Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: zMsT5MB3icIi7oyYn3GuSoRxp6fQDEV6IQeBQxP+BJs=
Subject key identifier: 09:C4:26:CA:6D:9F:8D:73:2D:29:23:38:CE:03:8B:E7:8E:12:7D:27
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 0196C45E73FDEFFA9C5E97EAD0CF4DD4C1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 85
Signing time: Mon 12 May 2025 12:00:46 +0000
Manifest this update: Mon 12 May 2025 12:00:46 +0000
Manifest next update: Tue 13 May 2025 12:00:46 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: lQEXxyPcjpvKOPCvKEmkAIzy5Fsbs9SzYUxb5Fm+Dpw=)
2: z96_ZJgr9Ouwu3H857DM3qPVUxI.roa (hash: XUjlH+TkzMgkjT2OPVskc/V8eVbqCCBWMoR0ix6MWrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:73:fd:ef:fa:9c:5e:97:ea:d0:cf:4d:d4:c1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: May 12 12:00:46 2025 GMT
Not After : May 13 12:00:46 2025 GMT
Subject: CN=09c426ca6d9f8d732d292338ce038be78e127d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:8b:13:d8:98:ba:38:7d:df:66:7c:99:06:
64:28:45:4a:a4:cd:d5:79:2a:4f:e3:ce:ef:3d:65:
17:be:64:f6:1d:48:9e:ce:53:d5:b8:c4:e9:2f:46:
0b:5a:80:39:ae:d6:23:02:59:a2:81:b9:6e:f6:fd:
54:65:9e:d9:fc:71:98:f3:a3:96:88:17:01:37:6e:
5e:e8:79:79:cb:f4:34:cc:8e:28:8c:7c:7d:cc:e0:
52:17:c4:2f:00:63:b6:53:42:cc:a8:fa:3a:1a:11:
3d:a0:40:fb:d8:0b:82:2f:df:24:b1:72:d6:31:a8:
73:89:a8:c9:58:11:13:52:08:3a:66:1d:bc:19:eb:
dd:79:dd:37:6b:d5:88:2a:7c:68:12:a6:c1:0f:1d:
cd:12:e1:81:2e:03:62:fe:0c:32:88:18:78:4e:34:
fa:54:11:9f:70:f8:a9:29:97:f5:29:f3:0d:87:1d:
37:cd:dc:fe:0d:59:0b:16:c3:6e:49:82:71:43:28:
3e:c8:d2:85:af:07:60:12:be:48:d0:45:2e:21:5a:
d1:7d:3f:32:41:37:41:6f:d9:68:5c:0b:a0:cc:9c:
da:32:d3:61:76:f5:44:23:ca:42:ef:1e:66:5d:db:
37:d4:89:14:6f:50:c8:3a:fd:02:cc:3f:48:ac:43:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:26:CA:6D:9F:8D:73:2D:29:23:38:CE:03:8B:E7:8E:12:7D:27
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e4:f3:93:42:2b:2f:bb:c9:10:23:c9:78:bd:f6:8f:6f:de:
5e:64:6b:4f:1d:60:79:02:5c:93:45:fc:ad:57:0b:f8:d4:14:
c4:ca:f6:6b:90:c5:af:62:50:9f:97:61:a4:a5:99:3f:52:cf:
a4:5e:4a:b6:8f:a6:eb:36:c5:7f:27:5b:4d:03:86:44:dc:0e:
1f:e0:dd:d6:01:4f:ca:e9:8b:9d:2d:08:f4:1b:49:87:87:6a:
ec:47:57:16:91:b0:c8:94:0f:8c:c1:49:11:c7:bf:92:06:6e:
cc:40:ae:de:d7:43:70:e7:4a:2e:3d:8d:73:34:17:c4:8c:e6:
45:af:ac:18:86:b0:be:e5:a1:cc:30:dd:17:1b:a9:de:07:f3:
37:2c:43:6f:c9:e3:cd:46:c8:ec:82:96:1a:48:a9:32:ea:27:
92:ad:be:ff:81:77:22:bf:a0:14:00:e1:10:3b:4a:3f:15:07:
cd:8d:b1:cc:d0:b2:91:32:a9:1c:72:d4:67:50:16:73:8b:d6:
1a:56:45:9b:a3:f7:03:a0:ff:62:3d:46:fd:13:1d:70:a9:46:
1c:90:b6:4c:98:0b:74:2e:50:2a:d8:6e:b3:a8:30:26:89:71:
c4:a7:a4:b7:8d:c5:0b:29:e2:b0:ce:49:04:9b:b4:92:f8:a7:
44:2b:e5:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEXnP97/qcXpfq0M9N1MGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTI4M2U2MjM1ZWRiMjVlOGI1NDc0OWI2Mjg1ZjVlM2Vm
ODUzNzEwHhcNMjUwNTEyMTIwMDQ2WhcNMjUwNTEzMTIwMDQ2WjAzMTEwLwYDVQQD
EygwOWM0MjZjYTZkOWY4ZDczMmQyOTIzMzhjZTAzOGJlNzhlMTI3ZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XmLE9iYujh932Z8mQZkKEVKpM3V
eSpP487vPWUXvmT2HUiezlPVuMTpL0YLWoA5rtYjAlmigblu9v1UZZ7Z/HGY86OW
iBcBN25e6Hl5y/Q0zI4ojHx9zOBSF8QvAGO2U0LMqPo6GhE9oED72AuCL98ksXLW
MahziajJWBETUgg6Zh28Gevded03a9WIKnxoEqbBDx3NEuGBLgNi/gwyiBh4TjT6
VBGfcPipKZf1KfMNhx03zdz+DVkLFsNuSYJxQyg+yNKFrwdgEr5I0EUuIVrRfT8y
QTdBb9loXAugzJzaMtNhdvVEI8pC7x5mXds31IkUb1DIOv0CzD9IrEOtQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnEJsptn41zLSkjOM4Di+eOEn0nMB8GA1UdIwQY
MBaAFANSg+YjXtsl6LVHSbYoX14++FNxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgt
MTFiOTI5MDY0MDZkLzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgtMTFiOTI5MDY0MDZk
LzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOTzk0Ir
L7vJECPJeL32j2/eXmRrTx1geQJck0X8rVcL+NQUxMr2a5DFr2JQn5dhpKWZP1LP
pF5Kto+m6zbFfydbTQOGRNwOH+Dd1gFPyumLnS0I9BtJh4dq7EdXFpGwyJQPjMFJ
Ece/kgZuzECu3tdDcOdKLj2NczQXxIzmRa+sGIawvuWhzDDdFxup3gfzNyxDb8nj
zUbI7IKWGkipMuonkq2+/4F3Ir+gFADhEDtKPxUHzY2xzNCykTKpHHLUZ1AWc4vW
GlZFm6P3A6D/Yj1G/RMdcKlGHJC2TJgLdC5QKthus6gwJolxxKekt43FCynisM5J
BJu0kvinRCvlDQ==
-----END CERTIFICATE-----
Generated at Mon May 12 19:31:38 2025 by rpki-client