Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: MWDYNHwXheVhN39f+1eyYdMoE5HRL2GG96DXAgwe2OI=
Subject key identifier: 42:9C:1A:32:B8:65:A8:1C:2B:28:96:A6:89:FE:34:10:90:B6:02:AC
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 01965C15AB05B38565B185C29D3C588B1C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0A22
Signing time: Tue 22 Apr 2025 06:00:45 +0000
Manifest this update: Tue 22 Apr 2025 06:00:45 +0000
Manifest next update: Wed 23 Apr 2025 06:00:45 +0000
Files and hashes: 1: 5d3BkT4g6BSm4A2tPk7SLnm-a2o.roa (hash: r7O0hom8hw87s+SCAknwxnQSAbbhz820jIMuUD9IwqI=)
2: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: ejc009xqlPY7mN/M4OzsO6oPIDj/NK62A3isFgLzaio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:ab:05:b3:85:65:b1:85:c2:9d:3c:58:8b:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Apr 22 06:00:45 2025 GMT
Not After : Apr 23 06:00:45 2025 GMT
Subject: CN=429c1a32b865a81c2b2896a689fe341090b602ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:31:e6:db:e0:ad:d4:02:54:13:0b:3a:d8:
8d:f1:4d:ba:10:ed:0b:01:98:be:cb:0e:08:e0:3d:
eb:76:85:50:51:b0:a9:28:19:d4:19:60:ae:c4:70:
d4:ff:9b:85:dc:94:c3:53:36:e3:6f:70:a3:75:b4:
65:c9:e6:b9:83:c6:98:2e:99:29:59:d0:3d:c6:ee:
c8:b4:09:19:21:2c:fd:ae:62:99:87:7b:ee:9c:6f:
e7:dc:26:ea:16:60:76:61:f0:fe:29:b3:5c:06:ba:
57:77:11:f3:a7:42:7d:46:be:0d:4d:c8:ce:42:78:
b2:c4:a3:ea:ad:fe:6c:8b:72:bd:79:a9:61:2c:6a:
5f:a3:f1:d1:49:47:db:20:8b:0d:99:94:fc:cd:2c:
a3:87:2e:ec:70:5f:d3:a2:ab:14:86:e5:fb:9a:76:
1f:85:bc:d9:a1:a5:89:67:2f:00:7f:8b:a2:c4:91:
a4:66:00:4b:ad:32:97:a6:8b:6e:ba:a8:46:a5:5a:
a0:63:53:2c:45:1e:ab:85:e8:fb:b7:59:f7:c1:c2:
97:21:a8:c9:e3:5a:e0:33:47:5f:96:eb:2d:98:ee:
e3:59:17:55:d6:93:81:55:02:c6:ed:63:5e:34:ac:
b1:32:02:8e:a8:e3:ec:d3:b4:1f:bf:85:ba:0f:d3:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:1A:32:B8:65:A8:1C:2B:28:96:A6:89:FE:34:10:90:B6:02:AC
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:5b:82:8d:92:47:16:d2:37:36:e9:02:0b:e0:bd:e4:f2:
5e:7b:75:67:aa:78:b5:8c:32:b9:2c:db:eb:35:8e:c9:69:11:
4e:de:b5:9b:eb:d2:bd:e4:fc:d0:9f:a2:8f:39:a9:aa:e6:37:
d9:a9:1b:5f:94:1a:4c:78:78:48:c4:08:f3:ba:08:06:b8:52:
c4:d9:87:82:0e:81:bc:c8:00:fe:fe:e4:d5:e7:2c:10:fe:05:
d3:16:84:15:9b:3e:5d:5e:0e:d6:1d:6c:fe:ef:aa:62:32:d0:
ae:24:78:1d:83:f0:ac:ac:49:05:05:65:57:64:64:16:da:c8:
1c:18:65:3f:c6:c4:48:80:2e:0e:92:8c:c2:b8:e0:b1:a6:27:
82:7a:e3:9b:cd:6f:4a:e6:01:ac:a5:39:ae:80:54:2a:b2:57:
ee:22:a7:1a:e7:db:58:97:df:d7:68:8a:27:c5:d5:e1:f4:5b:
49:6e:21:16:f4:51:99:62:79:af:20:86:24:27:28:95:d6:97:
21:cc:ca:9b:f7:13:d2:2f:10:20:27:2d:62:61:43:27:15:e3:
0c:92:54:f9:25:7a:ae:d0:6d:14:5a:c4:50:e0:6e:76:4b:73:
68:62:5b:76:13:a5:ab:cf:58:b1:91:bf:35:05:f9:34:0e:01:
aa:94:8e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcFasFs4VlsYXCnTxYixxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZmM1YzA2NGY1MTU5YzhhMWZhNDA2NmM4Y2I4ZmY3MDE2
NzFkZDIwHhcNMjUwNDIyMDYwMDQ1WhcNMjUwNDIzMDYwMDQ1WjAzMTEwLwYDVQQD
Eyg0MjljMWEzMmI4NjVhODFjMmIyODk2YTY4OWZlMzQxMDkwYjYwMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtYx5tvgrdQCVBMLOtiN8U26EO0L
AZi+yw4I4D3rdoVQUbCpKBnUGWCuxHDU/5uF3JTDUzbjb3CjdbRlyea5g8aYLpkp
WdA9xu7ItAkZISz9rmKZh3vunG/n3CbqFmB2YfD+KbNcBrpXdxHzp0J9Rr4NTcjO
QniyxKPqrf5si3K9ealhLGpfo/HRSUfbIIsNmZT8zSyjhy7scF/ToqsUhuX7mnYf
hbzZoaWJZy8Af4uixJGkZgBLrTKXpotuuqhGpVqgY1MsRR6rhej7t1n3wcKXIajJ
41rgM0dflustmO7jWRdV1pOBVQLG7WNeNKyxMgKOqOPs07Qfv4W6D9NpqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKcGjK4ZagcKyiWpon+NBCQtgKsMB8GA1UdIwQY
MBaAFAL8XAZPUVnIofpAZsjLj/cBZx3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEt
NzkyYTkxYzVjYTJiLzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEtNzkyYTkxYzVjYTJi
LzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM45bgo2S
RxbSNzbpAgvgveTyXnt1Z6p4tYwyuSzb6zWOyWkRTt61m+vSveT80J+ijzmpquY3
2akbX5QaTHh4SMQI87oIBrhSxNmHgg6BvMgA/v7k1ecsEP4F0xaEFZs+XV4O1h1s
/u+qYjLQriR4HYPwrKxJBQVlV2RkFtrIHBhlP8bESIAuDpKMwrjgsaYngnrjm81v
SuYBrKU5roBUKrJX7iKnGufbWJff12iKJ8XV4fRbSW4hFvRRmWJ5ryCGJCcoldaX
IczKm/cT0i8QICctYmFDJxXjDJJU+SV6rtBtFFrEUOBudktzaGJbdhOlq89YsZG/
NQX5NA4BqpSOgg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:57 2025 by rpki-client