Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: UANjTGLNlV2VCwL28o8i5l7QNNeTNJlTx7vTHr+ZAAA=
Subject key identifier: 05:78:79:A3:55:07:13:A0:82:81:88:47:37:34:76:3B:2F:E0:FF:AE
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 0196C45E215D31AB393FF0BD5170E15D8847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 12:00:25 +0000
Manifest this update: Mon 12 May 2025 12:00:25 +0000
Manifest next update: Tue 13 May 2025 12:00:25 +0000
Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=)
2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: GDnU27Kt3KFPdM7DqtQQk6CbiBKXXpMZWMSpavShljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:21:5d:31:ab:39:3f:f0:bd:51:70:e1:5d:88:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: May 12 12:00:25 2025 GMT
Not After : May 13 12:00:25 2025 GMT
Subject: CN=057879a3550713a0828188473734763b2fe0ffae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:92:66:e3:2a:32:cf:b3:b8:36:3a:cd:df:
63:5d:1b:20:69:4d:58:33:a2:11:6b:2c:9f:26:e0:
16:e2:35:1a:44:85:b9:97:41:cb:a0:30:5f:88:99:
42:44:8d:69:84:c1:7c:1f:b3:77:cd:6b:4e:0e:96:
ac:54:38:3e:3d:16:60:c5:6b:19:39:15:fd:6b:12:
24:67:64:5f:2f:b0:11:b4:0f:57:ab:01:41:cb:4f:
f1:97:8a:2c:b9:b5:6c:03:ea:73:f8:72:db:00:55:
8d:c9:f0:63:ec:1b:83:af:18:36:c2:61:60:6a:7b:
80:7a:54:43:41:23:9b:eb:b6:52:76:86:24:06:c4:
45:31:0b:dd:0e:b3:f9:99:ab:42:87:47:ce:0d:d0:
96:aa:9a:40:f1:fe:c4:60:78:8e:ea:67:98:6c:d9:
86:d4:49:52:10:43:a4:b5:86:79:97:a4:ad:3e:18:
29:3b:6f:40:e1:d6:b8:c1:d3:9d:e3:eb:26:bd:b6:
46:cf:0f:c6:34:2b:97:54:78:9b:c6:f4:60:fa:c8:
e5:42:c8:f4:9b:ac:24:c4:36:02:a3:36:ee:3d:01:
5e:1e:10:79:16:82:66:4f:8e:2b:14:ff:81:e1:b0:
f4:d3:ef:32:b0:6e:0a:91:2e:69:4e:4b:8e:df:02:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:78:79:A3:55:07:13:A0:82:81:88:47:37:34:76:3B:2F:E0:FF:AE
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e8:c5:b0:c4:d3:ad:95:52:56:9a:b7:7a:bc:d4:9f:a7:22:
9c:48:b1:34:c0:11:1f:62:39:8c:08:9c:86:d3:39:5f:1e:23:
9e:49:ae:07:60:fe:68:89:0c:01:80:0e:b9:61:29:ea:dd:13:
44:07:45:f8:47:6a:1a:0c:33:41:9a:6d:e3:f6:8d:18:b4:44:
c4:ca:89:ec:96:af:93:19:06:6e:4d:41:36:4d:77:d7:aa:1f:
97:f7:94:fc:2f:41:1a:e7:71:82:8d:76:9c:b1:bc:59:c4:5e:
af:09:d7:45:b3:15:81:15:55:9f:5c:ea:3b:08:84:3a:74:09:
19:45:7f:29:4b:fc:73:76:6b:75:6e:48:58:bd:0c:1c:8d:5d:
df:0d:47:71:f4:f3:07:3f:60:7e:f1:8f:48:49:c7:01:1a:0e:
29:6c:de:ec:63:b7:e7:0e:d5:4a:c2:ad:cb:44:e3:ef:d0:44:
a6:4e:d3:30:51:13:b9:79:bf:86:b2:08:8f:de:66:ab:43:55:
1a:55:fe:d9:4c:23:78:32:ef:73:19:3e:3a:81:89:ae:e5:fc:
45:5b:d7:b7:f7:cf:fa:24:4f:bc:62:fd:18:60:74:d2:a2:ff:
3d:10:2a:3c:40:a9:07:b0:5e:db:4f:33:3c:16:c9:ae:67:25:
05:9a:b0:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEXiFdMas5P/C9UXDhXYhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2I0YTA1NGE3MjFhMGZkYTYwMTI5MDdjYzViNTZlODEy
MGE3M2UwHhcNMjUwNTEyMTIwMDI1WhcNMjUwNTEzMTIwMDI1WjAzMTEwLwYDVQQD
EygwNTc4NzlhMzU1MDcxM2EwODI4MTg4NDczNzM0NzYzYjJmZTBmZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgiSZuMqMs+zuDY6zd9jXRsgaU1Y
M6IRayyfJuAW4jUaRIW5l0HLoDBfiJlCRI1phMF8H7N3zWtODpasVDg+PRZgxWsZ
ORX9axIkZ2RfL7ARtA9XqwFBy0/xl4osubVsA+pz+HLbAFWNyfBj7BuDrxg2wmFg
anuAelRDQSOb67ZSdoYkBsRFMQvdDrP5matCh0fODdCWqppA8f7EYHiO6meYbNmG
1ElSEEOktYZ5l6StPhgpO29A4da4wdOd4+smvbZGzw/GNCuXVHibxvRg+sjlQsj0
m6wkxDYCozbuPQFeHhB5FoJmT44rFP+B4bD00+8ysG4KkS5pTkuO3wKvewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV4eaNVBxOggoGIRzc0djsv4P+uMB8GA1UdIwQY
MBaAFGt7SgVKchoP2mASkHzFtW6BIKc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YWJlMWQtMzAzNi00MmI4LWJlMzYt
ZTc5OWVmNTRmMGM0LzEvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80YWJlMWQtMzAzNi00MmI4LWJlMzYtZTc5OWVmNTRmMGM0
LzEvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+jFsMTT
rZVSVpq3erzUn6cinEixNMARH2I5jAichtM5Xx4jnkmuB2D+aIkMAYAOuWEp6t0T
RAdF+EdqGgwzQZpt4/aNGLRExMqJ7JavkxkGbk1BNk1316ofl/eU/C9BGudxgo12
nLG8WcRerwnXRbMVgRVVn1zqOwiEOnQJGUV/KUv8c3ZrdW5IWL0MHI1d3w1HcfTz
Bz9gfvGPSEnHARoOKWze7GO35w7VSsKty0Tj79BEpk7TMFETuXm/hrIIj95mq0NV
GlX+2UwjeDLvcxk+OoGJruX8RVvXt/fP+iRPvGL9GGB00qL/PRAqPECpB7Be208z
PBbJrmclBZqwYA==
-----END CERTIFICATE-----
Generated at Mon May 12 18:57:37 2025 by rpki-client