Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
File: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft (raw, json)
Hash identifier: wMPSkhkzFjgeubT68ItANMWQvzqu2NIrLEkZcpj3D5s=
Subject key identifier: 92:F0:2F:A4:0D:6B:7C:97:3F:07:2E:94:9C:BD:2C:1D:E5:DE:CA:45
Authority key identifier: 01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
Certificate issuer: /CN=010d68a876cf5793fd00876254253d382779027b
Certificate serial: 019768BBCA96B4A230C9B423A0263E1BD769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
Manifest number: 02F3
Signing time: Fri 13 Jun 2025 10:00:26 +0000
Manifest this update: Fri 13 Jun 2025 10:00:26 +0000
Manifest next update: Sat 14 Jun 2025 10:00:26 +0000
Files and hashes: 1: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl (hash: ZFEYKjj8zSlEOwgAh1Y1Om19DCBD127XzMTnfbDSs0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ca:96:b4:a2:30:c9:b4:23:a0:26:3e:1b:d7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010d68a876cf5793fd00876254253d382779027b
Validity
Not Before: Jun 13 10:00:26 2025 GMT
Not After : Jun 14 10:00:26 2025 GMT
Subject: CN=92f02fa40d6b7c973f072e949cbd2c1de5deca45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:25:e2:b3:3b:7e:7b:e0:7e:9d:61:aa:a6:
be:25:3e:e2:17:3c:7d:79:83:78:f5:fc:91:19:7b:
b4:25:7b:e5:28:b3:c2:3a:ab:1d:aa:50:d3:d4:1f:
7c:9e:81:06:e1:38:66:f1:ad:64:69:da:f3:16:fb:
a3:61:ec:70:d1:b7:b5:1e:ba:01:91:ae:4d:34:06:
2f:52:0d:0c:f1:47:11:f5:a3:09:fc:68:ed:78:c7:
22:5a:d4:04:da:dc:9c:6f:3c:5d:09:6d:22:9c:95:
e1:2b:13:a7:09:93:48:49:31:9d:f9:d5:e9:1d:4c:
03:01:04:7d:27:a5:a7:de:13:46:4e:ab:68:c7:dc:
d3:f6:cb:dc:1d:94:52:12:f8:a6:34:17:90:02:2f:
f5:07:ba:ee:15:3b:d7:35:45:85:3f:75:44:d0:fa:
0d:56:42:5b:1e:26:d5:7c:87:d0:d3:b9:d4:50:a1:
a7:2a:49:9e:2d:c4:75:32:64:64:c6:4c:f5:bf:cc:
68:6b:09:99:e0:7e:a7:8a:ac:e8:e1:b9:b1:9d:55:
0f:1a:18:20:9d:e4:5f:86:af:b2:03:e6:de:cf:c9:
a7:f7:72:0e:99:c1:35:f7:b3:59:65:f0:7b:d1:f2:
bb:da:19:a1:af:98:b0:45:c2:43:a7:ee:3b:f5:e5:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F0:2F:A4:0D:6B:7C:97:3F:07:2E:94:9C:BD:2C:1D:E5:DE:CA:45
X509v3 Authority Key Identifier:
keyid:01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:99:39:84:f5:fd:ae:6c:61:e1:68:44:ad:46:92:9d:e5:d4:
55:fc:2f:30:60:28:47:3c:f5:ba:4b:1a:ea:43:26:8d:09:f0:
9e:28:47:76:dd:31:e5:6a:a3:02:3e:82:1c:11:e2:76:6a:54:
64:cf:81:95:91:27:2b:5b:de:8d:9c:eb:8a:50:34:82:20:e1:
67:8f:65:d7:3a:43:ea:4f:a0:f7:9e:ef:d2:33:51:3d:8f:86:
f4:ce:24:bb:9c:7c:c2:ce:09:a8:d8:1a:e2:ae:e5:ec:ca:43:
24:f6:eb:aa:a1:7c:e3:6c:75:de:cb:ec:69:d4:71:dd:8f:84:
83:0a:82:e8:ea:2e:f5:f1:c7:70:de:90:e2:91:b0:84:bc:45:
70:fe:73:41:7c:66:06:c5:05:ef:b0:61:e1:87:ff:e5:3c:74:
80:b9:44:55:fe:f5:09:9d:5c:5b:2b:24:25:20:b5:6d:99:2f:
bc:5e:c3:48:11:1e:e5:1b:cb:70:68:7d:24:47:54:c6:50:85:
07:f7:86:d5:a1:4c:07:98:ac:92:e4:84:a5:2f:fb:49:33:b2:
15:2b:59:3a:52:6e:45:b3:6d:a9:2b:7c:1a:2f:aa:a2:16:2f:
88:b0:b3:d4:0c:72:d4:10:4d:3e:ec:3b:76:29:03:d8:14:8f:
e3:66:43:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou8qWtKIwybQjoCY+G9dpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGQ2OGE4NzZjZjU3OTNmZDAwODc2MjU0MjUzZDM4Mjc3
OTAyN2IwHhcNMjUwNjEzMTAwMDI2WhcNMjUwNjE0MTAwMDI2WjAzMTEwLwYDVQQD
Eyg5MmYwMmZhNDBkNmI3Yzk3M2YwNzJlOTQ5Y2JkMmMxZGU1ZGVjYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTYl4rM7fnvgfp1hqqa+JT7iFzx9
eYN49fyRGXu0JXvlKLPCOqsdqlDT1B98noEG4Thm8a1kadrzFvujYexw0be1HroB
ka5NNAYvUg0M8UcR9aMJ/GjteMciWtQE2tycbzxdCW0inJXhKxOnCZNISTGd+dXp
HUwDAQR9J6Wn3hNGTqtox9zT9svcHZRSEvimNBeQAi/1B7ruFTvXNUWFP3VE0PoN
VkJbHibVfIfQ07nUUKGnKkmeLcR1MmRkxkz1v8xoawmZ4H6niqzo4bmxnVUPGhgg
neRfhq+yA+bez8mn93IOmcE197NZZfB70fK72hmhr5iwRcJDp+479eUPcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLwL6QNa3yXPwculJy9LB3l3spFMB8GA1UdIwQY
MBaAFAENaKh2z1eT/QCHYlQlPTgneQJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVExb3FIYlBWNVA5QUlkaVZDVTlPQ2Q1QW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jNDlkN2QtMWM1ZC00OGZiLWIwNzAt
ZDY1NzI5YmIyZGFjLzEvQVExb3FIYlBWNVA5QUlkaVZDVTlPQ2Q1QW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jNDlkN2QtMWM1ZC00OGZiLWIwNzAtZDY1NzI5YmIyZGFj
LzEvQVExb3FIYlBWNVA5QUlkaVZDVTlPQ2Q1QW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpk5hPX9
rmxh4WhErUaSneXUVfwvMGAoRzz1uksa6kMmjQnwnihHdt0x5WqjAj6CHBHidmpU
ZM+BlZEnK1vejZzrilA0giDhZ49l1zpD6k+g957v0jNRPY+G9M4ku5x8ws4JqNga
4q7l7MpDJPbrqqF842x13svsadRx3Y+EgwqC6Oou9fHHcN6Q4pGwhLxFcP5zQXxm
BsUF77Bh4Yf/5Tx0gLlEVf71CZ1cWyskJSC1bZkvvF7DSBEe5RvLcGh9JEdUxlCF
B/eG1aFMB5iskuSEpS/7STOyFStZOlJuRbNtqSt8Gi+qohYviLCz1Axy1BBNPuw7
dikD2BSP42ZDRA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:19 2025 by rpki-client