Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: +o0bUQx5yma3BN03mkHoTrz8JyOSkV6ULpDODZ7oj/0=
Subject key identifier: 60:15:13:98:6C:95:EE:50:58:DF:91:7F:66:88:D8:F5:18:CD:06:73
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 0196B634FC6D205B2379649D2C2AC37C09F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 18:00:47 +0000
Manifest this update: Fri 09 May 2025 18:00:47 +0000
Manifest next update: Sat 10 May 2025 18:00:47 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: WKL3uJfVJUehXYm9OYmdp8JxWPit8omEwyz0j9P66Go=)
2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:fc:6d:20:5b:23:79:64:9d:2c:2a:c3:7c:09:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: May 9 18:00:47 2025 GMT
Not After : May 10 18:00:47 2025 GMT
Subject: CN=601513986c95ee5058df917f6688d8f518cd0673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:f1:aa:b1:af:95:db:4d:0d:f6:16:9e:63:
c5:c4:49:af:71:df:b7:4b:ba:16:21:3e:85:df:77:
95:03:05:c3:19:42:42:4d:57:55:a9:42:1d:01:6f:
6f:28:af:c1:8e:3f:bb:7d:73:c1:6f:5f:65:1c:eb:
0d:0c:7e:0a:4c:b6:a8:6a:ad:69:b2:fc:c6:04:07:
75:6a:13:c1:93:a9:fd:1d:82:68:a9:72:4b:f8:0e:
af:d1:bf:ff:a2:8b:b9:cb:a4:b1:e6:ca:f1:ca:ce:
30:76:7d:7e:30:6d:20:84:6f:19:ee:81:38:58:5c:
e2:ba:ca:ef:88:11:39:7e:81:9d:b2:20:8b:a4:d9:
96:74:36:19:e0:c9:3d:06:30:53:87:28:c3:92:7c:
5b:f6:40:13:08:25:09:a8:38:8d:90:b0:20:82:4a:
f1:af:b8:ab:5f:fc:74:d4:6b:08:d8:70:88:f0:2e:
f4:62:0d:6a:7d:c9:3a:85:f2:f9:29:6b:35:41:b4:
55:5c:e0:da:6f:ad:ea:fe:d1:16:3f:56:4d:e3:27:
f6:27:7b:53:3a:03:6c:70:ca:f3:37:40:e2:f9:bf:
4d:4e:86:20:b5:2b:08:ff:d1:4c:5c:30:59:e6:9f:
4f:b3:66:98:f4:9b:d0:1a:07:b2:1c:43:6d:29:65:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:15:13:98:6C:95:EE:50:58:DF:91:7F:66:88:D8:F5:18:CD:06:73
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f9:af:a2:36:39:90:ad:74:77:f7:ec:53:d6:67:ad:49:8d:
33:96:db:ea:4c:06:49:f9:21:ca:51:2a:4c:5d:4a:7b:b3:4c:
00:1a:3e:e5:ef:9f:30:5d:86:9e:40:15:7d:a2:1c:b1:1a:8f:
fa:d6:c7:8b:1d:14:d8:7e:d5:a9:5b:17:59:6d:4a:25:84:31:
5f:05:4e:41:1c:8d:48:51:23:55:a1:d0:31:db:e2:23:10:ab:
94:22:13:85:b5:69:06:c6:48:6b:df:b2:94:2a:f6:ef:b7:cf:
a9:ac:76:7e:56:a8:61:53:8c:56:83:32:eb:77:b9:2d:01:60:
74:74:d7:ab:d9:19:28:dc:ed:5a:9a:0c:70:55:5f:df:15:94:
19:6e:0d:d9:93:2e:ce:67:40:ed:fe:59:8e:10:cc:b2:1d:f1:
25:1b:69:26:41:f4:58:db:47:90:f3:ac:b0:a0:02:6d:78:73:
f1:1e:95:0e:73:64:06:94:07:50:78:4b:d9:56:a1:db:d3:8c:
fb:04:c6:5a:b5:3c:94:38:ba:29:05:81:59:d8:6f:84:4f:13:
91:c9:66:e8:c0:15:cd:ec:dc:bb:88:43:6d:98:1b:94:7b:4f:
5e:10:20:cc:94:d5:4f:62:df:9f:17:48:21:61:a5:98:db:ab:
34:be:59:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2NPxtIFsjeWSdLCrDfAn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy
OTkwOTQwHhcNMjUwNTA5MTgwMDQ3WhcNMjUwNTEwMTgwMDQ3WjAzMTEwLwYDVQQD
Eyg2MDE1MTM5ODZjOTVlZTUwNThkZjkxN2Y2Njg4ZDhmNTE4Y2QwNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF3xqrGvldtNDfYWnmPFxEmvcd+3
S7oWIT6F33eVAwXDGUJCTVdVqUIdAW9vKK/Bjj+7fXPBb19lHOsNDH4KTLaoaq1p
svzGBAd1ahPBk6n9HYJoqXJL+A6v0b//oou5y6Sx5srxys4wdn1+MG0ghG8Z7oE4
WFziusrviBE5foGdsiCLpNmWdDYZ4Mk9BjBThyjDknxb9kATCCUJqDiNkLAggkrx
r7irX/x01GsI2HCI8C70Yg1qfck6hfL5KWs1QbRVXODab63q/tEWP1ZN4yf2J3tT
OgNscMrzN0Di+b9NToYgtSsI/9FMXDBZ5p9Ps2aY9JvQGgeyHENtKWUceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAVE5hsle5QWN+Rf2aI2PUYzQZzMB8GA1UdIwQY
MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt
MmIyYTZlMjdmOTZmLzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm
LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfmvojY5
kK10d/fsU9ZnrUmNM5bb6kwGSfkhylEqTF1Ke7NMABo+5e+fMF2GnkAVfaIcsRqP
+tbHix0U2H7VqVsXWW1KJYQxXwVOQRyNSFEjVaHQMdviIxCrlCIThbVpBsZIa9+y
lCr277fPqax2flaoYVOMVoMy63e5LQFgdHTXq9kZKNztWpoMcFVf3xWUGW4N2ZMu
zmdA7f5ZjhDMsh3xJRtpJkH0WNtHkPOssKACbXhz8R6VDnNkBpQHUHhL2Vah29OM
+wTGWrU8lDi6KQWBWdhvhE8Tkclm6MAVzezcu4hDbZgblHtPXhAgzJTVT2LfnxdI
IWGlmNurNL5ZyQ==
-----END CERTIFICATE-----
Generated at Fri May 9 22:04:19 2025 by rpki-client