Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: QO/E7uVMYfJsYXko7bwT3RNHIHrUMyDh294YkZx7O3Q=
Subject key identifier: AF:C3:0E:2C:33:7A:3D:95:CD:58:0D:8A:94:B7:5B:8D:C2:8E:FD:39
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 0196B1B3390BDE2CDE6C9815B27EB7061182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0AA3
Signing time: Thu 08 May 2025 21:00:34 +0000
Manifest this update: Thu 08 May 2025 21:00:34 +0000
Manifest next update: Fri 09 May 2025 21:00:34 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: iWl4XsnJ4l6vnJ5BALlnf+JtS88lVQ17baTregzPYik=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:b3:39:0b:de:2c:de:6c:98:15:b2:7e:b7:06:11:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: May 8 21:00:34 2025 GMT
Not After : May 9 21:00:34 2025 GMT
Subject: CN=afc30e2c337a3d95cd580d8a94b75b8dc28efd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:77:65:12:a6:62:0b:cb:b3:62:10:ee:59:02:
1a:2d:5d:91:68:33:78:4b:0f:4c:f7:7a:b1:83:2b:
ef:96:a9:fa:7c:e0:e7:c7:97:d4:e0:43:e5:c9:ec:
11:1e:dc:5b:f4:48:c4:1b:f5:58:25:90:39:d0:35:
2b:f9:02:7b:46:ef:3e:e1:ee:63:9d:02:b7:6c:d6:
98:41:13:83:20:8b:db:61:ae:d5:40:03:da:a3:37:
f3:09:cf:03:27:be:da:ca:33:8a:32:88:24:88:26:
45:25:77:0c:b1:f6:1d:5f:61:b6:d1:50:e3:c1:63:
66:8d:a7:41:0b:57:18:07:bb:14:6b:8b:1c:22:01:
65:1d:e2:75:4f:c8:16:9a:fa:11:c0:a3:0e:60:88:
13:51:f7:a2:f6:47:0f:cd:df:ef:37:f2:1f:3e:08:
2a:0e:79:6e:a5:fc:12:68:d0:a0:da:f7:be:4c:1f:
e4:57:39:f6:cf:d7:4f:cc:27:4f:f3:fd:31:b6:a1:
f8:01:82:50:46:60:af:c0:bd:b5:fe:ee:dc:3d:de:
af:53:ce:db:b1:14:53:5d:ab:2f:91:92:57:39:5c:
de:77:2d:56:bf:c7:47:4b:86:b5:25:4a:53:89:43:
8b:ff:0e:49:4d:2b:ef:2e:02:27:54:12:1f:ca:6a:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C3:0E:2C:33:7A:3D:95:CD:58:0D:8A:94:B7:5B:8D:C2:8E:FD:39
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cf:a0:85:51:15:17:dc:b9:ef:b1:b9:31:da:fb:fc:86:7e:
3f:8a:86:fa:30:33:01:f1:92:e0:31:fe:6e:11:5b:16:43:a2:
b0:89:05:1e:39:a9:f2:e8:96:b8:5f:71:ba:93:fb:a9:3e:0d:
ed:2a:ad:78:cd:7b:76:20:dc:a4:5a:73:f7:42:8a:e9:54:f5:
a2:f3:1b:cf:2b:eb:b9:7a:96:b4:d4:84:97:d8:b4:2d:fb:37:
04:0e:ed:50:52:e9:74:bc:ee:e4:f6:fe:4d:3b:8f:10:88:f6:
4e:99:a5:80:ac:4a:c4:1b:19:b4:9f:81:2d:7b:ea:22:6e:1b:
cb:1e:cf:f4:ff:46:65:cd:18:c5:b4:54:a1:66:41:0b:c0:9e:
40:4b:be:a8:26:1d:56:2c:e2:cd:e5:70:e9:39:71:2f:01:9d:
fa:46:10:e2:89:a2:3c:c2:6c:65:fb:75:33:01:cb:98:bc:95:
6a:27:a9:e5:5e:d5:cb:1b:67:f7:53:1b:f0:05:95:8e:f9:1a:
0b:b8:7c:ef:e7:2f:4f:91:bc:1d:39:93:1a:c1:2d:61:a6:2e:
e9:fb:72:9c:63:7e:50:38:c3:93:7b:c5:7e:10:ab:ac:de:74:
49:19:d7:1a:24:f3:42:09:78:d2:20:22:0f:b7:aa:66:19:c8:
30:b0:04:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxszkL3izebJgVsn63BhGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGE3ZDRjNjRhZWQ0YmM5OGM2YjViMDY0ZmYwYTliODJl
YWRhODIwHhcNMjUwNTA4MjEwMDM0WhcNMjUwNTA5MjEwMDM0WjAzMTEwLwYDVQQD
EyhhZmMzMGUyYzMzN2EzZDk1Y2Q1ODBkOGE5NGI3NWI4ZGMyOGVmZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HdlEqZiC8uzYhDuWQIaLV2RaDN4
Sw9M93qxgyvvlqn6fODnx5fU4EPlyewRHtxb9EjEG/VYJZA50DUr+QJ7Ru8+4e5j
nQK3bNaYQRODIIvbYa7VQAPaozfzCc8DJ77ayjOKMogkiCZFJXcMsfYdX2G20VDj
wWNmjadBC1cYB7sUa4scIgFlHeJ1T8gWmvoRwKMOYIgTUfei9kcPzd/vN/IfPggq
DnlupfwSaNCg2ve+TB/kVzn2z9dPzCdP8/0xtqH4AYJQRmCvwL21/u7cPd6vU87b
sRRTXasvkZJXOVzedy1Wv8dHS4a1JUpTiUOL/w5JTSvvLgInVBIfymo+hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/DDiwzej2VzVgNipS3W43Cjv05MB8GA1UdIwQY
MBaAFAEKfUxkrtS8mMa1sGT/CpuC6tqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUt
ZGJmNzZlZDM5MzlmLzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUtZGJmNzZlZDM5Mzlm
LzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArc+ghVEV
F9y577G5Mdr7/IZ+P4qG+jAzAfGS4DH+bhFbFkOisIkFHjmp8uiWuF9xupP7qT4N
7SqteM17diDcpFpz90KK6VT1ovMbzyvruXqWtNSEl9i0Lfs3BA7tUFLpdLzu5Pb+
TTuPEIj2TpmlgKxKxBsZtJ+BLXvqIm4byx7P9P9GZc0YxbRUoWZBC8CeQEu+qCYd
VizizeVw6TlxLwGd+kYQ4omiPMJsZft1MwHLmLyVaiep5V7Vyxtn91Mb8AWVjvka
C7h87+cvT5G8HTmTGsEtYaYu6ftynGN+UDjDk3vFfhCrrN50SRnXGiTzQgl40iAi
D7eqZhnIMLAEqQ==
-----END CERTIFICATE-----
Generated at Thu May 8 23:18:58 2025 by rpki-client