Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier: 2DgvTk7XThUhdFSXyno6EP/YgVeiRS6R7LGWHC7bLaA=
Subject key identifier: 8B:65:90:63:30:93:2D:72:FC:EE:E5:A0:7B:FC:06:15:79:15:AB:34
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 0196A389A3E06E5E6CC23987175CBF9F55A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number: 0A1B
Signing time: Tue 06 May 2025 03:00:28 +0000
Manifest this update: Tue 06 May 2025 03:00:28 +0000
Manifest next update: Wed 07 May 2025 03:00:28 +0000
Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: yTEq2BFRVM81+ytHmd7XxAAi/agAynVHQLO76ogYruk=)
2: vSD8XToST3_PVTIy1XwVerhMPWI.roa (hash: Yvhr0/CtepPwOm3ynZwacKeoADnHcOUi9JQFKNsVsJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:a3:e0:6e:5e:6c:c2:39:87:17:5c:bf:9f:55:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: May 6 03:00:28 2025 GMT
Not After : May 7 03:00:28 2025 GMT
Subject: CN=8b65906330932d72fceee5a07bfc06157915ab34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:ad:f5:f7:78:fa:86:39:f1:93:28:aa:7c:
cb:c7:38:26:b1:c0:4d:2e:aa:76:c2:23:3c:eb:9d:
4b:72:77:f7:4c:d5:f9:53:0c:08:5d:c9:de:25:6f:
50:5a:3b:ef:51:95:b9:9a:de:b2:07:02:40:35:0d:
5e:3d:6b:f0:d1:c0:b9:13:52:56:60:e0:ba:7b:58:
61:a6:fb:03:f7:a5:13:9c:09:99:49:66:1c:f6:42:
73:3f:c8:97:b8:cf:01:a7:f4:46:10:c1:42:2f:3b:
d4:9e:2a:3a:b3:b1:27:fe:b6:bb:95:0b:fb:8f:a6:
97:f4:8d:2b:51:a0:2b:e3:4a:dd:6c:4b:32:ce:4e:
ee:e2:3a:1f:47:42:75:8f:e7:d3:c4:a4:53:22:5f:
96:19:c4:89:3a:df:08:e6:d9:7f:19:fb:58:e6:61:
cc:c4:8b:93:ff:6b:0c:73:a4:17:aa:6e:86:b8:26:
ae:13:44:30:0a:d9:a6:16:75:c9:72:a2:43:15:88:
bc:61:27:1c:56:67:67:c6:7c:06:37:ce:b6:1b:67:
cb:84:01:32:8c:20:1b:ff:80:4d:2d:14:89:64:82:
4d:4a:e6:33:03:fa:b6:64:8d:84:33:93:f2:9e:82:
9c:3c:23:35:be:b5:11:bd:b6:3c:51:2f:52:bf:6d:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:65:90:63:30:93:2D:72:FC:EE:E5:A0:7B:FC:06:15:79:15:AB:34
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b4:81:d2:48:17:a3:4d:30:fb:9c:f6:b1:a7:79:74:52:52:
68:88:61:59:3b:4f:05:c9:d2:f4:fd:b2:52:99:2b:a2:be:d1:
01:04:4b:bb:ec:ce:12:4e:30:44:1e:26:dc:5d:ed:d2:e5:d1:
d0:20:2f:f2:c8:58:4d:fa:01:ab:02:ec:51:7c:29:5f:62:e9:
e8:f0:fd:ed:fa:d3:81:07:6f:aa:78:9c:eb:41:02:15:40:d9:
48:35:06:8e:02:ea:34:46:9b:6d:9f:37:db:d5:43:34:85:a3:
fe:b5:cc:d9:3d:55:4d:50:0a:74:8d:c9:d7:8b:16:31:0a:63:
53:4f:d5:5d:b3:8d:ec:c2:cb:e8:b1:6d:9a:20:0d:21:d6:41:
32:09:c9:f6:6c:6e:0e:89:a9:d0:b6:fc:95:dc:b4:b4:fc:82:
12:fa:c8:ab:1b:f3:42:67:66:fb:33:b2:30:1d:0f:72:f4:aa:
7b:0c:49:17:89:61:66:1e:c3:df:7f:d8:a0:6a:6b:d9:84:c2:
21:b8:84:b1:0a:12:92:76:16:bf:fc:05:26:99:30:13:8e:bd:
97:7d:f2:c2:41:83:ae:0d:cf:18:d5:8d:b8:8a:7d:a5:90:11:
56:37:87:49:90:ca:66:04:f9:6a:16:18:02:56:43:cd:7c:9e:
21:3a:db:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajiaPgbl5swjmHF1y/n1WjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzJjMTg3ZDk4YjQ2MDM4MDRlZDExNjVhZGI0NTA5YjYz
MGE4M2EwHhcNMjUwNTA2MDMwMDI4WhcNMjUwNTA3MDMwMDI4WjAzMTEwLwYDVQQD
Eyg4YjY1OTA2MzMwOTMyZDcyZmNlZWU1YTA3YmZjMDYxNTc5MTVhYjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG+t9fd4+oY58ZMoqnzLxzgmscBN
Lqp2wiM8651Lcnf3TNX5UwwIXcneJW9QWjvvUZW5mt6yBwJANQ1ePWvw0cC5E1JW
YOC6e1hhpvsD96UTnAmZSWYc9kJzP8iXuM8Bp/RGEMFCLzvUnio6s7En/ra7lQv7
j6aX9I0rUaAr40rdbEsyzk7u4jofR0J1j+fTxKRTIl+WGcSJOt8I5tl/GftY5mHM
xIuT/2sMc6QXqm6GuCauE0QwCtmmFnXJcqJDFYi8YSccVmdnxnwGN862G2fLhAEy
jCAb/4BNLRSJZIJNSuYzA/q2ZI2EM5PynoKcPCM1vrURvbY8US9Sv22nDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItlkGMwky1y/O7loHv8BhV5Fas0MB8GA1UdIwQY
MBaAFALCwYfZi0YDgE7RFlrbRQm2MKg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83MjllYTQtNmE2OC00ODM4LThmZWMt
N2ZlYjE4YjlmNTUyLzEvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83MjllYTQtNmE2OC00ODM4LThmZWMtN2ZlYjE4YjlmNTUy
LzEvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLSB0kgX
o00w+5z2sad5dFJSaIhhWTtPBcnS9P2yUpkror7RAQRLu+zOEk4wRB4m3F3t0uXR
0CAv8shYTfoBqwLsUXwpX2Lp6PD97frTgQdvqnic60ECFUDZSDUGjgLqNEabbZ83
29VDNIWj/rXM2T1VTVAKdI3J14sWMQpjU0/VXbON7MLL6LFtmiANIdZBMgnJ9mxu
Domp0Lb8ldy0tPyCEvrIqxvzQmdm+zOyMB0PcvSqewxJF4lhZh7D33/YoGpr2YTC
IbiEsQoSknYWv/wFJpkwE469l33ywkGDrg3PGNWNuIp9pZARVjeHSZDKZgT5ahYY
AlZDzXyeITrb2w==
-----END CERTIFICATE-----
Generated at Tue May 6 08:31:18 2025 by rpki-client