Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File: AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier: JLjzVU8DqwEtLjxjymarVxXP5HbVWHlcG7pedf5ldXQ=
Subject key identifier: DC:E7:34:D6:6F:DC:FC:73:50:3D:43:F6:01:31:0B:FA:CE:0D:15:92
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 0196B3339936543A68644D76B2F07B35C6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 04:00:25 +0000
Manifest this update: Fri 09 May 2025 04:00:25 +0000
Manifest next update: Sat 10 May 2025 04:00:25 +0000
Files and hashes: 1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: Rbi91LTAVn/NlgN4fGe7q9OOBhaAtZ368cUNV5TkgHQ=)
2: V2K-oZleXeUaxCNtSI8GJz8R-T8.roa (hash: BfQ/+c4yu8OqgDpQuVge6IJ1WfNKM140JuABCwOq8WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:99:36:54:3a:68:64:4d:76:b2:f0:7b:35:c6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: May 9 04:00:25 2025 GMT
Not After : May 10 04:00:25 2025 GMT
Subject: CN=dce734d66fdcfc73503d43f601310bface0d1592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:68:10:8b:e3:10:d1:c5:d7:cd:6b:df:4a:
63:e1:1e:30:0b:a6:12:ca:8c:c6:f4:95:88:d9:5f:
45:d0:f5:90:a9:b9:a3:34:57:0d:0b:3a:23:b5:f6:
33:c2:c7:1c:5f:43:f3:90:e0:af:68:29:ad:69:07:
b7:a0:46:8a:61:54:ba:68:1c:fb:b8:83:3f:6e:97:
46:95:e1:9a:99:af:13:c5:44:64:ee:96:eb:64:c7:
bd:e6:d9:fc:f0:37:e2:4a:9f:77:af:04:d4:40:51:
6d:91:ae:2e:6f:1f:38:3b:59:67:01:64:bb:f5:60:
ec:45:dd:22:f9:e6:33:50:7b:d9:4a:39:33:9d:a0:
b8:ad:8d:c0:d9:df:40:34:b1:7b:f4:55:72:aa:ae:
27:c3:94:cb:78:15:bc:c3:5d:5d:15:b5:d2:2a:12:
73:e0:a3:99:c9:05:b8:cc:fd:36:3a:e2:07:03:49:
db:1b:06:ae:a9:21:bf:dd:46:fc:13:d3:84:43:5e:
48:c7:f0:09:23:04:5b:7a:89:cf:5d:52:9b:af:e8:
13:78:6f:da:d1:b7:26:67:4c:5a:10:8c:ad:29:ec:
9d:87:2c:b2:ce:bb:19:f3:0f:1e:a1:fd:60:d4:6a:
05:e9:25:c5:16:69:cc:5e:8c:52:b4:6c:d1:68:a8:
b4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E7:34:D6:6F:DC:FC:73:50:3D:43:F6:01:31:0B:FA:CE:0D:15:92
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:db:ed:2d:71:10:28:35:87:2b:b0:66:34:47:99:83:19:74:
26:3b:62:28:b1:cb:db:82:ef:6a:c6:c5:01:a6:fe:07:f3:d7:
eb:90:7c:87:83:ea:2a:a9:76:36:44:56:50:6c:c9:00:1c:51:
78:4a:5f:80:1b:ff:76:28:34:8c:f9:db:31:c9:aa:ba:fd:22:
8b:e6:c1:4c:f9:75:45:64:a9:05:0d:44:b9:cd:54:2a:93:6f:
5a:dc:a5:a8:ae:34:6a:4f:bd:be:fc:5f:38:d2:ef:a7:73:25:
0b:42:d5:90:0a:0c:30:50:5c:af:33:e5:8f:f7:6c:c4:ea:e3:
ba:64:39:9d:d0:d3:5c:60:7d:c5:6e:d4:c5:b7:c2:4a:a4:21:
84:24:a5:a2:74:d2:54:22:39:f3:16:3b:b2:94:8e:d8:eb:69:
fe:d3:4d:60:95:de:af:47:e8:d1:12:66:c2:a4:e2:51:58:2f:
2b:73:54:f2:5c:96:50:de:91:4e:67:35:23:17:44:fb:75:92:
3f:18:e8:8b:7a:a6:7d:a3:0f:bf:61:f1:0d:5c:27:f0:80:16:
71:64:0a:96:12:94:15:5f:d7:3e:03:f2:39:0c:01:28:9d:04:
ad:77:a7:f4:59:93:58:c0:b8:42:09:d6:5a:7f:4c:52:67:af:
0f:92:63:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazM5k2VDpoZE12svB7Nca/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjg3MzUxODY5N2MyM2U5YzNlMzdhNjQ2YmFkMTIxMjM1
YWQ3NDQwHhcNMjUwNTA5MDQwMDI1WhcNMjUwNTEwMDQwMDI1WjAzMTEwLwYDVQQD
EyhkY2U3MzRkNjZmZGNmYzczNTAzZDQzZjYwMTMxMGJmYWNlMGQxNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCtoEIvjENHF181r30pj4R4wC6YS
yozG9JWI2V9F0PWQqbmjNFcNCzojtfYzwsccX0PzkOCvaCmtaQe3oEaKYVS6aBz7
uIM/bpdGleGama8TxURk7pbrZMe95tn88DfiSp93rwTUQFFtka4ubx84O1lnAWS7
9WDsRd0i+eYzUHvZSjkznaC4rY3A2d9ANLF79FVyqq4nw5TLeBW8w11dFbXSKhJz
4KOZyQW4zP02OuIHA0nbGwauqSG/3Ub8E9OEQ15Ix/AJIwRbeonPXVKbr+gTeG/a
0bcmZ0xaEIytKeydhyyyzrsZ8w8eof1g1GoF6SXFFmnMXoxStGzRaKi0gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNznNNZv3PxzUD1D9gExC/rODRWSMB8GA1UdIwQY
MBaAFAMoc1GGl8I+nD43pka60SEjWtdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmIt
MTI3MDA4OTI0ZWVkLzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmItMTI3MDA4OTI0ZWVk
LzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNvtLXEQ
KDWHK7BmNEeZgxl0JjtiKLHL24LvasbFAab+B/PX65B8h4PqKql2NkRWUGzJABxR
eEpfgBv/dig0jPnbMcmquv0ii+bBTPl1RWSpBQ1Euc1UKpNvWtylqK40ak+9vvxf
ONLvp3MlC0LVkAoMMFBcrzPlj/dsxOrjumQ5ndDTXGB9xW7UxbfCSqQhhCSlonTS
VCI58xY7spSO2Otp/tNNYJXer0fo0RJmwqTiUVgvK3NU8lyWUN6RTmc1IxdE+3WS
Pxjoi3qmfaMPv2HxDVwn8IAWcWQKlhKUFV/XPgPyOQwBKJ0ErXen9FmTWMC4QgnW
Wn9MUmevD5JjDg==
-----END CERTIFICATE-----
Generated at Fri May 9 07:44:49 2025 by rpki-client