Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: xRQwyrp3OIzZdSPK1g+T3C7NlzbICI2KK6ArL7bnfC0=
Subject key identifier: EF:26:75:CC:6E:96:51:DD:92:2E:94:7B:82:78:CC:0F:95:EE:A5:8C
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 0198906BFF685629E17DAF07E896D5A80966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0B0F
Signing time: Sat 09 Aug 2025 20:00:53 +0000
Manifest this update: Sat 09 Aug 2025 20:00:53 +0000
Manifest next update: Sun 10 Aug 2025 20:00:53 +0000
Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=)
2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: LzomvJNJU66bhwll6oZ2etFA+mHEyaMKMh7kd7B547w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:ff:68:56:29:e1:7d:af:07:e8:96:d5:a8:09:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Aug 9 20:00:53 2025 GMT
Not After : Aug 10 20:00:53 2025 GMT
Subject: CN=ef2675cc6e9651dd922e947b8278cc0f95eea58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:f9:93:b2:75:23:43:97:a2:88:00:e5:06:
17:38:e2:05:7a:2e:24:e4:f7:24:73:3c:16:32:aa:
c7:93:a7:81:3c:36:3d:27:d1:7c:cd:a7:9b:96:5f:
03:78:30:a1:c1:0e:1a:94:d0:1d:f7:ad:c1:ec:f4:
a5:18:f1:b0:9a:b5:24:c4:68:30:e6:5a:e9:35:b2:
66:3c:b0:43:cf:6f:01:57:cc:97:0a:e9:c1:44:d9:
2c:26:93:84:06:9c:8a:44:23:ed:22:7f:62:e7:a9:
3e:bf:d0:18:59:27:57:eb:d4:13:68:46:1d:8f:0f:
67:85:94:ed:72:8b:21:08:1f:56:a6:32:35:6a:e1:
9d:58:fc:27:b6:36:47:8b:7f:c6:2c:f3:59:73:3e:
d4:04:a1:1c:af:0d:4b:b9:da:f9:8f:a1:ac:70:cb:
47:59:ce:f5:62:42:72:45:f7:78:15:be:80:41:d5:
fc:9d:32:92:74:5e:49:2a:cd:bc:b6:92:81:86:b8:
ce:40:f8:65:77:86:74:77:d6:70:be:fe:9d:d4:b0:
8e:2b:0b:2d:fa:4b:ae:55:c0:c4:47:31:9b:59:23:
0e:cf:42:48:26:14:2a:93:c5:e3:2f:fe:f5:a8:71:
91:1b:91:a5:d2:fe:e9:2b:b1:0a:9c:14:4d:dd:ec:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:75:CC:6E:96:51:DD:92:2E:94:7B:82:78:CC:0F:95:EE:A5:8C
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9a:59:3d:f8:b5:b1:82:ee:0b:ff:15:73:48:5e:f3:63:35:
68:8d:1c:3b:35:46:53:2d:6a:3f:f0:0a:fb:73:c5:d5:68:e9:
7f:90:72:93:5c:12:19:f4:37:00:f6:e9:96:86:f0:a4:54:99:
40:a4:2a:23:8c:10:48:b5:d9:9c:ed:1f:42:2e:55:cf:d7:ae:
97:d6:0d:b9:77:85:b2:a5:78:54:a4:c5:bd:a7:0b:9b:0b:fb:
fc:7d:73:2b:cf:fb:bd:10:b3:cb:1f:7f:e7:52:9f:67:7a:76:
a2:12:2e:b5:c3:e4:8d:8c:01:46:e0:35:2b:17:26:a9:c6:9a:
f7:04:27:82:aa:66:f7:52:b4:a5:5a:34:21:49:9d:2e:5b:74:
0e:ff:09:ed:b4:48:10:ca:1b:41:91:56:bf:9f:dc:e0:fe:52:
36:0f:85:b2:a6:30:2c:2f:48:86:ef:5f:1d:89:68:79:ba:c2:
11:9c:55:8c:08:b7:7d:1f:45:d6:bd:62:ae:7f:cc:2d:86:61:
c6:e8:3e:75:2f:e3:e6:2d:bd:e2:d7:a3:9f:55:b4:f6:ce:9d:
d4:cf:8b:8d:dd:f3:97:8d:71:8b:31:2c:e5:9a:5d:69:3f:1b:
15:f3:21:d4:28:99:6a:d7:01:71:d7:ad:1a:6a:d9:69:3f:2a:
0c:21:2b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQa/9oVinhfa8H6JbVqAlmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2
NTZhMjAwHhcNMjUwODA5MjAwMDUzWhcNMjUwODEwMjAwMDUzWjAzMTEwLwYDVQQD
EyhlZjI2NzVjYzZlOTY1MWRkOTIyZTk0N2I4Mjc4Y2MwZjk1ZWVhNThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWD5k7J1I0OXoogA5QYXOOIFei4k
5PckczwWMqrHk6eBPDY9J9F8zaebll8DeDChwQ4alNAd963B7PSlGPGwmrUkxGgw
5lrpNbJmPLBDz28BV8yXCunBRNksJpOEBpyKRCPtIn9i56k+v9AYWSdX69QTaEYd
jw9nhZTtcoshCB9WpjI1auGdWPwntjZHi3/GLPNZcz7UBKEcrw1Ludr5j6GscMtH
Wc71YkJyRfd4Fb6AQdX8nTKSdF5JKs28tpKBhrjOQPhld4Z0d9Zwvv6d1LCOKwst
+kuuVcDERzGbWSMOz0JIJhQqk8XjL/71qHGRG5Gl0v7pK7EKnBRN3exrDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8mdcxullHdki6Ue4J4zA+V7qWMMB8GA1UdIwQY
MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It
Y2Q2NzdhYjQzMWFhLzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh
LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5pZPfi1
sYLuC/8Vc0he82M1aI0cOzVGUy1qP/AK+3PF1Wjpf5Byk1wSGfQ3APbplobwpFSZ
QKQqI4wQSLXZnO0fQi5Vz9eul9YNuXeFsqV4VKTFvacLmwv7/H1zK8/7vRCzyx9/
51KfZ3p2ohIutcPkjYwBRuA1Kxcmqcaa9wQngqpm91K0pVo0IUmdLlt0Dv8J7bRI
EMobQZFWv5/c4P5SNg+FsqYwLC9Ihu9fHYloebrCEZxVjAi3fR9F1r1irn/MLYZh
xug+dS/j5i294tejn1W09s6d1M+Ljd3zl41xizEs5ZpdaT8bFfMh1CiZatcBcdet
GmrZaT8qDCErrg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:57 2025 by rpki-client