Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: 8nt7tG538Jb8If3ywSGWViraqQgRNPdkrN1m3VrXfjk=
Subject key identifier: 23:A4:5D:9B:33:3E:FC:FE:61:31:27:3B:91:95:8C:A9:F1:61:AC:46
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 0196A01AD3DF8D48C20F606DA013DA0E0B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: AE
Signing time: Mon 05 May 2025 11:00:34 +0000
Manifest this update: Mon 05 May 2025 11:00:34 +0000
Manifest next update: Tue 06 May 2025 11:00:34 +0000
Files and hashes: 1: USYf1bw7MHizcISPSt3QDNx57-c.roa (hash: hlppK+U0LprItNasoWls7BUhYE5DrUbPlgUCcoN0Ou8=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: mxWoyZz/iMFZm4h9QyDZxh7a5VSRSlyksFKCwAUFYu8=)
3: mPel-Ky4KTw-yipTpTX6XFn1X6g.roa (hash: N5pE0c5lXs23W7feBcxuowFluJhlp7T2zf0Dpvw7muA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:d3:df:8d:48:c2:0f:60:6d:a0:13:da:0e:0b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: May 5 11:00:34 2025 GMT
Not After : May 6 11:00:34 2025 GMT
Subject: CN=23a45d9b333efcfe6131273b91958ca9f161ac46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:2f:3f:bb:72:86:06:99:97:4c:7d:90:b4:
87:6f:b1:ac:a7:36:7c:f3:49:be:57:14:04:f7:23:
85:62:ec:bf:c3:96:75:cb:c9:cb:32:ba:12:69:8b:
3e:dd:50:fc:21:b7:27:b1:f3:f5:2f:35:b3:b9:11:
47:a9:fc:66:07:1e:b2:13:65:ec:49:66:bd:25:37:
b1:8d:0f:ee:ff:d4:43:31:cc:ee:56:e6:c0:1a:d8:
3e:c7:be:e1:46:ff:b4:12:45:19:26:b9:bf:bd:f1:
a4:b2:91:6b:bd:67:4c:0d:cf:b9:01:4f:9f:a4:d9:
a7:74:9a:46:28:75:23:d1:a3:43:09:7f:d8:a9:f7:
ff:a6:f3:d0:30:e7:26:52:45:fa:3f:0f:60:19:74:
03:9d:cc:5f:e4:ad:1f:fe:3b:21:3a:f8:2a:5f:cf:
76:86:12:9d:91:c4:c0:73:1a:72:2d:86:11:59:a1:
8c:e7:a2:38:a8:d0:75:8d:7b:dc:4f:dd:62:d1:1a:
15:25:5b:80:a2:62:fc:06:09:d6:e9:4e:d6:1a:76:
f4:c1:48:0b:0f:66:67:23:e3:62:f8:27:39:e3:34:
f6:64:93:9f:dd:a1:33:c5:d6:4c:3c:fd:1b:c8:26:
6c:ca:7b:72:60:d5:68:5b:14:96:09:e0:ae:21:a5:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A4:5D:9B:33:3E:FC:FE:61:31:27:3B:91:95:8C:A9:F1:61:AC:46
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a6:b9:54:34:34:d6:a1:e7:5b:f7:f4:fb:7a:9a:10:b8:f4:
0e:b0:72:7a:09:18:25:8f:5e:a8:a4:ce:2a:c1:04:ec:5d:74:
f4:d5:47:c0:3d:a7:e9:e6:7c:28:bd:f7:45:dc:b6:97:f7:4d:
20:87:2f:c3:4a:0c:42:1d:2b:53:63:bc:c1:b9:b2:74:d8:f7:
69:24:1c:5f:bf:dd:c2:98:78:c6:f8:bc:3b:d1:04:39:d4:ae:
44:91:2a:e7:2f:4e:aa:6a:65:0e:93:af:7a:71:4c:32:72:93:
ff:7a:7e:8a:f8:4a:32:ef:af:26:db:97:0c:0d:ee:95:98:96:
ad:8f:43:d9:4d:e3:1e:6f:03:ae:c2:7e:8e:c3:2f:56:98:b6:
34:16:2a:b6:5d:99:ae:98:00:09:b7:a5:78:37:2e:32:06:a3:
de:ab:a8:2f:7d:65:b7:c5:8a:11:e6:de:d5:83:0e:92:f5:ee:
79:64:75:a2:57:48:ec:ba:a7:e2:31:49:9f:b8:00:77:c1:1e:
6b:19:af:96:d0:6a:14:be:91:f6:62:74:0c:8c:ed:65:03:e7:
45:8e:c8:bf:b8:0a:f0:2d:2d:44:97:f2:f4:aa:66:89:98:76:
6d:75:a3:af:e0:11:66:34:4e:94:ab:74:86:07:45:48:6e:ec:
e8:30:e6:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGtPfjUjCD2BtoBPaDguBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MDRlMTZmMzMzZDg5NjUwYzY2MTNhYzZjOTVkMzQ4ZGM0
Yjc5NTAwHhcNMjUwNTA1MTEwMDM0WhcNMjUwNTA2MTEwMDM0WjAzMTEwLwYDVQQD
EygyM2E0NWQ5YjMzM2VmY2ZlNjEzMTI3M2I5MTk1OGNhOWYxNjFhYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrUvP7tyhgaZl0x9kLSHb7GspzZ8
80m+VxQE9yOFYuy/w5Z1y8nLMroSaYs+3VD8IbcnsfP1LzWzuRFHqfxmBx6yE2Xs
SWa9JTexjQ/u/9RDMczuVubAGtg+x77hRv+0EkUZJrm/vfGkspFrvWdMDc+5AU+f
pNmndJpGKHUj0aNDCX/Yqff/pvPQMOcmUkX6Pw9gGXQDncxf5K0f/jshOvgqX892
hhKdkcTAcxpyLYYRWaGM56I4qNB1jXvcT91i0RoVJVuAomL8BgnW6U7WGnb0wUgL
D2ZnI+Ni+Cc54zT2ZJOf3aEzxdZMPP0byCZsyntyYNVoWxSWCeCuIaX89QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOkXZszPvz+YTEnO5GVjKnxYaxGMB8GA1UdIwQY
MBaAFHQE4W8zPYllDGYTrGyV00jcS3lQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzct
MThjNWViZWYyN2E4LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzctMThjNWViZWYyN2E4
LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6a5VDQ0
1qHnW/f0+3qaELj0DrByegkYJY9eqKTOKsEE7F109NVHwD2n6eZ8KL33Rdy2l/dN
IIcvw0oMQh0rU2O8wbmydNj3aSQcX7/dwph4xvi8O9EEOdSuRJEq5y9OqmplDpOv
enFMMnKT/3p+ivhKMu+vJtuXDA3ulZiWrY9D2U3jHm8DrsJ+jsMvVpi2NBYqtl2Z
rpgACbeleDcuMgaj3quoL31lt8WKEebe1YMOkvXueWR1oldI7Lqn4jFJn7gAd8Ee
axmvltBqFL6R9mJ0DIztZQPnRY7Iv7gK8C0tRJfy9KpmiZh2bXWjr+ARZjROlKt0
hgdFSG7s6DDmXg==
-----END CERTIFICATE-----
Generated at Mon May 5 13:46:55 2025 by rpki-client