Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: yv2RIpY98cpXRHzjYgJApr1jK2jzyLg4loyZMBgmTXQ=
Subject key identifier: 6D:FB:1F:82:34:11:04:8F:D2:F9:D6:85:31:31:69:44:FA:FB:DD:84
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 0196B3A18461267D3618DADE052B5743D744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 0EE9
Signing time: Fri 09 May 2025 06:00:28 +0000
Manifest this update: Fri 09 May 2025 06:00:28 +0000
Manifest next update: Sat 10 May 2025 06:00:28 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: XZ4jnKMMdZTfztrw9WwadrrwGaMLjtee8iYuW7LZIZQ=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:84:61:26:7d:36:18:da:de:05:2b:57:43:d7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: May 9 06:00:28 2025 GMT
Not After : May 10 06:00:28 2025 GMT
Subject: CN=6dfb1f823411048fd2f9d68531316944fafbdd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:8a:80:24:65:23:df:95:b9:e3:62:10:a1:
ac:b3:cf:1f:5a:21:33:9a:47:55:02:9e:e1:e3:0a:
85:58:ca:62:58:63:dc:a7:95:20:0c:5f:cd:68:2b:
0b:ab:bc:45:91:63:e9:fc:db:62:08:15:51:d9:53:
8c:17:68:4a:4c:8f:74:bd:d6:ff:af:93:d8:35:54:
97:ff:bf:d7:45:e5:7b:b3:9a:3a:0d:f9:a3:9b:de:
fc:94:e3:66:28:31:a8:49:c0:7d:8b:a4:b8:67:92:
2b:cb:36:c4:52:22:49:7a:e5:c0:97:99:28:f1:50:
1a:18:7a:91:92:52:66:08:82:0b:ac:59:b7:97:76:
b0:3e:f4:e4:91:ee:8a:b9:f9:2b:a1:84:46:8a:82:
31:30:16:09:05:36:6e:25:c2:e0:45:02:a7:52:4c:
8c:cb:7f:b0:24:52:d4:21:e4:87:6f:0f:ad:c5:4c:
65:63:6c:d1:04:d4:c6:a5:46:27:e2:f1:6b:b8:0b:
90:b8:0a:88:61:f8:6d:aa:cf:52:ee:8d:7d:31:91:
d1:82:40:da:5c:58:b8:b0:05:96:66:9b:80:39:4f:
2e:18:2e:b2:aa:02:3e:75:a3:6b:22:6e:e3:84:c7:
0e:a7:8f:0f:f5:93:81:13:50:08:4a:7c:40:d8:aa:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FB:1F:82:34:11:04:8F:D2:F9:D6:85:31:31:69:44:FA:FB:DD:84
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7b:f5:d1:5b:37:73:26:42:fc:f6:92:15:35:ea:ea:10:ed:
96:e2:d4:2a:56:a2:98:bd:b9:7f:f3:bf:50:46:63:f8:97:be:
fb:76:fb:06:61:76:f7:b7:bd:ae:88:44:17:b3:dc:42:0c:33:
9b:92:43:82:63:1d:f1:16:df:96:f7:b8:b7:8f:89:77:78:0f:
b0:fc:ca:ec:74:bc:b5:52:8e:c7:55:e8:92:3f:6e:43:ed:bb:
8d:52:9f:64:88:fc:2d:b7:fb:3f:b7:2c:5b:7d:26:66:76:2c:
57:51:35:80:4e:54:f9:47:e0:31:3c:b0:b0:b9:e4:49:20:6c:
92:82:c0:d2:9c:02:24:3e:94:82:cd:31:a8:47:a6:fc:1e:90:
55:1a:06:1a:1c:77:f0:98:79:fd:4e:31:34:ff:cc:fa:fd:41:
7b:a8:77:cb:82:8f:bd:6d:c5:4e:dd:89:83:f9:5c:1e:ff:3e:
92:b7:29:6b:06:48:4c:b4:6e:ab:0f:1f:2d:f9:d7:f5:89:21:
83:93:55:c7:78:77:3d:74:b1:49:29:bb:02:30:ab:b3:a7:c6:
16:06:07:c8:ac:56:a6:43:0c:28:cb:82:d3:df:e0:4a:dc:7e:
d1:dd:4b:6a:50:70:2b:99:c9:c2:eb:b2:9c:7c:9c:0f:46:f8:
0f:75:f0:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazoYRhJn02GNreBStXQ9dEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDdjNmI1NmVmMWYyMzliMDI4ZWY0MjM3NWEyYTE3NjVi
YzA4YjgwHhcNMjUwNTA5MDYwMDI4WhcNMjUwNTEwMDYwMDI4WjAzMTEwLwYDVQQD
Eyg2ZGZiMWY4MjM0MTEwNDhmZDJmOWQ2ODUzMTMxNjk0NGZhZmJkZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09mKgCRlI9+VueNiEKGss88fWiEz
mkdVAp7h4wqFWMpiWGPcp5UgDF/NaCsLq7xFkWPp/NtiCBVR2VOMF2hKTI90vdb/
r5PYNVSX/7/XReV7s5o6Dfmjm978lONmKDGoScB9i6S4Z5IryzbEUiJJeuXAl5ko
8VAaGHqRklJmCIILrFm3l3awPvTkke6KufkroYRGioIxMBYJBTZuJcLgRQKnUkyM
y3+wJFLUIeSHbw+txUxlY2zRBNTGpUYn4vFruAuQuAqIYfhtqs9S7o19MZHRgkDa
XFi4sAWWZpuAOU8uGC6yqgI+daNrIm7jhMcOp48P9ZOBE1AISnxA2KoGBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG37H4I0EQSP0vnWhTExaUT6+92EMB8GA1UdIwQY
MBaAFPwHxrVu8fI5sCjvQjdaKhdlvAi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQt
Yzg3MDBhMTQ3NjFiLzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQtYzg3MDBhMTQ3NjFi
LzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3v10Vs3
cyZC/PaSFTXq6hDtluLUKlaimL25f/O/UEZj+Je++3b7BmF297e9rohEF7PcQgwz
m5JDgmMd8Rbflve4t4+Jd3gPsPzK7HS8tVKOx1Xokj9uQ+27jVKfZIj8Lbf7P7cs
W30mZnYsV1E1gE5U+UfgMTywsLnkSSBskoLA0pwCJD6Ugs0xqEem/B6QVRoGGhx3
8Jh5/U4xNP/M+v1Be6h3y4KPvW3FTt2Jg/lcHv8+krcpawZITLRuqw8fLfnX9Ykh
g5NVx3h3PXSxSSm7AjCrs6fGFgYHyKxWpkMMKMuC09/gStx+0d1LalBwK5nJwuuy
nHycD0b4D3Xw2w==
-----END CERTIFICATE-----
Generated at Fri May 9 07:49:22 2025 by rpki-client