Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: AckrLAa7+bFUQOefCGPLc469DsWJEpVf2pyUQouFOek=
Subject key identifier: 0D:48:6C:F7:EF:2B:1D:9E:EA:74:C4:3A:57:AD:62:41:3C:E3:74:58
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 0196AB7A3A8493D2F6ADF7D287BC9F9B9011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 0D92
Signing time: Wed 07 May 2025 16:00:36 +0000
Manifest this update: Wed 07 May 2025 16:00:36 +0000
Manifest next update: Thu 08 May 2025 16:00:36 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: LKNXhMqAoqXqalDBxPn5viDXvFTrNdy/K+1gE2eD50g=)
2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:3a:84:93:d2:f6:ad:f7:d2:87:bc:9f:9b:90:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: May 7 16:00:36 2025 GMT
Not After : May 8 16:00:36 2025 GMT
Subject: CN=0d486cf7ef2b1d9eea74c43a57ad62413ce37458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:b1:99:b0:9c:55:7e:89:4d:73:6b:31:a5:
fd:ec:a0:d9:98:07:10:c9:3d:1c:92:8b:22:19:91:
f5:1e:47:a2:70:e4:11:84:b9:f4:60:67:8a:08:3e:
0a:20:1b:cd:65:23:36:4a:71:b4:53:53:0c:c8:8e:
fa:14:af:6c:4d:b6:cb:53:b7:12:e6:a8:92:9d:39:
b7:8f:12:91:3c:3d:da:60:d7:4c:8f:ef:99:7a:4f:
b7:6d:4e:4e:14:7a:0e:36:83:6b:23:f3:43:83:77:
06:0f:60:46:64:6f:f5:86:90:5e:02:3c:31:97:c1:
a2:71:1f:c9:af:fd:e4:cd:7c:16:46:68:b4:32:bb:
74:e3:6e:38:92:e6:70:ab:de:00:4c:29:e8:d4:2e:
fe:06:a8:b2:16:48:58:a6:e8:5d:71:1c:2b:9e:15:
98:e6:fe:44:2d:80:1a:1e:58:33:f8:4d:ed:51:b6:
e9:08:4b:05:c7:72:ea:1f:be:3d:c9:e7:c9:e6:bf:
5d:1a:4b:21:66:d7:02:a8:c1:d0:f2:a6:58:7a:4c:
02:1f:df:eb:5c:f7:38:8b:27:23:24:10:be:84:4d:
e9:f2:1a:4e:63:fe:5a:2d:49:90:f2:c1:c4:95:6c:
12:93:e7:2b:1e:ce:57:fc:d0:d7:5c:14:76:52:a1:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:48:6C:F7:EF:2B:1D:9E:EA:74:C4:3A:57:AD:62:41:3C:E3:74:58
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:64:83:2f:c6:78:09:e0:a7:34:35:6f:3f:2e:34:9c:fe:e6:
d3:a4:f2:f2:bc:1a:e0:5b:34:96:9c:1a:fa:73:e7:b6:8e:3b:
4c:c8:05:06:e2:ff:c9:2e:92:b5:b4:dc:cd:a9:67:f5:8d:bb:
e6:69:7f:6c:20:34:cf:99:0d:53:32:ae:62:0e:38:26:1d:11:
dc:ff:fb:dc:fc:3e:7c:38:c1:a5:d8:fc:2b:27:4b:ec:67:f4:
5c:2f:fd:f3:b3:73:89:f5:85:db:6d:f0:a3:4c:53:56:ec:ae:
d5:4b:70:95:a4:70:b4:2a:37:ca:cd:7f:cc:fe:d9:bd:69:43:
30:87:65:26:01:3b:67:34:dd:14:f4:61:d4:87:bc:dc:40:f3:
17:57:14:a5:62:f0:57:95:db:06:b1:c5:0d:0f:85:47:03:6b:
28:71:a6:c2:a9:9e:e2:a2:02:85:fc:cf:5f:bf:6f:53:28:82:
49:8c:e5:51:79:04:83:2b:f2:c4:c4:35:25:35:de:d8:39:32:
1d:0e:60:9e:e2:a0:46:11:32:ec:4e:2a:69:eb:a3:4b:d0:f7:
66:0f:c9:c2:20:73:e6:2a:be:4b:23:8f:e6:c9:47:4f:13:19:
4f:b5:8e:a8:03:58:cf:a9:f9:0f:eb:6c:0f:62:6b:7f:f0:de:
34:05:4e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarejqEk9L2rffSh7yfm5ARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOGIyMGZmMDk4ZTZiN2NiYzhiNmFmMGQ2ODAwNjVlNmI5
MDYwMGIwHhcNMjUwNTA3MTYwMDM2WhcNMjUwNTA4MTYwMDM2WjAzMTEwLwYDVQQD
EygwZDQ4NmNmN2VmMmIxZDllZWE3NGM0M2E1N2FkNjI0MTNjZTM3NDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm06xmbCcVX6JTXNrMaX97KDZmAcQ
yT0ckosiGZH1HkeicOQRhLn0YGeKCD4KIBvNZSM2SnG0U1MMyI76FK9sTbbLU7cS
5qiSnTm3jxKRPD3aYNdMj++Zek+3bU5OFHoONoNrI/NDg3cGD2BGZG/1hpBeAjwx
l8GicR/Jr/3kzXwWRmi0Mrt04244kuZwq94ATCno1C7+BqiyFkhYpuhdcRwrnhWY
5v5ELYAaHlgz+E3tUbbpCEsFx3LqH749yefJ5r9dGkshZtcCqMHQ8qZYekwCH9/r
XPc4iycjJBC+hE3p8hpOY/5aLUmQ8sHElWwSk+crHs5X/NDXXBR2UqFnLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1IbPfvKx2e6nTEOletYkE843RYMB8GA1UdIwQY
MBaAFAGLIP8Jjmt8vItq8NaABl5rkGALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEt
OTEyN2Y0MjlhNDhkLzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEtOTEyN2Y0MjlhNDhk
LzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumSDL8Z4
CeCnNDVvPy40nP7m06Ty8rwa4Fs0lpwa+nPnto47TMgFBuL/yS6StbTczaln9Y27
5ml/bCA0z5kNUzKuYg44Jh0R3P/73Pw+fDjBpdj8KydL7Gf0XC/987NzifWF223w
o0xTVuyu1UtwlaRwtCo3ys1/zP7ZvWlDMIdlJgE7ZzTdFPRh1Ie83EDzF1cUpWLw
V5XbBrHFDQ+FRwNrKHGmwqme4qIChfzPX79vUyiCSYzlUXkEgyvyxMQ1JTXe2Dky
HQ5gnuKgRhEy7E4qaeujS9D3Zg/JwiBz5iq+SyOP5slHTxMZT7WOqANYz6n5D+ts
D2Jrf/DeNAVOpQ==
-----END CERTIFICATE-----
Generated at Thu May 8 02:12:33 2025 by rpki-client