Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier: 0Aeo3Gxmf2zVJanSGt0WFav6TkmwExIa0GysVzyPHBQ=
Subject key identifier: BA:D8:A6:D7:8C:A9:BA:53:C3:66:E3:B8:AF:D8:86:69:61:F8:6F:C6
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 0196C49559E3F9FD7DBBA4DD57FB666A7151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number: 06B7
Signing time: Mon 12 May 2025 13:00:44 +0000
Manifest this update: Mon 12 May 2025 13:00:44 +0000
Manifest next update: Tue 13 May 2025 13:00:44 +0000
Files and hashes: 1: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: fDFwKMAOzkQYuXk6XKNCHYJp2x2fOwTw8xJc2lUSVjg=)
2: Jj1HHZ3M2IWqEVr2BMPp4ypDwcI.roa (hash: cgzJBvOGYHM0ug0D/FFBZa1jcNvWqnCErJy8L2Lko1U=)
3: cBlGJ5bNODNILYzK1oNt3QzAw7M.roa (hash: 7wWvEWZaVuq+kybNFqA4kbf75m0LmBkO8WIx9pDUDFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:59:e3:f9:fd:7d:bb:a4:dd:57:fb:66:6a:71:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: May 12 13:00:44 2025 GMT
Not After : May 13 13:00:44 2025 GMT
Subject: CN=bad8a6d78ca9ba53c366e3b8afd8866961f86fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:d3:e5:aa:f2:46:b5:01:8e:72:92:99:32:
a7:df:b9:27:34:80:d0:89:20:9c:68:a9:6c:ae:51:
09:f7:27:6a:de:ed:b3:79:60:0b:13:75:ca:55:66:
c1:f4:f4:6b:3f:32:80:4c:8b:36:9a:b9:be:6c:7c:
a5:ad:f4:11:5d:a1:c8:6b:df:fd:12:36:fa:af:38:
a0:e0:ca:be:a0:8e:56:b8:86:c3:7b:78:59:f6:03:
a3:26:10:0c:e8:15:cf:e9:00:d0:76:62:56:e6:01:
1b:4c:cb:66:30:db:5d:29:61:a9:48:94:9c:dc:62:
4a:83:d5:1c:5c:38:b7:f7:ba:07:d4:7a:0a:80:7e:
fe:f3:28:59:9a:5b:bb:a5:f6:e0:f1:fe:af:f8:74:
55:2f:88:0f:c3:35:7f:63:9a:64:e1:0c:99:75:78:
27:8d:87:21:78:bc:75:3f:4a:aa:c2:03:24:b1:3e:
36:07:f3:d0:2f:0a:2e:73:ba:e9:f1:66:60:82:cd:
86:6f:b8:fb:d2:5c:a0:2a:a6:b6:ed:41:ba:52:f1:
da:df:f3:d8:89:82:df:81:6a:11:91:7c:da:71:4e:
4d:e0:0a:71:02:d9:7e:78:b1:ba:df:ae:fa:0d:0f:
89:90:b4:24:3a:3d:ce:dc:8a:89:e0:fe:ec:a2:21:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:A6:D7:8C:A9:BA:53:C3:66:E3:B8:AF:D8:86:69:61:F8:6F:C6
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:5f:47:00:aa:a5:da:56:d8:6b:d1:47:28:a6:9a:56:15:3a:
26:22:1c:e4:30:66:65:97:2b:96:15:8f:64:28:49:9e:a4:f5:
79:fd:3f:2f:67:fe:db:bb:c5:06:a2:67:d7:8d:17:10:71:44:
03:3d:4f:d3:19:e3:63:0c:28:1e:c0:51:6c:b6:f0:79:e3:dc:
3c:70:36:ad:b5:e0:73:e3:09:bc:1f:79:c1:4e:d0:39:60:2b:
c4:0f:96:30:bb:27:76:f5:45:84:10:38:36:04:65:39:49:92:
6f:9e:fa:66:54:9f:22:7d:7f:a6:87:52:75:dc:c2:6e:83:13:
10:e0:95:d3:bf:66:74:96:15:d5:d6:d2:db:85:e1:88:bf:f3:
3b:54:ce:7c:2f:99:6f:12:d2:5b:f7:c1:3c:d7:00:3c:ed:73:
1d:74:09:c6:6a:8a:a9:dd:9a:b1:7d:b9:c7:b5:9f:f5:86:a6:
a2:23:98:17:06:32:bc:a8:af:4d:c9:8e:b3:35:dc:4f:aa:45:
7a:0f:bd:b5:80:f4:88:f0:6f:ce:13:f1:73:7a:de:57:03:a9:
69:ba:2a:2c:fd:cd:e6:7a:c3:ec:de:15:81:e1:e3:22:64:e4:
c6:bc:36:31:72:29:7f:1e:b9:00:a7:4f:76:79:33:64:61:cf:
27:b1:56:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbElVnj+f19u6TdV/tmanFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDAxZTAyNDk0MThiMzU3NTQ3MjY4ODI0ZjYyNDQ5MjVk
OGRiMzkwHhcNMjUwNTEyMTMwMDQ0WhcNMjUwNTEzMTMwMDQ0WjAzMTEwLwYDVQQD
EyhiYWQ4YTZkNzhjYTliYTUzYzM2NmUzYjhhZmQ4ODY2OTYxZjg2ZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlfT5aryRrUBjnKSmTKn37knNIDQ
iSCcaKlsrlEJ9ydq3u2zeWALE3XKVWbB9PRrPzKATIs2mrm+bHylrfQRXaHIa9/9
Ejb6rzig4Mq+oI5WuIbDe3hZ9gOjJhAM6BXP6QDQdmJW5gEbTMtmMNtdKWGpSJSc
3GJKg9UcXDi397oH1HoKgH7+8yhZmlu7pfbg8f6v+HRVL4gPwzV/Y5pk4QyZdXgn
jYcheLx1P0qqwgMksT42B/PQLwouc7rp8WZggs2Gb7j70lygKqa27UG6UvHa3/PY
iYLfgWoRkXzacU5N4ApxAtl+eLG63676DQ+JkLQkOj3O3IqJ4P7soiEIxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrYpteMqbpTw2bjuK/Yhmlh+G/GMB8GA1UdIwQY
MBaAFNdAHgJJQYs1dUcmiCT2JEkl2Ns5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjIt
NTA3ODkxMzk1NDE3LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjItNTA3ODkxMzk1NDE3
LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4F9HAKql
2lbYa9FHKKaaVhU6JiIc5DBmZZcrlhWPZChJnqT1ef0/L2f+27vFBqJn140XEHFE
Az1P0xnjYwwoHsBRbLbweePcPHA2rbXgc+MJvB95wU7QOWArxA+WMLsndvVFhBA4
NgRlOUmSb576ZlSfIn1/podSddzCboMTEOCV079mdJYV1dbS24XhiL/zO1TOfC+Z
bxLSW/fBPNcAPO1zHXQJxmqKqd2asX25x7Wf9YamoiOYFwYyvKivTcmOszXcT6pF
eg+9tYD0iPBvzhPxc3reVwOpaboqLP3N5nrD7N4VgeHjImTkxrw2MXIpfx65AKdP
dnkzZGHPJ7FWTw==
-----END CERTIFICATE-----
Generated at Mon May 12 22:10:18 2025 by rpki-client