Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: S6HU0COa/ZKE7JuQen9mr2c0Q/OQ+tNSVmSdc+rDN5Q=
Subject key identifier: C9:96:00:D8:BD:DF:19:43:00:98:2C:48:87:99:45:79:BB:9B:6A:29
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 01987D8B6A4CEEB7C66AFD5925C93C416470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 09DB
Signing time: Wed 06 Aug 2025 04:02:25 +0000
Manifest this update: Wed 06 Aug 2025 04:02:25 +0000
Manifest next update: Thu 07 Aug 2025 04:02:25 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: g/GFoCSy7z/6ODTCjFfxdnIUrYE4uK4croFAoSzECfs=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:6a:4c:ee:b7:c6:6a:fd:59:25:c9:3c:41:64:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Aug 6 04:02:25 2025 GMT
Not After : Aug 7 04:02:25 2025 GMT
Subject: CN=c99600d8bddf194300982c4887994579bb9b6a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:e6:c9:79:45:73:4e:d0:82:9d:a5:a5:9c:
d0:b3:c3:0b:11:86:95:0b:73:79:77:be:bc:8e:9b:
42:ed:de:ea:70:36:7e:3b:58:dc:5d:77:77:b7:58:
b1:e3:59:b5:54:12:72:fd:a4:e0:e5:a5:c2:b1:f9:
bf:c7:08:c1:32:ce:ec:f6:cf:32:dc:57:cd:1b:0d:
80:63:2a:66:8b:ed:aa:6c:b8:5d:75:38:46:4d:26:
2b:e3:d9:3d:8a:ec:31:54:d1:d7:39:34:69:0f:cd:
d5:09:df:41:41:6f:9b:e9:9f:07:84:01:87:41:ec:
04:c2:83:7d:a5:df:9b:c4:87:17:c0:57:4a:bf:88:
85:9d:c3:51:d4:7b:5e:cd:f6:ca:07:b1:ef:d3:16:
39:e5:67:00:3c:e5:1e:13:24:be:f9:51:38:fa:0a:
cf:df:b0:a9:11:8a:79:94:15:80:8d:dc:0e:6e:a9:
c3:05:73:3b:e7:0c:4b:e8:09:53:d2:f1:eb:3a:9e:
9c:e0:1d:dd:3a:00:8c:70:a0:98:3c:f9:38:97:e8:
10:71:04:cb:0e:f5:3a:ce:ca:c4:f1:5d:28:b2:59:
97:e7:53:13:69:c8:b5:82:73:03:36:68:60:36:58:
11:d1:07:b8:32:a6:db:87:0a:7a:21:aa:a0:e6:d6:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:00:D8:BD:DF:19:43:00:98:2C:48:87:99:45:79:BB:9B:6A:29
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0c:2d:a1:e8:b7:93:f6:09:4d:99:69:0e:79:f4:1c:45:e4:
73:54:66:4c:40:80:1f:ba:25:05:7c:b0:78:8a:1a:03:c7:9b:
1e:9c:23:5b:e7:a5:24:4a:06:53:ff:6c:0f:73:f3:b4:92:fb:
09:68:3b:34:7d:ce:a1:4f:02:ce:69:bb:26:f8:17:5a:6e:b7:
c1:ad:59:a3:09:1c:6e:90:04:13:bf:b6:2a:38:08:de:1e:c9:
fa:f6:22:5f:7a:54:51:43:67:77:05:c6:a1:4a:fd:08:aa:33:
ab:85:63:52:69:22:9f:b7:b2:74:68:90:a6:d0:50:78:00:74:
81:76:94:6b:a0:6e:89:62:35:77:e5:c5:d6:9e:03:88:e0:9a:
7d:a1:73:43:25:18:22:00:49:6d:75:1c:54:28:4a:9d:19:44:
47:a9:de:dd:a5:9b:9d:09:4f:f7:4a:d7:f9:40:a6:15:ab:a3:
0d:69:bf:39:cd:39:bf:8e:5c:09:65:19:bf:97:0e:5f:0d:eb:
48:ee:c2:b2:b6:b5:37:bc:5a:9f:3b:19:c9:40:1b:41:56:4b:
eb:a2:2d:c2:1f:d1:f7:05:9d:8d:15:18:22:e3:48:2e:06:f7:
53:ac:de:9f:3f:9a:83:8e:3c:99:53:c5:78:d2:50:12:2b:62:
5f:0e:63:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i2pM7rfGav1ZJck8QWRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODA3ZTA4NjMxMDNmMDkxMmU3ZTAyNDc4MTFkMTY3Nzk3
ZDgxMDcwHhcNMjUwODA2MDQwMjI1WhcNMjUwODA3MDQwMjI1WjAzMTEwLwYDVQQD
EyhjOTk2MDBkOGJkZGYxOTQzMDA5ODJjNDg4Nzk5NDU3OWJiOWI2YTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5bmyXlFc07Qgp2lpZzQs8MLEYaV
C3N5d768jptC7d7qcDZ+O1jcXXd3t1ix41m1VBJy/aTg5aXCsfm/xwjBMs7s9s8y
3FfNGw2AYypmi+2qbLhddThGTSYr49k9iuwxVNHXOTRpD83VCd9BQW+b6Z8HhAGH
QewEwoN9pd+bxIcXwFdKv4iFncNR1HtezfbKB7Hv0xY55WcAPOUeEyS++VE4+grP
37CpEYp5lBWAjdwObqnDBXM75wxL6AlT0vHrOp6c4B3dOgCMcKCYPPk4l+gQcQTL
DvU6zsrE8V0oslmX51MTaci1gnMDNmhgNlgR0Qe4Mqbbhwp6Iaqg5tatkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmWANi93xlDAJgsSIeZRXm7m2opMB8GA1UdIwQY
MBaAFAKAfghjED8JEufgJHgR0Wd5fYEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjYwNDktOGQxZC00YmU4LTlmNTct
OGJhYjc4ZGUzMmM5LzEvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iZjYwNDktOGQxZC00YmU4LTlmNTctOGJhYjc4ZGUzMmM5
LzEvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQwtoei3
k/YJTZlpDnn0HEXkc1RmTECAH7olBXyweIoaA8ebHpwjW+elJEoGU/9sD3PztJL7
CWg7NH3OoU8Czmm7JvgXWm63wa1ZowkcbpAEE7+2KjgI3h7J+vYiX3pUUUNndwXG
oUr9CKozq4VjUmkin7eydGiQptBQeAB0gXaUa6BuiWI1d+XF1p4DiOCafaFzQyUY
IgBJbXUcVChKnRlER6ne3aWbnQlP90rX+UCmFaujDWm/Oc05v45cCWUZv5cOXw3r
SO7Csra1N7xanzsZyUAbQVZL66Itwh/R9wWdjRUYIuNILgb3U6zenz+ag448mVPF
eNJQEitiXw5jRA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:32:02 2025 by rpki-client