Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: 0QPRxrhSGs3RbUr+s8wGbnQ9Eq3qHZcFhNybnCbtamo=
Subject key identifier: 60:EB:6D:A2:2F:B0:43:E3:0F:28:FC:8F:63:31:F8:FB:7A:58:54:DA
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 01988B460D61E6466E88E6E25BAD16F43B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 1246
Signing time: Fri 08 Aug 2025 20:01:20 +0000
Manifest this update: Fri 08 Aug 2025 20:01:20 +0000
Manifest next update: Sat 09 Aug 2025 20:01:20 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: lNRwCMqY+E4m8PyEdEiF3ZKWiMdaP18XvOvGXOCGcFc=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:46:0d:61:e6:46:6e:88:e6:e2:5b:ad:16:f4:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Aug 8 20:01:20 2025 GMT
Not After : Aug 9 20:01:20 2025 GMT
Subject: CN=60eb6da22fb043e30f28fc8f6331f8fb7a5854da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:4b:67:8f:b4:d4:47:c8:15:95:e4:61:16:
6f:6d:1b:9d:b1:bc:d4:c8:b5:b0:c7:48:4a:88:84:
f5:f6:52:9f:7f:92:74:62:ef:a2:a3:8b:93:56:41:
54:0d:c5:7b:a6:07:c7:40:e3:3f:26:32:6d:65:22:
9b:23:1c:d2:78:28:2f:ff:cc:e6:58:e3:d5:96:0c:
01:4f:17:63:6f:c7:6e:1e:a8:01:28:6b:95:ce:5b:
6b:e2:4c:5c:22:cc:74:1e:b8:de:fd:e6:37:f7:cf:
81:73:c9:e5:d0:2b:aa:49:4b:df:f7:5f:b1:b7:78:
40:72:92:2f:41:15:87:f3:39:88:87:29:ca:66:4c:
6d:dc:50:f1:5d:a4:14:cc:08:39:50:9e:f5:f9:cc:
6d:d4:56:24:8f:ba:a6:72:0a:cd:ab:df:87:26:52:
f9:0d:8e:d2:3e:18:16:cc:6c:93:c2:66:5f:0b:59:
ad:16:e2:8d:f3:99:50:37:0a:74:fb:e1:7a:d4:b4:
07:65:a2:e1:d0:81:9d:ec:ad:a3:fc:f5:2e:70:52:
db:86:5c:04:1d:2a:83:9d:18:07:54:8c:74:59:c4:
1e:79:79:ae:d6:6a:f0:4f:f5:74:04:7e:e5:20:34:
c3:a6:79:a0:89:45:14:10:c1:12:e9:2a:58:f1:58:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EB:6D:A2:2F:B0:43:E3:0F:28:FC:8F:63:31:F8:FB:7A:58:54:DA
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:af:9d:d7:1e:68:b9:b7:15:7c:90:51:39:49:9a:08:9f:cc:
08:b7:1e:2f:5e:7d:04:e3:36:49:7a:d1:ac:0c:99:e5:db:d9:
3b:65:cb:bf:a3:41:64:e8:3d:bf:c2:69:c1:4b:dc:4d:21:88:
d8:42:41:1b:73:e4:18:d7:89:b9:e5:38:f5:e8:b9:f3:d1:63:
70:06:e9:19:f1:81:df:f1:05:85:67:e1:0a:51:1b:4f:4e:0c:
6d:1e:3b:18:0d:1d:40:56:a0:cd:b4:ec:fc:63:60:4b:11:2d:
94:b8:ac:d7:c6:9a:9b:2c:fe:4d:59:64:20:77:99:06:2c:1b:
99:ed:69:50:f1:15:55:b2:33:d3:c3:02:32:58:32:b7:12:79:
44:31:83:2b:da:4f:2d:4e:18:fd:4b:9e:bc:0b:82:58:19:6e:
d8:b1:b2:05:f1:56:e2:d4:40:06:2f:58:5d:e9:c2:0c:f5:3a:
85:1a:d2:d4:f1:97:8c:08:76:38:cf:15:20:cc:ac:04:2a:fe:
5e:38:35:cc:9d:0f:55:4d:35:52:45:2b:7f:8d:6b:89:b4:79:
09:32:40:05:14:86:95:fe:3e:05:21:d3:22:3a:d5:1c:25:d3:
9d:3b:5a:3f:39:f1:0d:b6:62:aa:37:9c:fc:7b:71:7d:a4:bd:
da:79:f1:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRg1h5kZuiObiW60W9DtYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDYzNjgyM2EyMGU2MDI2MzQyZmU4Yzg4ZWE3MmE4Zjhm
N2E3NDkwHhcNMjUwODA4MjAwMTIwWhcNMjUwODA5MjAwMTIwWjAzMTEwLwYDVQQD
Eyg2MGViNmRhMjJmYjA0M2UzMGYyOGZjOGY2MzMxZjhmYjdhNTg1NGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbZLZ4+01EfIFZXkYRZvbRudsbzU
yLWwx0hKiIT19lKff5J0Yu+io4uTVkFUDcV7pgfHQOM/JjJtZSKbIxzSeCgv/8zm
WOPVlgwBTxdjb8duHqgBKGuVzltr4kxcIsx0Hrje/eY398+Bc8nl0CuqSUvf91+x
t3hAcpIvQRWH8zmIhynKZkxt3FDxXaQUzAg5UJ71+cxt1FYkj7qmcgrNq9+HJlL5
DY7SPhgWzGyTwmZfC1mtFuKN85lQNwp0++F61LQHZaLh0IGd7K2j/PUucFLbhlwE
HSqDnRgHVIx0WcQeeXmu1mrwT/V0BH7lIDTDpnmgiUUUEMES6SpY8VixewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDrbaIvsEPjDyj8j2Mx+Pt6WFTaMB8GA1UdIwQY
MBaAFPwGNoI6IOYCY0L+jIjqcqj496dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85NDQ4OTYtM2M0MS00NzEwLTg2ZDIt
MDA1YTkyOWFjMTI0LzEvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS85NDQ4OTYtM2M0MS00NzEwLTg2ZDItMDA1YTkyOWFjMTI0
LzEvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa+d1x5o
ubcVfJBROUmaCJ/MCLceL159BOM2SXrRrAyZ5dvZO2XLv6NBZOg9v8JpwUvcTSGI
2EJBG3PkGNeJueU49ei589FjcAbpGfGB3/EFhWfhClEbT04MbR47GA0dQFagzbTs
/GNgSxEtlLis18aamyz+TVlkIHeZBiwbme1pUPEVVbIz08MCMlgytxJ5RDGDK9pP
LU4Y/UuevAuCWBlu2LGyBfFW4tRABi9YXenCDPU6hRrS1PGXjAh2OM8VIMysBCr+
Xjg1zJ0PVU01UkUrf41ribR5CTJABRSGlf4+BSHTIjrVHCXTnTtaPznxDbZiqjec
/HtxfaS92nnx3A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:49:00 2025 by rpki-client