Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: j6pF5YiKNsE3RDH9jwxnR4Tar49gT3BAI6FxIW9iJzk=
Subject key identifier: 4C:E1:61:B2:06:46:8A:BA:8B:09:24:CA:E9:79:76:A9:B0:04:19:F2
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 0196BC37493726DA69475CD15E5E23381F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 03F1
Signing time: Sat 10 May 2025 22:01:01 +0000
Manifest this update: Sat 10 May 2025 22:01:01 +0000
Manifest next update: Sun 11 May 2025 22:01:01 +0000
Files and hashes: 1: N-BSf874DQvK549b1pSEfsfJ-W8.roa (hash: bW40XSisvNpm05Mkk5fR9GiNdKpGc7uzNKkhrhBHqx4=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: MeKOyuKWZ1qghtvezAYQPptOCjxZ/M1VExhmIXyc9Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:49:37:26:da:69:47:5c:d1:5e:5e:23:38:1f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: May 10 22:01:01 2025 GMT
Not After : May 11 22:01:01 2025 GMT
Subject: CN=4ce161b206468aba8b0924cae97976a9b00419f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:9e:7b:0b:18:3b:ab:d9:72:ce:42:26:dc:
ce:77:ce:83:cf:d3:47:36:46:79:0a:7b:9b:04:a1:
58:2d:88:a6:e1:d9:c6:a5:33:97:4a:ad:08:df:49:
f8:f8:73:45:c2:b8:dd:e3:46:43:65:ba:a9:60:88:
fa:fe:74:9b:2a:2f:2f:03:f4:42:dc:2f:66:f2:0c:
f7:9f:2d:3f:12:d2:b8:9e:e1:20:1b:10:6d:46:bb:
0e:e4:38:06:83:03:0c:6a:e0:50:49:2d:48:51:f8:
4a:b6:90:14:6a:6d:ad:65:eb:9f:e0:31:67:4b:aa:
f3:ca:74:a4:fc:90:19:bb:6f:5e:7e:fe:d1:9f:fe:
dd:37:0d:6b:b7:e8:b9:77:28:45:5a:3b:01:c0:6d:
f0:fd:20:14:1e:5a:ff:0f:58:34:91:a0:18:9b:58:
b6:cb:82:ed:a5:eb:7b:8d:b0:54:6e:ca:1d:ca:14:
45:b5:9c:3f:bd:47:6a:cf:04:c3:60:d2:d6:13:a8:
fb:a8:0a:f6:4a:e4:13:b6:1d:72:88:bc:fa:b3:a3:
ef:d3:b4:89:ed:9f:f1:8c:ca:a2:95:49:e5:bf:02:
4f:38:c1:d6:76:ed:6c:2e:15:55:2c:9b:73:06:c3:
a7:2b:26:ce:6b:04:97:63:43:5b:0e:41:1f:1d:32:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E1:61:B2:06:46:8A:BA:8B:09:24:CA:E9:79:76:A9:B0:04:19:F2
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b8:01:e7:ee:50:94:44:57:65:70:f6:54:a3:51:e2:ad:3b:
e1:4b:ab:06:37:a4:7e:8d:20:6d:79:93:92:00:01:5e:6a:d3:
9f:d3:f5:95:2e:f3:ca:a0:30:a3:60:bd:4f:7c:06:2a:d6:d5:
3c:0c:93:e6:6f:c4:8e:40:29:9b:00:eb:d0:e6:fd:71:12:27:
db:c7:7d:11:8b:4b:5f:81:26:b5:4e:fe:f4:7a:b8:d6:e4:ac:
4d:bd:07:42:20:dd:9f:67:4e:f9:0e:2c:6c:2b:19:99:c8:1b:
20:cb:72:e3:8e:7d:3d:e3:45:1c:72:12:32:7e:b0:fa:14:e8:
89:83:52:5a:bb:92:1b:9d:68:77:d4:90:30:19:56:af:a5:d5:
c1:91:4d:d5:1f:5d:e8:c7:62:89:2d:ab:43:80:64:9a:30:13:
a7:4b:5b:51:5a:cc:f7:eb:99:39:27:b3:21:a4:a7:cb:97:e5:
86:85:8e:21:5f:51:15:4c:e2:19:f1:86:23:d5:b1:df:7f:20:
b4:8b:88:f9:93:ca:9a:2f:40:04:77:85:00:24:4c:82:48:9e:
fa:db:90:31:7c:36:b1:fd:2d:01:3f:48:51:2d:e2:db:de:0a:
87:50:e0:23:ef:e2:1b:15:06:dd:77:ac:38:78:63:d5:e3:67:
2b:89:56:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8N0k3JtppR1zRXl4jOB9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjgzZTJhMzQxNDVhZDQ3ZTBjYzJiM2M3OWZjNjMxMmJh
ZTJjNzEwHhcNMjUwNTEwMjIwMTAxWhcNMjUwNTExMjIwMTAxWjAzMTEwLwYDVQQD
Eyg0Y2UxNjFiMjA2NDY4YWJhOGIwOTI0Y2FlOTc5NzZhOWIwMDQxOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgSeewsYO6vZcs5CJtzOd86Dz9NH
NkZ5CnubBKFYLYim4dnGpTOXSq0I30n4+HNFwrjd40ZDZbqpYIj6/nSbKi8vA/RC
3C9m8gz3ny0/EtK4nuEgGxBtRrsO5DgGgwMMauBQSS1IUfhKtpAUam2tZeuf4DFn
S6rzynSk/JAZu29efv7Rn/7dNw1rt+i5dyhFWjsBwG3w/SAUHlr/D1g0kaAYm1i2
y4Ltpet7jbBUbsodyhRFtZw/vUdqzwTDYNLWE6j7qAr2SuQTth1yiLz6s6Pv07SJ
7Z/xjMqilUnlvwJPOMHWdu1sLhVVLJtzBsOnKybOawSXY0NbDkEfHTI8yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzhYbIGRoq6iwkkyul5dqmwBBnyMB8GA1UdIwQY
MBaAFGj4Pio0FFrUfgzCs8efxjErrixxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQt
NzkyODAyYzQzOTI1LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQtNzkyODAyYzQzOTI1
LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrgB5+5Q
lERXZXD2VKNR4q074UurBjekfo0gbXmTkgABXmrTn9P1lS7zyqAwo2C9T3wGKtbV
PAyT5m/EjkApmwDr0Ob9cRIn28d9EYtLX4EmtU7+9Hq41uSsTb0HQiDdn2dO+Q4s
bCsZmcgbIMty4459PeNFHHISMn6w+hToiYNSWruSG51od9SQMBlWr6XVwZFN1R9d
6MdiiS2rQ4BkmjATp0tbUVrM9+uZOSezIaSny5flhoWOIV9RFUziGfGGI9Wx338g
tIuI+ZPKmi9ABHeFACRMgkie+tuQMXw2sf0tAT9IUS3i294Kh1DgI+/iGxUG3Xes
OHhj1eNnK4lWOg==
-----END CERTIFICATE-----
Generated at Sun May 11 05:30:33 2025 by rpki-client