Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: ojQjaTgz3Kap18CxX1URWKXRnZUXyB3BScskx1jB3ak=
Subject key identifier: 24:65:57:3F:53:63:04:60:F6:5A:9F:DE:4A:B5:13:C4:D3:6A:69:B9
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 019656138AE170A92091B4F0783D450E7EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 010C
Signing time: Mon 21 Apr 2025 02:00:43 +0000
Manifest this update: Mon 21 Apr 2025 02:00:43 +0000
Manifest next update: Tue 22 Apr 2025 02:00:43 +0000
Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: Mplt6faZP78uPy7oqYsY2E0c/dVpMlAAA93yApTqQyM=)
2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:8a:e1:70:a9:20:91:b4:f0:78:3d:45:0e:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Apr 21 02:00:43 2025 GMT
Not After : Apr 22 02:00:43 2025 GMT
Subject: CN=2465573f53630460f65a9fde4ab513c4d36a69b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:95:3b:07:40:0d:7b:a1:27:6a:50:2d:0a:
51:7e:7b:90:03:13:7a:ea:8b:74:e3:ce:13:0b:5d:
b3:5d:87:03:11:fd:60:4b:85:8d:7c:22:a2:c4:4e:
fc:98:65:2c:aa:6c:60:59:2a:f7:14:81:bc:b2:31:
16:eb:78:32:62:5c:9b:1c:7a:38:9b:84:8a:7c:6f:
85:f6:89:a8:f1:78:11:9d:0e:c2:16:7c:ca:a4:c5:
b4:b0:5c:c7:db:b7:39:02:9c:80:75:36:74:5a:df:
e4:ee:f1:9d:48:85:b5:ea:d1:f7:dc:57:f3:5a:dc:
45:0d:15:11:98:0a:67:65:52:3e:b0:32:fe:ef:fb:
91:6e:ff:04:79:17:d8:81:ac:d2:92:d2:ce:d2:95:
d4:27:45:c3:b7:2f:96:c7:d0:e5:16:28:99:cc:09:
3d:51:9d:53:05:cb:1b:aa:6b:49:a3:da:d8:cb:92:
92:fe:89:a5:32:02:e8:e7:92:4f:e0:ac:c0:9e:96:
35:ca:12:91:d2:3d:66:41:9a:42:4a:f8:6e:a2:d7:
11:c6:9b:6d:87:57:79:22:3c:07:be:3a:f5:5a:d7:
ee:79:94:3d:67:72:b6:db:6d:e0:72:09:f6:5a:16:
e7:eb:9d:be:36:71:28:5f:ed:e6:36:b2:e7:a1:5d:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:65:57:3F:53:63:04:60:F6:5A:9F:DE:4A:B5:13:C4:D3:6A:69:B9
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7a:c8:c6:44:a4:87:d5:38:c3:06:92:24:35:35:de:c2:64:
87:5e:20:a6:22:df:20:08:8c:0b:1a:9a:57:44:00:7f:c7:da:
16:9f:94:bc:33:a0:c9:a5:4c:0e:5d:46:51:d4:06:2b:70:35:
5c:ad:a4:22:6a:d3:9b:84:4b:f7:1f:b8:07:59:58:ac:4a:87:
a9:12:ff:1e:f3:4b:6d:74:3d:de:26:5f:9c:0c:a6:f3:b3:41:
ed:62:3e:9e:de:cf:f2:60:cc:24:97:7c:10:d0:d3:3b:fb:63:
86:f3:9d:f6:6b:f7:09:af:be:f7:83:b4:9e:2f:31:6c:13:73:
fc:3d:23:3f:90:7d:d7:42:24:ee:0e:a3:cd:98:f2:3a:6b:42:
a2:ca:96:a7:10:62:87:45:ef:d1:e4:c2:6f:42:e7:97:64:4f:
41:ea:94:60:21:21:63:52:bd:45:57:0f:47:1c:d2:75:15:b7:
79:4b:ed:b3:8e:48:f5:d0:85:6d:fa:eb:20:47:41:63:d0:e0:
da:c0:0c:fa:15:3b:ab:95:ba:b4:66:28:3b:1e:fe:9e:c3:38:
85:0b:f2:8a:10:d1:0a:18:2f:e4:95:96:79:27:fb:88:e7:10:
08:77:2c:d8:23:7f:23:b5:7e:b4:86:15:5d:e2:01:ec:66:7b:
76:b9:22:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE4rhcKkgkbTweD1FDn7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzllYTRmOTY1ODhiMTZiZDRmY2EzOGQ0YzFkZGY2NWMx
YWJmZGEwHhcNMjUwNDIxMDIwMDQzWhcNMjUwNDIyMDIwMDQzWjAzMTEwLwYDVQQD
EygyNDY1NTczZjUzNjMwNDYwZjY1YTlmZGU0YWI1MTNjNGQzNmE2OWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfWVOwdADXuhJ2pQLQpRfnuQAxN6
6ot0484TC12zXYcDEf1gS4WNfCKixE78mGUsqmxgWSr3FIG8sjEW63gyYlybHHo4
m4SKfG+F9omo8XgRnQ7CFnzKpMW0sFzH27c5ApyAdTZ0Wt/k7vGdSIW16tH33Ffz
WtxFDRURmApnZVI+sDL+7/uRbv8EeRfYgazSktLO0pXUJ0XDty+Wx9DlFiiZzAk9
UZ1TBcsbqmtJo9rYy5KS/omlMgLo55JP4KzAnpY1yhKR0j1mQZpCSvhuotcRxptt
h1d5IjwHvjr1WtfueZQ9Z3K2223gcgn2Whbn652+NnEoX+3mNrLnoV2eCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRlVz9TYwRg9lqf3kq1E8TTamm5MB8GA1UdIwQY
MBaAFAPJ6k+WWIsWvU/KONTB3fZcGr/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2Nzct
MWNkMzNjNjJjNDVjLzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2NzctMWNkMzNjNjJjNDVj
LzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHrIxkSk
h9U4wwaSJDU13sJkh14gpiLfIAiMCxqaV0QAf8faFp+UvDOgyaVMDl1GUdQGK3A1
XK2kImrTm4RL9x+4B1lYrEqHqRL/HvNLbXQ93iZfnAym87NB7WI+nt7P8mDMJJd8
ENDTO/tjhvOd9mv3Ca++94O0ni8xbBNz/D0jP5B910Ik7g6jzZjyOmtCosqWpxBi
h0Xv0eTCb0Lnl2RPQeqUYCEhY1K9RVcPRxzSdRW3eUvts45I9dCFbfrrIEdBY9Dg
2sAM+hU7q5W6tGYoOx7+nsM4hQvyihDRChgv5JWWeSf7iOcQCHcs2CN/I7V+tIYV
XeIB7GZ7drkiqA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:07 2025 by rpki-client