Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: dI4h6lZnpnebVeDO/uDVTvRSl7a/aVz0UUpm2h3zk3M=
Subject key identifier: E4:D4:3B:70:F4:00:ED:5D:58:0A:F0:A4:CF:4D:06:9F:62:7A:A9:48
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 0196B9A441435379D7404D88152D04C2A4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 0FA8
Signing time: Sat 10 May 2025 10:01:11 +0000
Manifest this update: Sat 10 May 2025 10:01:11 +0000
Manifest next update: Sun 11 May 2025 10:01:11 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: Bdxk8Fmk5+aUi6pMWDPUW9Tu3V+xF0cHCDsvrcg0Ojk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:41:43:53:79:d7:40:4d:88:15:2d:04:c2:a4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: May 10 10:01:11 2025 GMT
Not After : May 11 10:01:11 2025 GMT
Subject: CN=e4d43b70f400ed5d580af0a4cf4d069f627aa948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:6b:49:0d:a7:2e:7e:49:90:d5:a3:3d:88:
1b:5c:b9:17:db:bf:04:e1:55:bc:17:0e:df:0c:84:
57:be:26:74:5f:26:5e:37:f3:5b:a8:0a:dc:70:4d:
a2:17:70:80:cd:b4:7b:4e:31:fd:79:5b:9e:76:2c:
07:62:e8:5b:8f:55:2c:86:f3:4f:c7:37:5c:b9:94:
05:1e:b3:b7:e2:e2:fc:92:64:d7:7f:a9:e1:4c:1c:
73:81:bc:39:58:e8:de:02:cc:f8:2f:bb:53:df:e0:
f2:1d:fb:6e:f1:f2:f5:a3:26:2c:e5:e9:d9:70:6e:
50:78:3d:4a:d6:8f:52:85:3c:49:61:fe:04:25:6d:
c5:67:3b:58:e1:58:e3:b3:fd:e6:23:18:d3:a5:b6:
1c:21:6a:32:03:34:4f:51:46:b9:c9:3e:ec:7e:82:
66:6f:c4:37:37:fb:e0:d0:3d:d3:b4:ba:07:2d:29:
54:bb:98:1f:91:42:0e:05:1e:2d:dc:41:23:63:fd:
93:86:d3:c7:6f:34:f9:f0:d6:b8:08:ad:2e:51:47:
8e:d1:70:a2:dd:a5:bb:08:c1:93:1f:57:74:2c:b4:
d1:ba:b2:f3:57:d8:7c:5f:19:c8:77:ca:98:ff:a9:
9e:40:7d:1b:a3:39:98:12:8b:e2:b0:69:eb:6a:4c:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D4:3B:70:F4:00:ED:5D:58:0A:F0:A4:CF:4D:06:9F:62:7A:A9:48
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:04:35:f6:ce:60:5d:3e:a3:e2:b2:e5:80:3b:e8:61:c6:02:
11:7a:4d:51:b3:68:99:37:f0:69:c9:d7:94:34:2a:98:27:f9:
10:d4:51:7d:4a:cb:9c:e8:66:36:73:5f:77:a5:ec:ec:50:a9:
8e:8e:fe:1e:1f:ca:bc:a0:e8:6c:cb:47:f5:16:3e:95:93:7c:
44:e7:be:c9:fc:3e:94:07:1d:17:39:dd:2d:a3:b4:79:e7:14:
5d:95:ba:77:4b:32:74:f1:c1:9d:af:c7:05:ed:d1:7b:58:9f:
6a:57:15:ce:ce:4f:6a:80:05:d9:f6:35:ab:52:5d:b4:63:30:
e2:2b:6b:f2:c2:d9:e4:1b:65:3c:0e:40:17:ea:87:8a:9c:98:
44:11:e0:27:81:3f:eb:ba:76:e8:88:40:c5:e5:be:0e:6b:fb:
5d:30:bd:36:3d:7c:fd:de:d9:45:7e:0a:61:e5:5b:86:02:8d:
ca:bb:c2:8f:2a:be:7b:7e:b7:57:b5:bf:2a:a2:8e:5c:f5:e3:
eb:3f:2b:1d:e9:6d:27:22:e5:91:bc:52:dc:d3:92:54:17:e2:
0a:2a:85:de:ee:29:20:a4:36:ce:59:3f:69:3a:56:dd:d3:01:
92:eb:6e:9b:59:e8:d8:05:e9:9f:d4:b8:41:fa:79:06:a5:f5:
1a:8e:b7:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5pEFDU3nXQE2IFS0EwqTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmEwNmU0NTQ3ZGEwMWE1YzhiNWVmYjcxMDQwZTVlZGQx
MDllZTcwHhcNMjUwNTEwMTAwMTExWhcNMjUwNTExMTAwMTExWjAzMTEwLwYDVQQD
EyhlNGQ0M2I3MGY0MDBlZDVkNTgwYWYwYTRjZjRkMDY5ZjYyN2FhOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/5rSQ2nLn5JkNWjPYgbXLkX278E
4VW8Fw7fDIRXviZ0XyZeN/NbqArccE2iF3CAzbR7TjH9eVuediwHYuhbj1UshvNP
xzdcuZQFHrO34uL8kmTXf6nhTBxzgbw5WOjeAsz4L7tT3+DyHftu8fL1oyYs5enZ
cG5QeD1K1o9ShTxJYf4EJW3FZztY4Vjjs/3mIxjTpbYcIWoyAzRPUUa5yT7sfoJm
b8Q3N/vg0D3TtLoHLSlUu5gfkUIOBR4t3EEjY/2ThtPHbzT58Na4CK0uUUeO0XCi
3aW7CMGTH1d0LLTRurLzV9h8XxnId8qY/6meQH0bozmYEovisGnrakzVIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTUO3D0AO1dWArwpM9NBp9ieqlIMB8GA1UdIwQY
MBaAFGlqBuRUfaAaXIte+3EEDl7dEJ7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MDAzODUtZDg1Mi00ZmYzLWEyYTIt
NjJkZjkzYmM2NGRjLzEvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85MDAzODUtZDg1Mi00ZmYzLWEyYTItNjJkZjkzYmM2NGRj
LzEvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQQ19s5g
XT6j4rLlgDvoYcYCEXpNUbNomTfwacnXlDQqmCf5ENRRfUrLnOhmNnNfd6Xs7FCp
jo7+Hh/KvKDobMtH9RY+lZN8ROe+yfw+lAcdFzndLaO0eecUXZW6d0sydPHBna/H
Be3Re1ifalcVzs5PaoAF2fY1q1JdtGMw4itr8sLZ5BtlPA5AF+qHipyYRBHgJ4E/
67p26IhAxeW+Dmv7XTC9Nj18/d7ZRX4KYeVbhgKNyrvCjyq+e363V7W/KqKOXPXj
6z8rHeltJyLlkbxS3NOSVBfiCiqF3u4pIKQ2zlk/aTpW3dMBkutum1no2AXpn9S4
Qfp5BqX1Go63DA==
-----END CERTIFICATE-----
Generated at Sat May 10 16:47:25 2025 by rpki-client