Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: RfGBuE7XmJYLDRkVbfLjhDWRbh0SGR55tPwOAdRFh4Q=
Subject key identifier: E1:8A:14:79:35:22:66:A7:26:07:F7:AA:AE:98:78:B0:18:AD:B4:D3
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 0196C495026925FBB16052F1F80EA9A5E5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 13:00:21 +0000
Manifest this update: Mon 12 May 2025 13:00:21 +0000
Manifest next update: Tue 13 May 2025 13:00:21 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: TSL38NyMObhhJXfifypAMCWJ3sNVZ6XKBefNT+4NRQA=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:02:69:25:fb:b1:60:52:f1:f8:0e:a9:a5:e5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: May 12 13:00:21 2025 GMT
Not After : May 13 13:00:21 2025 GMT
Subject: CN=e18a1479352266a72607f7aaae9878b018adb4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:25:c4:79:91:f7:57:08:59:c7:7d:be:3d:
86:58:02:a3:e4:72:b4:04:fd:bf:10:94:04:83:59:
be:10:e2:db:96:21:96:67:2a:5f:49:38:34:4a:b5:
0a:1e:17:a0:21:04:26:c0:10:cc:94:ff:4f:84:60:
f1:11:6b:1b:be:04:60:85:53:e7:b1:a0:70:76:42:
fa:50:56:81:5a:46:e8:87:cd:bf:d9:52:4a:ac:b3:
6c:ab:15:ec:20:7c:4a:7d:16:89:d0:d3:7e:49:fb:
76:19:96:75:81:c4:02:b0:45:16:ee:57:40:f5:d1:
47:df:1d:ef:fb:73:f9:cf:27:be:1b:1e:5e:cb:5e:
7a:0c:89:2e:49:f6:29:67:39:49:ff:05:15:dc:6a:
64:14:20:a1:eb:cf:8f:1b:0a:fc:81:00:28:b1:3b:
7e:30:8a:40:d3:c2:db:e8:ca:6f:5e:71:2e:14:8e:
76:40:a4:ca:69:8e:4b:1d:ef:ee:6d:dd:60:13:63:
32:72:fa:50:9e:75:17:5a:af:b8:07:24:e5:fc:d0:
f1:0f:36:74:fd:d4:d5:d3:88:af:ac:e6:98:b6:09:
2c:36:6e:95:bb:08:6f:51:31:68:14:8d:54:f7:8b:
fd:9e:32:ad:38:d1:51:c1:95:38:1f:17:5c:d8:44:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8A:14:79:35:22:66:A7:26:07:F7:AA:AE:98:78:B0:18:AD:B4:D3
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5b:f0:04:b0:f3:92:66:6a:db:df:ef:89:28:97:c4:21:cd:
70:b7:69:2d:5d:93:b2:72:13:d4:9c:d8:d7:9f:f1:96:35:47:
51:6d:a0:d7:03:40:65:51:c3:7b:73:c6:0b:0e:92:3c:cf:20:
90:08:99:cd:38:4b:de:12:56:b1:10:88:e6:c6:74:fe:d3:f2:
c9:90:86:32:b0:f0:2c:3b:36:31:79:9f:3a:4c:85:ca:79:4c:
5f:b1:b6:59:2d:36:8b:ba:da:27:96:ff:fa:ff:c5:a8:67:36:
b7:d3:d4:85:7d:2b:ae:7a:1c:2b:7a:19:bd:8a:0a:2b:74:4f:
b1:19:07:09:2d:cd:ae:b9:b0:35:b5:07:5a:15:5f:e0:1e:da:
e6:87:54:6e:98:17:0b:3b:ef:86:f0:b5:a6:52:ef:32:2f:74:
1b:a8:48:1c:ac:11:bd:71:64:21:b0:81:0f:28:d6:ce:c2:fc:
29:9b:c4:fe:2e:89:b5:5e:6b:f8:08:e6:ee:44:c6:19:0b:25:
19:70:50:f5:d0:7a:14:14:0b:0d:8e:b3:5a:aa:53:da:c4:1b:
e7:d5:5c:6b:8a:ac:89:01:c0:bc:a4:b8:31:91:1f:9f:a0:28:
30:bc:72:06:88:e5:db:69:cd:2a:5a:18:c8:52:e0:af:24:07:
f5:e6:13:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbElQJpJfuxYFLx+A6ppeXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNDYyM2Y3NmJkNWJiMmRmMGFmNjZmMzYwZmY3NGZmMWMw
MGRiMDIwHhcNMjUwNTEyMTMwMDIxWhcNMjUwNTEzMTMwMDIxWjAzMTEwLwYDVQQD
EyhlMThhMTQ3OTM1MjI2NmE3MjYwN2Y3YWFhZTk4NzhiMDE4YWRiNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gglxHmR91cIWcd9vj2GWAKj5HK0
BP2/EJQEg1m+EOLbliGWZypfSTg0SrUKHhegIQQmwBDMlP9PhGDxEWsbvgRghVPn
saBwdkL6UFaBWkboh82/2VJKrLNsqxXsIHxKfRaJ0NN+Sft2GZZ1gcQCsEUW7ldA
9dFH3x3v+3P5zye+Gx5ey156DIkuSfYpZzlJ/wUV3GpkFCCh68+PGwr8gQAosTt+
MIpA08Lb6MpvXnEuFI52QKTKaY5LHe/ubd1gE2MycvpQnnUXWq+4ByTl/NDxDzZ0
/dTV04ivrOaYtgksNm6VuwhvUTFoFI1U94v9njKtONFRwZU4Hxdc2ET52QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGKFHk1ImanJgf3qq6YeLAYrbTTMB8GA1UdIwQY
MBaAFGpGI/dr1bst8K9m82D/dP8cANsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgt
NmM4MzIwNTBlNzdhLzEvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgtNmM4MzIwNTBlNzdh
LzEvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlvwBLDz
kmZq29/viSiXxCHNcLdpLV2TsnIT1JzY15/xljVHUW2g1wNAZVHDe3PGCw6SPM8g
kAiZzThL3hJWsRCI5sZ0/tPyyZCGMrDwLDs2MXmfOkyFynlMX7G2WS02i7raJ5b/
+v/FqGc2t9PUhX0rrnocK3oZvYoKK3RPsRkHCS3NrrmwNbUHWhVf4B7a5odUbpgX
CzvvhvC1plLvMi90G6hIHKwRvXFkIbCBDyjWzsL8KZvE/i6JtV5r+Ajm7kTGGQsl
GXBQ9dB6FBQLDY6zWqpT2sQb59Vca4qsiQHAvKS4MZEfn6AoMLxyBojl22nNKloY
yFLgryQH9eYTBw==
-----END CERTIFICATE-----
Generated at Mon May 12 16:56:07 2025 by rpki-client