Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
File: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft (raw, json)
Hash identifier: 3EZF7eBNL88OMYX9HmSM9IERdpQoM+DtebuaeGzeX4g=
Subject key identifier: 62:14:56:9E:A4:52:A3:66:16:F3:08:3F:95:8D:E4:F7:22:86:46:21
Authority key identifier: 01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
Certificate issuer: /CN=010d68a876cf5793fd00876254253d382779027b
Certificate serial: 019656811862C64818E531C37950D493B96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
Manifest number: 0265
Signing time: Mon 21 Apr 2025 04:00:23 +0000
Manifest this update: Mon 21 Apr 2025 04:00:23 +0000
Manifest next update: Tue 22 Apr 2025 04:00:23 +0000
Files and hashes: 1: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl (hash: ZfhkPNacKjmjK9t6swR7ZCsgIlv8WBzNun9ENbPo330=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:18:62:c6:48:18:e5:31:c3:79:50:d4:93:b9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010d68a876cf5793fd00876254253d382779027b
Validity
Not Before: Apr 21 04:00:23 2025 GMT
Not After : Apr 22 04:00:23 2025 GMT
Subject: CN=6214569ea452a36616f3083f958de4f722864621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:db:bc:f5:bc:a9:43:75:39:01:03:53:d4:
03:01:96:51:d6:6b:ac:3b:36:fc:4d:10:11:07:0e:
24:ec:be:88:65:94:10:99:cd:30:e6:74:53:11:d0:
e1:d7:a5:fc:03:eb:00:a2:89:10:2e:4d:12:e2:7b:
8e:85:99:9e:41:8b:07:51:58:0f:9a:5e:34:b5:62:
fa:ea:21:04:1d:89:09:ec:60:0a:59:5c:61:99:c7:
fd:69:6d:ad:ee:2c:16:45:64:12:66:10:ed:f2:5c:
04:6b:2a:07:5f:d9:a1:00:c5:4f:3e:ac:c6:40:c5:
1a:4b:d2:f3:8f:a1:1a:c6:91:51:d4:e6:13:ca:d8:
a6:60:c9:cf:c7:13:ad:07:54:f1:2f:d0:9b:89:ed:
7f:46:7b:c3:b5:27:95:14:1d:00:20:56:30:23:33:
ac:c1:f7:ea:85:75:6e:66:1f:c7:28:77:67:92:62:
5c:3d:b9:b5:b2:fc:f5:57:ea:5b:bf:33:ce:4d:0c:
6f:15:d3:c7:77:35:15:3c:aa:c1:7f:57:64:c7:e4:
db:01:aa:f6:0e:8e:c5:d1:73:13:59:6c:7e:70:78:
e1:3d:33:7a:09:8f:e1:68:fd:fd:f2:47:d6:25:8a:
77:c1:1b:0c:f3:81:9c:7f:e9:95:e4:df:21:0d:a9:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:14:56:9E:A4:52:A3:66:16:F3:08:3F:95:8D:E4:F7:22:86:46:21
X509v3 Authority Key Identifier:
keyid:01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dd:9e:fd:a3:92:36:fe:18:78:3f:42:e0:bd:a9:57:73:0d:
b4:0b:11:b3:23:78:52:dc:7a:47:68:ee:87:32:c5:4c:ce:67:
45:b2:f4:74:46:b2:30:a0:36:1f:02:6c:2c:95:57:c6:52:bf:
60:50:d8:03:9e:2f:7d:52:80:61:c9:3f:22:ac:c4:7b:1a:b1:
d1:97:7e:be:c8:d5:ae:d2:61:9d:d5:eb:c1:ca:ec:5f:ba:c3:
37:6e:80:ca:f4:27:e5:6c:06:ff:cd:70:59:d6:b7:46:f3:0c:
95:42:88:ad:73:80:5e:0a:3b:0b:0e:c6:b8:cb:b1:61:c7:b2:
88:3c:53:1b:1d:e2:9c:12:06:04:f4:8c:b1:a0:0f:bc:44:4b:
23:cb:6e:21:4d:29:8d:28:f4:e8:ba:29:85:73:1d:35:b9:a4:
a7:f1:b3:04:bd:b5:f6:09:c1:47:54:7c:d9:4b:d4:ce:fc:03:
41:d4:f4:45:d5:50:70:b3:ec:c0:c1:25:3f:f6:94:d2:f4:75:
20:0d:22:98:c4:ee:a2:76:f7:ce:5f:65:ac:ac:ed:d1:83:cc:
a9:5b:16:0e:9a:cb:75:f6:c9:f0:e5:56:f9:80:6c:5b:95:0b:
c2:13:67:b0:25:10:ad:51:a5:f6:1f:89:e4:22:f9:f1:a6:d3:
3f:ac:66:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgRhixkgY5THDeVDUk7lqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGQ2OGE4NzZjZjU3OTNmZDAwODc2MjU0MjUzZDM4Mjc3
OTAyN2IwHhcNMjUwNDIxMDQwMDIzWhcNMjUwNDIyMDQwMDIzWjAzMTEwLwYDVQQD
Eyg2MjE0NTY5ZWE0NTJhMzY2MTZmMzA4M2Y5NThkZTRmNzIyODY0NjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+7bvPW8qUN1OQEDU9QDAZZR1mus
Ozb8TRARBw4k7L6IZZQQmc0w5nRTEdDh16X8A+sAookQLk0S4nuOhZmeQYsHUVgP
ml40tWL66iEEHYkJ7GAKWVxhmcf9aW2t7iwWRWQSZhDt8lwEayoHX9mhAMVPPqzG
QMUaS9Lzj6EaxpFR1OYTytimYMnPxxOtB1TxL9Cbie1/RnvDtSeVFB0AIFYwIzOs
wffqhXVuZh/HKHdnkmJcPbm1svz1V+pbvzPOTQxvFdPHdzUVPKrBf1dkx+TbAar2
Do7F0XMTWWx+cHjhPTN6CY/haP398kfWJYp3wRsM84Gcf+mV5N8hDansHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIUVp6kUqNmFvMIP5WN5PcihkYhMB8GA1UdIwQY
MBaAFAENaKh2z1eT/QCHYlQlPTgneQJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVExb3FIYlBWNVA5QUlkaVZDVTlPQ2Q1QW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jNDlkN2QtMWM1ZC00OGZiLWIwNzAt
ZDY1NzI5YmIyZGFjLzEvQVExb3FIYlBWNVA5QUlkaVZDVTlPQ2Q1QW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jNDlkN2QtMWM1ZC00OGZiLWIwNzAtZDY1NzI5YmIyZGFj
LzEvQVExb3FIYlBWNVA5QUlkaVZDVTlPQ2Q1QW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFt2e/aOS
Nv4YeD9C4L2pV3MNtAsRsyN4Utx6R2juhzLFTM5nRbL0dEayMKA2HwJsLJVXxlK/
YFDYA54vfVKAYck/IqzEexqx0Zd+vsjVrtJhndXrwcrsX7rDN26AyvQn5WwG/81w
Wda3RvMMlUKIrXOAXgo7Cw7GuMuxYceyiDxTGx3inBIGBPSMsaAPvERLI8tuIU0p
jSj06LophXMdNbmkp/GzBL219gnBR1R82UvUzvwDQdT0RdVQcLPswMElP/aU0vR1
IA0imMTuonb3zl9lrKzt0YPMqVsWDprLdfbJ8OVW+YBsW5ULwhNnsCUQrVGl9h+J
5CL58abTP6xmpQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:17 2025 by rpki-client