Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
File: AlAYGVXVQR9QbrpCutueWqXdhEM.mft (raw, json)
Hash identifier: CfyApwnqhFKdAD0XGC/oJFaSUtQApWtD7Sh2r29mawA=
Subject key identifier: 6A:48:43:E3:5B:A7:34:43:8A:C6:CE:82:4F:D4:49:6B:DD:08:2A:2B
Authority key identifier: 02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
Certificate issuer: /CN=0250181955d5411f506eba42badb9e5aa5dd8443
Certificate serial: 0196A31C0D7D9C8FDF76A234B386A028A919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
Manifest number: 11D2
Signing time: Tue 06 May 2025 01:00:46 +0000
Manifest this update: Tue 06 May 2025 01:00:46 +0000
Manifest next update: Wed 07 May 2025 01:00:46 +0000
Files and hashes: 1: AlAYGVXVQR9QbrpCutueWqXdhEM.crl (hash: kW9+PVKuyqvcBbZaZhnhUWwsM7F4pxfoMPhk0JpP7Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1c:0d:7d:9c:8f:df:76:a2:34:b3:86:a0:28:a9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0250181955d5411f506eba42badb9e5aa5dd8443
Validity
Not Before: May 6 01:00:46 2025 GMT
Not After : May 7 01:00:46 2025 GMT
Subject: CN=6a4843e35ba734438ac6ce824fd4496bdd082a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:5e:79:86:44:31:b1:f4:4d:85:2f:95:9c:
73:ef:d8:27:0b:d8:e1:c6:e5:1d:bd:93:a7:6f:41:
7d:e6:b6:e9:f6:67:90:71:e6:d5:c7:0b:ae:b6:1e:
32:d9:3a:8f:44:61:55:d1:c4:0a:b7:3b:31:cd:d6:
ae:9e:9f:67:36:bf:e1:29:14:f4:af:21:d7:89:cd:
d3:04:d3:7f:86:08:b3:f9:e5:11:e6:ce:8f:9c:ca:
80:22:14:5c:be:dc:57:72:38:bb:90:7d:20:6c:f5:
5d:f9:fa:25:02:a2:84:bd:13:18:29:24:4b:88:01:
21:50:54:f1:c5:12:68:af:98:be:25:a0:d7:9e:16:
d7:14:b2:e5:fa:42:dc:fc:a8:b4:d6:bd:27:0f:d3:
1c:94:77:ce:e0:4e:5d:19:9e:cd:65:d1:3d:ad:48:
24:64:ae:1c:76:42:a3:0a:6f:19:7e:b0:9b:20:e7:
c8:dd:fa:2a:c4:08:a6:9e:92:00:ab:00:d5:b6:01:
8d:8a:bb:7b:c8:df:ab:79:1e:ac:a0:cd:56:e4:e4:
10:54:33:41:43:4c:f7:67:16:c1:f1:5a:0a:ac:20:
07:c1:a0:a7:55:18:c9:9b:fc:b0:e1:87:90:8b:4f:
91:8d:89:eb:a6:1d:c6:59:d8:b8:8a:a3:40:a1:6d:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:48:43:E3:5B:A7:34:43:8A:C6:CE:82:4F:D4:49:6B:DD:08:2A:2B
X509v3 Authority Key Identifier:
keyid:02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b2:ff:9d:4a:eb:1c:89:02:96:9c:01:fd:42:d3:f4:33:1b:
31:b0:7e:c2:f3:c9:b7:fb:d5:2f:2d:d1:35:91:56:81:bd:88:
01:f7:1c:7c:5b:c3:7f:52:3f:9a:1c:12:56:d0:54:be:9b:1a:
