Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: 57I/LPFgKPRRc/CRFU79RC9xKr/nVELIBIrum5Vfy40=
Subject key identifier: 37:4C:5F:64:D6:FA:23:12:A0:9B:23:D4:54:5E:03:F9:A6:4F:56:E6
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 01976F62DF227884762F4BC638AB98C66FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 0D55
Signing time: Sat 14 Jun 2025 17:00:39 +0000
Manifest this update: Sat 14 Jun 2025 17:00:39 +0000
Manifest next update: Sun 15 Jun 2025 17:00:39 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: 4tcgo3aWF4Ww2gTGRgmsOTM3ZlaJQNJ4N0idp57qi78=)
2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:df:22:78:84:76:2f:4b:c6:38:ab:98:c6:6f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Jun 14 17:00:39 2025 GMT
Not After : Jun 15 17:00:39 2025 GMT
Subject: CN=374c5f64d6fa2312a09b23d4545e03f9a64f56e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:53:35:c5:88:34:3d:0d:b8:02:6c:cb:66:
07:be:44:f0:42:00:d5:61:de:a1:c6:b2:f6:9c:d4:
3f:a9:89:03:d4:cd:f3:29:75:00:fe:4a:39:0e:e3:
75:49:eb:d7:c4:60:d6:b6:6e:f6:e8:b6:b4:bd:2f:
67:f2:2f:6a:25:fa:b3:85:3f:6b:8d:25:f3:b9:72:
5f:b3:a2:8c:0e:9b:d0:fc:81:a8:5a:62:79:a3:c4:
36:0a:6f:d1:d2:4c:67:d7:40:fb:40:d3:e6:26:36:
f0:34:c3:ff:34:8d:c3:36:b1:31:5c:ab:fc:30:b6:
30:32:b4:db:50:e1:1f:2b:68:41:05:41:17:97:27:
e3:c7:73:c5:65:28:6b:3d:d6:42:61:39:fc:69:e5:
c6:62:a5:77:f9:5e:fc:79:9d:b5:44:5d:09:84:e9:
32:20:e1:89:49:1a:58:25:b7:a2:03:55:50:c7:9c:
a3:99:6e:c8:54:fd:03:8c:85:f1:e4:88:5f:f4:cd:
81:10:d3:b7:be:d9:8e:a2:66:98:cb:98:fd:d3:6c:
30:d7:f8:18:90:0d:49:0d:af:a3:e6:dc:53:12:3f:
83:25:61:72:48:07:57:f0:be:02:b2:d6:a7:25:9b:
09:09:75:01:c8:e3:36:2e:f8:08:49:6a:c0:2b:84:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:5F:64:D6:FA:23:12:A0:9B:23:D4:54:5E:03:F9:A6:4F:56:E6
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:69:e4:30:73:62:bd:a7:e5:f9:52:05:39:32:ec:de:35:31:
e3:17:51:4f:03:7b:a4:17:7f:ed:1d:4c:bb:4b:3f:57:97:45:
d3:b1:01:78:39:2f:52:24:21:6d:e5:2f:80:d4:f2:bd:de:a0:
0a:37:cb:a1:04:28:a2:6f:f2:a4:45:01:04:53:71:ef:44:7d:
c8:12:4c:8e:90:63:76:84:e9:75:44:bb:19:d7:e6:2b:8d:40:
ed:2a:27:41:d4:4c:1e:f0:8c:dc:21:ce:dd:87:c6:e6:c1:d0:
85:c8:9f:b5:25:dc:f5:9b:e4:00:93:77:88:4e:28:91:69:0f:
8c:8a:10:c6:75:51:d6:fd:87:de:56:30:b5:01:b7:fd:2d:00:
94:b9:e7:1a:f4:d3:1e:ea:49:b3:a0:ae:fa:18:12:82:bc:f7:
43:62:2b:7d:17:d5:a8:c2:36:57:19:03:50:bf:07:96:c5:f0:
39:33:fe:51:71:5e:d5:ea:d9:83:84:50:7b:8f:18:5c:c6:88:
49:5d:17:10:d3:4e:c3:13:5e:d8:ea:f0:6b:0a:8e:00:00:cd:
54:97:dc:59:1b:a4:9f:7e:b2:6d:49:b9:75:d8:83:54:d6:54:
3f:ea:fe:42:48:64:1d:4c:b6:3e:f9:d0:99:30:c6:d5:5b:38:
6e:e4:74:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYt8ieIR2L0vGOKuYxm/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODdkNDc5MzVlMTEzN2Q1NDQ0MjZkYjUyODhlMTJhOWMw
MjVhYzIwHhcNMjUwNjE0MTcwMDM5WhcNMjUwNjE1MTcwMDM5WjAzMTEwLwYDVQQD
EygzNzRjNWY2NGQ2ZmEyMzEyYTA5YjIzZDQ1NDVlMDNmOWE2NGY1NmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8hTNcWIND0NuAJsy2YHvkTwQgDV
Yd6hxrL2nNQ/qYkD1M3zKXUA/ko5DuN1SevXxGDWtm726La0vS9n8i9qJfqzhT9r
jSXzuXJfs6KMDpvQ/IGoWmJ5o8Q2Cm/R0kxn10D7QNPmJjbwNMP/NI3DNrExXKv8
MLYwMrTbUOEfK2hBBUEXlyfjx3PFZShrPdZCYTn8aeXGYqV3+V78eZ21RF0JhOky
IOGJSRpYJbeiA1VQx5yjmW7IVP0DjIXx5Ihf9M2BENO3vtmOomaYy5j902ww1/gY
kA1JDa+j5txTEj+DJWFySAdX8L4CstanJZsJCXUByOM2LvgISWrAK4RRkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdMX2TW+iMSoJsj1FReA/mmT1bmMB8GA1UdIwQY
MBaAFGmH1Hk14RN9VEQm21KI4SqcAlrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1Zjgt
OWM5NTM1OTRkNmIxLzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1ZjgtOWM5NTM1OTRkNmIx
LzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGnkMHNi
vafl+VIFOTLs3jUx4xdRTwN7pBd/7R1Mu0s/V5dF07EBeDkvUiQhbeUvgNTyvd6g
CjfLoQQoom/ypEUBBFNx70R9yBJMjpBjdoTpdUS7GdfmK41A7SonQdRMHvCM3CHO
3YfG5sHQhciftSXc9ZvkAJN3iE4okWkPjIoQxnVR1v2H3lYwtQG3/S0AlLnnGvTT
HupJs6Cu+hgSgrz3Q2IrfRfVqMI2VxkDUL8HlsXwOTP+UXFe1erZg4RQe48YXMaI
SV0XENNOwxNe2OrwawqOAADNVJfcWRukn36ybUm5ddiDVNZUP+r+QkhkHUy2PvnQ
mTDG1Vs4buR0sw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:47:14 2025 by rpki-client