Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
File: AlO5GdddwgTZyjjbeyihdINLOz0.mft (raw, json)
Hash identifier: iuOJQ8ithVwXIxGYR/gbD+wh5aiL+sWURYEmhmN8KoI=
Subject key identifier: 44:E8:5F:55:A8:5E:D1:20:1C:E6:A8:45:B7:A0:FB:6B:55:CB:92:3A
Authority key identifier: 02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
Certificate issuer: /CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Certificate serial: 01976F2C20FEE08EF657D1DDD9CA21EF11AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
Manifest number: 05B0
Signing time: Sat 14 Jun 2025 16:00:52 +0000
Manifest this update: Sat 14 Jun 2025 16:00:52 +0000
Manifest next update: Sun 15 Jun 2025 16:00:52 +0000
Files and hashes: 1: AlO5GdddwgTZyjjbeyihdINLOz0.crl (hash: T7p3+iHflXo0GfcJ4m7QRXl+IWPg2P6+xUPnePMdrEc=)
2: I1gkA5k4uMZob0hM5xQHdEl5cUo.roa (hash: EhH3dWMV5US/hFp8+LiY1Hpa7FxODhxAHT3s3CfUej8=)
3: V0uScWgIlxby8-atCI31gs7gIls.roa (hash: N1Pj+HryVhCS5We4uz7FXYt4pnqlzxV+cQWuG5ETX4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:20:fe:e0:8e:f6:57:d1:dd:d9:ca:21:ef:11:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Validity
Not Before: Jun 14 16:00:52 2025 GMT
Not After : Jun 15 16:00:52 2025 GMT
Subject: CN=44e85f55a85ed1201ce6a845b7a0fb6b55cb923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:b9:1a:a6:72:04:4c:11:85:c5:2a:da:b8:
1a:0c:57:50:d1:e1:85:50:a8:30:23:6a:26:ed:39:
3f:ea:5c:6e:04:7c:72:9e:d1:6b:9b:d5:93:7d:f9:
e8:0a:60:bd:d3:f0:c8:83:0b:c5:59:c5:34:11:6e:
e8:be:5a:f3:86:06:fe:0a:f5:c5:70:c4:e8:98:98:
23:de:66:fc:aa:97:88:d1:50:52:70:cb:3f:42:57:
7f:59:bd:db:49:b9:8b:4d:cf:d6:cf:8e:77:3f:ed:
14:30:f7:3b:22:6a:37:fa:e8:af:60:f7:09:36:58:
79:24:61:30:4b:a3:df:c0:9b:f9:4f:fe:71:ab:c0:
20:56:b2:8e:70:f9:71:c4:7e:33:06:41:b5:81:17:
f8:0f:dc:27:fd:f3:4e:ab:31:dd:c6:05:1e:bb:d5:
c5:33:c8:2a:d0:63:1b:62:13:22:c4:a1:30:cc:5d:
30:c0:a6:dd:2a:08:e1:c8:b4:0a:f4:7f:58:21:33:
f0:5a:ac:9c:3d:2f:87:6a:1f:4d:16:ab:0b:ed:b5:
de:97:71:da:c0:ae:f1:bd:de:78:ee:5a:cc:cd:6f:
15:72:dd:7b:5e:3f:0b:15:38:6e:47:10:f9:7f:5b:
b4:54:44:6a:32:ba:2e:8e:42:aa:0e:a5:5e:04:44:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:5F:55:A8:5E:D1:20:1C:E6:A8:45:B7:A0:FB:6B:55:CB:92:3A
X509v3 Authority Key Identifier:
keyid:02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4b:a2:03:f5:b7:65:e7:02:84:ed:57:89:04:45:c6:1c:e5:
