Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
File: aQqw79d1diHIbXtpx29gssP6w1Y.mft (raw, json)
Hash identifier: AhPejHmekCdLxLez0VQmGWij1vYINE/4jqtp6jiHi6c=
Subject key identifier: 86:96:1C:F9:17:F7:B0:C3:63:F7:95:6A:A0:30:B4:AA:0B:A6:5C:C9
Authority key identifier: 69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
Certificate issuer: /CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Certificate serial: 019646A00BA8C6652908D7249FED95D8A982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
Manifest number: 0245
Signing time: Fri 18 Apr 2025 02:00:15 +0000
Manifest this update: Fri 18 Apr 2025 02:00:15 +0000
Manifest next update: Sat 19 Apr 2025 02:00:15 +0000
Files and hashes: 1: aQqw79d1diHIbXtpx29gssP6w1Y.crl (hash: 5jAy8ZViIeRnbNFrJJmRfd6JE2+tiMnebxVDq5AO5zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:0b:a8:c6:65:29:08:d7:24:9f:ed:95:d8:a9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Validity
Not Before: Apr 18 02:00:15 2025 GMT
Not After : Apr 19 02:00:15 2025 GMT
Subject: CN=86961cf917f7b0c363f7956aa030b4aa0ba65cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:92:42:6b:77:5b:60:19:b8:02:26:40:34:
32:98:89:44:1c:99:d8:7a:e5:62:ee:05:94:90:50:
0e:64:e7:e6:41:d4:e8:48:b2:3d:22:f4:e8:b9:f6:
46:f2:ac:54:13:01:6a:fb:b2:40:bc:63:8e:46:de:
ae:6a:01:f8:0f:e3:8c:c6:80:30:8e:18:ae:d4:b9:
ac:9c:9a:fd:88:c9:a5:c3:53:c6:1f:03:99:26:69:
b3:50:b6:b5:f4:50:50:ac:f5:4a:b9:51:eb:29:aa:
93:9c:24:9f:c7:3e:6e:51:04:31:57:f1:46:28:a1:
6c:9d:0a:cf:b8:9b:a5:aa:4f:f1:e8:7f:5a:6c:0c:
0e:dd:5c:3c:2f:51:18:1d:f1:04:8f:c3:46:53:5a:
25:fd:68:41:e8:da:22:b8:2f:4c:ea:67:c1:bf:6d:
6c:8f:53:3d:e1:4e:37:fa:25:61:38:25:62:d3:51:
b6:3a:06:b3:e9:14:73:5b:6e:11:b4:6b:48:c9:7d:
f0:12:02:72:14:cf:93:f5:50:39:de:b8:a1:42:03:
2c:d4:c6:86:37:aa:25:bb:32:4f:32:2b:94:5e:4f:
9c:3c:fd:53:94:ad:6c:0a:23:29:d5:94:bc:6a:63:
58:24:73:86:b0:e1:bc:7d:c9:47:ac:b8:21:c0:a2:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:1C:F9:17:F7:B0:C3:63:F7:95:6A:A0:30:B4:AA:0B:A6:5C:C9
X509v3 Authority Key Identifier:
keyid:69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:10:e5:bf:2f:68:dd:96:19:86:71:df:78:ae:64:56:4d:40:
03:41:af:fe:71:b8:a8:77:40:cc:e2:36:6d:fb:34:f0:d2:a6:
af:3c:17:94:b6:55:09:2b:69:8c:17:03:e4:d9:d4:e6:2d:39:
85:40:81:fb:16:3d:88:f0:e7:f1:b1:f2:00:d4:f7:58:fe:40:
2f:1e:14:93:32:15:2f:2a:fc:9d:ed:e8:38:f1:f9:b6:1b:21:
d4:80:3f:33:bc:f1:50:91:5c:93:37:26:43:cb:cb:49:6b:18:
5c:5e:4a:39:0b:ff:b8:4c:2a:14:7f:f2:ac:71:65:d4:a4:b6:
af:b9:67:44:1e:12:c3:e9:52:f3:6c:d4:2b:10:f7:a3:e3:c2:
60:3d:d8:99:04:ec:91:05:13:5b:19:97:91:ad:65:a2:59:cf:
53:fe:14:c1:6c:6d:3b:60:cb:60:82:69:f5:99:55:b3:e6:a3:
9c:ae:3a:d5:32:a8:82:68:e2:45:60:a7:37:68:f8:fb:c1:c2:
12:a7:cf:cc:e7:7b:e3:b3:b4:e7:47:54:5c:8e:73:0c:8c:16:
aa:d8:a0:57:94:2f:23:65:1b:ae:cb:a3:64:f2:4e:e4:4b:ae:
f0:8e:af:c5:cb:4a:80:ab:71:03:d9:a1:39:3c:9b:ea:e5:5b:
9f:b7:5f:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGoAuoxmUpCNckn+2V2KmCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGFiMGVmZDc3NTc2MjFjODZkN2I2OWM3NmY2MGIyYzNm
YWMzNTYwHhcNMjUwNDE4MDIwMDE1WhcNMjUwNDE5MDIwMDE1WjAzMTEwLwYDVQQD
Eyg4Njk2MWNmOTE3ZjdiMGMzNjNmNzk1NmFhMDMwYjRhYTBiYTY1Y2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurCSQmt3W2AZuAImQDQymIlEHJnY
euVi7gWUkFAOZOfmQdToSLI9IvToufZG8qxUEwFq+7JAvGOORt6uagH4D+OMxoAw
jhiu1LmsnJr9iMmlw1PGHwOZJmmzULa19FBQrPVKuVHrKaqTnCSfxz5uUQQxV/FG
KKFsnQrPuJulqk/x6H9abAwO3Vw8L1EYHfEEj8NGU1ol/WhB6NoiuC9M6mfBv21s
j1M94U43+iVhOCVi01G2Ogaz6RRzW24RtGtIyX3wEgJyFM+T9VA53rihQgMs1MaG
N6oluzJPMiuUXk+cPP1TlK1sCiMp1ZS8amNYJHOGsOG8fclHrLghwKJ3+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaWHPkX97DDY/eVaqAwtKoLplzJMB8GA1UdIwQY
MBaAFGkKsO/XdXYhyG17acdvYLLD+sNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFxdzc5ZDFkaUhJYlh0cHgyOWdzc1A2dzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NWIyMjUtNjRlMy00ZDM0LTgwZDkt
MjFjODE1YTZlYjllLzEvYVFxdzc5ZDFkaUhJYlh0cHgyOWdzc1A2dzFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80NWIyMjUtNjRlMy00ZDM0LTgwZDktMjFjODE1YTZlYjll
LzEvYVFxdzc5ZDFkaUhJYlh0cHgyOWdzc1A2dzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxDlvy9o
3ZYZhnHfeK5kVk1AA0Gv/nG4qHdAzOI2bfs08NKmrzwXlLZVCStpjBcD5NnU5i05
hUCB+xY9iPDn8bHyANT3WP5ALx4UkzIVLyr8ne3oOPH5thsh1IA/M7zxUJFckzcm
Q8vLSWsYXF5KOQv/uEwqFH/yrHFl1KS2r7lnRB4Sw+lS82zUKxD3o+PCYD3YmQTs
kQUTWxmXka1lolnPU/4UwWxtO2DLYIJp9ZlVs+ajnK461TKogmjiRWCnN2j4+8HC
EqfPzOd747O050dUXI5zDIwWqtigV5QvI2UbrsujZPJO5Euu8I6vxctKgKtxA9mh
OTyb6uVbn7dfQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 04:13:42 2025 by rpki-client