Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier: oA65qfOec9Mlz/0Qz/PaVEkWvScyBb8nBOeHoQQBz8E=
Subject key identifier: D5:C9:A3:EC:FB:30:EF:B3:B0:68:FD:3C:BB:C7:A5:7B:BB:F4:C0:1C
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 01965048367E9F92F5EDB7407B3B81988F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number: 01E9
Signing time: Sat 19 Apr 2025 23:00:31 +0000
Manifest this update: Sat 19 Apr 2025 23:00:31 +0000
Manifest next update: Sun 20 Apr 2025 23:00:31 +0000
Files and hashes: 1: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (hash: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=)
2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: Om/TAcvKEAnEpw2sC77IpPBt8zqqyjcRul1rUoYV4Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:36:7e:9f:92:f5:ed:b7:40:7b:3b:81:98:8f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Apr 19 23:00:31 2025 GMT
Not After : Apr 20 23:00:31 2025 GMT
Subject: CN=d5c9a3ecfb30efb3b068fd3cbbc7a57bbbf4c01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:d4:8a:f4:97:95:95:cc:4d:75:c6:15:79:
9d:00:35:6a:06:fd:62:b5:c2:d9:49:c2:a7:df:4e:
49:6f:80:17:e5:b8:20:77:39:85:d1:79:40:6c:ca:
d7:5c:3f:d7:7b:b9:a2:bb:e7:65:db:0e:9b:b0:27:
ae:65:ba:9c:b0:a4:52:6d:3d:81:90:a8:7b:8f:b1:
3e:33:f9:90:e6:10:a8:5d:59:24:bd:36:03:de:a7:
0e:f6:6b:66:f2:ce:cb:da:db:da:e5:20:3d:b6:69:
a2:04:bd:72:77:bb:12:07:2b:85:9f:eb:dd:1d:06:
e0:1e:d6:0b:df:e5:0c:bc:bb:59:cb:17:8d:a9:81:
64:61:c7:f0:94:33:43:5b:ca:17:ab:53:69:ab:05:
c5:50:67:90:15:4b:a0:2d:63:87:d3:cd:b9:58:02:
3f:93:af:aa:ef:3b:be:e5:ca:ab:5c:8c:fa:8a:bd:
d5:18:bc:36:39:07:2f:95:78:9f:d0:57:7b:ed:de:
42:d0:f6:8a:75:7a:4e:ea:fd:43:49:3e:55:aa:f0:
4a:b8:2a:2e:93:6a:42:ae:17:ff:11:89:94:60:86:
1a:4e:8d:be:12:28:34:47:b9:9e:68:83:9d:90:cd:
7a:fb:1b:73:96:2c:1d:71:b4:67:51:69:1c:da:e9:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C9:A3:EC:FB:30:EF:B3:B0:68:FD:3C:BB:C7:A5:7B:BB:F4:C0:1C
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ea:3c:cd:01:23:b6:a0:1a:a6:4e:5d:f7:26:72:89:77:ee:
23:1e:18:df:1f:75:ab:0f:f2:c9:1e:ff:d6:a7:c7:4a:40:02:
a1:16:b9:a6:c4:ac:0c:ee:56:5b:ee:55:25:2c:18:ca:70:16:
a6:99:e6:83:33:ae:ae:43:7e:63:55:37:32:62:fb:ba:e8:fb:
f8:42:bc:c7:35:7c:f6:d2:8f:99:31:4c:79:ec:25:05:be:f4:
89:71:0e:85:18:01:9d:3e:46:c7:a1:6f:b8:1f:44:13:64:37:
21:b1:25:73:6b:cc:c7:e2:55:1f:c4:b7:32:28:27:61:da:fc:
05:59:7b:b0:72:57:ed:0e:79:48:dd:21:09:97:5e:f7:f4:82:
46:39:9a:8b:17:07:3d:d0:9a:8f:da:d4:bc:50:d7:3e:c3:bf:
8b:90:1f:55:8f:69:83:0c:7f:73:bb:e7:ac:a7:41:f1:78:aa:
24:69:89:cc:ff:63:21:4b:44:98:b1:c2:96:20:1d:28:21:0f:
dc:44:4c:af:19:ea:ab:83:0e:69:51:1f:db:61:9b:b7:af:cd:
72:44:7c:7d:cd:6f:4f:10:d8:12:44:f5:5b:f3:94:5f:35:2f:
30:5c:92:ae:83:e5:0b:ed:02:32:7e:41:eb:18:77:be:1d:44:
ce:33:f0:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQSDZ+n5L17bdAezuBmI+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDhkYTEzOWI1NmY5OThiZTI0NjY1ZGIxNGFkMWUxNTY3
NjhmYzMwHhcNMjUwNDE5MjMwMDMxWhcNMjUwNDIwMjMwMDMxWjAzMTEwLwYDVQQD
EyhkNWM5YTNlY2ZiMzBlZmIzYjA2OGZkM2NiYmM3YTU3YmJiZjRjMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosLUivSXlZXMTXXGFXmdADVqBv1i
tcLZScKn305Jb4AX5bggdzmF0XlAbMrXXD/Xe7miu+dl2w6bsCeuZbqcsKRSbT2B
kKh7j7E+M/mQ5hCoXVkkvTYD3qcO9mtm8s7L2tva5SA9tmmiBL1yd7sSByuFn+vd
HQbgHtYL3+UMvLtZyxeNqYFkYcfwlDNDW8oXq1NpqwXFUGeQFUugLWOH0825WAI/
k6+q7zu+5cqrXIz6ir3VGLw2OQcvlXif0Fd77d5C0PaKdXpO6v1DST5VqvBKuCou
k2pCrhf/EYmUYIYaTo2+Eig0R7meaIOdkM16+xtzliwdcbRnUWkc2ul2OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXJo+z7MO+zsGj9PLvHpXu79MAcMB8GA1UdIwQY
MBaAFKwI2hObVvmYviRmXbFK0eFWdo/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0Mzct
Njk5Y2Y3YjA5NTkwLzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0MzctNjk5Y2Y3YjA5NTkw
LzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+o8zQEj
tqAapk5d9yZyiXfuIx4Y3x91qw/yyR7/1qfHSkACoRa5psSsDO5WW+5VJSwYynAW
ppnmgzOurkN+Y1U3MmL7uuj7+EK8xzV89tKPmTFMeewlBb70iXEOhRgBnT5Gx6Fv
uB9EE2Q3IbElc2vMx+JVH8S3MignYdr8BVl7sHJX7Q55SN0hCZde9/SCRjmaixcH
PdCaj9rUvFDXPsO/i5AfVY9pgwx/c7vnrKdB8XiqJGmJzP9jIUtEmLHCliAdKCEP
3ERMrxnqq4MOaVEf22Gbt6/NckR8fc1vTxDYEkT1W/OUXzUvMFySroPlC+0CMn5B
6xh3vh1EzjPwZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:31 2025 by rpki-client