Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier: 6UAr62YxVvM8ymppHH8UibiDyi6JrOn2nR5l8jMnyq8=
Subject key identifier: C5:35:1B:5C:6E:67:CB:4E:E9:AC:18:76:AA:7C:48:64:B4:62:5F:B3
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial: 0196B4B3EE913E2A85DF1106E4082DF903AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number: 3D
Signing time: Fri 09 May 2025 11:00:12 +0000
Manifest this update: Fri 09 May 2025 11:00:12 +0000
Manifest next update: Sat 10 May 2025 11:00:12 +0000
Files and hashes: 1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=)
2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: W4F9el1/q7Wx9z0Bidl3XbtcJ4r7gJjdn6HC7W2ylf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b3:ee:91:3e:2a:85:df:11:06:e4:08:2d:f9:03:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Validity
Not Before: May 9 11:00:12 2025 GMT
Not After : May 10 11:00:12 2025 GMT
Subject: CN=c5351b5c6e67cb4ee9ac1876aa7c4864b4625fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:b3:38:30:c3:ba:22:4b:f7:4d:85:f4:34:
29:c1:45:f6:2c:4a:99:a4:fa:e7:64:fd:d7:e0:f7:
80:46:14:0f:03:c8:28:33:21:35:6a:f6:38:fa:a4:
e2:aa:d5:02:31:89:e8:91:ac:42:79:86:a8:95:c6:
f9:fd:75:ba:98:87:3d:9c:5c:7b:fd:c5:f1:bc:7d:
e7:67:8f:49:d3:ed:a2:32:8a:85:22:eb:40:26:e8:
c2:3f:31:08:b3:7b:58:b7:c2:42:d7:20:0d:4e:a3:
7b:da:34:01:12:97:c1:04:ff:50:43:f2:3d:1b:ec:
c6:0c:46:4b:a1:ba:22:8a:95:1a:42:a4:8c:5b:70:
53:ca:3a:ff:75:e3:c9:b4:93:d0:c8:f1:f9:f4:99:
7c:75:74:ec:31:63:25:82:95:01:e2:1d:5d:e0:d0:
c8:7c:c2:0c:e8:1b:0c:94:bc:7e:fd:39:76:d4:d8:
e0:44:2c:ea:2a:b2:42:62:5f:77:10:09:07:6c:40:
89:19:54:a2:ee:89:0e:cc:24:da:e3:a9:6e:41:a5:
90:ea:a2:44:0b:aa:91:d2:91:6f:f8:ca:b3:7d:18:
0e:da:41:ac:c0:f3:2e:f2:26:9e:3f:4b:ff:7e:58:
58:d9:0b:4a:8d:d7:34:82:89:42:38:b5:23:99:b6:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:35:1B:5C:6E:67:CB:4E:E9:AC:18:76:AA:7C:48:64:B4:62:5F:B3
X509v3 Authority Key Identifier:
keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b4:3c:d3:46:9a:4c:60:c7:7a:3d:66:ed:bb:b9:9d:6b:66:
61:15:4c:c0:1e:e7:70:6c:4d:8d:ad:de:db:e5:10:73:7d:93:
c5:4f:f6:e5:d8:ea:a3:f8:ab:3d:53:d2:05:77:c1:4f:67:9a:
df:76:db:40:fe:9f:6f:93:5a:a8:5b:00:9f:24:f3:52:60:9f:
59:86:73:c7:9d:61:5f:71:1e:0f:ab:ef:c4:74:1b:29:45:6e:
ec:c7:fb:05:30:f2:63:85:03:d9:c8:af:de:5b:d2:65:b0:08:
3c:e4:0c:f2:da:5d:bb:10:ab:fe:dc:31:df:1e:d3:07:96:c8:
1a:d2:ad:58:ca:74:4e:a8:cc:35:71:9f:5c:3a:7d:f7:8b:6e:
92:1b:7e:84:cf:47:e0:6f:66:08:04:2e:54:2c:e8:0f:6a:03:
30:2c:57:0e:b0:db:7e:b0:c4:20:2b:1e:65:62:79:36:bf:ed:
38:eb:99:55:e3:11:c8:68:f3:ab:b5:0d:0c:5e:3d:e9:99:b4:
79:58:b7:c9:2e:7a:9e:d1:fe:c1:b7:bf:2d:c4:30:ec:df:a4:
b3:5f:59:7a:da:27:56:3d:d8:e7:63:37:62:ce:1e:19:f0:50:
29:3f:af:95:fc:35:51:3a:9b:74:3e:90:78:93:e7:39:cf:85:
a8:4a:f3:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0s+6RPiqF3xEG5Agt+QOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMmI5MjFkOWE2YjQ0NGFiNThlNjZlYjg4ZjdjMTIzOThl
YTA0YjUwHhcNMjUwNTA5MTEwMDEyWhcNMjUwNTEwMTEwMDEyWjAzMTEwLwYDVQQD
EyhjNTM1MWI1YzZlNjdjYjRlZTlhYzE4NzZhYTdjNDg2NGI0NjI1ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjKzODDDuiJL902F9DQpwUX2LEqZ
pPrnZP3X4PeARhQPA8goMyE1avY4+qTiqtUCMYnokaxCeYaolcb5/XW6mIc9nFx7
/cXxvH3nZ49J0+2iMoqFIutAJujCPzEIs3tYt8JC1yANTqN72jQBEpfBBP9QQ/I9
G+zGDEZLoboiipUaQqSMW3BTyjr/dePJtJPQyPH59Jl8dXTsMWMlgpUB4h1d4NDI
fMIM6BsMlLx+/Tl21NjgRCzqKrJCYl93EAkHbECJGVSi7okOzCTa46luQaWQ6qJE
C6qR0pFv+MqzfRgO2kGswPMu8iaeP0v/flhY2QtKjdc0golCOLUjmbZ9nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMU1G1xuZ8tO6awYdqp8SGS0Yl+zMB8GA1UdIwQY
MBaAFGsrkh2aa0RKtY5m64j3wSOY6gS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQt
OWI1NTk1MjlhZDE2LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQtOWI1NTk1MjlhZDE2
LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrQ800aa
TGDHej1m7bu5nWtmYRVMwB7ncGxNja3e2+UQc32TxU/25djqo/irPVPSBXfBT2ea
33bbQP6fb5NaqFsAnyTzUmCfWYZzx51hX3EeD6vvxHQbKUVu7Mf7BTDyY4UD2civ
3lvSZbAIPOQM8tpduxCr/twx3x7TB5bIGtKtWMp0TqjMNXGfXDp994tukht+hM9H
4G9mCAQuVCzoD2oDMCxXDrDbfrDEICseZWJ5Nr/tOOuZVeMRyGjzq7UNDF496Zm0
eVi3yS56ntH+wbe/LcQw7N+ks19ZetonVj3Y52M3Ys4eGfBQKT+vlfw1UTqbdD6Q
eJPnOc+FqErzIQ==
-----END CERTIFICATE-----
Generated at Fri May 9 20:40:19 2025 by rpki-client