Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: CBr4qOFRYyg928d5/EoRiZvIRgkKCWOCKG394LghJSc=
Subject key identifier: F1:C3:AB:A7:6F:11:91:C8:DB:DF:D8:1F:D5:28:C5:7C:B9:DF:9D:43
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 01978CFF3BCDC40FAA0F40AC45A1A0CB76EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0D15
Signing time: Fri 20 Jun 2025 11:00:26 +0000
Manifest this update: Fri 20 Jun 2025 11:00:26 +0000
Manifest next update: Sat 21 Jun 2025 11:00:26 +0000
Files and hashes: 1: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (hash: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=)
2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: gjg81ikxpmXv6DWdgMRq/xXJsVi7qlhxvL7bbcVVH4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:ff:3b:cd:c4:0f:aa:0f:40:ac:45:a1:a0:cb:76:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Jun 20 11:00:26 2025 GMT
Not After : Jun 21 11:00:26 2025 GMT
Subject: CN=f1c3aba76f1191c8dbdfd81fd528c57cb9df9d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:1c:58:b9:7e:48:6c:bb:4a:ad:85:f0:7b:
d6:02:ac:fb:d4:59:5d:27:65:85:10:01:ea:ca:b1:
e2:f5:67:22:98:50:a9:fd:0b:bf:96:e7:e2:3f:0f:
2f:60:e2:97:66:5f:31:fd:00:bb:4c:89:07:61:69:
ef:8b:f1:c0:b7:96:b0:c2:0e:47:8e:b4:71:03:bd:
36:dd:71:72:d7:e2:5f:88:7c:76:ea:34:e2:16:fe:
7b:a7:56:5e:f8:ad:22:c5:ec:19:04:6e:65:f4:38:
aa:99:f8:a9:c7:7e:84:df:ec:e9:2f:17:7c:7e:73:
27:42:cd:ac:e2:eb:39:c7:68:bb:93:30:c5:06:18:
94:b3:83:bc:c1:4d:bf:fb:e7:25:27:9b:d2:a7:51:
a0:d5:61:ef:cc:db:fd:8e:03:47:f8:83:43:e2:fd:
83:67:47:8d:10:02:74:40:d3:a9:5d:45:ad:c7:d1:
f0:c4:24:e0:57:45:3b:dd:bb:3a:9f:e8:78:46:23:
12:88:24:6e:be:f3:dc:43:4c:2a:9b:2a:3b:75:99:
5a:9d:c3:87:1c:68:64:a6:17:24:4b:9d:e1:29:2b:
11:45:19:ca:bd:23:05:59:64:3d:da:31:16:88:9f:
49:35:3d:39:0c:71:03:9e:a2:58:cd:90:31:da:83:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C3:AB:A7:6F:11:91:C8:DB:DF:D8:1F:D5:28:C5:7C:B9:DF:9D:43
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:65:c6:ba:c1:8c:8a:7f:6a:21:cc:8a:e5:49:4f:4c:5a:55:
23:4c:46:e8:18:e8:81:e1:63:d1:44:9a:d0:e1:24:b1:2c:b4:
d8:26:7c:f2:f7:5d:09:6d:27:6d:ea:74:22:42:7c:aa:60:5f:
22:09:2f:3c:5c:fc:62:6c:d4:4a:72:1d:f4:60:c7:c2:c9:83:
30:68:d6:b1:10:cf:b4:1b:8e:cb:36:be:ea:fb:8e:18:6e:29:
0c:1a:9c:77:7e:b2:74:68:81:1f:23:d5:6f:c9:9f:fe:62:98:
30:2a:32:ed:31:ad:3e:f5:80:04:46:02:d9:14:80:a7:58:76:
f8:cf:33:7a:8a:59:ad:71:4b:55:92:0a:15:60:e1:06:0d:87:
77:3b:88:c3:e3:c6:c5:06:be:6e:75:c0:c3:d5:62:f4:cd:1e:
09:2c:dc:d1:94:47:3f:2e:fd:9b:0e:7e:9b:54:8a:9f:c9:37:
c4:a3:db:1a:25:61:d7:2f:7d:c3:18:2f:42:98:4c:f6:68:93:
d3:84:eb:ff:b5:2a:b5:32:28:a3:e9:75:d5:b0:d3:db:4e:8f:
7f:bc:a1:98:29:44:a4:eb:3d:22:ef:bb:50:83:5f:f4:c2:0d:
23:76:80:58:4e:07:48:af:ec:b7:df:83:31:41:08:18:1f:22:
f7:0b:0b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeM/zvNxA+qD0CsRaGgy3brMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMzc5ODIyMDdlNjJkZWQwNjkxZGNiMThlZjZlYTMyZDQx
M2YzZjYwHhcNMjUwNjIwMTEwMDI2WhcNMjUwNjIxMTEwMDI2WjAzMTEwLwYDVQQD
EyhmMWMzYWJhNzZmMTE5MWM4ZGJkZmQ4MWZkNTI4YzU3Y2I5ZGY5ZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjYcWLl+SGy7Sq2F8HvWAqz71Fld
J2WFEAHqyrHi9WcimFCp/Qu/lufiPw8vYOKXZl8x/QC7TIkHYWnvi/HAt5awwg5H
jrRxA7023XFy1+JfiHx26jTiFv57p1Ze+K0ixewZBG5l9Diqmfipx36E3+zpLxd8
fnMnQs2s4us5x2i7kzDFBhiUs4O8wU2/++clJ5vSp1Gg1WHvzNv9jgNH+IND4v2D
Z0eNEAJ0QNOpXUWtx9HwxCTgV0U73bs6n+h4RiMSiCRuvvPcQ0wqmyo7dZlancOH
HGhkphckS53hKSsRRRnKvSMFWWQ92jEWiJ9JNT05DHEDnqJYzZAx2oONRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHDq6dvEZHI29/YH9UoxXy5351DMB8GA1UdIwQY
MBaAFGo3mCIH5i3tBpHcsY726jLUE/P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYt
MjM1MzE2NTRlNTg5LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYtMjM1MzE2NTRlNTg5
LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmXGusGM
in9qIcyK5UlPTFpVI0xG6BjogeFj0USa0OEksSy02CZ88vddCW0nbep0IkJ8qmBf
IgkvPFz8YmzUSnId9GDHwsmDMGjWsRDPtBuOyza+6vuOGG4pDBqcd36ydGiBHyPV
b8mf/mKYMCoy7TGtPvWABEYC2RSAp1h2+M8zeopZrXFLVZIKFWDhBg2HdzuIw+PG
xQa+bnXAw9Vi9M0eCSzc0ZRHPy79mw5+m1SKn8k3xKPbGiVh1y99wxgvQphM9miT
04Tr/7UqtTIoo+l11bDT206Pf7yhmClEpOs9Iu+7UINf9MINI3aAWE4HSK/st9+D
MUEIGB8i9wsLyQ==
-----END CERTIFICATE-----
Generated at Fri Jun 20 18:50:41 2025 by rpki-client