Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
File: aomTYnatLRhxB9-3QAeTADrBSac.mft (raw, json)
Hash identifier: kCGLVKdV92NpW6M9Ed/SxynQNhln/9oBMq/ce+STHBo=
Subject key identifier: 9D:26:67:74:EA:7A:A0:71:C3:8E:C8:11:EC:0E:76:AD:6B:8D:B9:5A
Authority key identifier: 6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
Certificate issuer: /CN=6a89936276ad2d187107dfb7400793003ac149a7
Certificate serial: 019768BBC6A092FE87DB673BC6A12BC7FCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
Manifest number: 151B
Signing time: Fri 13 Jun 2025 10:00:25 +0000
Manifest this update: Fri 13 Jun 2025 10:00:25 +0000
Manifest next update: Sat 14 Jun 2025 10:00:25 +0000
Files and hashes: 1: aomTYnatLRhxB9-3QAeTADrBSac.crl (hash: GLvo4WUdFEW6devATxXNhQ9Xl/SuA2PGx3eHs3E7xvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c6:a0:92:fe:87:db:67:3b:c6:a1:2b:c7:fc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89936276ad2d187107dfb7400793003ac149a7
Validity
Not Before: Jun 13 10:00:25 2025 GMT
Not After : Jun 14 10:00:25 2025 GMT
Subject: CN=9d266774ea7aa071c38ec811ec0e76ad6b8db95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:10:73:0b:fa:57:6a:40:e7:11:70:80:d7:d2:
7c:58:ed:eb:a3:94:e5:fb:84:7d:b9:82:7a:2e:40:
4e:e8:21:50:1c:d6:e4:66:ff:a5:9d:fd:37:ef:f7:
d0:a3:fb:a0:d3:10:21:e1:b4:4e:1c:1b:7d:3b:bc:
d1:fd:0d:75:70:80:bb:ee:1d:97:bd:ce:59:82:bb:
93:d8:24:95:27:84:02:15:80:39:d8:12:b4:10:1e:
57:14:60:90:78:ca:4d:78:7c:eb:bb:2b:28:61:e9:
58:31:d8:b7:a0:e9:53:b4:72:e0:1a:3f:d3:3f:36:
c2:d6:58:3e:ee:61:02:bf:56:bf:d2:f6:4f:bb:84:
81:f6:ee:b3:f0:cd:3c:40:60:b8:8d:d5:8f:74:e4:
6b:95:88:57:64:aa:c7:11:06:91:2e:c0:39:ab:2c:
81:34:17:c4:e4:4a:81:4e:75:e2:65:7f:a9:eb:ba:
c1:be:c9:41:ab:fe:76:f1:2d:00:d2:f9:f5:72:3d:
8b:4a:d2:f3:5a:fa:86:82:d0:a1:9d:c8:d0:61:63:
af:90:01:d4:aa:be:c0:67:aa:18:4f:80:c7:f3:1d:
1c:c4:7b:24:15:ab:41:3b:67:4b:66:19:a8:ce:0f:
44:d2:cf:96:1c:56:d8:61:62:67:09:78:53:81:84:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:26:67:74:EA:7A:A0:71:C3:8E:C8:11:EC:0E:76:AD:6B:8D:B9:5A
X509v3 Authority Key Identifier:
keyid:6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:75:0d:5d:18:bd:28:33:1b:4d:b3:3f:8b:b9:e5:84:71:33:
47:6d:c4:9a:37:c1:7e:ef:e6:0d:a1:d3:73:7d:fa:1d:74:b6:
9f:d9:d9:1e:33:8e:7f:cb:1d:4b:9a:a4:e9:47:83:82:9d:38:
