Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: LXEZCGb0efetguTK74F9rbtIvyKgDF7th7SRer80HWU=
Subject key identifier: 18:EC:2C:69:A2:86:AE:C7:77:7F:E1:3A:F4:80:85:C9:49:A3:87:44
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 0196ABE8155C896B2D5A58CD3FC97C775EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 0DF4
Signing time: Wed 07 May 2025 18:00:35 +0000
Manifest this update: Wed 07 May 2025 18:00:35 +0000
Manifest next update: Thu 08 May 2025 18:00:35 +0000
Files and hashes: 1: 7M-OD2BZKTGFt1pigwcJKxVnusA.roa (hash: 75qUp+vt+nvqE7SylHu29lyZut/MWc3ge7gcStv53+s=)
2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: XJa/BbgzS0M3JhfYbX9KJmunz2qqRqIbwPym7WT1B04=)
3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e8:15:5c:89:6b:2d:5a:58:cd:3f:c9:7c:77:5e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: May 7 18:00:35 2025 GMT
Not After : May 8 18:00:35 2025 GMT
Subject: CN=18ec2c69a286aec7777fe13af48085c949a38744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:d3:90:a4:9e:32:c5:5d:59:29:ae:be:95:
a4:71:0d:f0:b5:af:d6:a4:5b:b4:2b:80:b5:72:57:
d9:13:1d:ce:6b:bd:97:66:09:fe:e8:4f:a5:a8:99:
1b:89:95:b1:00:33:3b:d2:27:2f:bf:68:bc:59:a9:
14:73:0b:99:1f:33:d7:4d:41:f0:36:c3:e7:76:8f:
66:8d:4e:cc:e0:ce:89:32:93:ed:70:1b:a3:5d:2a:
52:0f:6b:d7:43:4e:97:b1:14:71:b9:33:4c:17:f8:
f3:5f:e1:51:6f:d7:20:be:24:3a:bd:56:e7:9c:95:
f9:90:6c:2c:d4:54:ce:f6:d2:f8:19:43:78:7a:2d:
03:23:dc:e9:7f:33:10:f7:3b:57:10:8c:af:ec:71:
1a:4c:da:e3:79:76:3c:59:96:c3:e9:57:a8:05:36:
69:ce:5c:9d:a4:8f:27:47:52:2e:1c:3f:0a:8d:d4:
4e:5c:f7:5f:c7:67:1f:03:5c:15:03:30:71:8e:e1:
8e:3c:a5:17:2e:21:d1:80:b3:1a:53:82:7c:68:8c:
4c:03:0c:c5:66:58:3f:d6:e0:3a:f4:29:51:63:ba:
81:37:c9:c9:a9:bb:e1:d6:32:3c:83:de:ea:01:8a:
84:a0:87:f3:9f:1c:8b:5e:fb:d7:5b:50:47:3c:5d:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EC:2C:69:A2:86:AE:C7:77:7F:E1:3A:F4:80:85:C9:49:A3:87:44
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:92:55:e3:66:ab:7c:63:e5:93:60:55:a3:39:e0:db:10:12:
db:27:c6:ff:cb:45:04:0a:69:33:ec:84:c9:d6:6d:cd:95:35:
71:0a:1d:14:f7:2c:31:24:c3:7c:4e:b0:45:b3:fc:c9:a2:42:
a3:b9:5f:de:3e:a1:fb:21:eb:95:f8:25:43:48:06:49:0e:ec:
2f:6c:8d:71:6d:97:9e:85:38:ac:4b:58:84:d6:1d:11:0a:74:
8d:5c:5b:b3:81:c4:a8:2d:be:77:e3:67:0e:e0:3d:67:d0:4e:
c7:e1:4f:03:95:7a:20:9d:5d:cb:6f:54:1b:86:dc:87:96:d4:
36:42:a7:92:41:b7:85:25:bb:ed:9a:5e:b0:29:f5:31:e5:48:
11:75:f9:39:03:b9:58:95:91:5e:c8:f3:a4:2d:af:16:14:a6:
22:0f:05:d4:cd:e5:1b:07:85:f9:5b:14:40:66:83:64:ad:63:
0b:6e:cd:c4:f1:d1:cd:90:05:7e:8e:ec:4d:98:c2:14:ae:e7:
8d:f8:9e:e7:ca:5d:68:75:9a:a9:9a:09:ae:19:0f:92:41:34:
2f:f5:14:ac:72:7e:b0:5a:9d:29:5e:44:76:ca:df:b2:42:6e:
4d:c8:d1:9a:7d:a0:ca:4e:51:5e:7a:93:70:23:de:af:86:5c:
10:29:29:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZar6BVciWstWljNP8l8d17HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw
ZjczYzYwHhcNMjUwNTA3MTgwMDM1WhcNMjUwNTA4MTgwMDM1WjAzMTEwLwYDVQQD
EygxOGVjMmM2OWEyODZhZWM3Nzc3ZmUxM2FmNDgwODVjOTQ5YTM4NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUHTkKSeMsVdWSmuvpWkcQ3wta/W
pFu0K4C1clfZEx3Oa72XZgn+6E+lqJkbiZWxADM70icvv2i8WakUcwuZHzPXTUHw
NsPndo9mjU7M4M6JMpPtcBujXSpSD2vXQ06XsRRxuTNMF/jzX+FRb9cgviQ6vVbn
nJX5kGws1FTO9tL4GUN4ei0DI9zpfzMQ9ztXEIyv7HEaTNrjeXY8WZbD6VeoBTZp
zlydpI8nR1IuHD8KjdROXPdfx2cfA1wVAzBxjuGOPKUXLiHRgLMaU4J8aIxMAwzF
Zlg/1uA69ClRY7qBN8nJqbvh1jI8g97qAYqEoIfznxyLXvvXW1BHPF0L9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjsLGmihq7Hd3/hOvSAhclJo4dEMB8GA1UdIwQY
MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt
Y2JiM2Q2MzVkODJmLzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm
LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpJV42ar
fGPlk2BVozng2xAS2yfG/8tFBAppM+yEydZtzZU1cQodFPcsMSTDfE6wRbP8yaJC
o7lf3j6h+yHrlfglQ0gGSQ7sL2yNcW2XnoU4rEtYhNYdEQp0jVxbs4HEqC2+d+Nn
DuA9Z9BOx+FPA5V6IJ1dy29UG4bch5bUNkKnkkG3hSW77ZpesCn1MeVIEXX5OQO5
WJWRXsjzpC2vFhSmIg8F1M3lGweF+VsUQGaDZK1jC27NxPHRzZAFfo7sTZjCFK7n
jfie58pdaHWaqZoJrhkPkkE0L/UUrHJ+sFqdKV5EdsrfskJuTcjRmn2gyk5RXnqT
cCPer4ZcECkptg==
-----END CERTIFICATE-----
Generated at Wed May 7 22:33:31 2025 by rpki-client