Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: KT9OAkr5HHexSL7LuahBXVYgHw4bMud8j0BEzNsbtw0=
Subject key identifier: 51:14:17:2A:16:A8:66:1A:BF:8E:36:20:55:8D:A5:73:64:C9:D6:34
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 0196B220CE52FCA451CD046B11906249106E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 23:00:16 +0000
Manifest this update: Thu 08 May 2025 23:00:16 +0000
Manifest next update: Fri 09 May 2025 23:00:16 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: ezAyGAd/h2ULh4w/kmRABi20+PStafkuXsu5nUcmI68=)
2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:20:ce:52:fc:a4:51:cd:04:6b:11:90:62:49:10:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: May 8 23:00:16 2025 GMT
Not After : May 9 23:00:16 2025 GMT
Subject: CN=5114172a16a8661abf8e3620558da57364c9d634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:7b:db:06:16:20:db:b2:aa:47:94:96:d6:
ee:47:f0:bd:8d:d8:cd:95:72:4f:4d:8d:e4:e4:ff:
5d:0d:7f:1f:5e:85:8a:73:a6:27:d3:eb:e0:64:a7:
c6:59:aa:d7:b6:23:36:ac:02:df:d7:f3:bf:78:0c:
d1:6a:ae:65:29:3d:c2:bc:16:b3:63:87:c2:a2:bd:
25:6f:96:ed:01:1a:92:d5:4f:d0:19:02:59:ae:fb:
21:7b:46:63:56:e7:9b:17:35:9d:77:14:6c:6e:ff:
af:f5:2d:a8:90:dc:8f:88:0d:7f:91:fd:fb:eb:ae:
6c:2f:23:3c:1f:f5:f4:88:57:73:c5:0e:d3:c1:aa:
15:26:b5:a6:f7:7e:f6:b4:c0:d8:a7:5d:90:8c:5c:
39:a6:ce:5a:7d:cf:c3:fa:73:e2:ac:84:16:55:8b:
3a:fb:1b:48:2c:4d:80:35:9e:ba:57:40:dd:b4:83:
1e:d5:21:b4:4b:48:ef:23:0c:29:ea:09:e0:18:de:
f7:2d:cf:44:b4:ad:e9:ba:a1:e5:46:7a:ad:e8:e0:
b4:70:26:d5:19:79:cd:4a:17:ad:7c:d8:43:da:c0:
eb:f4:86:70:79:ca:d2:20:83:a5:2f:af:31:40:fe:
b4:35:9f:a2:10:e1:8f:ad:ef:85:a7:3c:75:0f:9f:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:17:2A:16:A8:66:1A:BF:8E:36:20:55:8D:A5:73:64:C9:D6:34
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:17:b0:cb:62:29:d7:81:79:83:e0:cc:b8:47:9c:a6:d9:2a:
13:66:cf:e2:1c:55:4b:01:af:c7:b2:af:dd:b6:87:e4:a3:a8:
da:78:69:03:8f:b0:53:3a:81:83:0d:97:b3:04:9c:36:39:a2:
b9:1c:5a:2c:db:dc:2f:4b:37:53:94:c7:44:55:af:64:af:27:
0d:f4:61:bf:b5:ea:0e:5a:5f:c2:3e:1c:1a:45:cc:61:94:b8:
5f:9b:ca:a9:93:ac:ee:60:2e:7e:54:3c:91:1e:49:df:9f:bb:
50:80:bc:32:c8:df:f2:7a:dc:ac:db:0c:4f:7c:c6:5b:6b:d6:
44:32:4d:82:1a:e5:04:c9:f1:2e:0d:eb:c9:28:07:fc:fd:4e:
b1:a7:e9:e8:34:2e:d7:43:22:bf:4c:a9:4c:10:8d:db:ab:13:
30:4f:63:63:4c:75:f7:06:28:a3:28:9c:1a:17:36:ba:15:da:
56:2a:99:e2:eb:80:54:7b:8c:48:fc:54:44:19:37:18:7f:c0:
25:7f:12:fd:da:cb:3e:f8:fd:38:1c:fd:15:5f:d5:a7:d7:71:
8e:92:bc:6d:c8:65:4a:8d:66:c7:63:59:fb:3f:28:c5:ca:5c:
ab:3d:8a:2a:9d:b0:d0:1b:98:23:0a:a6:8f:c5:53:6a:f8:41:
d7:69:02:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayIM5S/KRRzQRrEZBiSRBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNmFhYzM0YzY2ZmRhNjRiNjdlYjk2YjAyZDgxOTc4OWZl
YmU4NjEwHhcNMjUwNTA4MjMwMDE2WhcNMjUwNTA5MjMwMDE2WjAzMTEwLwYDVQQD
Eyg1MTE0MTcyYTE2YTg2NjFhYmY4ZTM2MjA1NThkYTU3MzY0YzlkNjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns572wYWINuyqkeUltbuR/C9jdjN
lXJPTY3k5P9dDX8fXoWKc6Yn0+vgZKfGWarXtiM2rALf1/O/eAzRaq5lKT3CvBaz
Y4fCor0lb5btARqS1U/QGQJZrvshe0ZjVuebFzWddxRsbv+v9S2okNyPiA1/kf37
665sLyM8H/X0iFdzxQ7TwaoVJrWm9372tMDYp12QjFw5ps5afc/D+nPirIQWVYs6
+xtILE2ANZ66V0DdtIMe1SG0S0jvIwwp6gngGN73Lc9EtK3puqHlRnqt6OC0cCbV
GXnNShetfNhD2sDr9IZwecrSIIOlL68xQP60NZ+iEOGPre+Fpzx1D5+wKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEUFyoWqGYav442IFWNpXNkydY0MB8GA1UdIwQY
MBaAFANqrDTGb9pktn65awLYGXif6+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYt
OTYzOTkzY2U1MTgxLzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYtOTYzOTkzY2U1MTgx
LzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxewy2Ip
14F5g+DMuEecptkqE2bP4hxVSwGvx7Kv3baH5KOo2nhpA4+wUzqBgw2XswScNjmi
uRxaLNvcL0s3U5THRFWvZK8nDfRhv7XqDlpfwj4cGkXMYZS4X5vKqZOs7mAuflQ8
kR5J35+7UIC8Msjf8nrcrNsMT3zGW2vWRDJNghrlBMnxLg3rySgH/P1Osafp6DQu
10Miv0ypTBCN26sTME9jY0x19wYooyicGhc2uhXaViqZ4uuAVHuMSPxURBk3GH/A
JX8S/drLPvj9OBz9FV/Vp9dxjpK8bchlSo1mx2NZ+z8oxcpcqz2KKp2w0BuYIwqm
j8VTavhB12kCJw==
-----END CERTIFICATE-----
Generated at Fri May 9 05:10:32 2025 by rpki-client