Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
File: aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft (raw, json)
Hash identifier: 8RtCXeKUSSXS/+PpFK+4PyBZ6EmVVvUW3xbFKS+u8P8=
Subject key identifier: 9E:38:6E:A6:5F:3E:15:97:D1:B2:63:8D:9C:AE:55:4B:DA:39:5C:D9
Authority key identifier: 68:A7:47:2D:53:28:40:95:90:5A:DE:20:3C:AF:91:1C:D1:AC:17:71
Certificate issuer: /CN=68a7472d53284095905ade203caf911cd1ac1771
Certificate serial: 0196C5DF096A29C337DCDDBCEBF0E86143D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKdHLVMoQJWQWt4gPK-RHNGsF3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
Manifest number: 01DE
Signing time: Mon 12 May 2025 19:00:50 +0000
Manifest this update: Mon 12 May 2025 19:00:50 +0000
Manifest next update: Tue 13 May 2025 19:00:50 +0000
Files and hashes: 1: aKdHLVMoQJWQWt4gPK-RHNGsF3E.crl (hash: E8EjtCd01aUqegtukJSpLOc1QR/m/dJ6B2o5tmc0B8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKdHLVMoQJWQWt4gPK-RHNGsF3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:df:09:6a:29:c3:37:dc:dd:bc:eb:f0:e8:61:43:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7472d53284095905ade203caf911cd1ac1771
Validity
Not Before: May 12 19:00:50 2025 GMT
Not After : May 13 19:00:50 2025 GMT
Subject: CN=9e386ea65f3e1597d1b2638d9cae554bda395cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:3e:b3:5d:6e:46:20:36:33:08:3d:df:07:
77:1a:56:02:0c:4c:6e:e4:07:65:b5:20:0f:8e:68:
93:85:bc:3f:0f:14:17:a4:e9:d0:9d:bc:35:da:f8:
34:9e:62:02:cd:ff:44:8d:a9:ad:c4:3a:52:e0:e1:
f4:f5:f0:96:62:3a:27:e7:8e:33:b1:8f:c8:3c:fd:
d6:66:18:ce:ab:30:98:03:47:13:6e:d1:0c:be:2d:
7a:1e:30:78:df:7f:80:f5:7e:4a:32:e3:8d:0d:a0:
b9:02:fa:b7:3c:e3:42:e4:a7:24:93:fe:99:cb:59:
aa:e4:a4:ac:bd:1c:71:18:03:55:32:db:fd:41:0c:
f3:14:93:e5:b0:ce:82:16:9f:1c:22:d2:5e:e4:0c:
f6:dd:48:1e:a5:ea:ae:3a:3e:82:e0:47:a7:04:ac:
0c:ca:94:e7:48:ae:b3:27:69:bf:25:ba:77:8b:10:
f0:3c:bb:c1:5c:d4:f9:54:79:53:0e:67:9c:7a:51:
10:9a:0f:f0:c6:c6:f7:41:1b:56:85:5c:d0:47:df:
a7:45:09:e3:e3:70:ff:ef:08:14:2c:a9:e6:fe:3e:
7f:59:b2:54:6d:c6:6d:b6:c0:9c:6a:3b:ba:60:4c:
2e:4f:60:50:92:be:4c:34:0b:5d:06:c0:1a:47:82:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:6E:A6:5F:3E:15:97:D1:B2:63:8D:9C:AE:55:4B:DA:39:5C:D9
X509v3 Authority Key Identifier:
keyid:68:A7:47:2D:53:28:40:95:90:5A:DE:20:3C:AF:91:1C:D1:AC:17:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKdHLVMoQJWQWt4gPK-RHNGsF3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:67:f7:fd:5f:1b:98:19:24:87:69:3d:f0:ce:11:1c:76:80:
