Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: CVOV+SJA05pEs/+NxQuRQ3/lhCtgVcQ0OWVaz4eendw=
Subject key identifier: 91:35:47:67:91:FF:6E:40:83:65:09:A1:B4:44:C0:41:61:5D:46:64
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 0196CBAA364C6CE1CB66C2D293D5F1964815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 153F
Signing time: Tue 13 May 2025 22:00:51 +0000
Manifest this update: Tue 13 May 2025 22:00:51 +0000
Manifest next update: Wed 14 May 2025 22:00:51 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: gXdXNBZ9oWMmka+zITEkMyy0rV3do3OuVR6QQXc8aIk=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:36:4c:6c:e1:cb:66:c2:d2:93:d5:f1:96:48:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: May 13 22:00:51 2025 GMT
Not After : May 14 22:00:51 2025 GMT
Subject: CN=9135476791ff6e40836509a1b444c041615d4664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:80:00:ab:e7:cf:5a:81:57:e9:25:33:59:
6b:27:ce:5f:5c:c1:2f:3a:3e:99:18:a1:b2:87:82:
57:c7:e9:52:ff:30:27:c3:02:1a:c9:05:dc:57:3b:
17:87:36:fa:e6:c0:3a:f0:bb:50:73:c4:3a:ca:d6:
3d:e6:32:de:5a:9e:7b:3e:a8:7a:51:4e:c4:18:95:
06:f8:29:0b:fb:c1:1f:95:c4:02:c6:ff:6f:ee:00:
48:f9:76:99:04:43:cd:74:c2:b0:fa:37:af:4f:8c:
58:c5:66:53:3d:03:ae:fd:80:6a:77:cd:f5:3a:b9:
fe:10:ee:a7:f1:2f:81:3a:f1:38:15:5e:19:18:d2:
af:ec:ad:f0:1d:78:cb:0c:ec:32:e9:00:21:6a:c1:
9e:89:a5:dc:0e:db:d1:4e:97:3e:57:7d:f9:a9:f2:
00:f0:b5:fc:cc:b4:f2:1c:84:6d:74:97:ff:b7:11:
b7:d5:2a:b7:6c:d2:dc:ab:2d:26:96:e0:a1:52:17:
90:f7:45:b4:c2:58:b3:c0:69:a8:1d:40:85:80:24:
01:46:e8:49:49:53:ee:43:a6:54:19:7e:ff:27:02:
e6:5f:2b:0c:07:d0:e0:4f:35:6e:56:81:e2:80:9d:
96:60:8e:69:53:c6:11:3c:02:05:74:d8:3f:69:2f:
0d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:35:47:67:91:FF:6E:40:83:65:09:A1:B4:44:C0:41:61:5D:46:64
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c6:2b:dd:ad:b5:de:26:ed:88:11:7f:91:db:6e:9d:67:8c:
03:be:be:76:c6:a5:04:c1:4e:6a:a8:97:ad:2d:c2:51:81:3a:
ea:2c:ce:9f:82:be:d1:bf:00:c2:12:9d:93:94:9d:ea:b1:06:
42:49:97:25:9b:eb:8d:9e:49:41:02:e6:9b:24:1b:9a:f4:b1:
f5:8f:d1:11:2d:32:b5:a4:90:52:2b:f7:b8:a2:52:33:c9:f8:
c5:b2:6a:90:27:7d:e4:7a:c7:95:64:bb:4c:78:01:e3:e7:27:
fe:f6:f3:91:7d:64:6b:48:5c:b9:45:60:79:e2:f9:b7:fa:d0:
5b:fd:a8:d2:47:21:e2:a6:1a:57:d8:88:41:51:85:1d:91:69:
c5:0e:d3:28:b4:01:cb:08:aa:7e:69:5c:b0:d0:02:cf:8b:70:
f1:9f:ef:f5:ff:b1:7b:86:43:26:96:7a:06:97:10:91:f5:64:
57:eb:f2:5e:d5:dc:f6:db:86:40:41:32:32:96:64:27:64:d0:
4c:4b:7b:81:8e:d5:29:bf:f9:64:b4:2a:b0:d8:79:c1:78:6a:
0f:04:07:99:df:07:e7:4a:42:5d:44:f5:ff:85:ed:68:c5:1b:
94:67:04:5a:53:c0:62:ec:f8:94:8c:9c:64:73:ec:04:92:30:
39:9f:0d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLqjZMbOHLZsLSk9XxlkgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyY2M2OTE0NzZhNmU3ODk1YjBlNDU2MTE2NDQ0ZjkxOTM3
YmYwMWUwHhcNMjUwNTEzMjIwMDUxWhcNMjUwNTE0MjIwMDUxWjAzMTEwLwYDVQQD
Eyg5MTM1NDc2NzkxZmY2ZTQwODM2NTA5YTFiNDQ0YzA0MTYxNWQ0NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHaAAKvnz1qBV+klM1lrJ85fXMEv
Oj6ZGKGyh4JXx+lS/zAnwwIayQXcVzsXhzb65sA68LtQc8Q6ytY95jLeWp57Pqh6
UU7EGJUG+CkL+8EflcQCxv9v7gBI+XaZBEPNdMKw+jevT4xYxWZTPQOu/YBqd831
Orn+EO6n8S+BOvE4FV4ZGNKv7K3wHXjLDOwy6QAhasGeiaXcDtvRTpc+V335qfIA
8LX8zLTyHIRtdJf/txG31Sq3bNLcqy0mluChUheQ90W0wlizwGmoHUCFgCQBRuhJ
SVPuQ6ZUGX7/JwLmXysMB9DgTzVuVoHigJ2WYI5pU8YRPAIFdNg/aS8NeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE1R2eR/25Ag2UJobREwEFhXUZkMB8GA1UdIwQY
MBaAFALMaRR2pueJWw5FYRZET5GTe/AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYt
YmMxOTJiYjczMDI1LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYtYmMxOTJiYjczMDI1
LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8Yr3a21
3ibtiBF/kdtunWeMA76+dsalBMFOaqiXrS3CUYE66izOn4K+0b8AwhKdk5Sd6rEG
QkmXJZvrjZ5JQQLmmyQbmvSx9Y/RES0ytaSQUiv3uKJSM8n4xbJqkCd95HrHlWS7
THgB4+cn/vbzkX1ka0hcuUVgeeL5t/rQW/2o0kch4qYaV9iIQVGFHZFpxQ7TKLQB
ywiqfmlcsNACz4tw8Z/v9f+xe4ZDJpZ6BpcQkfVkV+vyXtXc9tuGQEEyMpZkJ2TQ
TEt7gY7VKb/5ZLQqsNh5wXhqDwQHmd8H50pCXUT1/4XtaMUblGcEWlPAYuz4lIyc
ZHPsBJIwOZ8N5A==
-----END CERTIFICATE-----
Generated at Tue May 13 23:43:02 2025 by rpki-client