Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: PHPSduYm/0PvJaOLmC0XvH2lOSEuLnGRba3UOqEHVpM=
Subject key identifier: 7B:28:53:F1:46:E7:DF:16:39:6B:7F:B9:5B:44:98:50:9B:98:00:0D
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 01964BFD6A3673B79C40BB6D903E23B17296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 0653
Signing time: Sat 19 Apr 2025 03:00:20 +0000
Manifest this update: Sat 19 Apr 2025 03:00:20 +0000
Manifest next update: Sun 20 Apr 2025 03:00:20 +0000
Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: Rh8qPQPBdPVuUZ0MRyjcZsyu2iR6eX6A4D7eE+ZOkJc=)
3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:6a:36:73:b7:9c:40:bb:6d:90:3e:23:b1:72:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Apr 19 03:00:20 2025 GMT
Not After : Apr 20 03:00:20 2025 GMT
Subject: CN=7b2853f146e7df16396b7fb95b4498509b98000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:a6:42:a6:24:88:72:e4:53:70:e6:19:7d:
de:c9:a0:0a:57:a7:ea:4a:95:96:33:37:8e:63:66:
d0:bf:38:92:11:ab:d2:a5:c3:a3:25:16:4e:19:3a:
df:1e:54:23:fa:04:58:9d:0f:2a:a3:31:45:c6:87:
b2:6b:0d:e4:a5:91:a4:5e:a4:8e:4f:d0:bb:24:c2:
a7:fa:6a:d7:a3:97:8b:54:11:01:a9:e8:5f:fa:39:
62:f7:62:74:1b:30:23:d3:2f:b7:14:27:b7:98:97:
33:fb:30:17:c4:ea:90:91:c2:ed:54:b1:37:70:6c:
e6:90:fe:a8:1a:9e:0c:09:05:15:ea:b2:08:1a:3a:
19:b8:eb:58:0b:48:2a:0b:1b:56:b6:f4:9a:fc:31:
97:2b:88:25:ce:70:be:09:dc:64:14:4f:4a:c8:b6:
9b:dc:fd:82:ef:17:62:32:6c:fc:02:ea:bb:49:b0:
33:82:27:da:3b:a8:1c:b6:4c:9e:42:dd:bd:58:c1:
94:26:94:c9:d8:b8:d4:16:45:f0:ef:ed:ea:e4:a9:
0b:41:c3:b6:46:4c:0b:eb:93:e1:7e:8a:19:46:86:
8d:de:22:1c:b6:71:d4:13:51:ee:86:82:3e:13:06:
fa:80:31:b4:16:8e:6d:68:d1:b7:ba:16:90:a1:12:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:28:53:F1:46:E7:DF:16:39:6B:7F:B9:5B:44:98:50:9B:98:00:0D
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c5:b6:13:58:28:b0:4c:f3:9d:eb:65:b6:60:47:1e:ca:9d:
1a:a4:13:cd:f2:7d:37:29:54:d2:76:58:51:74:8d:ac:2e:88:
3e:8b:19:fd:da:cd:0a:8e:30:46:b3:24:e4:79:f9:79:ec:b4:
c5:64:98:70:6b:cc:32:e1:c8:f3:7a:ac:dc:2e:b5:d6:cb:90:
b1:cc:06:64:96:44:03:31:dc:93:e6:5a:59:b1:53:9c:8f:7a:
34:86:25:b6:9a:b9:f1:5b:41:c0:c2:d3:fa:06:eb:11:a4:7b:
cf:2b:6d:93:b7:61:bb:49:d5:4c:2e:24:fc:f6:e7:1a:d8:00:
5d:1b:bc:81:c7:04:b1:78:ee:80:91:69:06:9b:d5:8a:d1:70:
57:cb:35:93:2b:43:1a:cf:5c:03:29:22:cd:fd:47:1b:9d:8a:
03:b9:57:9f:2c:03:73:37:1a:c9:ca:19:35:82:0d:ab:6b:72:
4c:78:9e:0a:b3:38:17:ad:c0:3e:33:ba:7c:9d:64:0a:c6:32:
b9:45:41:16:ee:86:c1:d9:04:4f:c6:56:26:a2:a1:08:86:0c:
41:e2:b4:20:55:ec:4d:20:00:98:d5:33:a9:85:4f:bf:c6:8d:
09:44:4c:f3:41:e9:13:68:15:00:a5:a8:0f:59:30:41:12:06:
5b:48:6f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/Wo2c7ecQLttkD4jsXKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWJiMTBhNTU3MjE3NWIwM2EzYzdjYmZiZTkzOGI3YjE0
NDFhYzAwHhcNMjUwNDE5MDMwMDIwWhcNMjUwNDIwMDMwMDIwWjAzMTEwLwYDVQQD
Eyg3YjI4NTNmMTQ2ZTdkZjE2Mzk2YjdmYjk1YjQ0OTg1MDliOTgwMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3GmQqYkiHLkU3DmGX3eyaAKV6fq
SpWWMzeOY2bQvziSEavSpcOjJRZOGTrfHlQj+gRYnQ8qozFFxoeyaw3kpZGkXqSO
T9C7JMKn+mrXo5eLVBEBqehf+jli92J0GzAj0y+3FCe3mJcz+zAXxOqQkcLtVLE3
cGzmkP6oGp4MCQUV6rIIGjoZuOtYC0gqCxtWtvSa/DGXK4glznC+CdxkFE9KyLab
3P2C7xdiMmz8Auq7SbAzgifaO6gctkyeQt29WMGUJpTJ2LjUFkXw7+3q5KkLQcO2
RkwL65PhfooZRoaN3iIctnHUE1HuhoI+Ewb6gDG0Fo5taNG3uhaQoRL9xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsoU/FG598WOWt/uVtEmFCbmAANMB8GA1UdIwQY
MBaAFGmbsQpVchdbA6PHy/vpOLexRBrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMt
OGFhZTQzMDYzYmNhLzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMtOGFhZTQzMDYzYmNh
LzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcW2E1go
sEzznetltmBHHsqdGqQTzfJ9NylU0nZYUXSNrC6IPosZ/drNCo4wRrMk5Hn5eey0
xWSYcGvMMuHI83qs3C611suQscwGZJZEAzHck+ZaWbFTnI96NIYltpq58VtBwMLT
+gbrEaR7zyttk7dhu0nVTC4k/PbnGtgAXRu8gccEsXjugJFpBpvVitFwV8s1kytD
Gs9cAykizf1HG52KA7lXnywDczcaycoZNYINq2tyTHieCrM4F63APjO6fJ1kCsYy
uUVBFu6GwdkET8ZWJqKhCIYMQeK0IFXsTSAAmNUzqYVPv8aNCURM80HpE2gVAKWo
D1kwQRIGW0hvGw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:44 2025 by rpki-client