Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: LJB+MUipiNo+0wTNDF0/7MU3UpwcY9ezF89GqNsfmUU=
Subject key identifier: 11:E7:E0:18:1E:66:59:F7:17:5E:ED:F4:14:B3:6D:D1:9D:EB:B7:BA
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 0196BB242B6E66F2F8776CD5D614BE29F41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0608
Signing time: Sat 10 May 2025 17:00:31 +0000
Manifest this update: Sat 10 May 2025 17:00:31 +0000
Manifest next update: Sun 11 May 2025 17:00:31 +0000
Files and hashes: 1: 8SJ_LBREWOMigQGrbOSpoED6efU.roa (hash: 62y0nmOlXA0+Z/ArGW7+jXU+JPJ93QdKSCA9WPq34/4=)
2: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: Qh1rC7XoPOD7DAvth+iJNEY4WJw0Il1yHIX+KKt68Mc=)
3: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:2b:6e:66:f2:f8:77:6c:d5:d6:14:be:29:f4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: May 10 17:00:31 2025 GMT
Not After : May 11 17:00:31 2025 GMT
Subject: CN=11e7e0181e6659f7175eedf414b36dd19debb7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:aa:73:89:d3:4d:4b:5c:d6:20:2e:fb:88:
dd:94:06:5a:6e:7d:5b:65:83:13:01:9a:80:e7:cb:
7d:f0:ce:79:77:00:1f:c0:9f:8c:c9:97:b7:bc:34:
a5:61:45:b8:e7:26:c4:c8:fb:6e:a7:1d:24:f0:01:
e6:f6:55:bf:87:42:80:bc:99:6c:cb:d4:27:e6:ff:
ba:57:03:07:eb:24:f2:8c:59:58:32:0c:59:9f:ac:
e5:0f:7c:a3:35:e2:31:a5:b8:8e:c3:6a:17:87:4a:
2b:15:ec:0a:ce:f3:3b:af:d0:1c:8a:3a:ed:a5:cc:
5d:21:b7:b5:c9:22:ac:66:a7:9a:2f:45:05:b8:65:
87:a9:2d:94:76:a3:a3:ea:46:cb:d9:38:2f:83:e0:
d9:17:8e:18:93:82:94:bc:b3:75:ec:af:dc:00:60:
b9:9f:87:6a:e8:6c:54:ea:6c:47:cd:a1:17:40:fd:
48:b8:2b:bb:24:02:02:26:2b:f0:87:18:5d:06:4c:
6f:99:f4:3f:e3:69:af:f8:b4:b4:4f:33:9a:8e:1c:
95:65:34:ab:cf:5c:46:ae:e6:06:07:b1:09:b5:86:
0b:83:d3:4a:8d:f8:f4:73:71:cf:7b:f1:10:fd:46:
0d:13:26:17:a0:14:47:8b:6e:70:b8:ce:79:e0:53:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:E0:18:1E:66:59:F7:17:5E:ED:F4:14:B3:6D:D1:9D:EB:B7:BA
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:35:f0:98:78:3f:1e:39:07:ea:b7:16:64:ea:50:b4:68:18:
a0:b1:ea:cd:55:66:1d:55:77:91:bd:c5:76:07:ac:69:1c:58:
95:ac:e1:7b:55:bb:d2:ef:3c:ae:6f:e4:dc:5a:65:07:65:93:
00:43:5a:61:bb:e1:84:75:4f:b3:e8:02:27:9a:f2:72:bf:64:
33:e2:e4:45:da:cf:b1:87:e1:ee:73:50:ab:7e:96:64:6a:63:
c7:19:2d:33:11:ef:f4:bf:f8:15:89:92:bb:6b:e3:79:e1:c6:
d1:8e:22:a6:b3:00:cd:06:6e:5c:54:3d:0d:b5:08:96:e0:5d:
74:05:ba:9d:04:8e:e6:06:34:23:60:6e:df:9d:73:5e:ee:b5:
4d:1f:66:57:93:3b:3e:b9:a9:9e:34:f5:aa:ca:d0:5d:47:60:
d2:9b:c7:60:8e:27:03:55:30:c7:ba:f2:2f:44:d1:c6:41:d5:
46:f6:77:2c:37:93:df:47:45:14:2b:43:ed:55:3d:ce:53:a2:
57:34:c6:bc:89:74:8f:41:c8:2a:d6:d9:6b:6b:cd:fe:84:3e:
0e:42:26:68:e1:fa:28:b9:86:3d:94:6d:82:55:b6:bd:07:c3:
c6:f2:66:27:ee:5c:69:3b:96:7a:22:9c:3f:56:18:83:96:19:
17:1a:1f:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7JCtuZvL4d2zV1hS+KfQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkYjFkY2YwYzI0MjllMTIxNTE2YWUyNzkyZmMzMjUz
ZmQzYmEwHhcNMjUwNTEwMTcwMDMxWhcNMjUwNTExMTcwMDMxWjAzMTEwLwYDVQQD
EygxMWU3ZTAxODFlNjY1OWY3MTc1ZWVkZjQxNGIzNmRkMTlkZWJiN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4mqc4nTTUtc1iAu+4jdlAZabn1b
ZYMTAZqA58t98M55dwAfwJ+MyZe3vDSlYUW45ybEyPtupx0k8AHm9lW/h0KAvJls
y9Qn5v+6VwMH6yTyjFlYMgxZn6zlD3yjNeIxpbiOw2oXh0orFewKzvM7r9Acijrt
pcxdIbe1ySKsZqeaL0UFuGWHqS2UdqOj6kbL2Tgvg+DZF44Yk4KUvLN17K/cAGC5
n4dq6GxU6mxHzaEXQP1IuCu7JAICJivwhxhdBkxvmfQ/42mv+LS0TzOajhyVZTSr
z1xGruYGB7EJtYYLg9NKjfj0c3HPe/EQ/UYNEyYXoBRHi25wuM554FPwvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHn4BgeZln3F17t9BSzbdGd67e6MB8GA1UdIwQY
MBaAFAMk2x3PDCQp4SFRauJ5L8MlP9O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUt
NGQyYzRkYTcyMWQ0LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUtNGQyYzRkYTcyMWQ0
LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzXwmHg/
HjkH6rcWZOpQtGgYoLHqzVVmHVV3kb3FdgesaRxYlazhe1W70u88rm/k3FplB2WT
AENaYbvhhHVPs+gCJ5rycr9kM+LkRdrPsYfh7nNQq36WZGpjxxktMxHv9L/4FYmS
u2vjeeHG0Y4iprMAzQZuXFQ9DbUIluBddAW6nQSO5gY0I2Bu351zXu61TR9mV5M7
PrmpnjT1qsrQXUdg0pvHYI4nA1Uwx7ryL0TRxkHVRvZ3LDeT30dFFCtD7VU9zlOi
VzTGvIl0j0HIKtbZa2vN/oQ+DkImaOH6KLmGPZRtglW2vQfDxvJmJ+5caTuWeiKc
P1YYg5YZFxofeg==
-----END CERTIFICATE-----
Generated at Sun May 11 02:09:13 2025 by rpki-client