
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: c0DKnHqOBdZNDcap89SoLhGzqDCPvZxVmwRlWt3xR98=
Subject key identifier: 93:31:4C:81:2F:F6:E8:C6:EB:14:36:EB:F0:3D:1C:79:D1:34:2E:69
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 01962ABC1BB55E6C5D5F749461003F581998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 0DA9
Signing time: Sat 12 Apr 2025 16:01:32 +0000
Manifest this update: Sat 12 Apr 2025 16:01:32 +0000
Manifest next update: Sun 13 Apr 2025 16:01:32 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: c6QWBmWTYcRVijLS7ennTOgMZUva+JT+cUL3OZJ4Fgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:1b:b5:5e:6c:5d:5f:74:94:61:00:3f:58:19:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Apr 12 16:01:32 2025 GMT
Not After : Apr 13 16:01:32 2025 GMT
Subject: CN=93314c812ff6e8c6eb1436ebf03d1c79d1342e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:38:b8:ad:f5:36:d9:ce:ba:7a:de:3f:ff:
41:8f:09:18:67:4c:ff:e5:fe:ab:4c:02:16:01:88:
e4:e2:3a:06:dc:41:94:09:0e:a6:ed:b6:55:ac:07:
e9:86:79:8f:14:3d:f2:ef:3d:b7:a0:25:61:f0:49:
96:cd:88:60:db:29:8e:9a:43:27:60:10:9f:3c:f0:
ce:3e:b2:eb:39:3c:ee:7e:4c:53:7a:8f:9f:98:b5:
15:2d:29:2c:14:bb:95:ba:81:02:d9:bc:59:74:a7:
33:1a:c4:da:a1:39:99:85:a1:40:27:35:d9:63:97:
d8:58:27:30:94:41:73:fb:60:a0:9d:87:ba:bc:42:
e7:94:76:32:4c:e8:5b:28:53:ec:2b:46:ce:2d:6d:
3c:f5:1f:12:e5:14:fd:e1:ca:7e:47:ca:90:8b:93:
d2:a4:80:eb:60:d5:e6:02:10:0e:04:21:44:d9:16:
02:ba:76:af:9d:4d:e6:e6:16:58:d8:d5:ef:23:bf:
75:9c:cf:7b:cd:20:de:86:c9:d2:b6:2c:bf:ff:b6:
2c:f4:a6:65:bb:80:68:7c:54:fc:22:16:53:3c:8a:
48:4e:45:98:22:e8:b6:c2:69:90:64:8e:b3:97:7a:
82:12:57:34:a7:20:4f:fd:03:7a:3b:d2:7c:ca:43:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:31:4C:81:2F:F6:E8:C6:EB:14:36:EB:F0:3D:1C:79:D1:34:2E:69
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b1:a8:0a:e1:e4:41:1d:6a:cf:c5:a8:29:8b:e5:a2:bf:3c:
4c:7f:2e:de:1c:96:33:51:29:e2:bc:ac:01:e7:77:ce:67:51:
e0:9d:8b:c0:33:9d:e4:10:2f:7a:72:f3:0e:1c:ad:7f:a6:9a:
a1:76:08:b3:e4:76:8b:3f:a2:37:d5:99:dc:26:32:9a:d2:9b:
6d:14:db:77:d9:aa:4c:49:4b:10:08:99:2e:26:1b:4b:e0:57:
60:db:a1:b4:b0:e6:1b:1c:c4:f9:c3:04:03:cb:73:4d:49:9f:
2a:df:5d:c1:4e:d9:1a:95:77:73:73:fa:59:fe:82:e3:a5:3a:
94:84:8f:7c:16:62:98:b9:ba:c4:aa:f5:46:ee:cd:fe:76:fb:
04:1e:bf:ab:9f:56:7f:35:ea:62:1b:e8:bc:39:6e:19:b5:1d:
f2:c7:93:c4:08:9a:56:6b:a7:ff:d1:a7:b2:15:d4:9d:2e:0c:
08:36:27:9c:16:c5:cd:c8:97:1d:dd:24:f5:ee:3c:cd:2c:5f:
ad:e2:e4:93:b9:00:cb:20:39:69:f7:87:b6:55:df:28:c8:dc:
9b:1f:bd:c8:34:41:16:9a:19:b0:8b:4d:93:d6:7e:cc:08:91:
5a:2c:ff:94:fe:c7:9d:39:c5:da:bb:94:f1:e9:82:fd:77:51:
f3:28:65:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYqvBu1XmxdX3SUYQA/WBmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYTU2YzQyZWQ3Y2I5NjNmMjg1NTAzY2VjMDYwNmQ2MGQw
YWIzODcwHhcNMjUwNDEyMTYwMTMyWhcNMjUwNDEzMTYwMTMyWjAzMTEwLwYDVQQD
Eyg5MzMxNGM4MTJmZjZlOGM2ZWIxNDM2ZWJmMDNkMWM3OWQxMzQyZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZQ4uK31NtnOunreP/9BjwkYZ0z/
5f6rTAIWAYjk4joG3EGUCQ6m7bZVrAfphnmPFD3y7z23oCVh8EmWzYhg2ymOmkMn
YBCfPPDOPrLrOTzufkxTeo+fmLUVLSksFLuVuoEC2bxZdKczGsTaoTmZhaFAJzXZ
Y5fYWCcwlEFz+2CgnYe6vELnlHYyTOhbKFPsK0bOLW089R8S5RT94cp+R8qQi5PS
pIDrYNXmAhAOBCFE2RYCunavnU3m5hZY2NXvI791nM97zSDehsnStiy//7Ys9KZl
u4BofFT8IhZTPIpITkWYIui2wmmQZI6zl3qCElc0pyBP/QN6O9J8ykPt1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMxTIEv9ujG6xQ26/A9HHnRNC5pMB8GA1UdIwQY
MBaAFAGlbELtfLlj8oVQPOwGBtYNCrOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMt
ZWQwN2Y1Y2FkNmQ3LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMtZWQwN2Y1Y2FkNmQ3
LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrGoCuHk
QR1qz8WoKYvlor88TH8u3hyWM1Ep4rysAed3zmdR4J2LwDOd5BAvenLzDhytf6aa
oXYIs+R2iz+iN9WZ3CYymtKbbRTbd9mqTElLEAiZLiYbS+BXYNuhtLDmGxzE+cME
A8tzTUmfKt9dwU7ZGpV3c3P6Wf6C46U6lISPfBZimLm6xKr1Ru7N/nb7BB6/q59W
fzXqYhvovDluGbUd8seTxAiaVmun/9GnshXUnS4MCDYnnBbFzciXHd0k9e48zSxf
reLkk7kAyyA5afeHtlXfKMjcmx+9yDRBFpoZsItNk9Z+zAiRWiz/lP7HnTnF2ruU
8emC/XdR8yhl8w==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:39:19 2025 by rpki-client