Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: KJZLAmomI6uJXTJFfStOheGlP3lgbJh4g4PitH7+Q10=
Subject key identifier: D3:74:7E:14:97:CE:DE:A3:5B:78:3B:A6:F4:36:FE:8E:9A:BD:AF:25
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 01965236821EA98C0960EB66CCD5237ED672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0C35
Signing time: Sun 20 Apr 2025 08:00:26 +0000
Manifest this update: Sun 20 Apr 2025 08:00:26 +0000
Manifest next update: Mon 21 Apr 2025 08:00:26 +0000
Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: WwopdsO0vgbUKcKKAJuiF6gZZrCwy//dQxgie8A7te0=)
2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:82:1e:a9:8c:09:60:eb:66:cc:d5:23:7e:d6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Apr 20 08:00:26 2025 GMT
Not After : Apr 21 08:00:26 2025 GMT
Subject: CN=d3747e1497cedea35b783ba6f436fe8e9abdaf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:2c:ee:90:e0:f1:b2:65:9d:b2:12:e0:96:
b3:ef:9e:8e:d0:6e:74:50:cb:af:f9:f3:b7:0a:95:
9b:8b:ad:72:f3:0c:a1:6a:1f:e3:40:20:01:e0:00:
77:42:ec:7a:ed:d3:e6:10:25:bc:f2:1c:f3:de:da:
52:8c:5e:4f:b7:c2:f4:c5:13:24:fb:1b:03:f4:bd:
c3:64:3e:9e:a1:af:a5:ea:18:68:ca:01:ec:79:ca:
f4:f1:ae:6e:45:b5:67:b0:b1:d8:0e:93:b4:75:5b:
73:1f:a5:da:77:6e:1e:30:db:ab:f0:1e:c1:11:fa:
84:8f:bf:39:6c:36:5a:4d:9d:e9:33:d1:85:9c:d2:
34:2d:54:fd:8c:6d:4d:0b:97:34:59:fc:55:68:46:
97:c4:09:c1:9a:7b:a7:38:50:42:2f:93:81:8f:94:
72:f9:83:4b:b2:dc:c1:a5:a5:ff:dc:7a:a3:c8:03:
58:33:54:41:f4:50:a3:60:9e:33:8e:22:b2:9e:01:
29:40:c4:66:d3:eb:19:03:20:a4:35:31:76:2b:22:
b2:c8:b5:2c:a3:bf:1e:19:79:5d:fd:f8:e3:07:22:
01:ea:0b:9e:a9:df:24:ad:e3:15:ed:0f:bf:c8:a1:
eb:9d:ac:e0:27:de:69:50:6a:fc:79:d8:97:48:47:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:7E:14:97:CE:DE:A3:5B:78:3B:A6:F4:36:FE:8E:9A:BD:AF:25
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8c:d7:2e:c0:d2:56:74:18:7b:e3:f7:06:63:7f:54:d2:43:
a0:2a:d9:fd:83:47:07:ea:c4:ba:b8:04:04:91:dc:74:24:54:
c3:89:fc:67:fd:04:38:de:67:5f:30:e0:da:95:9a:a2:a3:d0:
2d:26:eb:a8:54:f8:3d:22:f1:44:30:1c:9f:bf:4d:1e:98:db:
c4:28:3c:17:b1:85:a8:02:f5:6c:40:77:34:0d:ef:e8:75:e5:
d1:16:62:72:b2:5d:c9:b0:03:bb:79:3e:67:d0:bf:21:97:3c:
dd:29:c2:99:54:a1:bf:40:0b:84:c8:d7:ec:d6:df:78:65:1c:
67:3d:e3:70:58:4c:f7:3e:5a:0c:7f:4f:f0:cb:1b:c8:9b:ab:
74:fc:d3:c4:76:a1:39:66:e0:73:b6:c5:52:43:20:3d:0b:c8:
a0:a3:05:f7:ea:ad:db:a8:40:ef:23:b6:fa:d5:32:1b:ef:2d:
7e:7d:21:45:5f:f9:e8:f9:37:ec:34:d8:80:08:70:86:e6:57:
d2:a7:93:00:77:f4:34:38:4f:5b:26:3c:c8:57:73:09:ce:70:
e5:f2:d5:b9:1e:9b:7c:67:dd:62:22:bb:b2:f5:11:8a:24:f7:
b0:71:d8:2e:86:23:ab:68:14:f4:49:1e:94:02:5d:63:2c:93:
4d:58:85:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNoIeqYwJYOtmzNUjftZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTkwZjU2MjA1MGQ5NzY5ZWQ1N2IwN2IxYmM5MzFlY2Rk
ZjEzOTcwHhcNMjUwNDIwMDgwMDI2WhcNMjUwNDIxMDgwMDI2WjAzMTEwLwYDVQQD
EyhkMzc0N2UxNDk3Y2VkZWEzNWI3ODNiYTZmNDM2ZmU4ZTlhYmRhZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmEs7pDg8bJlnbIS4Jaz756O0G50
UMuv+fO3CpWbi61y8wyhah/jQCAB4AB3Qux67dPmECW88hzz3tpSjF5Pt8L0xRMk
+xsD9L3DZD6eoa+l6hhoygHsecr08a5uRbVnsLHYDpO0dVtzH6Xad24eMNur8B7B
EfqEj785bDZaTZ3pM9GFnNI0LVT9jG1NC5c0WfxVaEaXxAnBmnunOFBCL5OBj5Ry
+YNLstzBpaX/3HqjyANYM1RB9FCjYJ4zjiKyngEpQMRm0+sZAyCkNTF2KyKyyLUs
o78eGXld/fjjByIB6gueqd8kreMV7Q+/yKHrnazgJ95pUGr8ediXSEf1vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNN0fhSXzt6jW3g7pvQ2/o6ava8lMB8GA1UdIwQY
MBaAFANZD1YgUNl2ntV7B7G8kx7N3xOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAt
ZWNjNGMxYzM2YjBkLzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAtZWNjNGMxYzM2YjBk
LzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPozXLsDS
VnQYe+P3BmN/VNJDoCrZ/YNHB+rEurgEBJHcdCRUw4n8Z/0EON5nXzDg2pWaoqPQ
LSbrqFT4PSLxRDAcn79NHpjbxCg8F7GFqAL1bEB3NA3v6HXl0RZicrJdybADu3k+
Z9C/IZc83SnCmVShv0ALhMjX7NbfeGUcZz3jcFhM9z5aDH9P8MsbyJurdPzTxHah
OWbgc7bFUkMgPQvIoKMF9+qt26hA7yO2+tUyG+8tfn0hRV/56Pk37DTYgAhwhuZX
0qeTAHf0NDhPWyY8yFdzCc5w5fLVuR6bfGfdYiK7svURiiT3sHHYLoYjq2gU9Eke
lAJdYyyTTViFvA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:04 2025 by rpki-client