Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: bJD36cCWeI408JL4fvOzUzE5MoJwICb8GhTQxEUwZcg=
Subject key identifier: 50:3B:31:F0:7C:66:D4:00:B7:D5:97:99:51:56:1A:93:8F:35:03:FB
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 0196B10EA1F8693AA5EFF0EAEB8D427D72DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0959
Signing time: Thu 08 May 2025 18:00:48 +0000
Manifest this update: Thu 08 May 2025 18:00:48 +0000
Manifest next update: Fri 09 May 2025 18:00:48 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: WN1Dig0tHuPojaNNwqagth3b/RYxZdEU1UmItckF9co=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:a1:f8:69:3a:a5:ef:f0:ea:eb:8d:42:7d:72:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: May 8 18:00:48 2025 GMT
Not After : May 9 18:00:48 2025 GMT
Subject: CN=503b31f07c66d400b7d5979951561a938f3503fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:06:26:ef:e3:12:52:0a:47:fa:58:9f:40:
59:f3:91:5e:73:3b:4a:76:5a:f3:08:e5:c5:65:3b:
03:f9:35:2e:89:30:66:d3:0c:00:8e:be:ec:36:0a:
ab:dd:3d:11:68:32:7d:62:83:33:22:12:1a:8a:59:
18:59:95:f1:e3:45:0a:3a:76:3e:c4:7e:a4:b3:d0:
9d:ee:a0:19:5d:43:b3:7a:be:45:7f:8c:6a:6f:55:
45:6f:a2:43:25:04:21:3e:f5:34:cd:4a:53:5c:d0:
4d:c7:39:e3:a7:28:3d:53:6c:53:47:03:ff:02:46:
58:b2:4d:a5:40:88:66:e6:6d:9c:fd:b6:c5:39:4e:
f0:00:3f:97:9a:2a:e8:97:e0:c7:bc:d1:9e:d6:e5:
6a:e0:98:24:e6:36:b2:9c:e6:a5:13:1a:39:7c:49:
94:84:03:fc:cd:86:00:63:c4:53:29:c3:7d:48:1b:
ec:d1:4f:e7:39:7e:b7:55:72:26:5b:35:f5:c2:4f:
bc:5d:f6:0e:be:68:9b:25:8c:91:57:e9:f6:4c:5c:
ae:ae:e9:3e:cd:86:a0:9a:f0:e3:cf:6a:44:b5:eb:
cc:da:d6:f6:21:1c:e0:76:63:f5:ed:95:e3:28:49:
a2:f1:99:d7:44:da:f8:c6:cc:37:76:48:15:c2:9b:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3B:31:F0:7C:66:D4:00:B7:D5:97:99:51:56:1A:93:8F:35:03:FB
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1c:d6:2b:c2:63:89:da:e4:55:5f:2a:0c:6f:8b:d3:9d:b1:
39:0c:17:e4:b1:61:37:39:80:4c:c3:d4:65:4d:1a:26:5f:58:
90:e6:e4:09:c6:21:23:09:80:c0:10:fd:9a:ad:8e:27:32:f8:
c6:5d:f8:ea:e3:db:e9:94:18:2f:39:1e:28:d8:da:48:37:f9:
f3:cd:43:f9:0f:95:e6:4c:84:e3:e6:b3:8b:65:f7:ec:e2:30:
59:99:e9:52:b6:3e:52:d2:02:8b:11:09:07:3b:0c:89:5f:cb:
cf:05:d4:ac:a2:90:63:f1:39:4c:5c:9e:66:51:7e:7c:2d:1b:
48:64:0d:7e:24:6f:04:38:39:a0:51:13:c4:f6:a1:d4:7e:f1:
1c:8d:39:63:ce:73:77:71:b9:57:32:c2:79:85:87:2c:dc:7d:
8f:80:cb:5c:8d:3d:44:cb:27:d2:50:d4:9c:cf:f7:b5:99:06:
9c:e0:db:f9:c4:9c:d9:a1:eb:b1:7f:32:38:ea:63:d3:fb:be:
20:f4:6c:35:59:da:d2:61:8b:02:6a:4b:33:fa:6a:fe:f1:eb:
5e:fb:b0:e2:2f:ba:15:dd:d7:01:05:5b:14:be:19:43:28:1f:
6c:c2:2e:01:f2:0c:e6:46:6a:4d:cc:5c:68:2b:1c:dd:cb:a2:
ff:41:00:01
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaxDqH4aTql7/Dq641CfXLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNGU0MDUzNTlhMjEzMTcwOGZjMDI0MzhkNDcyNTY4ZTJj
MDM0NzAwHhcNMjUwNTA4MTgwMDQ4WhcNMjUwNTA5MTgwMDQ4WjAzMTEwLwYDVQQD
Eyg1MDNiMzFmMDdjNjZkNDAwYjdkNTk3OTk1MTU2MWE5MzhmMzUwM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmQGJu/jElIKR/pYn0BZ85FecztK
dlrzCOXFZTsD+TUuiTBm0wwAjr7sNgqr3T0RaDJ9YoMzIhIailkYWZXx40UKOnY+
xH6ks9Cd7qAZXUOzer5Ff4xqb1VFb6JDJQQhPvU0zUpTXNBNxznjpyg9U2xTRwP/
AkZYsk2lQIhm5m2c/bbFOU7wAD+Xmirol+DHvNGe1uVq4Jgk5jaynOalExo5fEmU
hAP8zYYAY8RTKcN9SBvs0U/nOX63VXImWzX1wk+8XfYOvmibJYyRV+n2TFyuruk+
zYagmvDjz2pEtevM2tb2IRzgdmP17ZXjKEmi8ZnXRNr4xsw3dkgVwpsLQQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFA7MfB8ZtQAt9WXmVFWGpOPNQP7MB8GA1UdIwQY
MBaAFPpOQFNZohMXCPwCQ41HJWjiwDRwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rNUFVMW1pRXhjSV9BSkRqVWNsYU9MQU5IQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNmEzZjM1LTM1YjgtNDllMC05ZjQ0
LWI4MThmYWVjYjcxNy8xLzEtazVBVTFtaUV4Y0lfQUpEalVjbGFPTEFOSEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA3LzZhM2YzNS0zNWI4LTQ5ZTAtOWY0NC1iODE4ZmFlY2I3
MTcvMS8xLWs1QVUxbWlFeGNJX0FKRGpVY2xhT0xBTkhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRzW
K8JjidrkVV8qDG+L052xOQwX5LFhNzmATMPUZU0aJl9YkObkCcYhIwmAwBD9mq2O
JzL4xl346uPb6ZQYLzkeKNjaSDf5881D+Q+V5kyE4+azi2X37OIwWZnpUrY+UtIC
ixEJBzsMiV/LzwXUrKKQY/E5TFyeZlF+fC0bSGQNfiRvBDg5oFETxPah1H7xHI05
Y85zd3G5VzLCeYWHLNx9j4DLXI09RMsn0lDUnM/3tZkGnODb+cSc2aHrsX8yOOpj
0/u+IPRsNVna0mGLAmpLM/pq/vHrXvuw4i+6Fd3XAQVbFL4ZQygfbMIuAfIM5kZq
TcxcaCsc3cui/0EAAQ==
-----END CERTIFICATE-----
Generated at Thu May 8 22:06:42 2025 by rpki-client