Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: wYpAKHvBvcEqEW4Wpv7PvM1tUg+phaqtS+ocMly60zM=
Subject key identifier: 22:02:5B:FE:C5:FC:B9:85:6F:B5:C1:EF:74:B1:D8:52:DE:9E:C3:5F
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 0196BDEE14BB5C1AB41D6E6EF940A8F94FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 06:00:18 +0000
Manifest this update: Sun 11 May 2025 06:00:18 +0000
Manifest next update: Mon 12 May 2025 06:00:18 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: E/cRCDOVsOF3PNRqz8T0Ffj7KR0H29oM62s+dq6rFTk=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:14:bb:5c:1a:b4:1d:6e:6e:f9:40:a8:f9:4f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: May 11 06:00:18 2025 GMT
Not After : May 12 06:00:18 2025 GMT
Subject: CN=22025bfec5fcb9856fb5c1ef74b1d852de9ec35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:49:02:b1:ea:e9:95:a3:f1:aa:36:18:61:
ad:ea:3a:a4:a1:26:4e:ac:6e:b2:42:b9:0c:d6:34:
e7:74:1b:7c:67:33:3f:fb:c5:9b:05:7e:8d:ae:31:
2c:fc:be:e7:c3:c7:c9:da:99:7b:2b:fd:75:56:3f:
d4:7a:52:ac:a5:44:ff:1d:4b:fe:5f:cd:43:88:3c:
25:48:8d:fb:86:3f:43:e7:da:b9:20:51:fa:3c:5c:
e0:52:46:06:05:8e:8f:4a:92:e3:5e:87:14:9d:46:
dc:46:a4:b7:1c:19:68:53:9b:0c:56:a5:09:06:0e:
26:7b:67:6d:21:99:08:b5:9e:15:03:7d:b3:2e:3d:
5c:1e:07:b1:0f:11:d6:46:16:21:96:d5:5c:37:28:
17:f0:d4:02:62:a2:6e:6a:db:54:58:d7:61:6b:40:
ef:72:19:c6:1f:50:45:45:66:3a:9e:34:59:a4:2d:
25:47:a4:0f:9b:31:31:ac:27:79:12:c7:a7:ba:08:
c3:ea:c1:6d:01:d2:b0:d1:b1:12:f4:07:f9:bc:7d:
9a:03:86:b4:30:cf:c6:d1:c1:32:8d:ff:8f:75:b1:
dc:24:36:97:69:80:cf:cb:2d:b7:e7:c7:b6:4d:4e:
1d:f9:24:bc:28:3b:a7:19:4f:49:28:9d:da:06:df:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:5B:FE:C5:FC:B9:85:6F:B5:C1:EF:74:B1:D8:52:DE:9E:C3:5F
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4f:cb:e2:92:ab:a0:cd:9f:db:ee:70:be:8a:f2:cf:68:3c:
05:bd:42:58:94:d3:a2:59:b1:6e:41:09:ee:71:e0:2e:fb:ba:
d6:40:06:17:8a:3b:5a:30:a7:08:1f:56:a5:8a:ef:f5:78:55:
b5:b9:c4:1d:7f:fc:bb:55:7f:5f:1b:d7:a9:8f:27:ef:1b:33:
94:c0:33:01:68:e6:ff:f7:1e:50:42:2b:f3:74:3b:04:45:9b:
b2:27:5f:0e:4b:61:ee:e7:f6:23:14:fd:80:ff:6d:ee:9c:68:
17:b6:6d:62:83:df:8f:60:8a:61:bd:ea:01:ef:b3:14:2a:76:
30:b3:c0:5a:22:63:17:c6:4c:e8:1b:ad:90:98:40:c9:3e:24:
5c:fa:ae:f5:79:b3:f5:54:96:4c:0d:d0:a5:e5:94:f6:19:7a:
26:f9:2f:bb:83:ef:b7:f5:08:80:7d:cd:df:83:5a:17:4f:18:
0c:9a:bd:d7:0d:c0:7a:5f:30:88:9b:0e:79:47:4c:46:c7:a4:
f5:f1:18:be:3b:a6:5a:be:68:6f:35:9d:1a:90:0a:b5:14:ca:
e1:7e:ad:8f:79:01:3e:95:69:df:8b:2c:4c:02:43:5f:60:8a:
aa:11:da:15:0d:89:2d:c5:38:1d:25:5b:9e:c2:fa:22:06:66:
d8:dd:fa:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97hS7XBq0HW5u+UCo+U/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjIyYTFhYWRmNzllNzExZDFlN2U0MzE5ZjczMmMwYjJk
YTgwMWUwHhcNMjUwNTExMDYwMDE4WhcNMjUwNTEyMDYwMDE4WjAzMTEwLwYDVQQD
EygyMjAyNWJmZWM1ZmNiOTg1NmZiNWMxZWY3NGIxZDg1MmRlOWVjMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva9JArHq6ZWj8ao2GGGt6jqkoSZO
rG6yQrkM1jTndBt8ZzM/+8WbBX6NrjEs/L7nw8fJ2pl7K/11Vj/UelKspUT/HUv+
X81DiDwlSI37hj9D59q5IFH6PFzgUkYGBY6PSpLjXocUnUbcRqS3HBloU5sMVqUJ
Bg4me2dtIZkItZ4VA32zLj1cHgexDxHWRhYhltVcNygX8NQCYqJuattUWNdha0Dv
chnGH1BFRWY6njRZpC0lR6QPmzExrCd5EsenugjD6sFtAdKw0bES9Af5vH2aA4a0
MM/G0cEyjf+PdbHcJDaXaYDPyy2358e2TU4d+SS8KDunGU9JKJ3aBt8EfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCICW/7F/LmFb7XB73Sx2FLensNfMB8GA1UdIwQY
MBaAFGliKhqt955xHR5+Qxn3MsCy2oAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMt
Y2MyMGY0MTcyY2VkLzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMtY2MyMGY0MTcyY2Vk
LzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0/L4pKr
oM2f2+5wvoryz2g8Bb1CWJTTolmxbkEJ7nHgLvu61kAGF4o7WjCnCB9WpYrv9XhV
tbnEHX/8u1V/XxvXqY8n7xszlMAzAWjm//ceUEIr83Q7BEWbsidfDkth7uf2IxT9
gP9t7pxoF7ZtYoPfj2CKYb3qAe+zFCp2MLPAWiJjF8ZM6ButkJhAyT4kXPqu9Xmz
9VSWTA3QpeWU9hl6Jvkvu4Pvt/UIgH3N34NaF08YDJq91w3Ael8wiJsOeUdMRsek
9fEYvjumWr5obzWdGpAKtRTK4X6tj3kBPpVp34ssTAJDX2CKqhHaFQ2JLcU4HSVb
nsL6IgZm2N36cQ==
-----END CERTIFICATE-----
Generated at Sun May 11 09:24:53 2025 by rpki-client