Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: fvjkm7By3r7huYh+HuOluiK85aHQSC8g6R5+oSoBbWo=
Subject key identifier: 63:84:22:96:6F:AE:94:CF:EA:1D:DF:D1:BD:1F:E9:42:0E:F3:2D:07
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 01969DF58C14B84F93F1265BA6F565453A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 01:00:37 +0000
Manifest this update: Mon 05 May 2025 01:00:37 +0000
Manifest next update: Tue 06 May 2025 01:00:37 +0000
Files and hashes: 1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: +xcrq3sggw+AqgNeEff/3ZAYE+AVf8J7i13LtgNitfg=)
2: LXtV1SOyemLIBBZI_VMF85otBtE.roa (hash: GHDun7QlntuZhx8oP1im/VJfuudrY5drYDWrntuirXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:8c:14:b8:4f:93:f1:26:5b:a6:f5:65:45:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: May 5 01:00:37 2025 GMT
Not After : May 6 01:00:37 2025 GMT
Subject: CN=638422966fae94cfea1ddfd1bd1fe9420ef32d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:d6:4d:5d:9c:dd:b6:f4:ee:78:74:43:05:
37:40:e2:d8:59:cb:48:c8:11:7f:77:ff:b3:6e:0d:
0a:64:31:99:11:cc:dd:d7:25:09:3d:8f:1b:f5:9b:
c1:23:34:0d:bd:a2:5e:17:f8:18:74:1a:5e:41:13:
d2:8e:29:8d:95:58:ea:2b:49:21:11:f2:7c:36:91:
2e:37:47:39:79:53:24:28:b6:85:56:12:61:95:4b:
a6:fb:cb:82:e5:1c:7a:76:d2:05:05:3b:4e:bf:4a:
cc:c9:6e:5f:e3:2d:26:f3:6f:94:78:62:42:29:61:
c1:6b:a0:d1:37:66:23:15:49:af:ac:e7:ce:5c:d5:
b5:c1:49:63:b4:1d:1d:c7:2d:77:f2:ed:e4:ac:6a:
22:82:e8:73:11:d6:c8:a6:10:d7:b1:ef:86:d6:0d:
77:0d:66:4b:16:37:3a:d1:79:c9:34:44:f7:f5:e5:
cf:9e:22:7c:0d:df:09:72:44:f5:fa:1f:1e:7f:b7:
72:c7:aa:05:47:e8:00:c0:72:af:59:61:0a:f6:2a:
a2:7c:73:91:68:a6:f8:19:b0:53:b8:40:76:bf:85:
06:b4:a2:fe:2b:70:28:ad:c9:ec:9d:f7:45:1f:ef:
26:3e:1a:73:4e:51:57:34:36:59:f1:7a:05:d4:07:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:22:96:6F:AE:94:CF:EA:1D:DF:D1:BD:1F:E9:42:0E:F3:2D:07
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a3:a4:b0:07:f0:d6:13:e4:76:ac:7d:87:d9:bf:44:41:96:
07:cd:14:10:3d:cf:1e:a4:33:e3:6c:b3:d0:95:76:c2:55:8c:
c0:b2:72:9e:8c:d4:27:b7:ae:57:7d:8f:65:da:ea:fe:a9:f7:
2e:ea:da:81:31:a1:7e:05:be:0c:05:de:17:8f:03:3b:c5:96:
19:3f:58:0a:5e:7d:d3:11:86:3c:c9:1e:bd:fd:37:35:43:51:
c9:6c:d6:68:8f:01:4a:40:54:69:04:dc:11:57:b3:b5:d0:b1:
3d:cf:f9:94:bb:07:35:31:7f:0e:52:f9:01:dd:c6:45:5a:8b:
c9:34:e5:49:e4:d1:17:c1:99:26:ef:cd:d7:e1:2d:68:00:6b:
da:d2:9a:04:5c:88:51:98:a4:25:d1:d9:d1:79:2b:29:ab:a5:
d7:8e:81:53:5e:40:06:24:91:f4:89:a2:cd:b1:87:8e:c4:b7:
7f:18:53:67:e0:90:40:a5:a9:3b:d8:67:0f:69:7e:7e:3a:1b:
e0:02:0b:c1:49:a9:6a:d0:ed:b4:62:3d:29:77:9e:64:9a:a9:
fc:ff:49:be:05:99:d3:53:d6:79:48:f3:3a:ea:c5:64:2f:27:
bd:74:e3:3b:48:8b:a0:a2:a8:57:ed:d7:87:a9:d7:5c:ef:5f:
b1:f1:ec:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9YwUuE+T8SZbpvVlRTqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzODIwZTk2NGRmZDNkMjgxNDIwYWZkYTIwY2U5NDllNjBk
NGNjNDQwHhcNMjUwNTA1MDEwMDM3WhcNMjUwNTA2MDEwMDM3WjAzMTEwLwYDVQQD
Eyg2Mzg0MjI5NjZmYWU5NGNmZWExZGRmZDFiZDFmZTk0MjBlZjMyZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyULWTV2c3bb07nh0QwU3QOLYWctI
yBF/d/+zbg0KZDGZEczd1yUJPY8b9ZvBIzQNvaJeF/gYdBpeQRPSjimNlVjqK0kh
EfJ8NpEuN0c5eVMkKLaFVhJhlUum+8uC5Rx6dtIFBTtOv0rMyW5f4y0m82+UeGJC
KWHBa6DRN2YjFUmvrOfOXNW1wUljtB0dxy138u3krGoiguhzEdbIphDXse+G1g13
DWZLFjc60XnJNET39eXPniJ8Dd8JckT1+h8ef7dyx6oFR+gAwHKvWWEK9iqifHOR
aKb4GbBTuEB2v4UGtKL+K3AorcnsnfdFH+8mPhpzTlFXNDZZ8XoF1Adl0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOEIpZvrpTP6h3f0b0f6UIO8y0HMB8GA1UdIwQY
MBaAFAOCDpZN/T0oFCCv2iDOlJ5g1MxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yZWQ1ZGEtODVjZi00NDlmLWJkODUt
NjI4YjBmYmNkMGI2LzEvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yZWQ1ZGEtODVjZi00NDlmLWJkODUtNjI4YjBmYmNkMGI2
LzEvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6OksAfw
1hPkdqx9h9m/REGWB80UED3PHqQz42yz0JV2wlWMwLJynozUJ7euV32PZdrq/qn3
LuragTGhfgW+DAXeF48DO8WWGT9YCl590xGGPMkevf03NUNRyWzWaI8BSkBUaQTc
EVeztdCxPc/5lLsHNTF/DlL5Ad3GRVqLyTTlSeTRF8GZJu/N1+EtaABr2tKaBFyI
UZikJdHZ0XkrKaul146BU15ABiSR9ImizbGHjsS3fxhTZ+CQQKWpO9hnD2l+fjob
4AILwUmpatDttGI9KXeeZJqp/P9JvgWZ01PWeUjzOurFZC8nvXTjO0iLoKKoV+3X
h6nXXO9fsfHsPQ==
-----END CERTIFICATE-----
Generated at Mon May 5 11:04:10 2025 by rpki-client