Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: /ox4gfPV4gPP6BIkZnB+xKhXOXPrkQzkZ4csssuAj7A=
Subject key identifier: 31:46:93:7E:17:7C:A9:14:F3:9C:96:45:BD:54:24:0A:FB:BA:EB:F6
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 0196586F5F0AACFD6C7497F98464F47A79BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 13:00:15 +0000
Manifest this update: Mon 21 Apr 2025 13:00:15 +0000
Manifest next update: Tue 22 Apr 2025 13:00:15 +0000
Files and hashes: 1: 1-wEZKS5ROln113VYj-rYIVv3HMw.roa (hash: zd3NK5lHmlo7IZCKvHCkj4ue/ewdTG041qEpUCwPhSg=)
2: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: 2IovH4SVUGZPxh4MBWFhAPn3ApGrrUWGeqY72sNrtFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:5f:0a:ac:fd:6c:74:97:f9:84:64:f4:7a:79:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Apr 21 13:00:15 2025 GMT
Not After : Apr 22 13:00:15 2025 GMT
Subject: CN=3146937e177ca914f39c9645bd54240afbbaebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:c6:4c:3b:5c:04:f8:1a:c0:05:f0:f5:15:
6a:9b:b6:c8:45:aa:59:d5:6b:e3:35:5b:67:e5:60:
70:d1:b7:2e:5b:24:8b:0a:c5:4a:47:55:22:93:c1:
76:4d:c9:52:f6:c0:3f:b9:83:51:eb:50:cc:1f:73:
8f:4d:01:da:22:75:6d:09:90:51:07:88:c8:25:04:
54:5a:2b:f1:03:5d:08:9a:9d:93:31:2c:32:01:19:
51:82:a6:f3:55:44:42:9a:3d:04:2f:5f:12:33:0f:
a9:3c:f9:05:7b:d2:0e:d8:4e:3d:67:67:30:3f:e4:
5a:64:b4:90:ba:57:14:68:34:c6:53:32:28:c0:61:
df:3a:05:4c:88:98:dd:40:cc:26:b2:ea:c5:71:cb:
65:cb:cc:c6:e5:e3:45:b9:62:b5:2d:d9:f4:d0:cb:
e9:ce:f8:29:4b:cf:07:d1:20:55:a7:47:b6:8d:eb:
30:04:55:41:82:aa:51:5c:c0:e2:1d:fc:38:d4:d6:
f4:d1:56:50:0b:f8:d7:4a:56:bc:ce:41:63:97:7b:
27:f6:a7:61:58:95:19:90:f1:e2:cb:6f:69:52:24:
8b:d3:73:bf:a9:a7:f6:f2:18:66:11:8b:a8:27:da:
3f:5c:dc:69:a1:04:d2:64:60:d8:da:af:e3:01:ec:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:46:93:7E:17:7C:A9:14:F3:9C:96:45:BD:54:24:0A:FB:BA:EB:F6
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:92:8d:e1:a4:7f:00:04:fc:35:17:a9:51:6b:9b:10:95:67:
92:a6:11:eb:67:11:4a:96:07:78:31:bb:fd:a9:9b:d0:e9:7c:
21:80:a5:c8:79:95:42:11:dd:fa:df:a0:89:89:26:73:71:25:
dd:cc:a4:7a:7c:33:6d:a7:10:a1:1b:f4:c0:e8:65:c3:16:41:
4f:be:42:00:c7:d6:0d:c0:6c:c1:f0:90:4c:01:07:1d:78:39:
a7:8f:92:d1:d1:10:54:f8:20:14:56:de:31:9a:9b:2d:a9:04:
0f:1b:28:f1:c0:a4:4d:7f:46:cd:4a:4a:63:5a:91:5d:78:24:
9e:5a:ee:eb:5f:1c:27:29:7d:3b:b8:d7:22:53:d1:9c:05:ae:
c3:29:5e:a5:d9:03:2b:d6:d7:c0:0f:55:3d:71:3a:c6:eb:75:
f1:e5:4a:49:b3:8b:7e:3e:90:24:b3:f9:b6:db:0c:4d:00:dc:
b3:86:38:e6:8a:1a:59:f2:7c:f1:60:ab:38:8f:91:25:6e:da:
a3:0c:c5:b0:23:99:e8:b2:d4:0b:78:08:5b:f8:4c:f7:d3:7f:
82:8a:fd:2c:6b:57:39:62:a0:ca:9e:6a:b2:8a:b8:cc:7d:64:
a0:f7:c9:8c:d2:b2:bc:e5:99:1f:08:fa:ae:a9:1f:a7:5c:e5:
d7:4f:43:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYb18KrP1sdJf5hGT0enm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjdmODE3YWI1MTQxYjVlMTM4MjgwY2RmNjE5MDE2NmJi
OWNiODcwHhcNMjUwNDIxMTMwMDE1WhcNMjUwNDIyMTMwMDE1WjAzMTEwLwYDVQQD
EygzMTQ2OTM3ZTE3N2NhOTE0ZjM5Yzk2NDViZDU0MjQwYWZiYmFlYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzPGTDtcBPgawAXw9RVqm7bIRapZ
1WvjNVtn5WBw0bcuWySLCsVKR1Uik8F2TclS9sA/uYNR61DMH3OPTQHaInVtCZBR
B4jIJQRUWivxA10Imp2TMSwyARlRgqbzVURCmj0EL18SMw+pPPkFe9IO2E49Z2cw
P+RaZLSQulcUaDTGUzIowGHfOgVMiJjdQMwmsurFcctly8zG5eNFuWK1Ldn00Mvp
zvgpS88H0SBVp0e2jeswBFVBgqpRXMDiHfw41Nb00VZQC/jXSla8zkFjl3sn9qdh
WJUZkPHiy29pUiSL03O/qaf28hhmEYuoJ9o/XNxpoQTSZGDY2q/jAey98wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFGk34XfKkU85yWRb1UJAr7uuv2MB8GA1UdIwQY
MBaAFGi3+BerUUG14TgoDN9hkBZrucuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMt
MTY1MTcxMjZjMTMyLzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMtMTY1MTcxMjZjMTMy
LzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZKN4aR/
AAT8NRepUWubEJVnkqYR62cRSpYHeDG7/amb0Ol8IYClyHmVQhHd+t+giYkmc3El
3cykenwzbacQoRv0wOhlwxZBT75CAMfWDcBswfCQTAEHHXg5p4+S0dEQVPggFFbe
MZqbLakEDxso8cCkTX9GzUpKY1qRXXgknlru618cJyl9O7jXIlPRnAWuwylepdkD
K9bXwA9VPXE6xut18eVKSbOLfj6QJLP5ttsMTQDcs4Y45ooaWfJ88WCrOI+RJW7a
owzFsCOZ6LLUC3gIW/hM99N/gor9LGtXOWKgyp5qsoq4zH1koPfJjNKyvOWZHwj6
rqkfp1zl109Dyg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:37:47 2025 by rpki-client