Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier: LBP2JQQAtlwFbh5vKXp/31IX8rMeffWvT04TMc4oPvw=
Subject key identifier: E4:B4:63:2F:A6:D4:9C:DB:AB:9F:92:B8:66:15:4E:DC:18:D0:0F:A4
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial: 01989FA87B23948F4CA33617C3341F81F7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number: 101F
Signing time: Tue 12 Aug 2025 19:01:15 +0000
Manifest this update: Tue 12 Aug 2025 19:01:15 +0000
Manifest next update: Wed 13 Aug 2025 19:01:15 +0000
Files and hashes: 1: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: qMJXEEZgnTXfN/SAkoJvflDbTidUMlRCnVfzsaP14OA=)
2: njKb2eruHX8H9g3wi8a7hMHrArw.roa (hash: 6gW6VZJ5Gbs98ZjAseT0lvfg+/2Cg+ztPZG7diySUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:7b:23:94:8f:4c:a3:36:17:c3:34:1f:81:f7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Validity
Not Before: Aug 12 19:01:15 2025 GMT
Not After : Aug 13 19:01:15 2025 GMT
Subject: CN=e4b4632fa6d49cdbab9f92b866154edc18d00fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:14:f4:86:6e:32:cd:8d:77:f8:4c:34:29:
4b:50:30:69:9c:09:c6:fd:13:71:71:71:54:26:39:
04:d4:36:b7:16:b9:f7:dd:91:70:69:80:f4:57:fb:
d2:eb:2e:08:8e:03:ec:3b:3b:8e:89:43:9c:a0:41:
cb:e2:dd:fd:16:f5:4a:6f:94:fe:fa:0d:cc:e9:d2:
51:b2:c8:96:8d:10:1c:cc:9a:bc:43:aa:2e:85:95:
91:29:24:23:59:ee:40:ca:f3:09:1d:4f:94:ac:d3:
0a:c8:4b:44:cd:1d:44:62:a5:10:7e:c1:98:5c:fa:
76:08:d0:f5:7e:ab:2d:c7:32:a1:f8:2f:1a:1e:0b:
ab:2c:cd:f4:0c:1d:45:4d:1c:e4:b2:2f:d2:94:2d:
d1:7b:b0:38:7b:3c:45:e0:13:33:7a:15:28:a6:1f:
96:b8:21:c6:83:f4:e1:a9:3e:75:5f:93:dd:1a:6f:
af:45:4d:9e:9d:f4:56:f9:4f:86:a9:2d:5f:94:bb:
17:93:5a:fd:e7:18:da:09:14:a2:95:eb:ff:bf:20:
36:0d:83:d9:df:f3:65:85:0c:06:3b:0f:52:ef:d6:
2b:66:fc:18:2a:bd:3f:a2:10:ce:22:96:3f:90:fd:
25:1f:83:22:d8:71:f5:8e:42:05:4f:c3:4e:a1:b1:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B4:63:2F:A6:D4:9C:DB:AB:9F:92:B8:66:15:4E:DC:18:D0:0F:A4
X509v3 Authority Key Identifier:
keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a5:e9:1e:e1:a0:0f:fd:2d:03:1e:86:d7:85:60:da:f6:93:
38:6d:b5:20:c9:97:c4:50:f0:53:bb:96:02:4b:6a:54:86:2e:
21:1d:33:8a:dc:28:c6:dd:a4:a1:e3:03:b5:06:56:86:07:b4:
d2:f2:dc:d0:97:25:e2:61:ed:03:ac:43:5d:08:f2:c3:5d:57:
ac:39:4d:cb:1e:36:3f:72:08:4b:26:52:27:06:f8:a4:68:2c:
8f:aa:25:02:5f:d3:6e:1b:af:ae:96:88:26:2f:5a:84:33:9b:
29:1e:8c:bc:fc:ea:87:29:22:21:20:ce:66:4a:d5:36:f7:03:
32:39:5c:6e:1e:c1:ef:0c:31:cd:2c:26:4c:06:03:d8:07:91:
a2:87:af:e7:a0:e2:11:d2:dd:8c:a3:19:da:46:64:d1:f4:99:
1e:1d:db:37:9c:61:dc:9c:cc:bc:8c:03:a2:75:4c:f8:62:24:
5a:24:d3:19:e5:07:65:ef:f8:91:b4:34:6d:82:80:69:92:65:
2e:82:42:d2:d4:d3:6c:b6:e6:fb:54:64:85:8d:39:5f:16:07:
99:6d:48:0f:27:13:5e:86:e8:26:fe:66:40:35:6d:e8:30:42:
a8:41:21:5f:1d:ee:ed:12:b7:c5:86:1f:37:0e:d5:85:0b:c4:
5a:02:39:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifqHsjlI9MozYXwzQfgffEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhY2E3MWYyZDlmZTJiNDljNjc2MmYzZDlhMGU4YmYzMzJk
ZmRlZDEwHhcNMjUwODEyMTkwMTE1WhcNMjUwODEzMTkwMTE1WjAzMTEwLwYDVQQD
EyhlNGI0NjMyZmE2ZDQ5Y2RiYWI5ZjkyYjg2NjE1NGVkYzE4ZDAwZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xMU9IZuMs2Nd/hMNClLUDBpnAnG
/RNxcXFUJjkE1Da3Frn33ZFwaYD0V/vS6y4IjgPsOzuOiUOcoEHL4t39FvVKb5T+
+g3M6dJRssiWjRAczJq8Q6ouhZWRKSQjWe5AyvMJHU+UrNMKyEtEzR1EYqUQfsGY
XPp2CND1fqstxzKh+C8aHgurLM30DB1FTRzksi/SlC3Re7A4ezxF4BMzehUoph+W
uCHGg/ThqT51X5PdGm+vRU2enfRW+U+GqS1flLsXk1r95xjaCRSilev/vyA2DYPZ
3/NlhQwGOw9S79YrZvwYKr0/ohDOIpY/kP0lH4Mi2HH1jkIFT8NOobEVlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOS0Yy+m1Jzbq5+SuGYVTtwY0A+kMB8GA1UdIwQY
MBaAFGrKcfLZ/itJxnYvPZoOi/My397RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODkt
OWE4ZDJiZjAwMzIwLzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODktOWE4ZDJiZjAwMzIw
LzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKXpHuGg
D/0tAx6G14Vg2vaTOG21IMmXxFDwU7uWAktqVIYuIR0zitwoxt2koeMDtQZWhge0
0vLc0Jcl4mHtA6xDXQjyw11XrDlNyx42P3IISyZSJwb4pGgsj6olAl/TbhuvrpaI
Ji9ahDObKR6MvPzqhykiISDOZkrVNvcDMjlcbh7B7wwxzSwmTAYD2AeRooev56Di
EdLdjKMZ2kZk0fSZHh3bN5xh3JzMvIwDonVM+GIkWiTTGeUHZe/4kbQ0bYKAaZJl
LoJC0tTTbLbm+1RkhY05XxYHmW1IDycTXoboJv5mQDVt6DBCqEEhXx3u7RK3xYYf
Nw7VhQvEWgI52g==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:26 2025 by rpki-client