Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: bbrpdII9KStzCvhGO1uThXSC3NYw1aR0kO6YOHDw6sQ=
Subject key identifier: 7F:A3:C2:4B:27:54:6E:C3:4A:54:70:1D:03:DC:B3:42:B2:A7:EE:03
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 0196AA9F190FC49C9E2DA551AEB53D5200A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 0F64
Signing time: Wed 07 May 2025 12:01:15 +0000
Manifest this update: Wed 07 May 2025 12:01:15 +0000
Manifest next update: Thu 08 May 2025 12:01:15 +0000
Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: WqxuIN7DHRvLGR48nR1T3SEMpzk/OcREPHS85ApXowY=)
2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9f:19:0f:c4:9c:9e:2d:a5:51:ae:b5:3d:52:00:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: May 7 12:01:15 2025 GMT
Not After : May 8 12:01:15 2025 GMT
Subject: CN=7fa3c24b27546ec34a54701d03dcb342b2a7ee03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:02:13:47:3f:dc:74:19:8c:aa:cc:44:a1:
00:d5:51:26:c5:49:c0:da:6c:fa:b9:19:ad:9e:a4:
bf:ba:67:38:fa:f5:ba:43:cb:2d:7b:c6:d1:da:e3:
8b:8a:8f:9f:f6:3a:ef:60:26:d7:97:90:6e:e4:f4:
17:b0:c6:40:65:88:2a:1e:9d:91:fa:28:cc:4f:1b:
9f:cc:f9:61:c2:37:8e:c8:a7:0b:60:a8:95:95:ca:
47:b8:9f:94:a3:c8:07:22:12:e6:e0:57:06:fe:97:
68:76:06:44:7d:9d:8c:8a:42:85:3c:9c:f6:9d:5b:
5b:32:ae:f8:a2:75:20:37:6f:14:77:66:d2:84:ab:
fe:45:bd:f7:33:66:29:37:57:62:c1:ef:98:95:83:
3a:22:66:23:20:b3:88:ca:ce:f1:f1:4a:e2:3b:f9:
01:10:3d:6f:76:6c:65:06:ab:56:95:a9:90:de:98:
ff:26:38:16:11:a9:b0:6a:e5:1b:2c:4f:ef:ce:28:
73:28:c5:03:87:03:08:ec:96:e4:e0:6f:a2:7a:08:
6d:5e:35:ed:97:0d:ef:f1:fb:df:af:9e:7f:e9:4a:
65:4a:f7:17:7d:95:df:2f:6f:5b:18:8f:76:08:1e:
03:81:15:37:ad:d9:16:c2:f4:48:fb:4c:a0:6a:a3:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A3:C2:4B:27:54:6E:C3:4A:54:70:1D:03:DC:B3:42:B2:A7:EE:03
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ea:4b:07:d9:93:46:78:e3:f9:fc:18:8e:df:87:97:de:f2:
7c:c8:87:95:63:6d:61:d2:41:ed:76:48:ff:28:4a:0c:9b:77:
5a:02:01:1d:08:08:6d:99:3f:8d:dc:e4:3a:70:f6:80:2d:18:
da:dd:87:7f:8c:55:e0:1e:d9:5b:9f:f2:6d:b4:58:fc:49:ac:
12:5c:53:d6:fd:c6:4b:de:0c:98:1c:1e:09:e8:1a:b0:d3:98:
86:63:7d:34:d6:0a:59:73:de:33:ef:4e:16:56:01:41:b2:59:
7a:7d:e0:52:36:dd:35:f5:a4:e6:9f:5f:ff:50:56:97:f6:7d:
ff:02:86:91:40:63:d8:73:14:6d:3f:5b:b0:e0:56:23:fb:53:
ab:44:9c:17:fa:d1:f0:72:ac:46:6d:55:0f:6a:b8:86:92:0a:
05:75:74:a9:34:18:62:46:f1:ff:69:02:2d:64:ce:fb:c0:01:
5c:ba:f4:64:0a:de:db:89:03:f2:92:38:e4:fe:1f:50:da:a0:
bf:d2:d9:92:b9:d4:ef:13:3f:cc:a4:0c:6c:d9:cd:41:08:e0:
76:f2:74:4e:1d:19:5a:89:f5:6d:30:59:10:15:84:17:26:de:
59:72:68:81:a3:ef:7e:de:91:3b:18:b0:e7:04:37:aa:a0:0a:
23:a1:e9:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqnxkPxJyeLaVRrrU9UgCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk
Y2Y5OTYwHhcNMjUwNTA3MTIwMTE1WhcNMjUwNTA4MTIwMTE1WjAzMTEwLwYDVQQD
Eyg3ZmEzYzI0YjI3NTQ2ZWMzNGE1NDcwMWQwM2RjYjM0MmIyYTdlZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWkCE0c/3HQZjKrMRKEA1VEmxUnA
2mz6uRmtnqS/umc4+vW6Q8ste8bR2uOLio+f9jrvYCbXl5Bu5PQXsMZAZYgqHp2R
+ijMTxufzPlhwjeOyKcLYKiVlcpHuJ+Uo8gHIhLm4FcG/pdodgZEfZ2MikKFPJz2
nVtbMq74onUgN28Ud2bShKv+Rb33M2YpN1diwe+YlYM6ImYjILOIys7x8UriO/kB
ED1vdmxlBqtWlamQ3pj/JjgWEamwauUbLE/vzihzKMUDhwMI7Jbk4G+ieghtXjXt
lw3v8fvfr55/6UplSvcXfZXfL29bGI92CB4DgRU3rdkWwvRI+0ygaqOs7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+jwksnVG7DSlRwHQPcs0Kyp+4DMB8GA1UdIwQY
MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt
NGQ1MzdjZjAxODA5LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5
LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOpLB9mT
Rnjj+fwYjt+Hl97yfMiHlWNtYdJB7XZI/yhKDJt3WgIBHQgIbZk/jdzkOnD2gC0Y
2t2Hf4xV4B7ZW5/ybbRY/EmsElxT1v3GS94MmBweCegasNOYhmN9NNYKWXPeM+9O
FlYBQbJZen3gUjbdNfWk5p9f/1BWl/Z9/wKGkUBj2HMUbT9bsOBWI/tTq0ScF/rR
8HKsRm1VD2q4hpIKBXV0qTQYYkbx/2kCLWTO+8ABXLr0ZAre24kD8pI45P4fUNqg
v9LZkrnU7xM/zKQMbNnNQQjgdvJ0Th0ZWon1bTBZEBWEFybeWXJogaPvft6ROxiw
5wQ3qqAKI6Hp/A==
-----END CERTIFICATE-----
Generated at Wed May 7 21:04:58 2025 by rpki-client