87:44:d8:b6:00:f3:ff:36:10:6d:4c:a2:a7:3c:60:42:33:79:
f7:3b:67:ca:28:94:7b:de:a4:7e:41:5d:e8:47:8d:55:de:17:
d8:6f:24:b5:32:70:20:11:e5:27:95:38:61:f7:2f:fd:0c:6b:
2e:ec:5d:9a:21:a2:76:5f:a8:fd:00:5d:ff:29:23:f7:e7:3d:
71:94:3b:71:ee:9d:e7:4a:ef:92:3d:b3:74:b7:18:a6:bc:06:
ee:2a:9d:75:ee:6e:03:8e:3f:10:50:d0:c0:23:3e:8c:a3:c5:
52:eb:e9:55:1c:66:07:70:67:a5:fa:4c:e3:e7:0d:20:30:4b:
79:82:9e:26:70:dd:28:f6:07:74:63:84:18:65:29:ed:89:06:
2b:3c:1d:c6:26:bc:3e:e1:fd:4d:75:90:bb:9e:18:e0:5f:c9:
c8:76:14:e0:e1:b2:f6:fa:89:f7:49:c9:2a:34:0b:2e:a8:5f:
e0:05:56:2d:63:40:73:c4:a2:3c:dd:fd:4b:38:6a:7a:dd:93:
ea:d9:e3:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou8agkv6H22c7xqErx/yoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhODk5MzYyNzZhZDJkMTg3MTA3ZGZiNzQwMDc5MzAwM2Fj
MTQ5YTcwHhcNMjUwNjEzMTAwMDI1WhcNMjUwNjE0MTAwMDI1WjAzMTEwLwYDVQQD
Eyg5ZDI2Njc3NGVhN2FhMDcxYzM4ZWM4MTFlYzBlNzZhZDZiOGRiOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hBzC/pXakDnEXCA19J8WO3ro5Tl
+4R9uYJ6LkBO6CFQHNbkZv+lnf037/fQo/ug0xAh4bROHBt9O7zR/Q11cIC77h2X
vc5ZgruT2CSVJ4QCFYA52BK0EB5XFGCQeMpNeHzruysoYelYMdi3oOlTtHLgGj/T
PzbC1lg+7mECv1a/0vZPu4SB9u6z8M08QGC4jdWPdORrlYhXZKrHEQaRLsA5qyyB
NBfE5EqBTnXiZX+p67rBvslBq/528S0A0vn1cj2LStLzWvqGgtChncjQYWOvkAHU
qr7AZ6oYT4DH8x0cxHskFatBO2dLZhmozg9E0s+WHFbYYWJnCXhTgYTf6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0mZ3TqeqBxw47IEewOdq1rjblaMB8GA1UdIwQY
MBaAFGqJk2J2rS0YcQfft0AHkwA6wUmnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW9tVFluYXRMUmh4QjktM1FBZVRBRHJCU2FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYWI2MmQtMDcwYy00YjA2LWIzOGEt
NzNhN2E0NzM2MDM4LzEvYW9tVFluYXRMUmh4QjktM1FBZVRBRHJCU2FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yYWI2MmQtMDcwYy00YjA2LWIzOGEtNzNhN2E0NzM2MDM4
LzEvYW9tVFluYXRMUmh4QjktM1FBZVRBRHJCU2FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXUNXRi9
KDMbTbM/i7nlhHEzR23EmjfBfu/mDaHTc336HXS2n9nZHjOOf8sdS5qk6UeDgp04
h0TYtgDz/zYQbUyipzxgQjN59ztnyiiUe96kfkFd6EeNVd4X2G8ktTJwIBHlJ5U4
Yfcv/QxrLuxdmiGidl+o/QBd/ykj9+c9cZQ7ce6d50rvkj2zdLcYprwG7iqdde5u
A44/EFDQwCM+jKPFUuvpVRxmB3BnpfpM4+cNIDBLeYKeJnDdKPYHdGOEGGUp7YkG
Kzwdxia8PuH9TXWQu54Y4F/JyHYU4OGy9vqJ90nJKjQLLqhf4AVWLWNAc8SiPN39
Szhqet2T6tnj7A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:11 2025 by rpki-client