Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
File: aescHUkwv7_iXqfwpF19C2Eef2I.mft (raw, json)
Hash identifier: lIuohc7Hh0PIt1g/sPd6oho0EMbaiJpPTpJm7IkZJnA=
Subject key identifier: EC:58:FB:09:70:A5:AC:AA:47:5B:4A:E2:2E:A8:3A:2B:F2:09:9E:96
Authority key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
Certificate issuer: /CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Certificate serial: 019656B868F8CDABEFC6EE7503E187798F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
Manifest number: D9
Signing time: Mon 21 Apr 2025 05:00:48 +0000
Manifest this update: Mon 21 Apr 2025 05:00:48 +0000
Manifest next update: Tue 22 Apr 2025 05:00:48 +0000
Files and hashes: 1: _EbNwpReLUVNd1YP_0CwE7ZjiIE.roa (hash: h2xnKbmoWDr+VElZXTIO8MYVw2Dx5IJspYhOYFMtbaw=)
2: aescHUkwv7_iXqfwpF19C2Eef2I.crl (hash: SDOL2y2MX+U9tH4hELl9S2pJK9K1lE6ilSe+p5KIn3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:68:f8:cd:ab:ef:c6:ee:75:03:e1:87:79:8f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Validity
Not Before: Apr 21 05:00:48 2025 GMT
Not After : Apr 22 05:00:48 2025 GMT
Subject: CN=ec58fb0970a5acaa475b4ae22ea83a2bf2099e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:82:97:4c:25:2b:8c:47:cd:bb:77:7e:75:
0f:6f:07:a7:92:9e:eb:68:d6:19:04:65:88:39:c3:
12:28:11:12:97:92:24:ad:e8:02:79:90:64:ce:7f:
d5:0d:49:ca:b8:94:2a:14:82:11:03:52:0e:fe:03:
48:49:11:3f:30:1d:ef:c8:f9:9c:8e:5a:13:7f:d3:
74:9d:a7:8d:33:9b:72:b1:dd:4b:94:55:c8:d7:f1:
8b:2e:a5:a1:90:d0:a1:c3:73:a2:9b:eb:42:9e:33:
22:4f:8c:a6:7c:58:fc:c3:36:fd:6e:3d:7e:f5:92:
54:cc:80:21:a6:b0:3a:78:da:0a:c0:7c:83:1c:62:
1c:11:d8:17:b4:68:f0:ff:4f:67:72:1e:51:e8:6b:
f4:94:7e:38:88:77:ad:01:90:31:ee:4a:37:c0:45:
a3:7c:b6:37:a6:d2:74:4c:6d:2c:67:49:66:a4:41:
2c:13:16:9e:b5:c7:81:c4:77:18:c1:68:d2:aa:bb:
7c:19:28:1b:0b:31:19:33:91:c5:11:07:9e:b7:2d:
e0:22:16:d6:36:c5:42:cc:2d:20:00:fb:f9:84:2e:
50:f6:be:bb:d6:e7:41:27:0a:1a:f2:99:2e:5e:63:
ac:75:96:99:f7:76:c3:18:2f:9b:91:9f:e6:33:29:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:58:FB:09:70:A5:AC:AA:47:5B:4A:E2:2E:A8:3A:2B:F2:09:9E:96
X509v3 Authority Key Identifier:
keyid:69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0b:1e:ba:91:df:f7:78:9f:7c:f9:fa:08:e9:08:cf:81:3b:
bc:29:88:d2:74:e6:55:75:94:51:94:5a:72:cd:99:64:26:06:
6f:5f:93:9c:00:d6:77:a0:69:84:f7:cb:4f:03:14:f4:f6:8b:
1c:5a:22:4c:4d:e8:2e:ca:c8:ee:c1:80:61:be:29:38:71:37:
78:65:6b:13:ec:e3:3e:ce:53:c2:ba:3a:37:c6:ff:f3:ff:e1:
fb:ad:0f:ac:04:ad:76:ca:8a:b7:f4:9a:01:dd:ed:2c:bb:a5:
f0:fe:75:6f:b7:09:5c:60:15:ee:e2:f4:d2:32:6d:82:66:85:
4e:60:77:3e:3a:bd:e8:cf:c8:ac:dd:8a:1e:63:90:c6:3a:2d:
90:23:f0:55:16:9b:46:8c:23:a6:d5:d8:c8:a4:4b:a0:e9:b2:
8c:b3:fb:3d:18:18:8d:79:0e:b0:8b:b5:cc:f8:ce:b5:23:8f:
b5:da:fa:e6:03:dd:81:2d:c9:4e:df:2d:7e:71:e8:cb:36:14:
dd:c4:d1:71:23:ea:3e:36:e9:6c:44:e5:22:81:24:f7:32:a7:
6a:58:06:fc:29:94:5a:ed:58:c8:21:b1:d2:33:7d:73:c6:71:
71:79:72:27:80:37:ac:ce:05:2d:69:81:46:65:2b:1a:03:0a:
00:c4:cf:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWuGj4zavvxu51A+GHeY+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWIxYzFkNDkzMGJmYmZlMjVlYTdmMGE0NWQ3ZDBiNjEx
ZTdmNjIwHhcNMjUwNDIxMDUwMDQ4WhcNMjUwNDIyMDUwMDQ4WjAzMTEwLwYDVQQD
EyhlYzU4ZmIwOTcwYTVhY2FhNDc1YjRhZTIyZWE4M2EyYmYyMDk5ZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqCCl0wlK4xHzbt3fnUPbwenkp7r
aNYZBGWIOcMSKBESl5IkregCeZBkzn/VDUnKuJQqFIIRA1IO/gNISRE/MB3vyPmc
jloTf9N0naeNM5tysd1LlFXI1/GLLqWhkNChw3Oim+tCnjMiT4ymfFj8wzb9bj1+
9ZJUzIAhprA6eNoKwHyDHGIcEdgXtGjw/09nch5R6Gv0lH44iHetAZAx7ko3wEWj
fLY3ptJ0TG0sZ0lmpEEsExaetceBxHcYwWjSqrt8GSgbCzEZM5HFEQeety3gIhbW
NsVCzC0gAPv5hC5Q9r671udBJwoa8pkuXmOsdZaZ93bDGC+bkZ/mMymIewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxY+wlwpayqR1tK4i6oOivyCZ6WMB8GA1UdIwQY
MBaAFGnrHB1JML+/4l6n8KRdfQthHn9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80YzBkY2YtNjQzOS00MTFmLWExMDQt
ZTk5YWIyNjA1YTkwLzEvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80YzBkY2YtNjQzOS00MTFmLWExMDQtZTk5YWIyNjA1YTkw
LzEvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwseupHf
93iffPn6COkIz4E7vCmI0nTmVXWUUZRacs2ZZCYGb1+TnADWd6BphPfLTwMU9PaL
HFoiTE3oLsrI7sGAYb4pOHE3eGVrE+zjPs5Twro6N8b/8//h+60PrAStdsqKt/Sa
Ad3tLLul8P51b7cJXGAV7uL00jJtgmaFTmB3Pjq96M/IrN2KHmOQxjotkCPwVRab
RowjptXYyKRLoOmyjLP7PRgYjXkOsIu1zPjOtSOPtdr65gPdgS3JTt8tfnHoyzYU
3cTRcSPqPjbpbETlIoEk9zKnalgG/CmUWu1YyCGx0jN9c8ZxcXlyJ4A3rM4FLWmB
RmUrGgMKAMTP2Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:00:50 2025 by rpki-client