Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: f90BWifrrGWuVZmY8FCWz0J3W0MVUsTB4jUTzDYbTvE=
Subject key identifier: 41:50:3F:42:EF:86:5F:3D:D1:F7:F4:24:C1:8D:B1:40:13:D4:CB:95
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 0198741908E2F1D84C88953E09F88692AF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 08:00:54 +0000
Manifest this update: Mon 04 Aug 2025 08:00:54 +0000
Manifest next update: Tue 05 Aug 2025 08:00:54 +0000
Files and hashes: 1: 2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (hash: R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=)
2: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: GJ9p5+Dcv0UrMDeyo+M12kwTWQEQFdJrNTUkVpUGGVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:08:e2:f1:d8:4c:88:95:3e:09:f8:86:92:af:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Aug 4 08:00:54 2025 GMT
Not After : Aug 5 08:00:54 2025 GMT
Subject: CN=41503f42ef865f3dd1f7f424c18db14013d4cb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:f2:ad:bc:56:b4:1e:90:fb:71:93:3f:c5:
ba:3b:90:f9:7d:70:c1:d6:67:02:c4:19:c5:7e:e0:
b4:fc:fa:25:55:89:70:ac:6d:b2:5e:4b:56:b9:37:
b5:28:7f:a0:49:49:d4:66:0b:25:c7:a5:d6:f2:e9:
86:60:8d:c5:94:63:25:89:8d:e5:23:c1:48:4d:fd:
10:9d:ef:2e:77:89:6b:a6:e5:ec:1d:45:16:dd:ae:
61:1e:f9:0c:56:61:56:a7:14:55:7d:cc:44:b8:c7:
10:b9:7d:76:8b:d9:31:0c:b4:6e:0d:2b:03:65:8e:
a8:9e:16:4e:e0:31:68:50:aa:d2:7b:d6:04:1c:6f:
bd:39:76:a2:4e:bf:81:c4:18:87:45:c4:25:63:fe:
fd:02:50:8e:86:b5:73:70:fd:94:ee:c1:5f:c6:5e:
57:34:22:c3:07:1c:cd:12:74:61:26:a5:e8:2b:50:
d1:fe:59:8c:0c:9d:08:ac:f6:0b:2c:1d:9f:8c:23:
65:f2:c6:df:5f:b5:c7:b4:be:62:4a:7d:d7:89:6a:
82:0c:ee:c9:c3:38:f2:93:73:a2:59:31:87:a0:b6:
60:2c:46:3d:1c:60:8f:ed:9c:99:f5:c7:b0:00:4e:
54:cd:37:62:ef:dc:c6:d5:77:a5:59:1e:78:c4:ce:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:50:3F:42:EF:86:5F:3D:D1:F7:F4:24:C1:8D:B1:40:13:D4:CB:95
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f8:4e:25:15:4f:2a:cf:d6:f4:ed:5d:14:0d:0e:be:b1:67:
a6:d3:59:90:a5:fc:5c:2c:02:83:6a:dc:b9:c8:d3:2e:49:cf:
84:2d:72:46:11:d9:a1:33:d4:fc:f5:09:a9:bd:ee:80:93:4f:
98:08:2f:22:b9:53:6e:e8:e2:e5:34:d0:88:38:aa:48:f4:af:
e4:f5:df:2f:62:24:b6:72:ca:2e:82:7f:9d:e8:fc:bd:57:e4:
f2:c3:8c:78:cb:ac:d8:1d:2b:1f:cc:3e:dd:30:0e:e6:94:d5:
76:5e:8d:b9:0f:3e:14:29:db:da:9a:a5:45:c7:5b:bc:e2:f7:
d3:19:5b:90:60:3d:f8:37:d5:23:cb:3d:47:5f:a2:8c:dd:40:
f4:0a:4f:fd:c0:ba:d0:6d:be:21:96:b3:4c:01:46:7e:dd:73:
99:21:df:5d:82:39:51:9c:ba:16:f6:85:34:db:6b:fb:dd:cc:
3a:c0:a6:1a:14:94:f3:cc:f2:19:c4:38:1a:4d:6e:26:14:74:
59:4c:c3:69:14:4a:c1:f1:3e:a4:48:22:31:4a:73:39:aa:c3:
dc:61:96:cf:27:14:cf:72:1e:b0:b7:68:17:a1:6f:41:c4:b9:
a1:0b:88:7b:e0:92:38:1c:36:0f:ac:00:91:9d:e6:10:94:88:
0f:e0:5c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GQji8dhMiJU+CfiGkq9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODM2MTMwN2VmZDlmM2FiZWZlNjliZDE0ZGUwZTFiZDYw
YjZlNmEwHhcNMjUwODA0MDgwMDU0WhcNMjUwODA1MDgwMDU0WjAzMTEwLwYDVQQD
Eyg0MTUwM2Y0MmVmODY1ZjNkZDFmN2Y0MjRjMThkYjE0MDEzZDRjYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlzyrbxWtB6Q+3GTP8W6O5D5fXDB
1mcCxBnFfuC0/PolVYlwrG2yXktWuTe1KH+gSUnUZgslx6XW8umGYI3FlGMliY3l
I8FITf0Qne8ud4lrpuXsHUUW3a5hHvkMVmFWpxRVfcxEuMcQuX12i9kxDLRuDSsD
ZY6onhZO4DFoUKrSe9YEHG+9OXaiTr+BxBiHRcQlY/79AlCOhrVzcP2U7sFfxl5X
NCLDBxzNEnRhJqXoK1DR/lmMDJ0IrPYLLB2fjCNl8sbfX7XHtL5iSn3XiWqCDO7J
wzjyk3OiWTGHoLZgLEY9HGCP7ZyZ9cewAE5UzTdi79zG1XelWR54xM6sAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFQP0Lvhl890ff0JMGNsUAT1MuVMB8GA1UdIwQY
MBaAFAKDYTB+/Z86vv5pvRTeDhvWC25qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lODEwMWEtMjQwZi00ZTMyLWEwOTct
MjdjMjczYTYwNzg4LzEvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lODEwMWEtMjQwZi00ZTMyLWEwOTctMjdjMjczYTYwNzg4
LzEvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/hOJRVP
Ks/W9O1dFA0OvrFnptNZkKX8XCwCg2rcucjTLknPhC1yRhHZoTPU/PUJqb3ugJNP
mAgvIrlTbuji5TTQiDiqSPSv5PXfL2IktnLKLoJ/nej8vVfk8sOMeMus2B0rH8w+
3TAO5pTVdl6NuQ8+FCnb2pqlRcdbvOL30xlbkGA9+DfVI8s9R1+ijN1A9ApP/cC6
0G2+IZazTAFGft1zmSHfXYI5UZy6FvaFNNtr+93MOsCmGhSU88zyGcQ4Gk1uJhR0
WUzDaRRKwfE+pEgiMUpzOarD3GGWzycUz3IesLdoF6FvQcS5oQuIe+CSOBw2D6wA
kZ3mEJSID+BcpQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:16 2025 by rpki-client