23:5e:8e:4d:8e:7a:c5:05:72:c7:72:42:3a:65:e5:c2:67:0e:
a7:7a:30:98:06:d5:8f:0f:77:ff:2b:8e:0d:b9:ed:4e:0d:c2:
ee:86:9c:5c:27:28:e7:7b:1b:cc:e0:06:00:9c:b2:68:1b:66:
60:6f:c8:ca:d2:53:5f:0e:72:72:d6:0e:2d:74:5f:4f:87:8b:
2d:3f:3a:09:d7:db:f3:c2:73:49:10:c8:d7:be:d8:5c:86:60:
22:fc:dd:ce:90:7d:56:5a:b5:4c:c4:b0:a9:28:4a:b9:bf:b4:
6a:f6:3b:7c:44:c6:90:85:59:0e:6a:a0:02:c8:f1:97:f0:01:
27:92:fb:81:4a:28:20:30:86:22:96:2b:eb:c8:f2:a2:e5:0a:
cc:f4:b9:5a:84:22:3c:f8:b9:69:85:ee:53:20:64:ca:71:ef:
24:88:07:fe:a5:42:bb:38:bc:53:6f:c4:31:41:24:80:f8:2b:
a3:25:91:48:1a:a2:ca:2a:27:2a:c4:48:a9:1d:ec:1d:9d:9d:
e2:e6:4d:12:35:f9:51:78:9c:4f:4e:7a:10:f5:98:27:4d:49:
96:3a:7f:7b:13:3c:6b:ac:7c:44:33:9e:e8:a2:51:74:51:11:
cb:3c:84:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbF3wlqKcM33N286/DoYUPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YTc0NzJkNTMyODQwOTU5MDVhZGUyMDNjYWY5MTFjZDFh
YzE3NzEwHhcNMjUwNTEyMTkwMDUwWhcNMjUwNTEzMTkwMDUwWjAzMTEwLwYDVQQD
Eyg5ZTM4NmVhNjVmM2UxNTk3ZDFiMjYzOGQ5Y2FlNTU0YmRhMzk1Y2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c4+s11uRiA2Mwg93wd3GlYCDExu
5AdltSAPjmiThbw/DxQXpOnQnbw12vg0nmICzf9EjamtxDpS4OH09fCWYjon544z
sY/IPP3WZhjOqzCYA0cTbtEMvi16HjB433+A9X5KMuONDaC5Avq3PONC5Kckk/6Z
y1mq5KSsvRxxGANVMtv9QQzzFJPlsM6CFp8cItJe5Az23UgepequOj6C4EenBKwM
ypTnSK6zJ2m/Jbp3ixDwPLvBXNT5VHlTDmecelEQmg/wxsb3QRtWhVzQR9+nRQnj
43D/7wgULKnm/j5/WbJUbcZttsCcaju6YEwuT2BQkr5MNAtdBsAaR4IyuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ44bqZfPhWX0bJjjZyuVUvaOVzZMB8GA1UdIwQY
MBaAFGinRy1TKECVkFreIDyvkRzRrBdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUtkSExWTW9RSldRV3Q0Z1BLLVJITkdzRjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zNTk1M2UtYWRjNy00MTdjLTkwMTEt
MzhjYWQzNTlhNTQwLzEvYUtkSExWTW9RSldRV3Q0Z1BLLVJITkdzRjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zNTk1M2UtYWRjNy00MTdjLTkwMTEtMzhjYWQzNTlhNTQw
LzEvYUtkSExWTW9RSldRV3Q0Z1BLLVJITkdzRjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuWf3/V8b
mBkkh2k98M4RHHaAI16OTY56xQVyx3JCOmXlwmcOp3owmAbVjw93/yuODbntTg3C
7oacXCco53sbzOAGAJyyaBtmYG/IytJTXw5yctYOLXRfT4eLLT86Cdfb88JzSRDI
177YXIZgIvzdzpB9Vlq1TMSwqShKub+0avY7fETGkIVZDmqgAsjxl/ABJ5L7gUoo
IDCGIpYr68jyouUKzPS5WoQiPPi5aYXuUyBkynHvJIgH/qVCuzi8U2/EMUEkgPgr
oyWRSBqiyionKsRIqR3sHZ2d4uZNEjX5UXicT056EPWYJ01Jljp/exM8a6x8RDOe
6KJRdFERyzyERQ==
-----END CERTIFICATE-----
Generated at Mon May 12 21:50:46 2025 by rpki-client