Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: OnqYKgJvE10DXk0XlUXWYcKeWUIbDmT0xYoS+nmgVBY=
Subject key identifier: 28:85:AC:AC:F1:9D:6E:E3:B2:1D:1A:9F:EA:2C:4A:8F:3C:EA:BC:D9
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019643D6F5000B9F1DA104197C2C4D16C8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 016D
Signing time: Thu 17 Apr 2025 13:01:22 +0000
Manifest this update: Thu 17 Apr 2025 13:01:22 +0000
Manifest next update: Fri 18 Apr 2025 13:01:22 +0000
Files and hashes: 1: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: /ds0Cb0HBLVj+85x/IJ+fIedmHWYXuS6XVyD+kZU06c=)
2: PinfW_YHyw5uymC7Qg5_e_ihs1A.roa (hash: pxez1kR2olajgq0bPf5GWwA/2mx0CN85t2SDcizNJFk=)
3: q6pqSEbcTlqmRayyanV7tPyo7fs.roa (hash: EC2KtAOMCahopm9kPSQwxVqEk8+Lm5s50v5gQFz0rN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:f5:00:0b:9f:1d:a1:04:19:7c:2c:4d:16:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Apr 17 13:01:22 2025 GMT
Not After : Apr 18 13:01:22 2025 GMT
Subject: CN=2885acacf19d6ee3b21d1a9fea2c4a8f3ceabcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:95:0d:5a:bc:cc:47:91:c1:77:98:e2:f3:
1f:7f:40:0c:48:f6:fa:e1:9a:d3:84:95:52:c0:71:
5f:4a:9c:2d:0d:03:40:38:4d:ec:45:eb:3f:50:a8:
0b:36:e8:e8:da:ba:ba:7d:de:f3:2a:a5:e0:35:e8:
f9:50:a7:71:8e:1b:73:2b:d5:a2:81:77:1f:f3:ce:
49:ab:31:d5:d5:51:53:c4:76:0a:a0:c3:c9:26:64:
f8:df:43:74:62:e6:5b:02:d8:40:52:70:9c:07:3d:
ed:6d:02:6b:8e:c2:d3:c5:0a:2d:25:c0:60:0e:f6:
55:87:69:c4:fd:d6:d0:7b:f9:3c:f2:93:f5:37:a8:
23:21:6c:0a:a1:46:46:f9:62:7f:40:75:8d:b7:11:
aa:90:7a:3a:d0:72:8a:bc:20:6e:a7:ec:0e:96:fd:
91:18:f8:8c:b1:1b:af:6b:b9:d4:1d:d1:2f:27:e1:
fa:7c:c1:b9:e6:15:dd:1d:e7:85:30:f6:9d:55:ad:
46:a8:7c:ac:c8:eb:00:e2:62:91:99:94:7e:6e:c5:
66:bb:c6:61:4e:cf:bd:12:a7:49:84:58:5a:d5:d7:
bd:37:2a:9c:ca:bd:c0:e0:f0:9a:b6:ab:b0:00:b4:
da:24:d4:e8:e8:9c:e4:f9:0f:1a:d7:aa:4e:38:8d:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:85:AC:AC:F1:9D:6E:E3:B2:1D:1A:9F:EA:2C:4A:8F:3C:EA:BC:D9
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c1:26:d4:e2:9b:14:a9:c2:e7:c9:0a:32:81:f0:45:53:a9:
89:b0:b4:06:5e:d0:2e:c4:cc:5d:15:23:a8:af:88:f8:4b:f7:
04:cd:12:77:6d:6b:c9:dc:2d:cb:94:da:95:7f:10:0c:4c:01:
97:27:32:d4:02:01:01:84:86:cf:32:56:e2:c2:4b:5a:c0:d5:
1f:19:6d:75:4b:ea:21:0a:9b:56:fe:41:f7:4d:58:5f:09:78:
66:d3:38:15:e8:4e:19:b1:a1:b4:a6:6a:cc:3d:76:00:07:5e:
e0:4a:ae:75:2a:14:40:8d:c4:6d:99:53:3f:62:59:b8:60:0f:
c5:65:8e:82:43:42:30:d3:2f:dc:30:75:34:41:7b:a7:ab:0b:
26:11:49:41:20:40:80:ad:e4:9c:c5:9b:01:d4:91:47:a6:3e:
b9:a4:7e:60:b6:49:29:ec:0e:8d:d5:49:3f:4d:a7:b4:22:72:
56:25:91:07:b1:6c:88:d7:ba:6e:bb:38:d0:12:7a:8d:0e:88:
92:8c:35:d7:9e:96:2b:61:99:6d:25:46:07:3f:bc:65:55:f8:
30:46:d1:60:59:a2:6b:a9:29:94:87:e6:06:a8:3d:47:87:80:
99:71:6e:78:87:92:c3:c2:98:50:fa:7a:e7:db:e0:74:79:5e:
7d:58:df:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1vUAC58doQQZfCxNFsinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNmQ1MTFjZTNhZjkwYzRkNjAxYzdjY2Y4MzYwNTIzNzEz
ZTJjOTAwHhcNMjUwNDE3MTMwMTIyWhcNMjUwNDE4MTMwMTIyWjAzMTEwLwYDVQQD
EygyODg1YWNhY2YxOWQ2ZWUzYjIxZDFhOWZlYTJjNGE4ZjNjZWFiY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/OVDVq8zEeRwXeY4vMff0AMSPb6
4ZrThJVSwHFfSpwtDQNAOE3sRes/UKgLNujo2rq6fd7zKqXgNej5UKdxjhtzK9Wi
gXcf885JqzHV1VFTxHYKoMPJJmT430N0YuZbAthAUnCcBz3tbQJrjsLTxQotJcBg
DvZVh2nE/dbQe/k88pP1N6gjIWwKoUZG+WJ/QHWNtxGqkHo60HKKvCBup+wOlv2R
GPiMsRuva7nUHdEvJ+H6fMG55hXdHeeFMPadVa1GqHysyOsA4mKRmZR+bsVmu8Zh
Ts+9EqdJhFha1de9Nyqcyr3A4PCatquwALTaJNTo6Jzk+Q8a16pOOI3RLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiFrKzxnW7jsh0an+osSo886rzZMB8GA1UdIwQY
MBaAFAJtURzjr5DE1gHHzPg2BSNxPiyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzkt
ODRkYTYyMDY2ZThhLzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzktODRkYTYyMDY2ZThh
LzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscEm1OKb
FKnC58kKMoHwRVOpibC0Bl7QLsTMXRUjqK+I+Ev3BM0Sd21rydwty5TalX8QDEwB
lycy1AIBAYSGzzJW4sJLWsDVHxltdUvqIQqbVv5B901YXwl4ZtM4FehOGbGhtKZq
zD12AAde4EqudSoUQI3EbZlTP2JZuGAPxWWOgkNCMNMv3DB1NEF7p6sLJhFJQSBA
gK3knMWbAdSRR6Y+uaR+YLZJKewOjdVJP02ntCJyViWRB7FsiNe6brs40BJ6jQ6I
kow1156WK2GZbSVGBz+8ZVX4MEbRYFmia6kplIfmBqg9R4eAmXFueIeSw8KYUPp6
59vgdHlefVjfGg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:41 2025 by rpki-client