Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: edzENmOfsTKBeFxXo88T87gN/Rwe1Ok4uKF8b3Cc8ZQ=
Subject key identifier: 8A:65:2E:EB:22:67:A0:3E:54:49:73:40:2B:45:BB:98:30:8C:97:1B
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 019771889EC9E568D61E800E4E77D01DE7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 03:01:08 +0000
Manifest this update: Sun 15 Jun 2025 03:01:08 +0000
Manifest next update: Mon 16 Jun 2025 03:01:08 +0000
Files and hashes: 1: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (hash: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=)
2: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: VkkU/2RloU5XIV2pUhQTdbG+vW885HFamjYz1CGLYp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:9e:c9:e5:68:d6:1e:80:0e:4e:77:d0:1d:e7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Jun 15 03:01:08 2025 GMT
Not After : Jun 16 03:01:08 2025 GMT
Subject: CN=8a652eeb2267a03e544973402b45bb98308c971b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:3c:e2:aa:ec:c4:8d:cf:06:14:a3:e7:b7:
55:0d:64:e2:fa:33:c2:ab:6f:0b:b1:6c:dd:6b:2c:
81:c8:40:51:2e:a3:5f:cf:b5:04:04:d2:74:7f:c2:
a5:91:a5:a4:dd:ac:93:e3:8d:99:c5:ec:a5:43:3a:
ae:4a:b1:be:5e:4d:a5:f0:c5:cc:41:56:ab:24:c7:
7b:e6:05:d2:02:8a:bd:0e:e9:58:e4:5a:38:cb:8f:
7f:67:27:98:00:d5:e8:1d:39:a7:86:7e:59:b0:fb:
c6:46:03:cd:83:a9:60:73:5f:ae:cd:ac:51:d5:23:
db:14:f5:89:71:90:94:c6:75:38:77:4b:d1:b3:fc:
cf:3d:48:60:65:b9:d6:5b:5d:80:71:5a:59:d0:e4:
14:6f:d9:8f:9f:eb:31:d4:47:ac:0f:68:e7:45:79:
46:a2:4f:b6:13:1b:6a:2f:23:20:e5:a2:41:21:3f:
d6:a7:ef:85:12:be:90:1a:11:f2:b4:8e:93:ce:fa:
49:1b:5e:e7:bc:24:93:0b:9c:ce:d0:d9:ef:db:1c:
2c:66:e0:43:b4:1a:30:58:67:bc:bf:30:8d:db:eb:
74:f8:dd:96:5c:21:3b:a3:f2:72:43:84:9a:e3:05:
62:51:df:82:1c:44:64:e5:0e:27:68:7d:88:66:df:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:65:2E:EB:22:67:A0:3E:54:49:73:40:2B:45:BB:98:30:8C:97:1B
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:df:e4:88:6d:9d:74:39:b1:3a:e2:93:7a:9f:b7:c1:3d:0d:
59:aa:9b:1d:65:2d:9e:74:e2:57:f2:b3:9d:3f:84:00:17:f9:
c5:1d:31:14:88:f1:8c:04:ff:c6:9d:1a:94:02:14:33:1b:42:
2d:5c:fa:84:06:38:d9:ab:e9:fa:4f:14:ba:6e:88:1a:a4:7c:
f8:53:c5:a3:ca:69:f9:55:5c:34:c2:9a:cf:3e:8c:d3:2e:b3:
32:88:59:0c:c6:a4:e4:57:43:50:79:e9:44:0d:f1:9c:f6:e5:
3e:f2:57:d9:b8:cc:ec:3e:b0:ef:90:2e:15:4a:f8:9c:aa:e5:
0a:fe:eb:97:53:18:72:5a:c7:a3:8d:f8:68:48:40:8b:31:d3:
42:42:b1:11:2e:34:72:84:dd:f2:d9:64:af:67:1c:f2:b4:2e:
52:4e:95:e7:60:a3:5d:61:d7:14:15:32:9d:11:b5:ae:88:6e:
62:8d:12:d6:cf:09:40:67:34:4d:43:e3:e0:e1:34:2f:45:c9:
15:5d:63:31:ce:05:32:d3:35:b3:70:f1:33:7e:6a:1c:19:94:
72:5b:c4:66:6a:20:91:38:78:05:58:21:09:2d:7f:e6:88:54:
26:99:8c:9c:6b:cc:1e:e9:c9:d9:68:09:63:f0:a6:b4:dd:d6:
a8:33:02:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiJ7J5WjWHoAOTnfQHefqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw
MzkzYWEwHhcNMjUwNjE1MDMwMTA4WhcNMjUwNjE2MDMwMTA4WjAzMTEwLwYDVQQD
Eyg4YTY1MmVlYjIyNjdhMDNlNTQ0OTczNDAyYjQ1YmI5ODMwOGM5NzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIk84qrsxI3PBhSj57dVDWTi+jPC
q28LsWzdayyByEBRLqNfz7UEBNJ0f8KlkaWk3ayT442ZxeylQzquSrG+Xk2l8MXM
QVarJMd75gXSAoq9DulY5Fo4y49/ZyeYANXoHTmnhn5ZsPvGRgPNg6lgc1+uzaxR
1SPbFPWJcZCUxnU4d0vRs/zPPUhgZbnWW12AcVpZ0OQUb9mPn+sx1EesD2jnRXlG
ok+2ExtqLyMg5aJBIT/Wp++FEr6QGhHytI6TzvpJG17nvCSTC5zO0Nnv2xwsZuBD
tBowWGe8vzCN2+t0+N2WXCE7o/JyQ4Sa4wViUd+CHERk5Q4naH2IZt9rpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIplLusiZ6A+VElzQCtFu5gwjJcbMB8GA1UdIwQY
MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt
YWRmNDNmMDRlYzljLzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj
LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgt/kiG2d
dDmxOuKTep+3wT0NWaqbHWUtnnTiV/KznT+EABf5xR0xFIjxjAT/xp0alAIUMxtC
LVz6hAY42avp+k8Uum6IGqR8+FPFo8pp+VVcNMKazz6M0y6zMohZDMak5FdDUHnp
RA3xnPblPvJX2bjM7D6w75AuFUr4nKrlCv7rl1MYclrHo434aEhAizHTQkKxES40
coTd8tlkr2cc8rQuUk6V52CjXWHXFBUynRG1rohuYo0S1s8JQGc0TUPj4OE0L0XJ
FV1jMc4FMtM1s3DxM35qHBmUclvEZmogkTh4BVghCS1/5ohUJpmMnGvMHunJ2WgJ
Y/CmtN3WqDMCAA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:37 2025 by rpki-client