Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: 7+fb8W5K786SmVnGnfocoXvvA/OygQ7GKGGIenZHA3E=
Subject key identifier: 04:86:A5:F6:0A:B2:A9:CD:35:E0:1F:86:EE:3A:09:71:D6:04:F2:29
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 0196DAE5CCD67C9AAA65A758FBE39522BD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 0113
Signing time: Fri 16 May 2025 21:00:15 +0000
Manifest this update: Fri 16 May 2025 21:00:15 +0000
Manifest next update: Sat 17 May 2025 21:00:15 +0000
Files and hashes: 1: EUMDV_UDCQxt2Q9g7Ql8VQtC-w4.roa (hash: 4NT4MxUUdEci/yqv7me2MCFqkfGu8GvZgQ5eOHEJEB0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: vEgQp8CfUEoJYC3+7lz8EEr5A9Llqej583KZqqIIXdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:e5:cc:d6:7c:9a:aa:65:a7:58:fb:e3:95:22:bd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: May 16 21:00:15 2025 GMT
Not After : May 17 21:00:15 2025 GMT
Subject: CN=0486a5f60ab2a9cd35e01f86ee3a0971d604f229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:6d:19:b4:1b:c1:ab:58:75:11:91:4b:a9:
85:05:31:9c:a0:ed:f1:d2:c0:08:1d:c1:92:f1:35:
5d:65:b1:79:5f:fa:8d:9b:3b:20:6c:0e:1d:cd:1c:
6c:96:70:31:c4:59:a9:2b:16:90:9f:58:71:db:cc:
96:4a:92:02:2c:86:61:13:52:bc:25:4d:75:6d:72:
3a:2d:c2:4b:10:7f:4f:4b:ef:5e:f8:a4:db:65:6b:
d5:16:2d:04:24:88:30:70:d1:7a:b6:2e:d7:6d:95:
35:77:39:fe:f5:89:a7:d7:f2:2b:c6:a8:9e:3d:67:
84:af:9c:4f:76:4d:d3:83:89:f7:da:29:e9:a7:bb:
19:f0:c3:9f:63:8b:fe:2e:ea:f3:21:9f:93:ed:84:
52:72:d5:b3:d7:93:60:08:e6:93:30:79:3b:13:5c:
bb:c5:d6:5c:ae:84:ea:19:91:3c:39:73:af:2b:41:
03:ff:17:ef:4c:9f:e4:9e:b7:51:cd:e3:5f:37:9e:
30:31:75:28:e1:d7:ed:4a:d2:83:4f:90:2e:a7:63:
69:c1:3e:34:36:57:90:7e:a4:74:ee:2d:54:ba:9f:
8a:7e:c9:d0:a0:9c:23:66:e2:7f:df:6f:88:a4:b7:
8a:9e:81:55:93:2e:73:f7:48:46:48:8f:6f:9f:b2:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:86:A5:F6:0A:B2:A9:CD:35:E0:1F:86:EE:3A:09:71:D6:04:F2:29
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:41:b6:af:fd:a6:8a:42:12:0a:57:18:e2:d2:1e:8d:c9:f9:
03:ab:34:3b:e6:40:16:25:46:8e:98:13:2c:4b:06:75:4c:a8:
be:f6:d2:2d:ee:5b:78:d8:21:ab:7b:a1:50:e9:55:41:d4:d6:
ca:9d:ac:3a:87:48:d4:84:00:c6:b4:e1:d6:c4:aa:09:15:09:
ab:76:e2:76:0d:35:4e:60:f7:35:85:45:a4:b8:38:13:6c:43:
58:d6:1b:01:3c:b0:d3:88:61:d7:e0:39:c3:89:3f:ef:78:9a:
82:8b:fe:db:cc:e8:cc:aa:23:26:ef:45:35:71:6c:72:17:38:
28:bc:1e:59:74:16:63:fb:2a:6e:19:e6:86:da:6b:fd:69:0a:
76:45:79:f2:e3:03:c3:89:38:21:75:4c:d0:2a:96:18:da:bf:
cc:67:7c:0f:2b:fa:b1:17:f2:5f:70:38:22:ec:a4:84:22:5d:
a6:85:2f:ce:57:8d:8e:d6:2f:ef:14:ca:2a:de:54:d7:aa:22:
42:5a:c2:7f:a7:c8:ae:c6:4f:d3:cc:ab:6e:35:b7:9d:67:87:
66:3c:d8:96:5a:cb:2f:f3:d8:af:96:da:1a:23:59:95:f3:de:
50:1a:88:08:9b:56:68:5e:9b:05:a1:9d:d4:fa:61:d2:10:83:
fe:a5:d4:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZba5czWfJqqZadY++OVIr0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTlkYjgxYjQ5YWJhMTJiMTgxMGNiM2EyOTllZWU0NjMy
ZGQ3MjAwHhcNMjUwNTE2MjEwMDE1WhcNMjUwNTE3MjEwMDE1WjAzMTEwLwYDVQQD
EygwNDg2YTVmNjBhYjJhOWNkMzVlMDFmODZlZTNhMDk3MWQ2MDRmMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycxtGbQbwatYdRGRS6mFBTGcoO3x
0sAIHcGS8TVdZbF5X/qNmzsgbA4dzRxslnAxxFmpKxaQn1hx28yWSpICLIZhE1K8
JU11bXI6LcJLEH9PS+9e+KTbZWvVFi0EJIgwcNF6ti7XbZU1dzn+9Ymn1/Irxqie
PWeEr5xPdk3Tg4n32inpp7sZ8MOfY4v+LurzIZ+T7YRSctWz15NgCOaTMHk7E1y7
xdZcroTqGZE8OXOvK0ED/xfvTJ/knrdRzeNfN54wMXUo4dftStKDT5Aup2NpwT40
NleQfqR07i1Uup+KfsnQoJwjZuJ/32+IpLeKnoFVky5z90hGSI9vn7LJ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASGpfYKsqnNNeAfhu46CXHWBPIpMB8GA1UdIwQY
MBaAFGgZ24G0mroSsYEMs6KZ7uRjLdcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUt
OTAzNWIwODM2MjQzLzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUtOTAzNWIwODM2MjQz
LzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkG2r/2m
ikISClcY4tIejcn5A6s0O+ZAFiVGjpgTLEsGdUyovvbSLe5beNghq3uhUOlVQdTW
yp2sOodI1IQAxrTh1sSqCRUJq3bidg01TmD3NYVFpLg4E2xDWNYbATyw04hh1+A5
w4k/73iagov+28zozKojJu9FNXFschc4KLweWXQWY/sqbhnmhtpr/WkKdkV58uMD
w4k4IXVM0CqWGNq/zGd8Dyv6sRfyX3A4IuykhCJdpoUvzleNjtYv7xTKKt5U16oi
QlrCf6fIrsZP08yrbjW3nWeHZjzYllrLL/PYr5baGiNZlfPeUBqICJtWaF6bBaGd
1Pph0hCD/qXUGg==
-----END CERTIFICATE-----
Generated at Sat May 17 05:24:50 2025 by rpki-client