Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier: UxDzb7iHZWsErngLVjMBIUswutCXH4W9SE2RGtVKDhk=
Subject key identifier: 05:67:ED:99:A0:CB:11:E4:C4:1C:30:73:FE:7B:CE:58:1C:7F:73:F4
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 0196CF4F6FE2E0B179E01394901BAB4C97E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 15:00:11 +0000
Manifest this update: Wed 14 May 2025 15:00:11 +0000
Manifest next update: Thu 15 May 2025 15:00:11 +0000
Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: H5QPj8+2r9p7WF2smz4iPMOih5Ujjt487tQV//UpxOg=)
2: YU4fCfmpK-fuEOwSolTjGJvHl-Q.roa (hash: jEvy+I1e+1GaLBXiJtzyH21Rx3ZNEpokSAtj3mt7uI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:4f:6f:e2:e0:b1:79:e0:13:94:90:1b:ab:4c:97:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: May 14 15:00:11 2025 GMT
Not After : May 15 15:00:11 2025 GMT
Subject: CN=0567ed99a0cb11e4c41c3073fe7bce581c7f73f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:5e:29:50:af:e4:5a:56:f1:79:62:bb:06:
07:e9:e1:ea:98:85:91:9d:49:8f:42:53:3e:a9:b8:
30:73:ac:46:8b:87:ab:ff:1f:d3:9b:5e:9d:2c:63:
20:76:74:2e:d2:e5:f8:f5:7d:a3:97:6c:eb:5f:e2:
30:f8:c9:28:2a:49:dd:16:93:d9:57:4a:72:b9:f6:
24:ba:67:40:fa:4f:94:aa:67:d4:49:75:2b:bb:f6:
6e:fc:b0:3a:ff:92:ce:19:50:a8:d8:80:97:1c:62:
fe:57:a1:76:c3:c5:f3:1e:dc:89:b0:b0:72:8c:ab:
c6:be:4b:62:75:d2:4e:b4:d2:f8:30:f3:83:ea:b2:
fa:44:b7:2d:2f:64:d2:45:1d:b1:d8:63:b9:a8:9b:
87:c5:48:0a:a6:0b:8e:fe:e8:25:ab:5c:f2:15:8c:
a3:e8:11:9a:60:14:61:24:e4:f6:f2:c3:e2:e1:14:
0d:f6:2e:cd:28:30:da:f9:dc:84:f9:f8:bb:8b:21:
01:ec:fe:1f:cc:9e:3f:5a:68:12:e1:83:de:66:23:
86:41:b2:77:60:c4:c0:60:68:69:ea:d1:a6:55:b0:
7e:2e:41:97:9c:9d:f9:af:79:e4:79:b8:8b:60:ca:
62:b7:da:5c:13:64:ec:4c:66:b1:3c:9c:f8:fd:a6:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:67:ED:99:A0:CB:11:E4:C4:1C:30:73:FE:7B:CE:58:1C:7F:73:F4
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:89:60:31:e2:e8:95:1c:df:7f:75:13:5c:f2:bd:fb:ae:bb:
af:bc:19:1c:62:49:bd:d8:90:d0:28:95:ac:12:d1:c7:63:67:
77:ec:66:43:fe:a3:70:c1:f5:6f:3b:e3:a9:83:9e:77:e2:d5:
1c:36:d8:99:72:4d:30:17:02:57:4d:f0:74:d3:53:26:34:aa:
43:20:d2:3a:57:f6:98:f2:30:b2:1e:e4:7e:e0:1a:69:ed:62:
ca:86:0a:70:f4:74:6c:61:fd:99:62:52:71:6c:31:04:15:77:
b2:22:a3:92:de:2e:07:d5:79:4e:8a:4a:83:88:fe:08:63:f5:
b3:aa:22:1a:86:2d:4c:f1:87:41:2b:11:53:7e:3c:db:88:32:
e8:d8:8b:fc:9c:06:17:60:88:8d:07:b2:a2:1d:91:30:28:e6:
ce:94:94:b6:10:eb:ce:b7:a0:8e:25:1d:a2:27:dd:ae:b8:ef:
ef:bc:38:4d:02:c3:0e:60:bc:03:07:f3:4e:8e:5e:e3:e5:86:
19:ae:50:69:0a:12:e5:78:f3:fd:87:c4:96:c1:39:78:b6:15:
82:2f:9d:11:42:41:51:8c:49:ad:36:60:94:db:a9:be:8a:bd:
b9:fc:1c:ad:a6:12:36:18:3e:4b:43:7d:3a:e7:94:aa:ce:c5:
da:05:b6:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPT2/i4LF54BOUkBurTJfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNWYwZDQ0YjIyMWY0YjExYzg5ZGI2ODk2OWY5N2MzYzcx
NTQ5MDYwHhcNMjUwNTE0MTUwMDExWhcNMjUwNTE1MTUwMDExWjAzMTEwLwYDVQQD
EygwNTY3ZWQ5OWEwY2IxMWU0YzQxYzMwNzNmZTdiY2U1ODFjN2Y3M2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fReKVCv5FpW8XliuwYH6eHqmIWR
nUmPQlM+qbgwc6xGi4er/x/Tm16dLGMgdnQu0uX49X2jl2zrX+Iw+MkoKkndFpPZ
V0pyufYkumdA+k+UqmfUSXUru/Zu/LA6/5LOGVCo2ICXHGL+V6F2w8XzHtyJsLBy
jKvGvktiddJOtNL4MPOD6rL6RLctL2TSRR2x2GO5qJuHxUgKpguO/uglq1zyFYyj
6BGaYBRhJOT28sPi4RQN9i7NKDDa+dyE+fi7iyEB7P4fzJ4/WmgS4YPeZiOGQbJ3
YMTAYGhp6tGmVbB+LkGXnJ35r3nkebiLYMpit9pcE2TsTGaxPJz4/aZxdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVn7ZmgyxHkxBwwc/57zlgcf3P0MB8GA1UdIwQY
MBaAFABfDUSyIfSxHInbaJafl8PHFUkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEt
ZWVlNTBkZDkxOTNjLzEvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEtZWVlNTBkZDkxOTNj
LzEvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4lgMeLo
lRzff3UTXPK9+667r7wZHGJJvdiQ0CiVrBLRx2Nnd+xmQ/6jcMH1bzvjqYOed+LV
HDbYmXJNMBcCV03wdNNTJjSqQyDSOlf2mPIwsh7kfuAaae1iyoYKcPR0bGH9mWJS
cWwxBBV3siKjkt4uB9V5TopKg4j+CGP1s6oiGoYtTPGHQSsRU34824gy6NiL/JwG
F2CIjQeyoh2RMCjmzpSUthDrzregjiUdoifdrrjv77w4TQLDDmC8AwfzTo5e4+WG
Ga5QaQoS5Xjz/YfElsE5eLYVgi+dEUJBUYxJrTZglNupvoq9ufwcraYSNhg+S0N9
OueUqs7F2gW2PQ==
-----END CERTIFICATE-----
Generated at Wed May 14 19:10:37 2025 by rpki-client