Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: Biqi9xDPDQUwKjk6404hfbI0LjW3hLxeAtK3CM7c7NQ=
Subject key identifier: ED:13:35:C8:C6:A3:AB:78:F9:17:59:09:9B:19:F8:8D:EB:96:D0:1B
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 0196CDCF580874340ADA21CB37872B2E1AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 08:00:39 +0000
Manifest this update: Wed 14 May 2025 08:00:39 +0000
Manifest next update: Thu 15 May 2025 08:00:39 +0000
Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: oSbo4ZeBODE4lwJz4oSrC+0SvYhvaOngkoR1vdAB0nE=)
2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:58:08:74:34:0a:da:21:cb:37:87:2b:2e:1a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: May 14 08:00:39 2025 GMT
Not After : May 15 08:00:39 2025 GMT
Subject: CN=ed1335c8c6a3ab78f91759099b19f88deb96d01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:26:4b:1b:35:98:fe:6d:2b:58:10:fa:36:
b2:f6:0b:a8:58:96:4c:c0:60:c3:a4:40:7e:a1:51:
3c:59:3b:15:c6:df:b1:76:38:00:51:20:41:fc:27:
fa:28:c9:9f:9a:2c:d5:e1:72:5f:43:18:e0:34:a3:
59:29:c6:c4:47:19:f1:15:62:6c:ab:16:95:2c:9d:
a6:be:e5:ee:d2:d3:fb:8e:c5:6e:86:8e:a5:8b:6b:
f2:f2:45:ce:07:43:27:11:80:e7:1d:77:c4:12:16:
86:54:fd:28:c8:4d:8f:1f:a7:41:be:00:15:ff:ba:
b1:4e:86:bb:8e:db:e3:b6:01:21:36:78:e9:0d:71:
a9:d2:62:9f:05:0a:28:0c:81:3b:44:77:fa:23:83:
b0:0c:b1:e7:f5:b2:1e:10:56:8d:34:10:61:0c:aa:
e4:23:37:30:44:62:e7:5d:ef:3b:4f:45:69:84:bc:
9f:ba:c7:27:d4:57:fb:51:28:c0:5b:b4:7e:02:a5:
b5:d0:18:55:28:59:e8:eb:e2:2a:4f:ac:31:49:48:
3d:68:65:90:34:b9:d5:96:fa:12:bc:d1:bc:31:a7:
4f:d2:a6:57:54:fd:b5:60:76:12:bb:48:a8:8c:9c:
67:03:83:ee:ac:7c:41:ef:59:9f:69:d6:39:e1:e9:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:35:C8:C6:A3:AB:78:F9:17:59:09:9B:19:F8:8D:EB:96:D0:1B
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d0:1c:ca:ae:b5:fd:ec:d5:d7:ea:0e:40:81:7f:ef:2f:97:
e6:75:3e:ad:36:7d:5f:8a:2d:6d:41:1f:8b:62:fc:cb:23:b1:
57:bc:b8:e2:7f:80:4c:e7:22:f9:58:b7:fb:7d:e8:c0:09:d9:
be:05:73:6f:41:5b:6e:c1:c0:22:2f:3b:f4:d5:33:6b:e9:d4:
cd:f2:b1:70:41:3a:a9:52:19:a0:8e:52:20:53:88:82:89:df:
41:ac:af:22:55:f0:40:66:0f:a4:db:a8:6c:8e:86:4c:2b:4d:
f2:56:20:8a:99:74:9b:f8:1d:ec:e8:b3:81:43:24:9d:c5:7d:
be:b3:1b:25:2b:3d:0f:d2:66:78:ed:a3:4b:bd:d3:61:9b:52:
c5:3b:3c:59:84:eb:18:3d:b0:94:7d:70:64:00:73:ab:07:a0:
8f:1c:e1:64:f7:48:79:b0:3c:d2:8c:23:37:6d:8d:d6:43:60:
ce:f3:12:eb:6c:29:61:b8:07:ed:e7:8d:f1:0f:33:ab:a1:e1:
d7:8a:ed:e5:6a:3b:bb:68:1a:c1:3e:a1:85:33:a3:56:e9:23:
1f:06:78:9e:62:4e:9d:8e:92:69:c0:5e:49:b0:6d:21:82:75:
6e:14:4d:e5:da:60:f4:0c:dc:22:c9:0b:a0:ca:2e:9d:f5:43:
5f:54:72:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNz1gIdDQK2iHLN4crLhrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzRiNzg0ZDgxNjZlOGJkMGY0N2Q3MjBmZGU1ZmFlYzE2
NDViMzQwHhcNMjUwNTE0MDgwMDM5WhcNMjUwNTE1MDgwMDM5WjAzMTEwLwYDVQQD
EyhlZDEzMzVjOGM2YTNhYjc4ZjkxNzU5MDk5YjE5Zjg4ZGViOTZkMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHsmSxs1mP5tK1gQ+jay9guoWJZM
wGDDpEB+oVE8WTsVxt+xdjgAUSBB/Cf6KMmfmizV4XJfQxjgNKNZKcbERxnxFWJs
qxaVLJ2mvuXu0tP7jsVuho6li2vy8kXOB0MnEYDnHXfEEhaGVP0oyE2PH6dBvgAV
/7qxToa7jtvjtgEhNnjpDXGp0mKfBQooDIE7RHf6I4OwDLHn9bIeEFaNNBBhDKrk
IzcwRGLnXe87T0VphLyfuscn1Ff7USjAW7R+AqW10BhVKFno6+IqT6wxSUg9aGWQ
NLnVlvoSvNG8MadP0qZXVP21YHYSu0iojJxnA4PurHxB71mfadY54emMFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0TNcjGo6t4+RdZCZsZ+I3rltAbMB8GA1UdIwQY
MBaAFAHEt4TYFm6L0PR9cg/eX67BZFs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMt
NWI1YmViMTA1MTNiLzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMtNWI1YmViMTA1MTNi
LzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9Acyq61
/ezV1+oOQIF/7y+X5nU+rTZ9X4otbUEfi2L8yyOxV7y44n+ATOci+Vi3+33owAnZ
vgVzb0FbbsHAIi879NUza+nUzfKxcEE6qVIZoI5SIFOIgonfQayvIlXwQGYPpNuo
bI6GTCtN8lYgipl0m/gd7OizgUMkncV9vrMbJSs9D9JmeO2jS73TYZtSxTs8WYTr
GD2wlH1wZABzqwegjxzhZPdIebA80owjN22N1kNgzvMS62wpYbgH7eeN8Q8zq6Hh
14rt5Wo7u2gawT6hhTOjVukjHwZ4nmJOnY6SacBeSbBtIYJ1bhRN5dpg9AzcIskL
oMounfVDX1RygQ==
-----END CERTIFICATE-----
Generated at Wed May 14 18:21:38 2025 by rpki-client