Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier: oEI4uwVgkVg7zQkjT+TE8B14e9nbecKveSbjMBDzqaU=
Subject key identifier: 2A:AA:ED:78:49:FC:8D:47:52:E8:34:E5:BD:0E:95:2A:83:92:43:4F
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 01987E65813BCF3B77BB90E3EA932557AB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number: 030A
Signing time: Wed 06 Aug 2025 08:00:38 +0000
Manifest this update: Wed 06 Aug 2025 08:00:38 +0000
Manifest next update: Thu 07 Aug 2025 08:00:38 +0000
Files and hashes: 1: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (hash: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=)
2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: UaCNCAvoTWbh4yXK5c9hIZi7lsVJxe90NuO5UzmCo1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:81:3b:cf:3b:77:bb:90:e3:ea:93:25:57:ab:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Aug 6 08:00:38 2025 GMT
Not After : Aug 7 08:00:38 2025 GMT
Subject: CN=2aaaed7849fc8d4752e834e5bd0e952a8392434f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:0d:71:37:d2:7d:e3:7a:1f:dc:fd:d1:89:
d3:c6:67:e0:20:4c:2f:06:6f:f4:71:41:6d:78:2f:
3b:22:1c:be:d0:45:91:f7:36:56:ae:08:51:03:72:
4f:a1:52:6c:a9:45:6a:d7:7e:2b:5d:54:ee:fd:19:
9c:7f:f0:b2:77:ec:d4:1b:d6:59:f1:b7:3b:a2:46:
75:fc:77:75:33:2a:d6:5a:4a:f8:81:32:c3:b6:01:
9f:25:d7:38:d7:88:ee:ce:3a:76:34:b3:52:b8:d6:
a8:e6:d3:4b:ad:4b:7e:8b:98:3d:a1:41:16:37:6f:
71:7b:e8:2f:73:99:ad:40:b6:77:1e:53:42:15:59:
b4:15:17:0c:80:47:ef:da:34:1e:dd:b7:24:11:fa:
fa:30:33:83:34:4a:ca:b2:d5:21:30:41:42:f1:65:
5a:59:a8:e3:85:30:41:6d:05:73:43:0b:08:b9:ec:
96:b6:9e:8b:4b:bc:be:6e:d6:7c:5a:ed:3b:24:56:
5f:65:3e:59:8b:90:d4:1f:36:b8:53:c8:b0:b4:a8:
ed:50:33:e1:6d:c0:43:bb:a0:9a:09:c8:91:da:5a:
39:d1:3b:32:ff:ca:0b:cd:55:eb:bb:61:33:8c:26:
9b:ed:8e:6a:49:b1:3c:b0:dd:5b:05:5d:8a:8a:50:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:ED:78:49:FC:8D:47:52:E8:34:E5:BD:0E:95:2A:83:92:43:4F
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:22:2d:22:4e:42:2e:b0:5b:50:7e:da:91:75:d6:70:e4:d7:
7c:0e:ac:74:ef:ab:e1:2a:98:dc:17:84:3b:8a:1a:cc:99:5a:
d3:3a:af:e7:f4:4d:70:af:38:06:f5:9c:a4:f2:96:b5:a1:ce:
df:cf:e2:5d:af:a1:d8:f8:33:8d:ba:b5:37:84:90:5e:bd:e0:
92:98:ca:a8:ee:7d:2a:b8:3b:bc:5a:67:54:c2:72:e1:10:6d:
0e:c5:1c:27:b8:d6:34:bb:18:2b:46:b3:40:0d:b6:83:60:62:
4f:46:e9:7c:0d:0b:e6:e1:92:51:56:fd:c2:bb:8e:02:f8:6e:
f3:12:09:5b:42:c2:c6:0c:7e:3b:d6:58:ea:81:ef:89:ec:f6:
4c:93:2f:b3:ac:2c:0f:03:9d:ca:ec:41:f5:31:ef:90:fc:46:
c1:d0:eb:18:68:7f:16:c5:d4:33:b2:e9:2a:1e:fc:e5:9d:aa:
c8:a1:e7:10:4b:39:06:d9:22:7f:11:20:85:3b:53:88:74:71:
52:61:92:15:96:8a:3d:35:20:98:9b:c7:47:ef:9b:8f:ea:70:
b8:f7:d9:8a:69:f0:1c:d1:8e:70:3d:88:bf:59:96:7a:78:bb:
1b:33:35:f2:97:f2:da:54:c2:69:f0:76:d5:af:64:13:dc:da:
74:f8:62:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+ZYE7zzt3u5Dj6pMlV6sJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDhkYTEzOWI1NmY5OThiZTI0NjY1ZGIxNGFkMWUxNTY3
NjhmYzMwHhcNMjUwODA2MDgwMDM4WhcNMjUwODA3MDgwMDM4WjAzMTEwLwYDVQQD
EygyYWFhZWQ3ODQ5ZmM4ZDQ3NTJlODM0ZTViZDBlOTUyYTgzOTI0MzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1esNcTfSfeN6H9z90YnTxmfgIEwv
Bm/0cUFteC87Ihy+0EWR9zZWrghRA3JPoVJsqUVq134rXVTu/Rmcf/Cyd+zUG9ZZ
8bc7okZ1/Hd1MyrWWkr4gTLDtgGfJdc414juzjp2NLNSuNao5tNLrUt+i5g9oUEW
N29xe+gvc5mtQLZ3HlNCFVm0FRcMgEfv2jQe3bckEfr6MDODNErKstUhMEFC8WVa
WajjhTBBbQVzQwsIueyWtp6LS7y+btZ8Wu07JFZfZT5Zi5DUHza4U8iwtKjtUDPh
bcBDu6CaCciR2lo50Tsy/8oLzVXru2EzjCab7Y5qSbE8sN1bBV2KilASewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqq7XhJ/I1HUug05b0OlSqDkkNPMB8GA1UdIwQY
MBaAFKwI2hObVvmYviRmXbFK0eFWdo/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0Mzct
Njk5Y2Y3YjA5NTkwLzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0MzctNjk5Y2Y3YjA5NTkw
LzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCItIk5C
LrBbUH7akXXWcOTXfA6sdO+r4SqY3BeEO4oazJla0zqv5/RNcK84BvWcpPKWtaHO
38/iXa+h2Pgzjbq1N4SQXr3gkpjKqO59Krg7vFpnVMJy4RBtDsUcJ7jWNLsYK0az
QA22g2BiT0bpfA0L5uGSUVb9wruOAvhu8xIJW0LCxgx+O9ZY6oHviez2TJMvs6ws
DwOdyuxB9THvkPxGwdDrGGh/FsXUM7LpKh785Z2qyKHnEEs5BtkifxEghTtTiHRx
UmGSFZaKPTUgmJvHR++bj+pwuPfZimnwHNGOcD2Iv1mWeni7GzM18pfy2lTCafB2
1a9kE9zadPhivg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:02 2025 by rpki-client