Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: tmYs0rCoAqKnzKEqzESnVilncgSARtbo8hQ+BO7enC8=
Subject key identifier: 67:D0:09:72:61:E2:21:32:2C:F7:10:E2:42:A9:F2:1C:D5:B4:50:03
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 0196A42EAF183B423ACF5C2F3D337566F156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 1525
Signing time: Tue 06 May 2025 06:00:44 +0000
Manifest this update: Tue 06 May 2025 06:00:44 +0000
Manifest next update: Wed 07 May 2025 06:00:44 +0000
Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: op64xabIIdFV8InuV8Hipr7FPYq5NPvWJSNN/05E5Z8=)
3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:af:18:3b:42:3a:cf:5c:2f:3d:33:75:66:f1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: May 6 06:00:44 2025 GMT
Not After : May 7 06:00:44 2025 GMT
Subject: CN=67d0097261e221322cf710e242a9f21cd5b45003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:9c:d0:b4:cd:32:c2:af:60:a8:38:c6:a5:
b6:5a:fc:27:27:7f:11:a1:ff:e2:4b:1d:d4:81:ff:
18:f3:65:75:37:54:00:0e:5b:07:59:b7:cb:9e:6f:
12:20:c3:0a:0a:91:16:fb:46:dc:fb:93:83:7e:fe:
de:a0:42:af:6b:c9:ca:e7:32:7f:4a:23:cd:4c:fe:
fc:96:a3:a8:bf:d9:44:26:bf:0c:c0:37:f0:3b:18:
e2:71:7f:20:c5:36:a3:f5:8d:9f:0a:ec:1b:ec:46:
a3:5a:b7:88:cc:02:cf:71:e2:a9:24:df:20:e8:fb:
60:32:66:b2:e4:24:58:80:d4:4f:4c:a1:5d:89:4a:
70:bd:d7:7d:fb:b8:9a:a2:ea:11:3f:68:ae:67:90:
35:45:01:7d:26:cf:05:62:29:46:d5:de:b9:0b:4d:
f4:4b:39:d0:17:c7:b3:c1:0f:78:8f:ae:4c:0e:58:
e8:fb:9c:b9:a9:78:da:c4:27:76:23:39:c9:8c:f8:
39:37:f1:6b:34:e2:dd:3a:f1:e2:a1:44:9d:8e:b5:
30:9a:1d:e5:f1:23:ce:1b:5f:bd:92:fb:04:b2:8c:
4d:40:4e:6f:c7:e1:4e:be:c6:b1:22:86:17:9d:42:
2a:1c:9a:79:3b:8e:f0:46:91:2e:ce:d4:16:74:69:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D0:09:72:61:E2:21:32:2C:F7:10:E2:42:A9:F2:1C:D5:B4:50:03
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6f:a9:e9:5b:98:5c:be:05:74:f4:66:12:ce:8d:4e:0d:22:
10:84:17:87:4d:dd:7f:12:72:a6:4c:22:75:7e:d6:21:f3:05:
49:fb:0a:4a:08:f6:74:32:c2:92:3f:a9:b8:15:81:c8:26:56:
3a:e3:2a:81:a6:17:d2:76:43:d9:95:f2:0b:8f:57:d2:3c:26:
7d:9e:18:e0:dd:84:98:c0:78:8c:66:3e:c5:0e:f1:fd:a2:0c:
09:36:ee:5f:76:c6:4f:66:19:af:39:5d:2e:18:84:72:56:f7:
15:c4:7b:d9:f3:52:dc:55:eb:3b:48:68:84:91:40:2c:65:4c:
b4:bc:8d:c7:10:82:06:ce:f7:e0:70:f8:14:4c:fe:3e:ed:40:
58:88:62:7d:c8:39:56:bc:85:49:ad:de:a2:70:b3:92:13:fb:
c5:63:83:fd:a4:07:1e:bb:9e:8b:24:87:e5:f2:c9:01:2a:0c:
d2:5c:70:10:35:42:0b:a7:34:a3:3f:24:c7:e3:56:0a:76:41:
9b:bf:c6:c1:ad:07:41:47:54:a9:62:ea:03:19:6f:7d:95:02:
15:3f:ec:69:6f:7e:cb:03:99:9e:6b:a7:15:7f:ca:fd:34:32:
a5:b3:39:55:c3:50:be:9b:f1:91:2c:01:25:92:60:5d:87:80:
24:9a:e0:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZakLq8YO0I6z1wvPTN1ZvFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTRlOTA4OTlmZjI1NjQ0NTIwNzI0Y2RlOGMyMTE2MTM2
MDBiZWYwHhcNMjUwNTA2MDYwMDQ0WhcNMjUwNTA3MDYwMDQ0WjAzMTEwLwYDVQQD
Eyg2N2QwMDk3MjYxZTIyMTMyMmNmNzEwZTI0MmE5ZjIxY2Q1YjQ1MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Sc0LTNMsKvYKg4xqW2WvwnJ38R
of/iSx3Ugf8Y82V1N1QADlsHWbfLnm8SIMMKCpEW+0bc+5ODfv7eoEKva8nK5zJ/
SiPNTP78lqOov9lEJr8MwDfwOxjicX8gxTaj9Y2fCuwb7EajWreIzALPceKpJN8g
6PtgMmay5CRYgNRPTKFdiUpwvdd9+7iaouoRP2iuZ5A1RQF9Js8FYilG1d65C030
SznQF8ezwQ94j65MDljo+5y5qXjaxCd2IznJjPg5N/FrNOLdOvHioUSdjrUwmh3l
8SPOG1+9kvsEsoxNQE5vx+FOvsaxIoYXnUIqHJp5O47wRpEuztQWdGl2zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfQCXJh4iEyLPcQ4kKp8hzVtFADMB8GA1UdIwQY
MBaAFGlU6QiZ/yVkRSByTN6MIRYTYAvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAt
M2Y2ZWU3MDU5MTViLzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAtM2Y2ZWU3MDU5MTVi
LzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW+p6VuY
XL4FdPRmEs6NTg0iEIQXh03dfxJypkwidX7WIfMFSfsKSgj2dDLCkj+puBWByCZW
OuMqgaYX0nZD2ZXyC49X0jwmfZ4Y4N2EmMB4jGY+xQ7x/aIMCTbuX3bGT2YZrzld
LhiEclb3FcR72fNS3FXrO0hohJFALGVMtLyNxxCCBs734HD4FEz+Pu1AWIhifcg5
VryFSa3eonCzkhP7xWOD/aQHHrueiySH5fLJASoM0lxwEDVCC6c0oz8kx+NWCnZB
m7/Gwa0HQUdUqWLqAxlvfZUCFT/saW9+ywOZnmunFX/K/TQypbM5VcNQvpvxkSwB
JZJgXYeAJJrgCQ==
-----END CERTIFICATE-----
Generated at Tue May 6 09:25:56 2025 by rpki-client