Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: W+CDakJqqBIjsvzNiQlEobji3dAUs94VnvwcotcXq0k=
Subject key identifier: 1F:1A:C6:D1:D3:4B:6E:75:35:6C:F1:CF:9C:73:95:EA:7C:80:D0:64
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 0196B9DA62164050F9C78E40200F7FFB7AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 1430
Signing time: Sat 10 May 2025 11:00:18 +0000
Manifest this update: Sat 10 May 2025 11:00:18 +0000
Manifest next update: Sun 11 May 2025 11:00:18 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: NbyV7oaQBLiG3/qTLtS3dcC4LT3VhM4ql41I5VseXWo=)
2: cMnqdtCxCnyUSWOfUxTVBWPspak.roa (hash: OOJ4v4cc4LujDvo5fdL7b0ZauPjg9CekPa/sj+wo+LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:62:16:40:50:f9:c7:8e:40:20:0f:7f:fb:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: May 10 11:00:18 2025 GMT
Not After : May 11 11:00:18 2025 GMT
Subject: CN=1f1ac6d1d34b6e75356cf1cf9c7395ea7c80d064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:4f:18:2d:08:5f:46:2e:0b:88:d7:f3:db:
56:46:48:84:ff:22:bf:91:ed:c9:52:e5:ac:ab:8a:
60:32:05:fe:39:8b:98:8b:f0:27:7d:bb:de:a9:a1:
ce:d9:39:a5:e6:d6:20:05:97:f6:17:16:57:7e:b9:
b3:5f:81:1b:77:2b:01:86:51:9e:64:a2:fc:5f:0c:
70:5b:1c:2b:b0:09:e8:20:48:a8:f3:66:91:6f:06:
95:88:9e:a3:df:e8:c0:b1:84:da:83:60:cd:ef:4e:
e0:a4:ec:f4:69:f1:2d:15:56:9a:6b:f2:d0:70:90:
5a:a1:2a:e4:ec:bd:75:66:64:08:41:81:b2:2b:5f:
90:06:aa:62:e9:52:31:55:3e:95:2b:b6:d2:f5:13:
71:12:a6:1d:ee:2f:96:3a:d2:c0:f4:e4:29:17:e7:
83:bb:e8:41:af:36:56:9f:b2:3e:7e:1e:e4:d5:94:
84:07:e7:fc:27:9a:35:28:cc:04:f5:c3:9b:31:77:
e4:9e:9c:65:40:42:5a:c6:01:19:31:02:53:06:e1:
db:03:53:25:8e:3b:3a:65:93:f0:c8:2f:38:1d:35:
f0:99:04:a7:6a:76:a2:ad:c0:95:cb:fc:0d:86:30:
26:6c:2c:f1:be:95:c5:30:77:44:b6:48:b8:01:2f:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1A:C6:D1:D3:4B:6E:75:35:6C:F1:CF:9C:73:95:EA:7C:80:D0:64
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:43:9c:04:40:0d:94:c9:fa:f6:88:67:ba:9d:6b:70:60:67:
33:68:d5:b4:d1:3d:ad:69:f1:b3:4e:06:81:ea:45:e3:80:50:
46:ec:72:00:87:b1:85:0f:61:d0:04:92:37:7a:35:20:cc:6f:
ee:e0:50:11:36:e1:94:99:0b:43:c3:e7:c6:82:ed:8a:09:c1:
70:6c:fb:53:47:a1:27:5c:a9:6b:f8:9b:d5:be:49:c8:83:eb:
c4:a9:ee:96:41:e1:46:7f:e1:9e:49:84:75:25:44:6b:5e:8e:
d6:1e:d3:03:67:db:a1:96:76:a0:7e:b8:aa:3e:eb:60:ea:f5:
07:94:3c:46:a6:fd:a5:2c:8d:d7:95:f7:91:9e:55:f5:6f:1a:
34:36:92:ee:95:b1:3d:1e:1f:7c:6a:68:ad:3e:8a:cd:62:1d:
0c:82:5f:0b:db:c6:07:2e:f6:04:15:5e:73:8d:5a:b5:4b:83:
00:51:58:96:0b:43:e3:69:54:3f:f4:d2:d7:9e:e5:ba:98:e3:
4e:a3:a9:7a:c5:c8:7e:fd:57:ee:e7:9c:8f:d3:a9:a5:ea:46:
cd:11:47:5f:81:d9:d8:56:23:77:34:f8:35:04:25:00:6d:6d:
be:33:b5:4b:b5:61:ad:25:28:cf:bb:6e:5c:d0:5a:72:cd:c9:
c5:71:d8:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa52mIWQFD5x45AIA9/+3rTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjA2M2VkMmUwYTI2NzRiYzQ3MTAxMDE4OWZjNzdhZGIz
MWMxN2YwHhcNMjUwNTEwMTEwMDE4WhcNMjUwNTExMTEwMDE4WjAzMTEwLwYDVQQD
EygxZjFhYzZkMWQzNGI2ZTc1MzU2Y2YxY2Y5YzczOTVlYTdjODBkMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUtPGC0IX0YuC4jX89tWRkiE/yK/
ke3JUuWsq4pgMgX+OYuYi/AnfbveqaHO2Tml5tYgBZf2FxZXfrmzX4EbdysBhlGe
ZKL8XwxwWxwrsAnoIEio82aRbwaViJ6j3+jAsYTag2DN707gpOz0afEtFVaaa/LQ
cJBaoSrk7L11ZmQIQYGyK1+QBqpi6VIxVT6VK7bS9RNxEqYd7i+WOtLA9OQpF+eD
u+hBrzZWn7I+fh7k1ZSEB+f8J5o1KMwE9cObMXfknpxlQEJaxgEZMQJTBuHbA1Ml
jjs6ZZPwyC84HTXwmQSnanaircCVy/wNhjAmbCzxvpXFMHdEtki4AS+//wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8axtHTS251NWzxz5xzlep8gNBkMB8GA1UdIwQY
MBaAFGjwY+0uCiZ0vEcQEBifx3rbMcF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MWI3M2ItZjI2NS00M2Q0LWI1YjMt
OTQ2ZmRhZmUyZWM2LzEvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MWI3M2ItZjI2NS00M2Q0LWI1YjMtOTQ2ZmRhZmUyZWM2
LzEvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkOcBEAN
lMn69ohnup1rcGBnM2jVtNE9rWnxs04GgepF44BQRuxyAIexhQ9h0ASSN3o1IMxv
7uBQETbhlJkLQ8PnxoLtignBcGz7U0ehJ1ypa/ib1b5JyIPrxKnulkHhRn/hnkmE
dSVEa16O1h7TA2fboZZ2oH64qj7rYOr1B5Q8Rqb9pSyN15X3kZ5V9W8aNDaS7pWx
PR4ffGporT6KzWIdDIJfC9vGBy72BBVec41atUuDAFFYlgtD42lUP/TS157lupjj
TqOpesXIfv1X7uecj9OppepGzRFHX4HZ2FYjdzT4NQQlAG1tvjO1S7VhrSUoz7tu
XNBacs3JxXHYaA==
-----END CERTIFICATE-----
Generated at Sat May 10 13:29:33 2025 by rpki-client