Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier: o9gjlbb7RkWNmc8+XwYCd70UW21+NEBzIFVd97+UdCg=
Subject key identifier: 1A:64:65:3B:17:2D:7F:7E:28:F8:7D:A2:4F:98:F0:41:B8:95:8B:30
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 0196C0142EC1F969658324AF602B81D45363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 16:01:10 +0000
Manifest this update: Sun 11 May 2025 16:01:10 +0000
Manifest next update: Mon 12 May 2025 16:01:10 +0000
Files and hashes: 1: 5kpPrp0PsQaLwN-0f4M5ORyJaIo.roa (hash: sRLtBcmB7NMgyGt87xrsnTDd/kvjgxEDyhMytt8u1mY=)
2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: FUXRuwzlARAv4uzjX2ID7B+2ZYZ3db20LwmAL2ZGnvw=)
3: gAJowYToxXMF7RF5vvsMOYJumzQ.roa (hash: YtzVb80baHUBbI1OM11pUhHuNDyKujzR+uDb+twlqdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:2e:c1:f9:69:65:83:24:af:60:2b:81:d4:53:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: May 11 16:01:10 2025 GMT
Not After : May 12 16:01:10 2025 GMT
Subject: CN=1a64653b172d7f7e28f87da24f98f041b8958b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:e1:15:3b:de:ad:7d:cd:1e:9c:57:3e:d3:
f4:a2:a1:ba:57:75:79:dd:c2:30:72:0f:d9:79:ee:
8b:57:e6:de:76:9a:c1:ea:5e:95:04:bc:58:2a:f2:
82:ed:ff:c4:ac:7e:58:df:98:b4:c3:e8:0d:05:7b:
d0:48:3e:ab:87:c3:c1:c3:70:ec:04:6c:86:a7:4a:
72:a4:16:5b:b2:87:61:82:2e:08:47:3f:00:ee:ed:
e7:5c:d3:7b:e9:48:36:47:80:2e:dd:2b:1c:53:be:
71:58:c6:2a:5b:3f:a5:d1:25:13:df:3d:e2:1d:4d:
89:07:b7:31:6e:b4:82:ca:7c:f9:38:1e:97:46:35:
e3:6c:13:16:0e:c4:3a:c1:d4:f8:38:32:cc:c5:77:
74:05:3f:0b:06:6b:93:5b:d9:2c:3c:ce:aa:e3:66:
4e:3f:8d:da:34:98:f1:b3:80:72:b8:11:50:7e:50:
90:e5:b7:3a:81:f6:29:1d:ff:2b:fb:f5:dd:a4:96:
e2:d5:bd:ad:82:c9:14:f3:c6:d5:d8:2c:d5:1f:2f:
f2:f9:68:96:26:9c:0e:19:0d:58:91:88:d2:6a:3d:
2e:d2:e7:b5:10:ca:0d:dd:3f:b2:f7:08:7e:a9:e3:
fa:0f:63:6b:8b:bd:0f:ca:4e:c9:25:de:e6:2b:f0:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:65:3B:17:2D:7F:7E:28:F8:7D:A2:4F:98:F0:41:B8:95:8B:30
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4b:ec:e6:87:73:2b:b1:6a:50:de:4c:01:e1:0d:c8:2b:78:
94:d0:8a:cd:15:eb:5b:ee:d1:3a:1d:f0:60:f1:0c:35:39:f9:
4a:08:79:93:93:9f:80:6a:1d:fe:8a:f6:36:4a:cd:ae:20:c6:
4c:73:69:70:56:e1:84:8b:7e:ce:a6:f8:39:2f:43:66:ac:ef:
8b:9d:9a:04:a7:31:aa:13:15:bb:77:67:e4:5c:17:bc:a3:7e:
e5:df:e9:b8:27:c4:e1:cd:c2:88:d8:66:14:22:93:55:8a:23:
c3:be:92:5e:9b:a9:7b:f0:80:bd:d9:c3:3b:38:9b:de:0a:f3:
61:84:b2:eb:eb:94:18:ef:8b:b4:94:b2:69:6d:15:94:cf:00:
d4:79:40:27:19:ee:db:06:e9:31:0f:0e:68:6d:16:e9:f7:94:
1f:e7:c1:49:d5:d5:57:05:ff:78:de:b2:18:53:e5:ef:4e:eb:
a1:53:79:df:8b:14:55:b3:a2:e7:83:9f:54:71:d6:52:49:1c:
34:91:06:46:70:cd:12:14:9a:9b:ac:23:df:46:71:41:af:71:
05:65:2f:d4:24:66:86:64:35:b1:90:2b:d0:6c:15:89:09:5c:
b4:d1:d2:58:d7:ea:2c:da:e3:ea:01:27:f9:57:02:a8:ee:9a:
ee:23:54:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAFC7B+WllgySvYCuB1FNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTc5NzIyYzNhMGNiMGMzMzUxYzU5NWRmYTNkN2VhZDgx
ZjE2YmYwHhcNMjUwNTExMTYwMTEwWhcNMjUwNTEyMTYwMTEwWjAzMTEwLwYDVQQD
EygxYTY0NjUzYjE3MmQ3ZjdlMjhmODdkYTI0Zjk4ZjA0MWI4OTU4YjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK3hFTverX3NHpxXPtP0oqG6V3V5
3cIwcg/Zee6LV+bedprB6l6VBLxYKvKC7f/ErH5Y35i0w+gNBXvQSD6rh8PBw3Ds
BGyGp0pypBZbsodhgi4IRz8A7u3nXNN76Ug2R4Au3SscU75xWMYqWz+l0SUT3z3i
HU2JB7cxbrSCynz5OB6XRjXjbBMWDsQ6wdT4ODLMxXd0BT8LBmuTW9ksPM6q42ZO
P43aNJjxs4ByuBFQflCQ5bc6gfYpHf8r+/XdpJbi1b2tgskU88bV2CzVHy/y+WiW
JpwOGQ1YkYjSaj0u0ue1EMoN3T+y9wh+qeP6D2Nri70Pyk7JJd7mK/DgkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpkZTsXLX9+KPh9ok+Y8EG4lYswMB8GA1UdIwQY
MBaAFGhXlyLDoMsMM1HFld+j1+rYHxa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mYTgzNmMtMWNkMy00YmE3LWI1OTgt
OWY1NTk3YjU2Yjc2LzEvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9mYTgzNmMtMWNkMy00YmE3LWI1OTgtOWY1NTk3YjU2Yjc2
LzEvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUvs5odz
K7FqUN5MAeENyCt4lNCKzRXrW+7ROh3wYPEMNTn5Sgh5k5OfgGod/or2NkrNriDG
THNpcFbhhIt+zqb4OS9DZqzvi52aBKcxqhMVu3dn5FwXvKN+5d/puCfE4c3CiNhm
FCKTVYojw76SXpupe/CAvdnDOzib3grzYYSy6+uUGO+LtJSyaW0VlM8A1HlAJxnu
2wbpMQ8OaG0W6feUH+fBSdXVVwX/eN6yGFPl707roVN534sUVbOi54OfVHHWUkkc
NJEGRnDNEhSam6wj30ZxQa9xBWUv1CRmhmQ1sZAr0GwViQlctNHSWNfqLNrj6gEn
+VcCqO6a7iNUqg==
-----END CERTIFICATE-----
Generated at Sun May 11 17:23:49 2025 by rpki-client