Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: +3b1qc3djEcxig2PXuHTBhkj/UrJFw7GOUp9QYZnr/s=
Subject key identifier: EC:BE:AD:80:F1:CB:B7:92:66:D9:BC:84:7F:15:22:34:8C:C7:C6:B9
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 0196BDB775D74C38308D0E65BDCCCEAD00E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 05:00:39 +0000
Manifest this update: Sun 11 May 2025 05:00:39 +0000
Manifest next update: Mon 12 May 2025 05:00:39 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: fYvkTJfoO//p2Ldw7uBN4UMPjeg0AzxVDgpFbjzAj0k=)
2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:75:d7:4c:38:30:8d:0e:65:bd:cc:ce:ad:00:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: May 11 05:00:39 2025 GMT
Not After : May 12 05:00:39 2025 GMT
Subject: CN=ecbead80f1cbb79266d9bc847f1522348cc7c6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:69:c9:fd:2f:2a:57:9c:80:77:0e:6d:8d:
29:85:ac:d2:aa:83:7e:f3:6d:c7:14:37:52:db:86:
35:4b:ab:e1:c0:ec:19:00:1f:2f:e8:44:83:44:ff:
0c:9f:53:30:69:92:21:0a:3f:9f:36:b6:ad:8f:21:
60:b5:15:dc:93:e9:b6:3a:dd:b2:68:14:a6:39:65:
e7:ed:e7:9d:30:e9:d7:b7:73:ef:a1:55:16:be:c3:
62:76:69:51:6f:eb:cb:68:45:28:ef:49:71:70:f0:
46:87:9c:5d:62:2b:57:75:a5:69:53:23:11:a1:aa:
fb:a4:da:19:eb:ff:a8:cf:08:5e:a0:b0:8f:1b:d9:
a1:0c:7f:b2:f2:f9:ab:f7:03:06:51:08:5e:3b:8d:
97:46:92:c0:7f:42:d6:f9:f8:33:62:d4:32:d0:9a:
f4:0d:de:70:f5:e2:4d:84:b1:60:33:80:b9:51:c8:
ac:c7:28:d9:7f:9b:f0:dc:e9:28:4d:96:ae:fb:16:
1a:d4:2f:53:7b:c8:d5:77:aa:e3:9c:92:f6:cb:93:
8d:e0:b5:af:c7:3e:a4:9f:a0:a9:1c:2a:88:f0:5a:
47:c8:b4:a5:05:36:89:76:97:b3:f1:57:d6:1e:b3:
30:6b:ca:4f:fb:3d:ad:75:75:bb:ed:98:d9:ef:2a:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BE:AD:80:F1:CB:B7:92:66:D9:BC:84:7F:15:22:34:8C:C7:C6:B9
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:45:c9:98:95:9e:45:c2:78:ca:b7:d8:54:be:4c:10:c1:8d:
e1:20:ce:51:ac:30:f2:c4:12:39:62:10:1b:b6:dc:a0:90:2e:
71:db:8e:2b:9f:d7:e2:00:7b:5d:81:5c:e0:4d:4f:8e:ec:ea:
29:cf:6e:d1:63:1e:e7:ca:b4:2e:bf:3a:50:27:f2:52:08:eb:
6d:20:a5:57:c2:11:bb:a2:4f:d3:38:d5:26:77:31:4c:11:96:
6d:3c:97:d3:63:c3:2b:e5:81:6c:62:91:7c:33:a2:2f:22:92:
84:f0:db:00:b6:16:d5:64:da:bf:c7:9c:3f:16:34:5d:1a:0b:
7a:de:6d:9d:49:d9:27:03:cf:1a:d5:3d:18:ca:08:c9:52:9b:
b8:4e:68:96:3b:6d:28:f9:55:1c:7f:b6:1c:ac:48:cf:e2:86:
93:b9:66:51:9e:1a:86:2a:4b:41:b3:cb:5b:70:ba:70:f0:5e:
3e:1c:d7:2b:d4:56:3f:26:ad:ee:2f:d0:6c:6c:f5:96:fe:81:
be:8d:53:ba:e2:58:4b:89:97:25:3e:ca:11:af:d3:28:24:8d:
2f:ca:95:f9:fa:23:7a:36:b2:d2:8a:bb:48:e0:20:b5:93:d1:
81:6d:e1:f4:99:f4:01:1c:cb:5b:61:e7:06:a5:b4:a9:7d:87:
81:c8:cc:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9t3XXTDgwjQ5lvczOrQDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzM0ZjgzNzNiZTdmZmIxYTM1ZWIzODg2MDU2NWJjM2M0
NTFiZTYwHhcNMjUwNTExMDUwMDM5WhcNMjUwNTEyMDUwMDM5WjAzMTEwLwYDVQQD
EyhlY2JlYWQ4MGYxY2JiNzkyNjZkOWJjODQ3ZjE1MjIzNDhjYzdjNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi1pyf0vKlecgHcObY0phazSqoN+
823HFDdS24Y1S6vhwOwZAB8v6ESDRP8Mn1MwaZIhCj+fNratjyFgtRXck+m2Ot2y
aBSmOWXn7eedMOnXt3PvoVUWvsNidmlRb+vLaEUo70lxcPBGh5xdYitXdaVpUyMR
oar7pNoZ6/+ozwheoLCPG9mhDH+y8vmr9wMGUQheO42XRpLAf0LW+fgzYtQy0Jr0
Dd5w9eJNhLFgM4C5UcisxyjZf5vw3OkoTZau+xYa1C9Te8jVd6rjnJL2y5ON4LWv
xz6kn6CpHCqI8FpHyLSlBTaJdpez8VfWHrMwa8pP+z2tdXW77ZjZ7yqzkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy+rYDxy7eSZtm8hH8VIjSMx8a5MB8GA1UdIwQY
MBaAFALDT4Nzvn/7GjXrOIYFZbw8RRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQt
ZTQ1MWI1OTA3ZWE0LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQtZTQ1MWI1OTA3ZWE0
LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEXJmJWe
RcJ4yrfYVL5MEMGN4SDOUaww8sQSOWIQG7bcoJAucduOK5/X4gB7XYFc4E1Pjuzq
Kc9u0WMe58q0Lr86UCfyUgjrbSClV8IRu6JP0zjVJncxTBGWbTyX02PDK+WBbGKR
fDOiLyKShPDbALYW1WTav8ecPxY0XRoLet5tnUnZJwPPGtU9GMoIyVKbuE5oljtt
KPlVHH+2HKxIz+KGk7lmUZ4ahipLQbPLW3C6cPBePhzXK9RWPyat7i/QbGz1lv6B
vo1TuuJYS4mXJT7KEa/TKCSNL8qV+fojejay0oq7SOAgtZPRgW3h9Jn0ARzLW2Hn
BqW0qX2HgcjMng==
-----END CERTIFICATE-----
Generated at Sun May 11 11:34:04 2025 by rpki-client