Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: 1N72AEIlm/XYhH3YS5FHU89R+zz9MgcRdO50RbTFaeI=
Subject key identifier: 62:A1:56:0A:7C:1A:A7:91:BA:88:3D:8D:D0:9A:0A:81:E7:0D:E4:00
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 019873E24DC753BDF3C186B8F63E623AF670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0C1F
Signing time: Mon 04 Aug 2025 07:01:07 +0000
Manifest this update: Mon 04 Aug 2025 07:01:07 +0000
Manifest next update: Tue 05 Aug 2025 07:01:07 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: CMvFBhi8kVS6J/DEyTV/4zFTrrtWBPjuhwDJVplWTes=)
2: PF_eVnR65kNetKj7PMmx-v4rMFw.roa (hash: /4k6yxxkJCQSm4rG3gdwumQHjo0wfUW3Pw4ZNvKY7P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:4d:c7:53:bd:f3:c1:86:b8:f6:3e:62:3a:f6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Aug 4 07:01:07 2025 GMT
Not After : Aug 5 07:01:07 2025 GMT
Subject: CN=62a1560a7c1aa791ba883d8dd09a0a81e70de400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:bd:5d:75:01:3d:3a:93:54:7f:d8:4c:1d:
1d:3a:13:88:55:d1:b9:50:d1:bc:09:ea:4e:c4:1d:
65:bc:ec:0e:05:32:47:2f:dd:32:67:53:b7:b4:3a:
d1:97:46:fa:58:ed:38:5a:7a:c9:5a:27:2c:38:5f:
91:6f:38:93:d8:1c:28:d0:45:b6:b3:62:c3:4e:ca:
34:a1:d6:64:db:d3:15:37:2b:9d:6e:d1:43:56:26:
e8:80:66:35:4e:c2:8e:2d:0e:0a:bb:d5:d3:08:3e:
8b:e4:2c:82:e9:4c:c0:05:90:1a:a2:e7:6d:7e:db:
00:53:4b:b9:de:70:44:10:46:34:b6:e8:98:96:87:
ed:71:c5:71:b8:e4:e1:64:98:06:a6:20:0f:fe:e8:
47:ce:d7:42:6d:be:0f:a0:15:c0:0f:63:fe:96:d9:
46:96:90:7c:8c:16:94:ef:c0:89:2d:bb:33:fa:cc:
8e:f6:c0:b1:23:51:5d:4a:26:7c:66:71:2f:9e:0f:
fc:8b:2f:38:a1:62:c5:f6:17:84:15:f1:d7:ec:b2:
14:62:ef:04:02:57:02:0a:22:72:2f:ff:0a:3c:4c:
2b:54:83:f1:8c:06:e5:df:fc:86:b1:e9:61:a0:b7:
b9:3b:e2:e8:8d:05:5c:e9:32:3d:e3:68:c7:96:2a:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A1:56:0A:7C:1A:A7:91:BA:88:3D:8D:D0:9A:0A:81:E7:0D:E4:00
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:98:d7:3c:8f:ca:27:ac:73:cc:4f:bc:89:3b:fb:2c:40:c2:
b7:78:b3:00:66:54:77:34:6f:b2:36:cd:05:c8:8b:d8:3c:f3:
3b:0a:0a:d2:ea:54:ee:86:f5:67:5a:28:e0:d9:89:53:71:52:
9c:9c:f4:99:d7:09:77:47:fd:4f:04:c0:d0:fe:64:eb:95:38:
57:59:24:fa:f5:b9:c4:bb:41:5b:c3:bc:b6:07:10:d3:6d:ca:
67:fa:3c:2a:ff:f7:6c:59:e2:16:e5:5e:75:42:c9:e3:cf:00:
4a:a1:79:a4:9c:c6:af:be:35:85:e7:a6:02:ec:00:1f:14:e0:
56:b8:1b:32:b5:87:58:fd:fa:19:db:74:1f:71:e7:7f:88:ba:
08:c5:87:67:a0:07:2c:11:93:c2:5b:75:56:3c:01:b6:06:b7:
e5:6a:6d:48:1c:e3:f5:5f:bd:b8:cb:be:e2:ec:51:bd:f7:73:
78:f2:0c:d0:c0:36:a4:98:40:db:8f:42:17:3b:0f:9f:e5:19:
6c:df:1e:53:75:1e:9c:43:54:42:16:da:dc:94:d0:26:2f:f5:
d4:9b:ce:e2:bf:a6:ca:5a:60:e0:e1:62:38:06:38:23:7b:d0:
06:a4:41:d4:58:36:5e:36:ae:ce:a9:6b:37:54:2c:d3:e3:94:
d7:0c:9c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4k3HU73zwYa49j5iOvZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOGZkZjcxOWQ0N2ExMDAzMzQ1MWE4MzM4NGE2ZGI2OGRi
ZDViMGYwHhcNMjUwODA0MDcwMTA3WhcNMjUwODA1MDcwMTA3WjAzMTEwLwYDVQQD
Eyg2MmExNTYwYTdjMWFhNzkxYmE4ODNkOGRkMDlhMGE4MWU3MGRlNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0la9XXUBPTqTVH/YTB0dOhOIVdG5
UNG8CepOxB1lvOwOBTJHL90yZ1O3tDrRl0b6WO04WnrJWicsOF+RbziT2Bwo0EW2
s2LDTso0odZk29MVNyudbtFDVibogGY1TsKOLQ4Ku9XTCD6L5CyC6UzABZAaoudt
ftsAU0u53nBEEEY0tuiYloftccVxuOThZJgGpiAP/uhHztdCbb4PoBXAD2P+ltlG
lpB8jBaU78CJLbsz+syO9sCxI1FdSiZ8ZnEvng/8iy84oWLF9heEFfHX7LIUYu8E
AlcCCiJyL/8KPEwrVIPxjAbl3/yGselhoLe5O+LojQVc6TI942jHliqQawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKhVgp8GqeRuog9jdCaCoHnDeQAMB8GA1UdIwQY
MBaAFAKP33GdR6EAM0UagzhKbbaNvVsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjct
MDU1YTljYWQ4ZGY3LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjctMDU1YTljYWQ4ZGY3
LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJjXPI/K
J6xzzE+8iTv7LEDCt3izAGZUdzRvsjbNBciL2DzzOwoK0upU7ob1Z1oo4NmJU3FS
nJz0mdcJd0f9TwTA0P5k65U4V1kk+vW5xLtBW8O8tgcQ023KZ/o8Kv/3bFniFuVe
dULJ488ASqF5pJzGr741heemAuwAHxTgVrgbMrWHWP36Gdt0H3Hnf4i6CMWHZ6AH
LBGTwlt1VjwBtga35WptSBzj9V+9uMu+4uxRvfdzePIM0MA2pJhA249CFzsPn+UZ
bN8eU3UenENUQhba3JTQJi/11JvO4r+mylpg4OFiOAY4I3vQBqRB1Fg2Xjauzqlr
N1Qs0+OU1wyc2A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:23 2025 by rpki-client