Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: /MTwfm74jOwjW9cUCw7bAqHpMLkEIBirVQuSMl3OFy8=
Subject key identifier: 88:32:41:AD:67:9D:4D:DA:2C:E9:3C:14:13:3F:A2:A0:82:22:4C:E2
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 01987DF81591BBF75AC997CF2531B269C23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 06:01:07 +0000
Manifest this update: Wed 06 Aug 2025 06:01:07 +0000
Manifest next update: Thu 07 Aug 2025 06:01:07 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: YP4syUKasgeiz3Qk3IFM7LQDKFJhjbNFjpPeyGvTkk4=)
2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:15:91:bb:f7:5a:c9:97:cf:25:31:b2:69:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Aug 6 06:01:07 2025 GMT
Not After : Aug 7 06:01:07 2025 GMT
Subject: CN=883241ad679d4dda2ce93c14133fa2a082224ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:cc:76:2e:21:ab:19:38:a0:ad:3e:fe:c4:
e0:e5:09:cb:5a:b5:2b:27:65:ed:24:a2:a9:92:0b:
44:ff:79:43:b3:38:d3:b6:43:c1:11:f9:5d:67:7b:
be:4d:29:fc:42:98:74:52:96:70:1c:30:a8:5c:04:
d4:45:d2:d5:ac:5c:34:10:38:f0:7d:8a:05:21:dd:
ff:9d:bc:5c:6c:46:00:86:84:6b:92:56:68:00:4d:
79:df:23:6c:11:55:02:d0:58:6d:86:85:63:06:ef:
80:85:72:e5:6e:94:d6:f5:6c:50:62:ce:00:cc:dd:
b2:0b:2b:a8:ec:4d:3e:6b:72:77:11:2a:b3:1b:ff:
34:29:8b:dd:e0:98:c8:be:36:2a:16:68:6f:79:e4:
6f:f7:0b:de:a9:85:0d:b2:ea:5a:d8:44:08:52:d1:
cc:ae:e7:4e:de:20:a9:4f:a8:4b:58:1a:b8:9b:18:
7b:49:f0:ce:c5:83:8e:67:82:90:db:9e:f8:b1:63:
31:72:1d:47:c7:03:bb:c9:86:c0:9e:60:31:9c:f1:
c3:98:0e:bf:42:cf:22:57:78:fd:63:d2:0f:84:80:
1a:5c:f2:87:4e:f9:96:e8:95:4a:11:0d:61:fe:7d:
8e:2d:a6:f5:73:b4:9f:42:2e:7b:32:29:99:66:81:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:32:41:AD:67:9D:4D:DA:2C:E9:3C:14:13:3F:A2:A0:82:22:4C:E2
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a4:d1:54:30:d8:8b:0f:e1:a2:02:17:c0:9f:f4:2f:f9:af:
ac:e4:c4:ec:d8:79:80:f2:cd:8d:a0:74:68:16:4d:e0:52:66:
e8:10:f0:46:1f:d9:55:6c:d5:cf:ea:05:dd:d2:01:f9:9a:fa:
f0:e0:7f:bc:6f:2a:3b:c0:1a:43:0d:6c:41:ff:9f:48:80:a8:
06:1e:5e:2d:9c:af:b2:22:48:ba:33:58:40:41:f4:95:6f:c4:
66:a3:51:48:53:43:9c:11:81:8e:27:95:73:e2:8e:65:66:7a:
02:d0:1d:ba:4f:52:4d:1d:bd:0b:d6:f8:91:72:a0:5c:b8:81:
e2:cf:55:d9:bd:c9:d6:80:f1:47:ae:56:6d:0c:21:68:0c:b6:
30:78:e5:68:24:b8:e9:06:1d:18:40:9a:7a:98:d5:ae:6e:e8:
1e:49:03:29:2d:1b:6f:a1:00:43:7a:3e:ad:70:4f:f1:ab:95:
03:93:f8:dc:17:08:15:6b:5a:03:3a:7f:1d:cc:4e:d4:49:48:
03:55:c6:1a:98:f0:4d:67:06:54:b0:50:74:6a:6d:6b:72:39:
f0:e3:b8:23:0c:19:d4:4b:68:d0:a8:6b:ab:34:49:0e:7c:4c:
47:68:2e:48:0b:9a:4f:b9:ce:e5:35:34:5d:0a:7d:f3:b2:19:
49:fb:ef:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+BWRu/dayZfPJTGyacI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OGU3MTNiMDdjNzlmOTdiNDdlOWYwMzIxNzY4YjA5NDg4
YjdhMDMwHhcNMjUwODA2MDYwMTA3WhcNMjUwODA3MDYwMTA3WjAzMTEwLwYDVQQD
Eyg4ODMyNDFhZDY3OWQ0ZGRhMmNlOTNjMTQxMzNmYTJhMDgyMjI0Y2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU/Mdi4hqxk4oK0+/sTg5QnLWrUr
J2XtJKKpkgtE/3lDszjTtkPBEfldZ3u+TSn8Qph0UpZwHDCoXATURdLVrFw0EDjw
fYoFId3/nbxcbEYAhoRrklZoAE153yNsEVUC0FhthoVjBu+AhXLlbpTW9WxQYs4A
zN2yCyuo7E0+a3J3ESqzG/80KYvd4JjIvjYqFmhveeRv9wveqYUNsupa2EQIUtHM
rudO3iCpT6hLWBq4mxh7SfDOxYOOZ4KQ2574sWMxch1HxwO7yYbAnmAxnPHDmA6/
Qs8iV3j9Y9IPhIAaXPKHTvmW6JVKEQ1h/n2OLab1c7SfQi57MimZZoHaMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgyQa1nnU3aLOk8FBM/oqCCIkziMB8GA1UdIwQY
MBaAFGiOcTsHx5+XtH6fAyF2iwlIi3oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYt
Njk1ZjRhOTI3NjEwLzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYtNjk1ZjRhOTI3NjEw
LzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqTRVDDY
iw/hogIXwJ/0L/mvrOTE7Nh5gPLNjaB0aBZN4FJm6BDwRh/ZVWzVz+oF3dIB+Zr6
8OB/vG8qO8AaQw1sQf+fSICoBh5eLZyvsiJIujNYQEH0lW/EZqNRSFNDnBGBjieV
c+KOZWZ6AtAduk9STR29C9b4kXKgXLiB4s9V2b3J1oDxR65WbQwhaAy2MHjlaCS4
6QYdGECaepjVrm7oHkkDKS0bb6EAQ3o+rXBP8auVA5P43BcIFWtaAzp/HcxO1ElI
A1XGGpjwTWcGVLBQdGpta3I58OO4IwwZ1Eto0KhrqzRJDnxMR2guSAuaT7nO5TU0
XQp987IZSfvvIQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:37 2025 by rpki-client