Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier: HrR9uVUcyCJOGlkn4b7vJDPcTVeZNmLgzL1Bcvx65+A=
Subject key identifier: AE:FD:FA:07:7F:8B:DD:43:A9:87:B7:19:A9:21:BD:21:42:94:B6:4F
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 019768BC416D1627AFB7EC632E6C7D36C168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number: 0D7C
Signing time: Fri 13 Jun 2025 10:00:57 +0000
Manifest this update: Fri 13 Jun 2025 10:00:57 +0000
Manifest next update: Sat 14 Jun 2025 10:00:57 +0000
Files and hashes: 1: TPjf70pa6qBZmpfYB0iX9CcL4Y4.roa (hash: swAbvLbVBmlLATlL/hX7o87L+INYtKkOcONzc8lraTI=)
2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: 5sFhF63pysEk7VF/4dzEcH6UdSYGqlgxN5yR006PuJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:41:6d:16:27:af:b7:ec:63:2e:6c:7d:36:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Jun 13 10:00:57 2025 GMT
Not After : Jun 14 10:00:57 2025 GMT
Subject: CN=aefdfa077f8bdd43a987b719a921bd214294b64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:b2:55:60:b7:82:d7:27:02:7c:fb:78:82:
e7:ae:bd:ae:79:b9:18:4b:37:73:62:af:b2:de:b5:
f1:a8:56:62:69:5e:4c:a8:ef:ad:16:8a:65:de:cd:
be:a9:e3:29:9a:df:d2:f6:f4:73:25:c0:72:7d:19:
11:3b:62:88:2a:83:1d:9d:ba:64:5b:ba:bc:0f:4d:
25:b8:18:e8:aa:46:c0:cd:e2:88:25:f7:56:c7:dd:
9a:80:73:56:c1:d0:c3:9f:79:01:c9:10:6d:9e:d1:
7c:99:ce:50:08:2a:06:61:62:7e:b5:e4:b2:76:e4:
3b:e7:4d:53:dd:af:83:19:60:55:98:5a:dc:79:52:
72:71:52:29:0f:6e:0c:81:2f:1e:60:05:a3:8b:9f:
37:75:11:66:2a:41:77:23:42:60:74:fe:04:00:1a:
98:16:5b:29:0a:05:54:01:a2:48:45:e8:0f:e9:51:
d3:04:0e:c0:0f:42:c9:03:12:13:65:14:6d:90:a5:
9b:65:a2:ac:63:eb:db:86:d9:83:01:35:86:4c:3b:
43:a4:c3:ba:25:ef:db:9e:7c:08:aa:ba:ce:8c:f1:
55:b9:99:a9:58:0f:75:82:5a:df:71:38:b7:55:31:
5a:75:aa:1d:1a:f7:68:0a:54:e8:9a:d1:9c:d6:48:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FD:FA:07:7F:8B:DD:43:A9:87:B7:19:A9:21:BD:21:42:94:B6:4F
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a5:7b:52:97:88:59:a0:c1:37:e9:74:37:36:18:62:23:b2:
92:4a:71:96:a6:fb:f0:10:5c:7c:e0:d8:03:56:47:56:2a:99:
5f:2c:a4:86:76:41:f6:e7:53:62:b2:0f:3c:e1:23:69:56:99:
7b:fc:34:ae:d0:5a:41:1e:4d:fd:3b:7e:42:ce:0b:4c:ff:ad:
41:29:f3:d5:8b:d4:03:cb:99:94:e3:51:ce:83:2b:f8:a4:cb:
28:12:11:b9:30:dc:c9:53:1b:c6:44:3b:8f:92:72:86:76:18:
fc:a7:85:ce:8f:76:69:f8:52:55:e5:d7:c0:a5:22:e1:67:98:
54:21:24:70:f5:f0:8b:b3:96:79:5c:79:67:2e:0b:66:21:8f:
2d:42:88:68:a7:c9:94:48:89:cd:04:32:02:84:8f:cd:6a:70:
6c:aa:74:12:c2:81:50:f0:39:8e:db:75:82:da:e3:ba:a1:b1:
c2:b8:78:14:17:8b:21:46:b6:52:fe:34:d9:b3:39:2e:73:b0:
8f:e3:e0:7b:eb:c8:9c:ee:1b:19:98:34:65:3b:41:fa:de:30:
19:30:10:49:d0:9d:a3:c5:bb:4e:93:43:1a:2b:8c:1f:fe:56:
1f:38:78:97:90:d4:19:c0:19:fb:80:75:66:fb:90:d5:17:aa:
27:6a:52:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovEFtFievt+xjLmx9NsFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzI2YTk2MTMzNmZiZTc4MjBiM2Q3NDhlODEyZjQ5NWM4
NzJkMzUwHhcNMjUwNjEzMTAwMDU3WhcNMjUwNjE0MTAwMDU3WjAzMTEwLwYDVQQD
EyhhZWZkZmEwNzdmOGJkZDQzYTk4N2I3MTlhOTIxYmQyMTQyOTRiNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcayVWC3gtcnAnz7eILnrr2uebkY
SzdzYq+y3rXxqFZiaV5MqO+tFopl3s2+qeMpmt/S9vRzJcByfRkRO2KIKoMdnbpk
W7q8D00luBjoqkbAzeKIJfdWx92agHNWwdDDn3kByRBtntF8mc5QCCoGYWJ+teSy
duQ7501T3a+DGWBVmFrceVJycVIpD24MgS8eYAWji583dRFmKkF3I0JgdP4EABqY
FlspCgVUAaJIRegP6VHTBA7AD0LJAxITZRRtkKWbZaKsY+vbhtmDATWGTDtDpMO6
Je/bnnwIqrrOjPFVuZmpWA91glrfcTi3VTFadaodGvdoClTomtGc1kjtOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK79+gd/i91DqYe3GakhvSFClLZPMB8GA1UdIwQY
MBaAFGlyapYTNvvnggs9dI6BL0lchy01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUt
YzAxNjZkOTcwMTBkLzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUtYzAxNjZkOTcwMTBk
LzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6V7UpeI
WaDBN+l0NzYYYiOykkpxlqb78BBcfODYA1ZHViqZXyykhnZB9udTYrIPPOEjaVaZ
e/w0rtBaQR5N/Tt+Qs4LTP+tQSnz1YvUA8uZlONRzoMr+KTLKBIRuTDcyVMbxkQ7
j5JyhnYY/KeFzo92afhSVeXXwKUi4WeYVCEkcPXwi7OWeVx5Zy4LZiGPLUKIaKfJ
lEiJzQQyAoSPzWpwbKp0EsKBUPA5jtt1gtrjuqGxwrh4FBeLIUa2Uv402bM5LnOw
j+Pge+vInO4bGZg0ZTtB+t4wGTAQSdCdo8W7TpNDGiuMH/5WHzh4l5DUGcAZ+4B1
ZvuQ1ReqJ2pSmA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:40 2025 by rpki-client