Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: kSIxLbOMcAPB9uQXzONVTXFfu50zmQ74b+fim64Lvfc=
Subject key identifier: EF:A4:36:7E:67:FD:58:51:DE:52:94:14:05:7A:D4:D7:60:21:AE:09
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 0196B2FC76499092E58F1FDAAB870EF729B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 03:00:11 +0000
Manifest this update: Fri 09 May 2025 03:00:11 +0000
Manifest next update: Sat 10 May 2025 03:00:11 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: VYPuVaV1wlH8Woxx6aKJZUwWvCyLCbb0XkP1ADktn44=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:fc:76:49:90:92:e5:8f:1f:da:ab:87:0e:f7:29:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: May 9 03:00:11 2025 GMT
Not After : May 10 03:00:11 2025 GMT
Subject: CN=efa4367e67fd5851de529414057ad4d76021ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:0d:ec:5c:c3:f9:72:fb:d6:58:44:88:1e:
dc:58:06:af:fc:43:a2:c2:42:39:36:63:95:d6:f6:
03:ef:e8:2f:7e:3e:23:c5:55:b9:c4:1d:b5:9b:60:
8a:bf:ac:5f:29:d3:df:e4:bf:e4:12:81:63:7a:9c:
d2:b5:9d:4e:e2:93:15:2f:3b:bc:e2:98:80:0e:16:
fe:c9:2f:1b:24:21:87:af:0c:ea:a6:25:b7:ee:fc:
09:ae:83:5c:bf:d6:28:77:7d:7a:65:57:4d:70:ae:
5a:67:49:43:88:0e:02:e4:fc:02:d8:84:2c:ef:a5:
7c:2e:9f:10:00:84:60:b3:ee:c6:86:42:05:93:11:
b1:e9:5b:92:f1:2b:1d:e1:2e:00:2e:ed:1f:77:09:
03:ef:8d:7e:8e:5a:f0:74:bb:6f:27:0f:d3:9d:49:
a9:65:98:90:8e:c4:67:6f:d5:17:51:05:23:2b:4b:
7a:59:b1:46:31:40:cb:62:96:71:d0:fa:b8:32:2e:
3a:fc:75:86:76:cc:0e:53:33:8d:3f:41:2a:6b:ea:
9a:08:17:1d:a6:99:1e:ba:f5:d3:1c:1f:1b:82:45:
88:d4:21:d0:8c:8d:ce:c3:f9:86:cc:59:47:51:1c:
6c:3e:a7:0f:cb:6b:5b:a2:b9:d9:43:ab:b7:b4:71:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:36:7E:67:FD:58:51:DE:52:94:14:05:7A:D4:D7:60:21:AE:09
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:34:8a:af:6c:46:5d:f9:57:ac:b2:79:bb:3a:34:f7:b1:fb:
98:ea:80:73:b9:35:96:55:e4:9d:e2:e0:bb:86:3f:30:89:43:
33:bd:1d:87:43:80:3e:a6:b3:87:f8:10:e3:18:22:fb:e0:2d:
4e:9c:7b:00:53:73:bb:55:25:1f:be:7e:cf:bc:87:1c:c6:db:
59:bc:e8:f2:f4:a0:5c:d8:55:ed:63:2b:34:88:8e:97:24:87:
52:d6:9a:54:32:4e:0b:d1:cf:3e:fe:8f:93:54:07:c0:15:01:
b7:ac:2a:f3:4e:f5:65:04:10:f3:42:2d:65:72:79:b4:5b:0f:
16:86:3b:2e:aa:e8:b2:89:5a:01:18:9f:14:88:d0:53:ab:0a:
83:2d:3c:6b:8b:64:2e:02:70:26:29:f6:a8:f0:86:74:aa:03:
47:c1:a2:2b:46:e4:e0:4d:87:17:cf:15:43:20:2f:bc:06:70:
28:be:f8:9a:3e:0b:07:d5:ad:74:d1:c7:93:97:c5:0c:4d:71:
99:4d:6b:07:2f:e2:07:8b:6e:18:ed:4d:c8:16:f4:24:aa:e3:
45:8e:87:02:0d:a6:8e:b2:ad:b4:b3:9f:5c:99:0c:6c:36:ca:
0d:0c:7f:a3:a1:c3:04:4d:af:58:e7:ba:23:41:05:45:c5:95:
38:e0:25:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZay/HZJkJLljx/aq4cO9ym2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZmJkOGQ3MmJmZmJiY2Q3NzA3NmE2YTZjYzk5NGQzNjQy
ODQ5MTYwHhcNMjUwNTA5MDMwMDExWhcNMjUwNTEwMDMwMDExWjAzMTEwLwYDVQQD
EyhlZmE0MzY3ZTY3ZmQ1ODUxZGU1Mjk0MTQwNTdhZDRkNzYwMjFhZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7UN7FzD+XL71lhEiB7cWAav/EOi
wkI5NmOV1vYD7+gvfj4jxVW5xB21m2CKv6xfKdPf5L/kEoFjepzStZ1O4pMVLzu8
4piADhb+yS8bJCGHrwzqpiW37vwJroNcv9Yod316ZVdNcK5aZ0lDiA4C5PwC2IQs
76V8Lp8QAIRgs+7GhkIFkxGx6VuS8Ssd4S4ALu0fdwkD741+jlrwdLtvJw/TnUmp
ZZiQjsRnb9UXUQUjK0t6WbFGMUDLYpZx0Pq4Mi46/HWGdswOUzONP0Eqa+qaCBcd
ppkeuvXTHB8bgkWI1CHQjI3Ow/mGzFlHURxsPqcPy2tbornZQ6u3tHHAiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+kNn5n/VhR3lKUFAV61NdgIa4JMB8GA1UdIwQY
MBaAFAL72Ncr/7vNdwdqamzJlNNkKEkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAt
MjNhZjU1ZTAxOTBkLzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAtMjNhZjU1ZTAxOTBk
LzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjSKr2xG
XflXrLJ5uzo097H7mOqAc7k1llXkneLgu4Y/MIlDM70dh0OAPqazh/gQ4xgi++At
Tpx7AFNzu1UlH75+z7yHHMbbWbzo8vSgXNhV7WMrNIiOlySHUtaaVDJOC9HPPv6P
k1QHwBUBt6wq8071ZQQQ80ItZXJ5tFsPFoY7LqrosolaARifFIjQU6sKgy08a4tk
LgJwJin2qPCGdKoDR8GiK0bk4E2HF88VQyAvvAZwKL74mj4LB9WtdNHHk5fFDE1x
mU1rBy/iB4tuGO1NyBb0JKrjRY6HAg2mjrKttLOfXJkMbDbKDQx/o6HDBE2vWOe6
I0EFRcWVOOAlkQ==
-----END CERTIFICATE-----
Generated at Fri May 9 08:31:47 2025 by rpki-client