Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json)
Hash identifier: oGRH5sFKzucJV1gIdET2Q5zZ6A1RuY8OhLmsUmSXlps=
Subject key identifier: E7:85:D3:38:45:30:01:93:1D:26:17:B0:93:B9:2A:61:5C:29:CD:BC
Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Certificate serial: 0196BD495892672FEC884E69756C028EB1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
Manifest number: 041D
Signing time: Sun 11 May 2025 03:00:22 +0000
Manifest this update: Sun 11 May 2025 03:00:22 +0000
Manifest next update: Mon 12 May 2025 03:00:22 +0000
Files and hashes: 1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=)
2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: dKOPNOfqiGQyf6xmmZT3+TQj2vAkqJb09pUsv06KXAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:58:92:67:2f:ec:88:4e:69:75:6c:02:8e:b1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Validity
Not Before: May 11 03:00:22 2025 GMT
Not After : May 12 03:00:22 2025 GMT
Subject: CN=e785d338453001931d2617b093b92a615c29cdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:11:70:03:46:ac:e2:3f:03:e0:cc:d7:7d:
82:1d:c8:5d:b4:7e:57:cb:e1:92:7f:c9:20:cf:7c:
2f:68:53:18:fa:a0:c0:fb:46:a4:df:94:e4:68:03:
a0:07:db:27:1f:6e:a0:fb:76:39:36:bf:2a:cf:2b:
0d:fb:8b:1b:36:61:62:cc:55:3c:b8:6c:f4:a9:e2:
76:71:c6:1f:d7:3f:f6:f9:2d:d4:b7:2f:aa:6d:73:
77:aa:1d:a5:3d:ba:7c:89:1f:73:27:e9:63:56:7e:
8b:e8:29:88:89:c1:ef:31:b3:a8:bb:5a:2c:ff:32:
a6:c4:a3:5c:2b:fc:4b:e9:2f:6f:3f:17:a7:0e:6e:
ee:a1:cf:46:78:7b:d7:90:5e:23:90:d9:9e:ce:f0:
5a:79:16:ee:7c:41:74:35:01:0b:8f:e1:8f:43:56:
d7:17:f3:4e:69:29:ce:d3:23:47:d9:a3:b9:6d:19:
94:3c:ed:82:b5:86:3a:c7:47:ce:f9:22:60:21:e7:
8b:58:32:dd:88:c4:ad:f7:5a:f8:b6:6b:75:87:94:
53:96:31:eb:47:d0:14:69:c2:49:61:7e:1b:31:80:
bc:bc:fb:99:4e:db:f8:3c:26:3a:9a:f5:8a:b7:64:
0e:dc:01:09:ac:f1:66:53:85:f7:bb:c3:e3:bd:e1:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:85:D3:38:45:30:01:93:1D:26:17:B0:93:B9:2A:61:5C:29:CD:BC
X509v3 Authority Key Identifier:
keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7a:44:47:f5:d9:05:95:f6:73:93:00:92:7f:c0:fb:47:ae:
97:02:cc:13:de:fb:05:18:14:6f:3f:eb:57:fa:de:cd:19:9d:
ca:bf:68:3d:55:ed:5e:d6:28:f5:41:3e:19:ba:85:91:d0:18:
4b:95:63:0c:65:90:c5:5c:65:b9:b1:60:bd:74:2b:0a:08:37:
06:da:b8:fd:4f:f9:e8:8e:0d:22:d6:f3:32:b7:c8:72:2f:f9:
61:14:60:9a:16:90:02:1e:2b:3e:e1:2c:33:0b:b5:77:30:a7:
74:58:2d:bd:37:91:17:ad:ee:27:22:ec:79:ac:50:b8:14:f5:
85:aa:92:c8:ae:b1:c2:6a:45:d6:ce:77:47:af:b6:9f:3d:a1:
7c:d2:77:be:6b:af:34:c0:d8:b8:ad:21:24:98:07:84:6a:8d:
7d:66:e5:81:d6:bd:52:92:56:87:42:65:03:44:88:f9:35:0a:
79:82:af:ee:17:1e:71:22:af:3a:1f:64:22:a9:d2:89:7e:c1:
07:8e:f4:c4:2e:ca:ec:59:5b:8a:71:24:6d:8a:ac:89:85:d8:
81:35:ad:ad:04:d5:c8:3c:58:d5:02:5b:f5:3a:93:56:52:6d:
4f:58:89:0b:0f:7a:67:4b:58:65:29:1d:69:f3:02:e7:b5:60:
4f:e1:a1:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9SViSZy/siE5pdWwCjrHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjBiYTc1ZmNlNTU3MjFjMzA2Mzc1ODliZTNkMzRmYTI1
OWMyYjUwHhcNMjUwNTExMDMwMDIyWhcNMjUwNTEyMDMwMDIyWjAzMTEwLwYDVQQD
EyhlNzg1ZDMzODQ1MzAwMTkzMWQyNjE3YjA5M2I5MmE2MTVjMjljZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwMRcANGrOI/A+DM132CHchdtH5X
y+GSf8kgz3wvaFMY+qDA+0ak35TkaAOgB9snH26g+3Y5Nr8qzysN+4sbNmFizFU8
uGz0qeJ2ccYf1z/2+S3Uty+qbXN3qh2lPbp8iR9zJ+ljVn6L6CmIicHvMbOou1os
/zKmxKNcK/xL6S9vPxenDm7uoc9GeHvXkF4jkNmezvBaeRbufEF0NQELj+GPQ1bX
F/NOaSnO0yNH2aO5bRmUPO2CtYY6x0fO+SJgIeeLWDLdiMSt91r4tmt1h5RTljHr
R9AUacJJYX4bMYC8vPuZTtv4PCY6mvWKt2QO3AEJrPFmU4X3u8PjveGRLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeF0zhFMAGTHSYXsJO5KmFcKc28MB8GA1UdIwQY
MBaAFGiwunX85VchwwY3WJvj00+iWcK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQt
NDk5ZWYxNmUyMDgyLzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQtNDk5ZWYxNmUyMDgy
LzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnpER/XZ
BZX2c5MAkn/A+0eulwLME977BRgUbz/rV/rezRmdyr9oPVXtXtYo9UE+GbqFkdAY
S5VjDGWQxVxlubFgvXQrCgg3Btq4/U/56I4NItbzMrfIci/5YRRgmhaQAh4rPuEs
Mwu1dzCndFgtvTeRF63uJyLseaxQuBT1haqSyK6xwmpF1s53R6+2nz2hfNJ3vmuv
NMDYuK0hJJgHhGqNfWblgda9UpJWh0JlA0SI+TUKeYKv7hcecSKvOh9kIqnSiX7B
B470xC7K7FlbinEkbYqsiYXYgTWtrQTVyDxY1QJb9TqTVlJtT1iJCw96Z0tYZSkd
afMC57VgT+Gheg==
-----END CERTIFICATE-----
Generated at Sun May 11 08:56:08 2025 by rpki-client