Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: YQR0sdczz4a2KgWXmX/k1mKuKb0A2G5ABgl9iqGASQw=
Subject key identifier: 11:F6:76:30:3B:8E:2C:AF:BD:54:CD:4D:68:DA:85:BF:3D:FD:9F:0D
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 0196BD80D360190DED048316252B6912B35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0BED
Signing time: Sun 11 May 2025 04:00:58 +0000
Manifest this update: Sun 11 May 2025 04:00:58 +0000
Manifest next update: Mon 12 May 2025 04:00:58 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: VBfZ+krhX4MCDaQDnEVRA7WeeyzPpaK/dXMVQxZsV+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:d3:60:19:0d:ed:04:83:16:25:2b:69:12:b3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: May 11 04:00:58 2025 GMT
Not After : May 12 04:00:58 2025 GMT
Subject: CN=11f676303b8e2cafbd54cd4d68da85bf3dfd9f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2e:39:9e:b7:22:0b:b4:47:cd:d0:32:02:b2:
97:8a:c2:0f:cb:2b:a5:15:e7:29:d0:40:76:e6:4f:
4b:01:4f:65:75:43:0a:34:da:73:b1:42:91:8e:03:
96:76:0f:ef:e1:d2:54:99:e2:54:24:38:74:7f:1e:
d1:d3:14:70:53:52:7b:1e:de:1c:7d:3b:1f:91:d4:
26:fb:7e:0a:c8:f1:f7:2f:1b:f0:30:45:c4:c6:ef:
b7:35:8f:09:54:cc:33:f0:23:5a:38:41:b1:8d:c7:
13:b0:e2:e2:8d:cb:99:6d:19:94:4f:fb:1e:ea:56:
8b:3e:ff:05:dd:f1:ef:1a:0a:c8:46:ff:11:4e:2b:
a3:c9:5c:23:8d:45:c8:98:0c:33:a9:34:f1:61:7d:
ce:a2:89:a4:30:10:ab:62:f0:5a:3a:bb:f0:69:c6:
da:53:95:dc:48:8b:f9:a3:ea:e8:eb:88:c5:f9:15:
5b:0b:f6:9e:9d:eb:be:81:cf:c2:5c:84:55:b3:9a:
da:79:74:48:90:fa:af:91:b8:38:17:f8:12:15:53:
d6:20:ee:1f:ef:6c:b2:23:03:ba:ad:34:13:a6:8b:
bb:d6:7c:a0:45:4d:d1:71:f5:28:34:71:c6:87:2e:
ec:25:07:f0:08:9d:2c:c5:2c:0d:3f:5b:dd:f2:97:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F6:76:30:3B:8E:2C:AF:BD:54:CD:4D:68:DA:85:BF:3D:FD:9F:0D
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8d:5a:14:3e:db:9a:c4:61:11:df:ea:bd:ae:a1:b3:40:af:
d6:6a:7b:ea:48:a7:a9:3d:89:f8:27:5f:51:6e:d5:8e:b7:a3:
15:d1:5b:73:f2:78:2d:7a:74:be:90:f2:10:e7:e9:4e:42:c0:
07:cd:2b:dd:bf:27:16:d9:4e:98:7e:cf:d1:2c:13:a0:cf:39:
71:15:dd:60:c8:46:b4:5f:c0:f7:19:98:d8:85:09:9f:23:e1:
6a:c1:36:7d:5f:4d:63:36:93:d3:fa:f7:8c:dd:e3:78:e2:45:
13:bf:56:f6:36:4a:5f:0b:1a:7f:65:4e:99:54:c3:32:5c:81:
cb:ca:01:f1:9e:90:94:11:0d:6c:81:73:58:b1:3c:2e:20:0f:
cc:d3:df:0f:45:0d:b5:80:5b:6b:eb:44:5f:74:35:9e:89:ca:
f1:56:55:a7:17:78:34:50:19:b1:79:71:48:38:57:74:c1:fd:
fe:6f:7d:25:c4:a5:10:e5:6f:94:e5:99:b4:ce:a6:7f:c3:6f:
ed:cf:ca:c7:9b:b0:df:bc:e4:d8:7a:97:e7:1f:2f:de:84:c1:
44:e2:73:1b:0f:3b:6c:f4:1d:ea:8e:0d:97:b7:bb:1e:54:ad:
69:4a:60:bb:42:45:a7:47:05:e0:16:65:91:6a:72:25:26:9c:
29:31:fb:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gNNgGQ3tBIMWJStpErNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjJiYjNlOWQzNWI1YWY5ZGNhMDhlYTdjY2VmZjQzNTE5
YTRhNmEwHhcNMjUwNTExMDQwMDU4WhcNMjUwNTEyMDQwMDU4WjAzMTEwLwYDVQQD
EygxMWY2NzYzMDNiOGUyY2FmYmQ1NGNkNGQ2OGRhODViZjNkZmQ5ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9S45nrciC7RHzdAyArKXisIPyyul
Fecp0EB25k9LAU9ldUMKNNpzsUKRjgOWdg/v4dJUmeJUJDh0fx7R0xRwU1J7Ht4c
fTsfkdQm+34KyPH3LxvwMEXExu+3NY8JVMwz8CNaOEGxjccTsOLijcuZbRmUT/se
6laLPv8F3fHvGgrIRv8RTiujyVwjjUXImAwzqTTxYX3OoomkMBCrYvBaOrvwacba
U5XcSIv5o+ro64jF+RVbC/aeneu+gc/CXIRVs5raeXRIkPqvkbg4F/gSFVPWIO4f
72yyIwO6rTQTpou71nygRU3RcfUoNHHGhy7sJQfwCJ0sxSwNP1vd8peXCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBH2djA7jiyvvVTNTWjahb89/Z8NMB8GA1UdIwQY
MBaAFGliuz6dNbWvncoI6nzO/0NRmkpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYt
NTEzNmYyNjIyNjQxLzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYtNTEzNmYyNjIyNjQx
LzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALI1aFD7b
msRhEd/qva6hs0Cv1mp76kinqT2J+CdfUW7VjrejFdFbc/J4LXp0vpDyEOfpTkLA
B80r3b8nFtlOmH7P0SwToM85cRXdYMhGtF/A9xmY2IUJnyPhasE2fV9NYzaT0/r3
jN3jeOJFE79W9jZKXwsaf2VOmVTDMlyBy8oB8Z6QlBENbIFzWLE8LiAPzNPfD0UN
tYBba+tEX3Q1nonK8VZVpxd4NFAZsXlxSDhXdMH9/m99JcSlEOVvlOWZtM6mf8Nv
7c/Kx5uw37zk2HqX5x8v3oTBROJzGw87bPQd6o4Nl7e7HlStaUpgu0JFp0cF4BZl
kWpyJSacKTH7lg==
-----END CERTIFICATE-----
Generated at Sun May 11 11:08:28 2025 by rpki-client