Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: kd6dFSR91oxNsKgH6mt44WQcAoMObRLlniHaKTz0KnA=
Subject key identifier: 7E:7C:6D:51:42:67:E2:B3:21:0C:14:97:B2:B3:E9:AE:F8:8D:B1:89
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 01969DF6089AF96C88F8F70332AB88B711C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 01:01:08 +0000
Manifest this update: Mon 05 May 2025 01:01:08 +0000
Manifest next update: Tue 06 May 2025 01:01:08 +0000
Files and hashes: 1: VNzG3ccHyaf-Ofv5con_nysGgHU.roa (hash: 2VzIYqdKT2jmdmX+vgJ//7c0c5nGJoT0dOFUmm0WlfQ=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: kqRSb/c38j/cwzpzDu4PVj867hrv17VlUGB97jDDN7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:08:9a:f9:6c:88:f8:f7:03:32:ab:88:b7:11:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: May 5 01:01:08 2025 GMT
Not After : May 6 01:01:08 2025 GMT
Subject: CN=7e7c6d514267e2b3210c1497b2b3e9aef88db189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:97:69:ba:64:4e:5a:b4:71:5c:92:bc:ad:
56:09:ad:8a:65:3a:da:2d:a0:c7:ad:c5:0c:7d:f1:
04:0a:6a:dd:f0:1d:40:fd:95:b1:3e:9e:2f:80:b9:
3e:eb:6e:6e:e5:2c:7b:31:f9:ff:d2:c5:59:ae:1d:
5a:ec:26:8b:1e:13:27:f1:20:c4:ef:d9:a8:c0:48:
05:52:e0:56:2b:79:17:fb:19:c7:25:14:bc:53:ad:
c6:8d:23:c7:4f:ae:3f:fc:29:10:17:df:3b:a2:f8:
76:90:59:42:6e:0d:e9:e3:f6:b3:a3:8d:35:e5:dc:
f9:93:70:15:5d:61:90:36:e9:36:cf:12:6d:81:36:
43:36:47:62:01:6c:36:40:e7:4c:90:dc:5c:ba:4a:
9c:de:23:63:c0:25:b7:d6:de:bf:79:66:64:15:56:
4b:91:15:55:78:9b:87:1b:e3:57:29:fd:f2:e8:db:
36:7a:c0:fc:91:21:f3:1d:e0:e1:24:56:a9:02:d9:
57:7d:8a:18:72:e5:45:78:92:38:4e:39:fd:4a:8f:
6b:e2:65:43:55:ec:0f:15:92:01:95:31:f9:5a:40:
c1:3b:15:6c:ab:18:6e:a4:57:07:e3:4f:83:da:e9:
d8:92:98:f6:d7:fd:38:11:ab:7a:0b:6a:5d:f5:ee:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7C:6D:51:42:67:E2:B3:21:0C:14:97:B2:B3:E9:AE:F8:8D:B1:89
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:87:be:26:30:b5:53:27:d0:cb:98:98:91:cb:c9:f6:66:fd:
f0:fb:46:06:3c:1c:18:41:0a:75:13:b4:4f:74:95:3f:00:02:
eb:a9:c2:41:e5:27:da:f9:67:a5:66:d3:b2:b4:f6:15:43:db:
8b:56:b6:c1:4c:be:d7:c5:e1:c3:1b:35:ec:a8:a4:a9:41:b3:
d8:f3:74:48:6f:9c:1a:f4:f2:a4:e2:67:3e:ea:46:2c:84:ed:
1a:41:6b:ed:f5:de:9f:07:a3:83:18:9a:54:8a:bd:0f:80:e9:
23:de:9c:7b:1f:9b:d5:cf:6d:5b:fb:06:f0:c9:ee:85:c5:26:
4a:53:29:e5:61:13:12:b3:f0:ac:da:c7:50:49:95:84:92:ef:
d9:aa:76:32:84:cc:81:13:3d:7e:d6:7f:00:d4:aa:31:64:52:
15:fa:8e:06:46:a8:9f:ae:92:94:1f:0e:8a:0a:57:3d:7f:9f:
13:8f:d2:ef:3e:a7:23:30:99:55:e4:d0:12:62:d4:01:63:32:
fa:8f:b9:a3:18:47:23:a9:b5:03:7f:b8:5b:25:c2:11:4b:c4:
33:1b:40:ec:07:fb:78:8c:ce:1f:bd:29:c2:67:03:46:88:a6:
cd:d7:ed:a5:25:32:58:cc:89:97:e4:1a:01:40:a2:29:9a:7c:
f6:1f:14:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9gia+WyI+PcDMquItxHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNTAxODI3MTQ0YTMxODhiZWExY2NlZTU4NjU2ZmQ2NDI5
ZDhmOTUwHhcNMjUwNTA1MDEwMTA4WhcNMjUwNTA2MDEwMTA4WjAzMTEwLwYDVQQD
Eyg3ZTdjNmQ1MTQyNjdlMmIzMjEwYzE0OTdiMmIzZTlhZWY4OGRiMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTmXabpkTlq0cVySvK1WCa2KZTra
LaDHrcUMffEECmrd8B1A/ZWxPp4vgLk+625u5Sx7Mfn/0sVZrh1a7CaLHhMn8SDE
79mowEgFUuBWK3kX+xnHJRS8U63GjSPHT64//CkQF987ovh2kFlCbg3p4/azo401
5dz5k3AVXWGQNuk2zxJtgTZDNkdiAWw2QOdMkNxcukqc3iNjwCW31t6/eWZkFVZL
kRVVeJuHG+NXKf3y6Ns2esD8kSHzHeDhJFapAtlXfYoYcuVFeJI4Tjn9So9r4mVD
VewPFZIBlTH5WkDBOxVsqxhupFcH40+D2unYkpj21/04Eat6C2pd9e6DzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH58bVFCZ+KzIQwUl7Kz6a74jbGJMB8GA1UdIwQY
MBaAFK5QGCcUSjGIvqHM7lhlb9ZCnY+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODIt
MDk4NmQ4YjBjNmQ5LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODItMDk4NmQ4YjBjNmQ5
LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYe+JjC1
UyfQy5iYkcvJ9mb98PtGBjwcGEEKdRO0T3SVPwAC66nCQeUn2vlnpWbTsrT2FUPb
i1a2wUy+18Xhwxs17KikqUGz2PN0SG+cGvTypOJnPupGLITtGkFr7fXenwejgxia
VIq9D4DpI96cex+b1c9tW/sG8MnuhcUmSlMp5WETErPwrNrHUEmVhJLv2ap2MoTM
gRM9ftZ/ANSqMWRSFfqOBkaon66SlB8OigpXPX+fE4/S7z6nIzCZVeTQEmLUAWMy
+o+5oxhHI6m1A3+4WyXCEUvEMxtA7Af7eIzOH70pwmcDRoimzdftpSUyWMyJl+Qa
AUCiKZp89h8UwA==
-----END CERTIFICATE-----
Generated at Mon May 5 10:54:51 2025 by rpki-client