Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: Csa1KC5cRfi2g6kI+W7I0rfut2elytB4rBYEjDUEk5c=
Subject key identifier: 91:BE:09:11:EF:D4:1E:1D:E4:CB:DF:98:3B:05:90:70:04:CF:8B:92
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 0196458DBD0DF195152A0FD8C8036E4BBF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 0560
Signing time: Thu 17 Apr 2025 21:00:38 +0000
Manifest this update: Thu 17 Apr 2025 21:00:38 +0000
Manifest next update: Fri 18 Apr 2025 21:00:38 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: Ut62gbpiCjQrZSizwb4ZJ6doSPZrg8abn08TdQNrj88=)
2: p0cL-vdhY3KSfcwz6s4koNapmbw.roa (hash: 9RImGj5UfNKUq/CzlTB6jfp8TR4Xc1sqYedIB3MDaIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:bd:0d:f1:95:15:2a:0f:d8:c8:03:6e:4b:bf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Apr 17 21:00:38 2025 GMT
Not After : Apr 18 21:00:38 2025 GMT
Subject: CN=91be0911efd41e1de4cbdf983b05907004cf8b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:8d:46:3a:d0:c0:b1:3a:42:06:f2:ec:70:
83:89:71:ad:c8:1e:06:f8:3c:6a:dc:5f:d6:00:b6:
2c:bb:98:c7:60:ea:0e:5c:a8:bb:58:24:8b:70:93:
41:01:bc:a7:a6:13:f8:c1:ca:4d:9d:b9:91:95:87:
ef:b7:50:bb:39:0c:d6:db:66:c1:81:0d:7b:41:27:
f8:34:0b:1e:8d:bb:9a:7e:9e:12:b4:f5:b3:41:13:
59:eb:83:c9:15:3d:2e:3f:d7:10:25:69:1e:f0:2c:
82:88:fa:47:d6:2b:a7:72:67:fa:49:aa:0b:76:ce:
8e:2b:0f:80:09:a6:d0:2f:b2:44:ed:f4:ce:34:19:
9d:1b:31:12:40:e7:a2:60:98:ba:f8:92:7e:7a:4d:
9c:f8:3a:a0:43:dd:41:25:15:e1:61:64:39:bf:c6:
2d:47:67:84:e3:49:5e:e6:21:ea:b7:20:d3:8b:29:
c2:4c:ca:1c:7e:38:c4:31:9f:0c:f3:63:ab:8a:d6:
2c:5c:61:12:04:d3:f0:d6:e4:7e:4b:59:f1:35:86:
5d:37:a5:43:53:ef:31:c3:fd:50:de:be:b3:24:7c:
e5:c1:db:c7:57:28:28:e0:5d:f6:43:45:44:ef:42:
cf:d3:ed:6a:41:fe:76:e1:b0:ba:61:65:fb:e4:f9:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:09:11:EF:D4:1E:1D:E4:CB:DF:98:3B:05:90:70:04:CF:8B:92
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b8:7f:4d:a2:0e:df:de:82:69:bf:45:e4:82:0f:96:34:79:
8a:ac:8c:33:44:b8:f0:0c:85:6d:67:3f:fb:31:05:8f:1f:87:
2b:1a:b0:4f:f2:31:1a:80:1e:56:c9:46:15:3f:eb:ac:e1:9a:
e1:03:55:3b:79:96:9f:6e:1b:29:ae:67:ca:f9:a5:d9:35:4e:
df:29:27:0a:ca:07:fe:71:92:77:31:7a:8b:39:5b:eb:18:8a:
f4:ed:f0:8b:ec:93:e0:ba:50:0c:2c:87:be:72:46:33:d4:5b:
b9:9d:33:c2:20:0e:c0:3c:c7:bb:d7:61:d1:79:cf:a0:80:fc:
e4:8e:f9:5c:e7:2a:39:fc:33:dd:82:3a:57:1c:4c:e3:ca:5e:
80:90:a9:1d:ce:af:b4:fa:cf:9e:cb:37:9d:f9:f1:10:d4:c7:
6c:f4:c3:3b:a1:1c:44:9e:6a:9f:8f:7a:f8:b7:92:44:b4:71:
d7:fe:aa:c9:b1:6f:29:08:b5:50:f4:87:0d:49:82:a2:5f:67:
ec:bc:7b:02:00:27:a4:16:64:1b:52:67:09:49:fc:66:b8:2e:
a6:06:eb:8c:9e:53:08:5b:2d:de:b0:11:81:31:75:53:0d:19:
4f:8a:19:2a:6a:7b:ae:c5:cf:4a:d1:b8:f7:06:27:1c:30:67:
8e:cf:a4:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFjb0N8ZUVKg/YyANuS78gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTgzMWY3YmEzZGUyZmJlZjE2ZDQ2NDlmZDQ4NjBjMTVl
OWQ2YzMwHhcNMjUwNDE3MjEwMDM4WhcNMjUwNDE4MjEwMDM4WjAzMTEwLwYDVQQD
Eyg5MWJlMDkxMWVmZDQxZTFkZTRjYmRmOTgzYjA1OTA3MDA0Y2Y4YjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RqNRjrQwLE6Qgby7HCDiXGtyB4G
+Dxq3F/WALYsu5jHYOoOXKi7WCSLcJNBAbynphP4wcpNnbmRlYfvt1C7OQzW22bB
gQ17QSf4NAsejbuafp4StPWzQRNZ64PJFT0uP9cQJWke8CyCiPpH1iuncmf6SaoL
ds6OKw+ACabQL7JE7fTONBmdGzESQOeiYJi6+JJ+ek2c+DqgQ91BJRXhYWQ5v8Yt
R2eE40le5iHqtyDTiynCTMocfjjEMZ8M82OritYsXGESBNPw1uR+S1nxNYZdN6VD
U+8xw/1Q3r6zJHzlwdvHVygo4F32Q0VE70LP0+1qQf524bC6YWX75PmHSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG+CRHv1B4d5MvfmDsFkHAEz4uSMB8GA1UdIwQY
MBaAFAOYMfe6PeL77xbUZJ/UhgwV6dbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMt
MDM3YjVhN2I5NTQ0LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMtMDM3YjVhN2I5NTQ0
LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7h/TaIO
396Cab9F5IIPljR5iqyMM0S48AyFbWc/+zEFjx+HKxqwT/IxGoAeVslGFT/rrOGa
4QNVO3mWn24bKa5nyvml2TVO3yknCsoH/nGSdzF6izlb6xiK9O3wi+yT4LpQDCyH
vnJGM9RbuZ0zwiAOwDzHu9dh0XnPoID85I75XOcqOfwz3YI6VxxM48pegJCpHc6v
tPrPnss3nfnxENTHbPTDO6EcRJ5qn496+LeSRLRx1/6qybFvKQi1UPSHDUmCol9n
7Lx7AgAnpBZkG1JnCUn8ZrgupgbrjJ5TCFst3rARgTF1Uw0ZT4oZKmp7rsXPStG4
9wYnHDBnjs+kIw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:29 2025 by rpki-client