Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File: AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier: 4fRgNv68EgkxihrCTcYoqRhFAuhFOG6I237T8xcW2sw=
Subject key identifier: B1:F7:16:8D:F9:72:33:3F:EB:63:72:21:56:BA:02:50:BC:BB:03:8C
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 01976C98A4A182830C4A8AD067BAF63EFFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 04:00:32 +0000
Manifest this update: Sat 14 Jun 2025 04:00:32 +0000
Manifest next update: Sun 15 Jun 2025 04:00:32 +0000
Files and hashes: 1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: J3sguHql3HvNZ6KEpf3wViuCkVE7Tg69qh8sGeubfUE=)
2: V2K-oZleXeUaxCNtSI8GJz8R-T8.roa (hash: BfQ/+c4yu8OqgDpQuVge6IJ1WfNKM140JuABCwOq8WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a4:a1:82:83:0c:4a:8a:d0:67:ba:f6:3e:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: Jun 14 04:00:32 2025 GMT
Not After : Jun 15 04:00:32 2025 GMT
Subject: CN=b1f7168df972333feb63722156ba0250bcbb038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6b:60:28:1f:76:16:57:d3:09:d1:ff:bb:db:
5f:68:6b:8b:74:0d:f0:76:1a:5e:e4:34:dc:95:26:
f2:55:44:21:27:7e:3a:3b:f5:7a:ce:ac:36:1f:f1:
7b:88:68:23:75:b8:20:63:d1:f1:fc:69:1f:83:b6:
14:e6:37:1f:ea:30:e2:51:2d:ff:5b:1d:65:cb:f7:
e9:c1:26:81:1d:7e:ce:90:a2:b6:a5:c0:14:89:bf:
ed:e2:70:bc:c4:71:38:c4:c0:67:e3:ab:a7:cd:ce:
56:5b:d6:da:51:35:14:83:0e:b1:bf:c9:41:e3:b9:
1a:2a:1a:e3:a9:09:56:0c:e1:20:7f:a1:db:c9:6c:
b6:3f:9b:fe:d4:6d:25:a2:fe:58:88:26:36:0d:3e:
c6:0a:e5:a1:39:42:ad:3b:ae:60:8d:48:ab:be:d1:
b7:73:82:ca:21:9c:c0:62:cc:c5:2e:b4:a5:52:5f:
36:01:d2:e8:d0:3e:37:8a:cc:69:b7:ef:82:d9:13:
7e:dc:5d:10:03:b2:3e:c2:f4:70:e5:3b:11:c6:35:
96:27:2e:fb:a9:f3:88:a0:99:b2:9c:48:2e:c2:2b:
ba:06:77:1e:70:6a:b2:08:6c:c6:b3:56:1a:35:86:
33:1a:d8:ca:97:1f:55:2c:3d:e4:47:22:03:d6:79:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F7:16:8D:F9:72:33:3F:EB:63:72:21:56:BA:02:50:BC:BB:03:8C
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d6:2c:45:49:6c:47:fa:76:32:5a:8b:b1:95:a3:26:6e:57:
1b:14:32:00:01:c6:91:6a:5c:7f:6c:31:3e:26:2c:1d:b3:dd:
ca:05:5b:37:99:f1:f1:0b:e2:f0:18:19:65:72:aa:95:0c:b9:
7c:09:8e:3f:4f:a6:f7:88:bd:3f:0a:2d:f9:21:d2:c8:de:b7:
c6:87:1b:fd:05:07:11:9f:ae:35:75:46:d7:57:a9:93:49:cf:
01:ad:d3:82:52:ca:7c:d8:d8:8a:b6:6e:f0:aa:2a:b0:1e:8a:
0c:7c:dc:37:62:e3:3b:f7:f0:06:ec:91:da:15:6f:42:66:33:
af:aa:6f:42:7e:4b:fb:3d:35:b7:02:2f:f6:5a:f5:6b:e6:0a:
b3:77:44:2d:6b:74:24:62:2d:cd:ef:2a:4a:95:87:a2:85:2b:
12:e5:11:b2:a8:86:89:1a:42:f8:47:da:f6:64:a9:1a:e5:35:
e1:e1:f4:a4:3b:b6:b4:bc:6c:59:59:7e:25:41:4a:43:06:e0:
ad:45:dd:19:27:45:f9:78:e1:aa:8e:e7:59:f8:a0:e9:32:d1:
b6:d9:82:62:51:d8:c8:6c:9e:9d:a4:ff:7b:aa:15:5b:3c:5c:
ce:66:b0:c0:4a:d4:dc:e4:f9:ba:73:c1:c8:e0:3b:2f:b6:56:
d5:48:1f:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmKShgoMMSorQZ7r2Pv/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjg3MzUxODY5N2MyM2U5YzNlMzdhNjQ2YmFkMTIxMjM1
YWQ3NDQwHhcNMjUwNjE0MDQwMDMyWhcNMjUwNjE1MDQwMDMyWjAzMTEwLwYDVQQD
EyhiMWY3MTY4ZGY5NzIzMzNmZWI2MzcyMjE1NmJhMDI1MGJjYmIwMzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GtgKB92FlfTCdH/u9tfaGuLdA3w
dhpe5DTclSbyVUQhJ346O/V6zqw2H/F7iGgjdbggY9Hx/Gkfg7YU5jcf6jDiUS3/
Wx1ly/fpwSaBHX7OkKK2pcAUib/t4nC8xHE4xMBn46unzc5WW9baUTUUgw6xv8lB
47kaKhrjqQlWDOEgf6HbyWy2P5v+1G0lov5YiCY2DT7GCuWhOUKtO65gjUirvtG3
c4LKIZzAYszFLrSlUl82AdLo0D43isxpt++C2RN+3F0QA7I+wvRw5TsRxjWWJy77
qfOIoJmynEguwiu6BncecGqyCGzGs1YaNYYzGtjKlx9VLD3kRyID1nnXRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH3Fo35cjM/62NyIVa6AlC8uwOMMB8GA1UdIwQY
MBaAFAMoc1GGl8I+nD43pka60SEjWtdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmIt
MTI3MDA4OTI0ZWVkLzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmItMTI3MDA4OTI0ZWVk
LzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidYsRUls
R/p2MlqLsZWjJm5XGxQyAAHGkWpcf2wxPiYsHbPdygVbN5nx8Qvi8BgZZXKqlQy5
fAmOP0+m94i9Pwot+SHSyN63xocb/QUHEZ+uNXVG11epk0nPAa3TglLKfNjYirZu
8KoqsB6KDHzcN2LjO/fwBuyR2hVvQmYzr6pvQn5L+z01twIv9lr1a+YKs3dELWt0
JGItze8qSpWHooUrEuURsqiGiRpC+Efa9mSpGuU14eH0pDu2tLxsWVl+JUFKQwbg
rUXdGSdF+Xjhqo7nWfig6TLRttmCYlHYyGyenaT/e6oVWzxczmawwErU3OT5unPB
yOA7L7ZW1Ugfnw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:04:18 2025 by rpki-client