1f:f1:88:57:be:d4:
3d:c5:ec:39:57:5c:c4:7f:71:50:ca:d6:8f:43:19:
bd:1a:93:3b:b6:c8:6b:a3:bc:6d:8d:4d:d5:87:c8:
87:56:9c:52:e0:ce:ba:b3:89:09:78:55:f1:2e:e2:
2e:55:aa:36:7d:98:50:8a:d2:28:8c:af:2b:f8:7c:
90:29:0b:48:bd:aa:7f:68:ee:5b:a4:49:c4:2d:a1:
0c:55:ee:e7:65:9c:b9:29:a4:7c:44:39:a1:a0:e7:
6c:a3:1c:e2:0b:ac:72:73:5f:99:52:ef:e3:1e:e5:
40:3d:a8:4c:c6:90:f7:c5:e6:bd:23:9c:90:58:0c:
2e:b5:86:9d:07:f6:18:94:db:76:c6:91:33:a4:e2:
f9:16:e1:11:9d:42:41:d4:30:7d:93:35:04:01:46:
c4:c6:92:99:58:62:c5:11:3f:37:ce:57:4c:d3:c5:
13:02:dc:fc:d0:11:b3:c6:96:4b:2b:31:13:1c:71:
2c:80:40:59:c2:76:90:23:c3:9a:82:d0:ee:8f:75:
4a:47:26:af:d7:9f:32:14:32:c3:2a:04:f7:08:c6:
dd:22:5b:53:3a:88:6e:14:7a:61:a6:44:7b:d6:ce:
81:de:48:45:cd:4d:f0:28:71:1a:44:bf:76:95:3c:
84:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:B0:79:FD:BA:02:A1:3F:62:FB:DF:95:24:D4:70:08:7F:E6:D1
X509v3 Authority Key Identifier:
keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:64:a6:16:14:d4:fc:77:3f:68:5d:bc:b8:5f:65:55:a5:ce:
59:c1:49:b2:d7:ca:56:81:1b:07:df:2f:e9:f4:56:11:06:ce:
52:a8:25:98:53:f6:2e:96:c8:0d:18:aa:ac:43:c6:94:15:03:
26:12:b1:07:64:44:ca:db:6d:4f:4a:19:e4:ca:98:c8:15:16:
58:01:85:54:43:bf:5d:47:72:99:d4:26:7c:dd:37:d0:20:ad:
b5:c6:00:80:d4:bc:cc:b5:ed:6e:b4:53:8f:ab:b1:3a:fb:20:
3f:7f:20:96:57:4a:6c:a3:b6:b9:5a:43:2b:de:0b:b4:6b:60:
3c:52:77:3e:75:3f:39:69:bd:86:76:83:e0:9d:e3:e9:f5:7e:
fd:4a:65:83:e4:a1:79:8e:d3:cc:b7:f4:a5:12:e7:45:dd:b2:
c5:e0:16:c1:f7:32:93:72:34:7f:55:84:99:0d:1c:16:db:b6:
5d:ee:8f:e9:e2:cb:91:cd:5a:2c:44:5a:48:6f:62:f3:93:52:
0a:f8:d7:e9:4f:1c:97:11:7f:ba:9f:37:47:84:86:1c:5d:03:
91:5b:65:1f:b3:95:94:02:10:f0:e5:c2:f6:cd:0d:2e:91:0a:
56:2b:d4:cc:a9:a7:7a:fc:b0:a1:fc:08:04:c6:c5:45:c7:ed:
91:c6:b5:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8CcOJN0SldypgdUGKusuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzIwYTkxMDNlMWFlMDBjYzc4OGM1ZGVjZmUwOTQ4Yzg0
YmNkMWIwHhcNMjUwODA1MjEwMTExWhcNMjUwODA2MjEwMTExWjAzMTEwLwYDVQQD
Eyg2Mzg3YjA3OWZkYmEwMmExM2Y2MmZiZGY5NTI0ZDQ3MDA4N2ZlNmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFxXhB++Fs4f8YhXvtQ9xew5V1zE
f3FQytaPQxm9GpM7tshro7xtjU3Vh8iHVpxS4M66s4kJeFXxLuIuVao2fZhQitIo
jK8r+HyQKQtIvap/aO5bpEnELaEMVe7nZZy5KaR8RDmhoOdsoxziC6xyc1+ZUu/j
HuVAPahMxpD3xea9I5yQWAwutYadB/YYlNt2xpEzpOL5FuERnUJB1DB9kzUEAUbE
xpKZWGLFET83zldM08UTAtz80BGzxpZLKzETHHEsgEBZwnaQI8OagtDuj3VKRyav
158yFDLDKgT3CMbdIltTOohuFHphpkR71s6B3khFzU3wKHEaRL92lTyEqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOHsHn9ugKhP2L735Uk1HAIf+bRMB8GA1UdIwQY
MBaAFGlyCpED4a4AzHiMXez+CUjIS80bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kNTE2YTMtODk3NC00NWRiLTgyMjYt
ODE3NGRkYWUzMWQzLzEvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9kNTE2YTMtODk3NC00NWRiLTgyMjYtODE3NGRkYWUzMWQz
LzEvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2GSmFhTU
/Hc/aF28uF9lVaXOWcFJstfKVoEbB98v6fRWEQbOUqglmFP2LpbIDRiqrEPGlBUD
JhKxB2REytttT0oZ5MqYyBUWWAGFVEO/XUdymdQmfN030CCttcYAgNS8zLXtbrRT
j6uxOvsgP38glldKbKO2uVpDK94LtGtgPFJ3PnU/OWm9hnaD4J3j6fV+/Uplg+Sh
eY7TzLf0pRLnRd2yxeAWwfcyk3I0f1WEmQ0cFtu2Xe6P6eLLkc1aLERaSG9i85NS
CvjX6U8clxF/up83R4SGHF0DkVtlH7OVlAIQ8OXC9s0NLpEKVivUzKmnevywofwI
BMbFRcftkca1Fg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:17 2025 by rpki-client