Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier: AK3OZsMwtG7e0oVvQq/nkArrNxKja4G7eL70mQi3LT8=
Subject key identifier: C4:AF:4B:DA:0A:59:3B:1B:6A:EC:F0:3B:57:53:5D:D2:B0:35:75:80
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 0196C04A9870CE2D4152053B6390396F2F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number: 0301
Signing time: Sun 11 May 2025 17:00:36 +0000
Manifest this update: Sun 11 May 2025 17:00:36 +0000
Manifest next update: Mon 12 May 2025 17:00:36 +0000
Files and hashes: 1: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: SXAtgCuKqWV8ZnZbtHWFmVKlQfqMTZY2taXjuRtw5Hw=)
2: sBZyctgvNvtriFhe8m6CbBJ7dYg.roa (hash: JowCeeluxMSod/7/LxTDdw9H9SvUld/0RlKOgZZipFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:98:70:ce:2d:41:52:05:3b:63:90:39:6f:2f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: May 11 17:00:36 2025 GMT
Not After : May 12 17:00:36 2025 GMT
Subject: CN=c4af4bda0a593b1b6aecf03b57535dd2b0357580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:26:04:61:c7:33:91:e1:5c:2f:a1:77:02:
40:a3:2a:2c:f2:9a:01:f1:dd:72:73:5c:7b:7d:f4:
73:8b:b4:f1:f3:b0:13:d9:06:07:57:48:85:48:10:
c6:fa:c4:de:a8:d7:8e:43:9a:cd:c3:6b:9c:a9:37:
e4:8c:61:13:d5:75:bd:94:e4:49:f3:33:19:60:8d:
67:46:c4:15:e4:eb:03:f8:0b:9f:9c:95:e9:4a:24:
88:41:b2:f2:08:ec:30:6a:82:07:55:0b:a2:d7:81:
00:13:25:86:87:f5:a6:06:14:0e:0d:c1:1a:58:d5:
0c:50:24:23:14:6f:f8:db:51:f1:11:33:60:06:84:
2b:d0:a0:8b:e8:dc:97:c5:2e:d9:11:4c:9f:4c:3c:
27:c2:b8:20:0f:92:b4:f9:04:24:fc:48:1c:3a:ad:
29:bd:d5:7c:89:4a:0d:4d:37:de:f2:df:2a:d3:fb:
23:14:6f:2c:c4:a0:07:eb:b4:2a:5f:1e:4e:f9:92:
e7:1c:f4:a4:0a:5c:cf:27:d6:b8:e4:48:eb:e5:4d:
a4:b8:77:52:99:fe:f2:85:a5:e4:46:30:00:39:32:
45:d8:9e:37:1f:88:df:6a:ce:6e:b2:cd:fa:0b:4a:
c4:70:be:07:0b:b9:17:85:16:ed:de:87:eb:3a:10:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AF:4B:DA:0A:59:3B:1B:6A:EC:F0:3B:57:53:5D:D2:B0:35:75:80
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fd:f2:ca:e6:b8:5a:d4:91:90:70:00:75:1e:07:82:5a:33:
81:90:b9:48:0f:09:ca:8d:22:36:79:42:54:d4:0c:5c:b8:78:
2c:46:a3:4c:fc:63:93:ad:93:94:6b:69:27:c6:62:56:74:92:
1e:c9:61:b9:0c:29:17:bb:74:65:f2:5b:a7:62:0a:81:b0:58:
a1:e8:86:34:0d:54:57:0a:94:0a:14:26:ce:fb:5e:d2:93:99:
88:e6:97:e6:e0:b1:46:93:37:8f:31:c2:8e:1c:17:bf:cd:0c:
83:ca:ff:c6:34:0a:0d:94:88:f1:ee:b3:ae:e1:3d:b3:20:d9:
2d:8f:98:3b:32:91:7d:1e:48:99:d7:33:16:0f:71:15:82:71:
8f:c7:ea:8d:70:eb:68:1f:32:ef:22:58:3d:19:63:f3:ff:dd:
ea:fd:12:ca:19:e8:92:41:d0:5e:9d:dc:1c:12:e0:3c:5e:47:
4d:25:20:f0:c1:15:3f:68:a3:e9:c2:d0:dd:19:84:34:a2:b0:
88:38:e7:88:f9:31:84:c3:19:00:89:22:eb:0e:1f:bd:6a:bb:
56:83:c7:6a:94:f7:79:7c:98:57:6b:b4:70:f4:e4:e0:8b:e4:
bb:1a:b5:16:be:ae:29:78:86:ac:95:da:d4:ae:e5:35:8b:8c:
53:19:43:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASphwzi1BUgU7Y5A5by8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjY2YzZlOWExNGM2ZmQ3NzNmYTMxZGY5ODIwYjMzOTY5
NTJlMmUwHhcNMjUwNTExMTcwMDM2WhcNMjUwNTEyMTcwMDM2WjAzMTEwLwYDVQQD
EyhjNGFmNGJkYTBhNTkzYjFiNmFlY2YwM2I1NzUzNWRkMmIwMzU3NTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG4mBGHHM5HhXC+hdwJAoyos8poB
8d1yc1x7ffRzi7Tx87AT2QYHV0iFSBDG+sTeqNeOQ5rNw2ucqTfkjGET1XW9lORJ
8zMZYI1nRsQV5OsD+AufnJXpSiSIQbLyCOwwaoIHVQui14EAEyWGh/WmBhQODcEa
WNUMUCQjFG/421HxETNgBoQr0KCL6NyXxS7ZEUyfTDwnwrggD5K0+QQk/EgcOq0p
vdV8iUoNTTfe8t8q0/sjFG8sxKAH67QqXx5O+ZLnHPSkClzPJ9a45Ejr5U2kuHdS
mf7yhaXkRjAAOTJF2J43H4jfas5uss36C0rEcL4HC7kXhRbt3ofrOhDd0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSvS9oKWTsbauzwO1dTXdKwNXWAMB8GA1UdIwQY
MBaAFGm2bG6aFMb9dz+jHfmCCzOWlS4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZGU3MGQtNzQyNS00YzA3LWE4MGYt
NDJkYzgyY2NhMTkyLzEvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZGU3MGQtNzQyNS00YzA3LWE4MGYtNDJkYzgyY2NhMTky
LzEvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIP3yyua4
WtSRkHAAdR4HglozgZC5SA8Jyo0iNnlCVNQMXLh4LEajTPxjk62TlGtpJ8ZiVnSS
HslhuQwpF7t0ZfJbp2IKgbBYoeiGNA1UVwqUChQmzvte0pOZiOaX5uCxRpM3jzHC
jhwXv80Mg8r/xjQKDZSI8e6zruE9syDZLY+YOzKRfR5ImdczFg9xFYJxj8fqjXDr
aB8y7yJYPRlj8//d6v0SyhnokkHQXp3cHBLgPF5HTSUg8MEVP2ij6cLQ3RmENKKw
iDjniPkxhMMZAIki6w4fvWq7VoPHapT3eXyYV2u0cPTk4Ivkuxq1Fr6uKXiGrJXa
1K7lNYuMUxlDOw==
-----END CERTIFICATE-----
Generated at Sun May 11 22:08:30 2025 by rpki-client