Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier: E50llwloGHK9RtHV55GJZ8Dh/KXmS1ZMy5gjorxMvNg=
Subject key identifier: E0:DF:02:70:3D:1C:50:99:C0:6F:6C:86:E4:66:AB:C9:40:D8:A4:4A
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 0196BEC9D71D154A34D8CBB1DB67DC0FCDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 10:00:20 +0000
Manifest this update: Sun 11 May 2025 10:00:20 +0000
Manifest next update: Mon 12 May 2025 10:00:20 +0000
Files and hashes: 1: 1-BqPUmwLhiY4Yhx0LfgUMnThGxA.roa (hash: K4n04vrpGIt/U+DsbhlaysS9N4rLWgryrsGr6i9waUc=)
2: 1nS0uX-20m5q3S5s2ax-hzltY7M.roa (hash: fPbs3orCk/9uH211HxlkX/O3dh9FAzUrv0hFLfs7bIc=)
3: 2MWwWUq-nPd7Gzhb6Z0417winfw.roa (hash: JU/lw4BXm/KV3NT2WmLhKrIC3zR0XBpPPnNeGokCO90=)
4: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: bq+xBf+6ZtuR4CrhwA6zw3UAn36s9sMAFhczmPgpvTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:d7:1d:15:4a:34:d8:cb:b1:db:67:dc:0f:cd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: May 11 10:00:20 2025 GMT
Not After : May 12 10:00:20 2025 GMT
Subject: CN=e0df02703d1c5099c06f6c86e466abc940d8a44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6a:f1:7f:b9:83:3a:fc:bc:c1:17:41:04:1e:
b9:e5:f5:48:8d:ab:07:72:c9:20:f7:46:71:7c:46:
2d:9e:eb:67:f1:35:66:db:39:b5:5d:38:d6:40:7c:
31:96:b4:f8:48:9f:eb:a3:c0:14:c5:28:aa:ff:ab:
ac:cc:d1:8f:83:eb:f9:3d:71:9a:ed:8a:ed:df:1c:
fb:56:fd:1d:eb:67:0f:2d:a2:fb:ca:ad:7f:64:76:
23:82:ab:9a:28:97:02:ca:36:ec:57:d3:33:1d:68:
70:40:d7:cd:20:5c:18:ac:84:d3:b9:59:1e:74:28:
c7:97:44:05:94:59:5a:70:63:e3:c8:c1:e0:44:51:
00:30:8a:7e:bf:54:40:59:bb:f3:a2:41:1d:04:5c:
8e:12:db:fd:db:51:5e:d9:33:0b:d5:40:fa:cd:e0:
52:12:77:62:53:df:f9:91:92:5a:c7:24:06:35:5b:
06:73:58:67:86:40:e9:20:ed:99:73:ec:26:88:c6:
51:17:0c:09:f6:fd:6d:3a:96:07:04:0a:49:90:64:
89:cb:66:88:1b:fa:d0:80:98:5a:a8:5b:31:0c:fd:
a9:ff:17:b8:32:b6:d2:0f:89:b9:25:c3:f0:14:09:
7a:fc:cd:95:0b:c8:a0:c4:58:84:62:98:3e:2f:93:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:02:70:3D:1C:50:99:C0:6F:6C:86:E4:66:AB:C9:40:D8:A4:4A
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f4:1c:cc:8e:56:b5:89:24:b4:14:70:61:c2:ea:c9:e5:fb:
33:d9:1e:76:5e:0a:b3:30:c6:37:fa:23:75:3c:5e:d4:50:69:
a4:bc:e8:d8:99:f3:6b:9c:b1:10:53:57:7d:12:d7:64:8e:a1:
90:28:ef:2f:17:b2:d9:e0:8d:b1:9c:44:1f:64:19:ff:b3:66:
67:26:b9:a3:6f:f4:93:59:f9:45:ce:d0:dd:6f:4c:ce:11:f8:
0d:34:f0:dd:1b:88:a0:1c:62:2d:16:39:d8:7a:2e:af:95:ec:
9e:04:f6:3c:11:d1:25:a2:35:c7:3e:61:55:43:2b:0e:e5:1f:
29:67:e6:5c:fe:7e:bc:4f:26:3d:49:9a:fd:12:ef:59:8b:5d:
29:d7:20:59:50:b9:a6:eb:db:47:af:a7:3c:0c:68:58:46:71:
03:87:08:cc:7a:63:19:53:a5:70:cb:d4:48:ec:4b:b4:63:eb:
ae:3d:3c:d3:16:0c:00:ea:11:7e:d1:54:8a:90:2f:20:e2:db:
6e:c3:ba:61:de:0a:e5:6f:dd:bf:6f:eb:a8:e0:7b:c6:4f:15:
61:89:5f:89:a3:de:72:7b:30:9e:61:9b:f7:a7:ef:85:ae:a5:
13:62:e6:4d:30:a7:19:97:56:42:66:4e:bd:1c:3a:36:fe:47:
d8:91:9f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+ydcdFUo02Mux22fcD83lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx
ZjhjMDUwHhcNMjUwNTExMTAwMDIwWhcNMjUwNTEyMTAwMDIwWjAzMTEwLwYDVQQD
EyhlMGRmMDI3MDNkMWM1MDk5YzA2ZjZjODZlNDY2YWJjOTQwZDhhNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mrxf7mDOvy8wRdBBB655fVIjasH
cskg90ZxfEYtnutn8TVm2zm1XTjWQHwxlrT4SJ/ro8AUxSiq/6uszNGPg+v5PXGa
7Yrt3xz7Vv0d62cPLaL7yq1/ZHYjgquaKJcCyjbsV9MzHWhwQNfNIFwYrITTuVke
dCjHl0QFlFlacGPjyMHgRFEAMIp+v1RAWbvzokEdBFyOEtv921Fe2TML1UD6zeBS
EndiU9/5kZJaxyQGNVsGc1hnhkDpIO2Zc+wmiMZRFwwJ9v1tOpYHBApJkGSJy2aI
G/rQgJhaqFsxDP2p/xe4MrbSD4m5JcPwFAl6/M2VC8igxFiEYpg+L5MyVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODfAnA9HFCZwG9shuRmq8lA2KRKMB8GA1UdIwQY
MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt
MTliYzdiZGNjYmMxLzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx
LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPQczI5W
tYkktBRwYcLqyeX7M9kedl4KszDGN/ojdTxe1FBppLzo2Jnza5yxEFNXfRLXZI6h
kCjvLxey2eCNsZxEH2QZ/7NmZya5o2/0k1n5Rc7Q3W9MzhH4DTTw3RuIoBxiLRY5
2Hour5XsngT2PBHRJaI1xz5hVUMrDuUfKWfmXP5+vE8mPUma/RLvWYtdKdcgWVC5
puvbR6+nPAxoWEZxA4cIzHpjGVOlcMvUSOxLtGPrrj080xYMAOoRftFUipAvIOLb
bsO6Yd4K5W/dv2/rqOB7xk8VYYlfiaPecnswnmGb96fvha6lE2LmTTCnGZdWQmZO
vRw6Nv5H2JGfgA==
-----END CERTIFICATE-----
Generated at Sun May 11 15:32:36 2025 by rpki-client