e1:00:3a:ab:71:ad:48:d0:d7:2f:a7:ab:5b:8e:f8:16:d7:df:
c6:be:79:49:b2:9e:21:62:d0:bc:41:f2:6d:85:2f:7e:14:14:
cf:bc:a9:cc:48:99:78:c7:14:54:7d:ae:2d:68:d5:49:82:7c:
51:7d:63:e5:01:95:79:2e:43:76:11:a5:8c:64:f3:05:6d:d3:
24:e7:5b:8d:58:29:53:2e:93:32:ab:aa:84:53:77:79:2e:77:
a6:a8:2f:e4:29:e4:34:08:97:39:11:16:03:d8:9c:d5:cf:49:
48:90:42:19:bb:e3:aa:b1:21:d5:ba:0c:4f:c7:39:5f:0e:ef:
0e:5b:f1:f0:fa:9a:42:30:5c:47:f4:5f:78:dd:06:ca:0d:ff:
4e:67:13:aa:8e:69:05:55:fa:c4:1e:e1:ee:82:c5:d0:9e:ed:
a3:34:c6:87:cc:d4:a5:c4:d7:10:f2:da:f8:a0:a3:ac:28:12:
6e:23:21:99:b4:ea:6b:23:09:92:cd:d7:a8:66:ab:09:ff:52:
dc:dc:64:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajHA19nI/fdqI0s4agKKkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTAxODE5NTVkNTQxMWY1MDZlYmE0MmJhZGI5ZTVhYTVk
ZDg0NDMwHhcNMjUwNTA2MDEwMDQ2WhcNMjUwNTA3MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg2YTQ4NDNlMzViYTczNDQzOGFjNmNlODI0ZmQ0NDk2YmRkMDgyYTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPZeeYZEMbH0TYUvlZxz79gnC9jh
xuUdvZOnb0F95rbp9meQcebVxwuuth4y2TqPRGFV0cQKtzsxzdaunp9nNr/hKRT0
ryHXic3TBNN/hgiz+eUR5s6PnMqAIhRcvtxXcji7kH0gbPVd+folAqKEvRMYKSRL
iAEhUFTxxRJor5i+JaDXnhbXFLLl+kLc/Ki01r0nD9MclHfO4E5dGZ7NZdE9rUgk
ZK4cdkKjCm8ZfrCbIOfI3foqxAimnpIAqwDVtgGNirt7yN+reR6soM1W5OQQVDNB
Q0z3ZxbB8VoKrCAHwaCnVRjJm/yw4YeQi0+RjYnrph3GWdi4iqNAoW3D7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpIQ+NbpzRDisbOgk/USWvdCCorMB8GA1UdIwQY
MBaAFAJQGBlV1UEfUG66Qrrbnlql3YRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxBWUdWWFZRUjlRYnJwQ3V0dWVXcVhkaEVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMTA3NzEtMDY2YS00NGIwLTkxZjAt
NTdmMjA5Zjk1MDZhLzEvQWxBWUdWWFZRUjlRYnJwQ3V0dWVXcVhkaEVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9iMTA3NzEtMDY2YS00NGIwLTkxZjAtNTdmMjA5Zjk1MDZh
LzEvQWxBWUdWWFZRUjlRYnJwQ3V0dWVXcVhkaEVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbL/nUrr
HIkClpwB/ULT9DMbMbB+wvPJt/vVLy3RNZFWgb2IAfccfFvDf1I/mhwSVtBUvpsa
4QA6q3GtSNDXL6erW474Ftffxr55SbKeIWLQvEHybYUvfhQUz7ypzEiZeMcUVH2u
LWjVSYJ8UX1j5QGVeS5DdhGljGTzBW3TJOdbjVgpUy6TMquqhFN3eS53pqgv5Cnk
NAiXOREWA9ic1c9JSJBCGbvjqrEh1boMT8c5Xw7vDlvx8PqaQjBcR/RfeN0Gyg3/
TmcTqo5pBVX6xB7h7oLF0J7tozTGh8zUpcTXEPLa+KCjrCgSbiMhmbTqayMJks3X
qGarCf9S3NxkVw==
-----END CERTIFICATE-----
Generated at Tue May 6 11:38:59 2025 by rpki-client