Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: Td2RSuX394V5Ke8RLqnJsUx9j6JEIZBEfmnEoUEsNYU=
Subject key identifier: C5:81:C2:4E:5D:6C:32:8A:D9:2B:19:80:4C:4C:AE:63:A2:BD:2E:5F
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 019769CEEBA63139156DE13B2F65F99F8CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 0FC7
Signing time: Fri 13 Jun 2025 15:00:57 +0000
Manifest this update: Fri 13 Jun 2025 15:00:57 +0000
Manifest next update: Sat 14 Jun 2025 15:00:57 +0000
Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: CCUN8JslZW+73qz34gDAlYTyvWpybtb03hLrMkROiiE=)
2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:eb:a6:31:39:15:6d:e1:3b:2f:65:f9:9f:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Jun 13 15:00:57 2025 GMT
Not After : Jun 14 15:00:57 2025 GMT
Subject: CN=c581c24e5d6c328ad92b19804c4cae63a2bd2e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:5e:79:f3:76:22:c6:d0:4a:fb:e2:60:8d:
ca:a4:e3:1f:19:53:c0:9e:7d:05:1f:41:e4:3c:7e:
90:72:a0:eb:51:0d:c2:42:e9:99:40:22:95:71:a0:
e1:92:84:5d:0e:1c:8c:0e:03:d2:cf:2c:ca:3e:18:
8b:ad:a4:e8:37:57:7b:a6:fd:cf:fa:2c:60:27:88:
ad:32:68:4f:e5:54:b0:ea:45:d7:20:9d:90:15:bc:
95:2c:c6:a5:65:80:c4:b5:a6:e4:59:78:c1:41:26:
33:6d:40:2b:91:e5:0c:07:3c:30:09:c4:64:85:91:
d0:d8:6c:fe:d7:aa:5a:76:db:ab:21:d2:cf:8b:92:
4e:76:4c:5e:1b:10:02:c9:3f:3a:64:5f:7a:5c:eb:
d9:e5:82:f3:dc:8e:aa:e2:39:37:6f:f6:db:80:8e:
97:e0:1e:59:95:41:c4:6d:97:c4:72:34:48:bd:00:
90:5d:a0:d0:5f:00:08:06:98:90:9a:29:d5:cd:4a:
a9:ff:4a:b6:be:4b:6f:eb:62:c5:29:84:8a:38:d5:
b8:a7:f9:70:c6:69:14:b4:ea:b9:17:07:1e:32:47:
2a:05:8f:5e:87:d6:11:fe:d0:26:6c:96:b3:44:6d:
1e:1c:39:7e:4a:62:58:b1:a5:43:0e:fe:e3:ca:f4:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:81:C2:4E:5D:6C:32:8A:D9:2B:19:80:4C:4C:AE:63:A2:BD:2E:5F
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3c:90:20:b2:af:05:bd:34:b3:88:19:a1:38:5c:9a:35:4a:
79:5e:17:cf:5d:f2:f5:da:88:c5:3c:91:72:d4:b0:b6:9d:54:
16:4b:b6:84:37:05:77:fb:f2:4b:e0:ce:ec:12:a4:06:4d:d4:
0b:51:dd:c7:37:c1:b2:ea:97:09:5c:35:55:6d:df:88:81:f5:
56:8a:97:d7:4d:48:9a:e4:41:ea:47:f9:d8:be:cc:75:8e:90:
a4:2d:9a:1b:23:80:6f:32:bd:2e:5b:45:58:ea:01:64:2d:1c:
e7:c7:e9:61:90:29:36:1f:07:56:78:cb:01:ad:39:d3:8d:dc:
da:1d:c2:db:cf:76:29:b8:2d:c0:9e:0e:22:85:ee:be:6d:6a:
cc:25:9d:70:84:b9:0c:fd:0d:11:65:4e:30:8a:21:a7:d7:27:
02:cd:04:df:09:0f:10:f1:7a:0f:2b:7a:eb:9d:74:aa:7d:f1:
e3:d8:29:61:f4:28:ff:c9:1f:79:4e:e1:18:3f:dd:80:61:81:
44:0a:1e:01:4c:fb:1a:e5:7a:5d:a1:f3:f6:e0:8b:0c:d5:c9:
e1:90:90:2b:47:5e:12:c4:42:d9:c7:97:66:82:2a:df:90:e2:
72:ba:f6:6e:16:81:4a:ac:f5:2e:bb:68:5f:c2:c5:4b:be:d0:
04:5f:b4:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzuumMTkVbeE7L2X5n4zvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk
Y2Y5OTYwHhcNMjUwNjEzMTUwMDU3WhcNMjUwNjE0MTUwMDU3WjAzMTEwLwYDVQQD
EyhjNTgxYzI0ZTVkNmMzMjhhZDkyYjE5ODA0YzRjYWU2M2EyYmQyZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjteefN2IsbQSvviYI3KpOMfGVPA
nn0FH0HkPH6QcqDrUQ3CQumZQCKVcaDhkoRdDhyMDgPSzyzKPhiLraToN1d7pv3P
+ixgJ4itMmhP5VSw6kXXIJ2QFbyVLMalZYDEtabkWXjBQSYzbUArkeUMBzwwCcRk
hZHQ2Gz+16padturIdLPi5JOdkxeGxACyT86ZF96XOvZ5YLz3I6q4jk3b/bbgI6X
4B5ZlUHEbZfEcjRIvQCQXaDQXwAIBpiQminVzUqp/0q2vktv62LFKYSKONW4p/lw
xmkUtOq5FwceMkcqBY9eh9YR/tAmbJazRG0eHDl+SmJYsaVDDv7jyvQcdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWBwk5dbDKK2SsZgExMrmOivS5fMB8GA1UdIwQY
MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt
NGQ1MzdjZjAxODA5LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5
LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzyQILKv
Bb00s4gZoThcmjVKeV4Xz13y9dqIxTyRctSwtp1UFku2hDcFd/vyS+DO7BKkBk3U
C1HdxzfBsuqXCVw1VW3fiIH1VoqX101ImuRB6kf52L7MdY6QpC2aGyOAbzK9LltF
WOoBZC0c58fpYZApNh8HVnjLAa05043c2h3C2892KbgtwJ4OIoXuvm1qzCWdcIS5
DP0NEWVOMIohp9cnAs0E3wkPEPF6Dyt66510qn3x49gpYfQo/8kfeU7hGD/dgGGB
RAoeAUz7GuV6XaHz9uCLDNXJ4ZCQK0deEsRC2ceXZoIq35Dicrr2bhaBSqz1Lrto
X8LFS77QBF+0JQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:24 2025 by rpki-client