Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: FLQMz9VB95bGCJYuSYpZLcbuXxA90R8+H5GGDkUj1+g=
Subject key identifier: A8:76:97:3F:88:54:F5:A9:16:6D:2E:00:07:95:E1:CF:75:8D:43:E0
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 01988BE9FECF3DC321D64B7662C234AD5556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 23:00:24 +0000
Manifest this update: Fri 08 Aug 2025 23:00:24 +0000
Manifest next update: Sat 09 Aug 2025 23:00:24 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: CH3DB+w5O5bc2qQ353aiDTdsnhPYJuGzBZwjulm8BZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:e9:fe:cf:3d:c3:21:d6:4b:76:62:c2:34:ad:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Aug 8 23:00:24 2025 GMT
Not After : Aug 9 23:00:24 2025 GMT
Subject: CN=a876973f8854f5a9166d2e000795e1cf758d43e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:c6:dd:32:62:35:12:d8:ca:43:50:37:c3:
d5:bb:27:85:62:f8:3c:12:c5:c0:0a:29:d6:71:10:
37:ef:cc:4d:bc:25:53:c9:ee:cb:38:77:12:81:9c:
13:d2:09:07:c0:ca:8c:bf:69:e7:80:bc:ec:88:42:
f9:aa:c7:c9:e5:37:46:98:62:4a:6f:50:7b:11:97:
c8:9b:dc:a2:6b:46:69:f8:06:4e:cd:69:61:38:f8:
f0:97:ed:1a:a5:b0:22:fe:0b:7e:b9:44:07:46:0f:
7b:85:dc:cd:63:63:dd:3f:47:a7:a4:f5:43:ff:5b:
63:bd:7d:19:db:8e:71:02:fa:d5:15:9e:82:d8:6c:
1e:b6:2d:c1:d3:94:e3:18:94:f4:29:f9:b5:4f:d5:
50:92:62:91:6b:cc:f3:68:1f:1e:ca:d9:a4:e0:8b:
1a:1c:31:3f:55:9a:1a:b5:91:92:c4:60:ee:f2:b7:
6c:dd:bd:04:fd:4b:c2:e1:96:71:ca:20:3f:24:e9:
a5:34:6c:68:8b:10:01:a0:b1:f6:6f:ba:7f:ed:0b:
42:e7:09:0b:10:41:8a:95:c0:c7:90:52:5b:14:e0:
f8:e3:0a:dc:fe:3d:a9:31:63:f1:1e:49:ee:a2:13:
dc:76:91:46:3d:f4:d8:b5:9f:e2:ff:18:01:17:18:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:76:97:3F:88:54:F5:A9:16:6D:2E:00:07:95:E1:CF:75:8D:43:E0
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5a:73:c0:a5:9c:18:25:f8:6f:6e:c6:ab:1a:28:95:51:0a:
a9:bf:57:51:a4:73:f1:ea:5b:21:ae:ca:d3:34:49:73:8b:ec:
8c:76:38:66:4d:03:3b:4a:2e:be:9d:63:13:28:f6:58:9b:26:
94:38:1b:52:b6:fc:68:79:80:e6:11:c0:a8:da:17:43:92:5c:
50:27:c4:71:4d:bc:0d:bb:72:11:34:f4:58:3d:20:0b:fe:4f:
bc:d2:06:d1:a5:37:56:e9:6f:37:f9:67:1c:f0:31:08:fe:40:
38:3f:da:ec:f0:6e:9f:c4:bd:4a:6a:15:12:25:53:41:e8:56:
77:e1:42:df:db:ad:eb:07:32:d6:f0:8e:0b:0a:74:04:e0:e1:
2b:db:24:3c:f1:fd:f6:e8:e0:21:f7:f7:38:3d:0a:70:da:cf:
a8:d9:99:20:08:62:0f:31:3c:e5:4f:40:71:3b:08:54:e8:7d:
62:bc:d7:86:d5:71:e8:5d:ea:8a:4e:bd:d7:99:3e:4c:15:73:
89:36:2c:e4:68:cb:3a:5c:67:9c:7f:dd:1c:7f:44:88:da:69:
42:35:5a:ca:09:52:60:73:61:46:2b:b8:5a:53:4b:4c:53:b3:
44:bc:b2:78:e4:d7:dd:f8:c2:f7:7b:bc:7b:1d:20:83:02:c1:
8d:10:c9:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6f7PPcMh1kt2YsI0rVVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzIxNTYwYjEyMjE5Y2Y4ZWFiNTVmNzRkOThmMmU5YWVk
NTE3NDYwHhcNMjUwODA4MjMwMDI0WhcNMjUwODA5MjMwMDI0WjAzMTEwLwYDVQQD
EyhhODc2OTczZjg4NTRmNWE5MTY2ZDJlMDAwNzk1ZTFjZjc1OGQ0M2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc7G3TJiNRLYykNQN8PVuyeFYvg8
EsXACinWcRA378xNvCVTye7LOHcSgZwT0gkHwMqMv2nngLzsiEL5qsfJ5TdGmGJK
b1B7EZfIm9yia0Zp+AZOzWlhOPjwl+0apbAi/gt+uUQHRg97hdzNY2PdP0enpPVD
/1tjvX0Z245xAvrVFZ6C2Gweti3B05TjGJT0Kfm1T9VQkmKRa8zzaB8eytmk4Isa
HDE/VZoatZGSxGDu8rds3b0E/UvC4ZZxyiA/JOmlNGxoixABoLH2b7p/7QtC5wkL
EEGKlcDHkFJbFOD44wrc/j2pMWPxHknuohPcdpFGPfTYtZ/i/xgBFxgTGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKh2lz+IVPWpFm0uAAeV4c91jUPgMB8GA1UdIwQY
MBaAFGjCFWCxIhnPjqtV902Y8umu1RdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0Yjkt
YWMxZWRiYjQ3N2MwLzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0YjktYWMxZWRiYjQ3N2Mw
LzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlpzwKWc
GCX4b27GqxoolVEKqb9XUaRz8epbIa7K0zRJc4vsjHY4Zk0DO0ouvp1jEyj2WJsm
lDgbUrb8aHmA5hHAqNoXQ5JcUCfEcU28DbtyETT0WD0gC/5PvNIG0aU3VulvN/ln
HPAxCP5AOD/a7PBun8S9SmoVEiVTQehWd+FC39ut6wcy1vCOCwp0BODhK9skPPH9
9ujgIff3OD0KcNrPqNmZIAhiDzE85U9AcTsIVOh9YrzXhtVx6F3qik6915k+TBVz
iTYs5GjLOlxnnH/dHH9EiNppQjVayglSYHNhRiu4WlNLTFOzRLyyeOTX3fjC93u8
ex0ggwLBjRDJoA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:11:30 2025 by rpki-client