8c:c4:0f:a4:ba:5f:31:85:b5:e5:37:17:7c:c4:f7:01:52:ac:
23:da:c5:da:00:40:a9:4c:10:e8:b7:13:7f:2a:f2:e9:6e:52:
36:c3:30:0c:60:72:a1:55:85:6b:10:ca:00:a2:bd:98:69:ac:
dc:03:4e:4e:8b:9a:ae:6b:17:a6:08:95:1f:a0:e0:1b:8a:e6:
da:68:80:ca:3f:6c:e4:31:29:fb:fc:7f:a2:3e:9a:6e:8c:83:
0f:da:35:06:ee:ef:6e:b6:ca:82:04:f8:39:3b:73:26:01:ea:
55:ef:82:12:dc:de:f3:87:23:a5:d4:28:db:14:17:49:2b:37:
eb:8b:4a:47:50:a2:c6:9f:de:1e:57:ed:57:cb:52:b5:94:82:
f7:27:a9:e6:04:26:56:f0:13:6a:13:d3:a4:24:fb:c1:98:58:
ff:12:ab:18:58:bf:0e:38:81:a5:25:ec:f7:e3:e0:d2:0b:39:
1e:df:89:1d:c7:a9:af:4a:74:1d:98:49:16:3a:2e:23:34:5c:
41:10:07:37:6b:fe:dd:40:96:09:0b:93:ca:7c:a3:4a:08:be:
55:5b:21:99:4c:ae:44:76:40:c7:19:cd:70:1d:17:24:20:08:
a1:7a:60:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLCD+4I72V9Hd2coh7xGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTNiOTE5ZDc1ZGMyMDRkOWNhMzhkYjdiMjhhMTc0ODM0
YjNiM2QwHhcNMjUwNjE0MTYwMDUyWhcNMjUwNjE1MTYwMDUyWjAzMTEwLwYDVQQD
Eyg0NGU4NWY1NWE4NWVkMTIwMWNlNmE4NDViN2EwZmI2YjU1Y2I5MjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAq5GqZyBEwRhcUq2rgaDFdQ0eGF
UKgwI2om7Tk/6lxuBHxyntFrm9WTffnoCmC90/DIgwvFWcU0EW7ovlrzhgb+CvXF
cMTomJgj3mb8qpeI0VBScMs/Qld/Wb3bSbmLTc/Wz453P+0UMPc7Imo3+uivYPcJ
Nlh5JGEwS6PfwJv5T/5xq8AgVrKOcPlxxH4zBkG1gRf4D9wn/fNOqzHdxgUeu9XF
M8gq0GMbYhMixKEwzF0wwKbdKgjhyLQK9H9YITPwWqycPS+Hah9NFqsL7bXel3Ha
wK7xvd547lrMzW8Vct17Xj8LFThuRxD5f1u0VERqMroujkKqDqVeBETQBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEToX1WoXtEgHOaoRbeg+2tVy5I6MB8GA1UdIwQY
MBaAFAJTuRnXXcIE2co423sooXSDSzs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxPNUdkZGR3Z1RaeWpqYmV5aWhkSU5MT3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zYmFmZDgtYzM0ZS00ODkwLWI0Y2Yt
NzNkYjBmMjg0MWM5LzEvQWxPNUdkZGR3Z1RaeWpqYmV5aWhkSU5MT3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zYmFmZDgtYzM0ZS00ODkwLWI0Y2YtNzNkYjBmMjg0MWM5
LzEvQWxPNUdkZGR3Z1RaeWpqYmV5aWhkSU5MT3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtEuiA/W3
ZecChO1XiQRFxhzljMQPpLpfMYW15TcXfMT3AVKsI9rF2gBAqUwQ6LcTfyry6W5S
NsMwDGByoVWFaxDKAKK9mGms3ANOTouarmsXpgiVH6DgG4rm2miAyj9s5DEp+/x/
oj6aboyDD9o1Bu7vbrbKggT4OTtzJgHqVe+CEtze84cjpdQo2xQXSSs364tKR1Ci
xp/eHlftV8tStZSC9yep5gQmVvATahPTpCT7wZhY/xKrGFi/DjiBpSXs9+Pg0gs5
Ht+JHcepr0p0HZhJFjouIzRcQRAHN2v+3UCWCQuTynyjSgi+VVshmUyuRHZAxxnN
cB0XJCAIoXpgMA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:17:15 2025 by rpki-client