Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: QFiLgNBPsF+ST9AocTqqKDLgKngt29qo+oEMbXq64w0=
Subject key identifier: A0:D4:88:BD:F3:41:C1:4B:83:DE:00:A6:9E:B3:68:96:2E:B9:39:E3
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 019659F010CE1CB7D83D6DE2B27C93D731F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 20:00:27 +0000
Manifest this update: Mon 21 Apr 2025 20:00:27 +0000
Manifest next update: Tue 22 Apr 2025 20:00:27 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: MCPCY+D6T/XB3Wv2zFR9l24d+UTTtq+4/jFN3ivYkL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:10:ce:1c:b7:d8:3d:6d:e2:b2:7c:93:d7:31:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Apr 21 20:00:27 2025 GMT
Not After : Apr 22 20:00:27 2025 GMT
Subject: CN=a0d488bdf341c14b83de00a69eb368962eb939e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:00:8f:f0:ec:b3:59:bb:b8:c7:9f:74:0b:
43:ae:5f:0b:76:33:ba:43:da:92:91:b7:9b:f5:19:
7e:0d:da:73:da:02:6c:a7:07:2d:58:f9:0d:3c:f1:
c8:53:d3:50:a0:55:de:19:bf:13:8d:32:57:d7:9b:
d3:ca:3e:83:9e:ba:7f:de:6d:1a:6e:74:d1:0e:2a:
99:c8:52:a1:fb:fb:de:7f:aa:de:84:63:70:08:82:
3a:56:ea:bf:7b:4d:88:bd:91:88:3c:da:59:be:fd:
de:01:b6:48:6b:97:6c:49:f2:30:3c:f1:1d:fd:ea:
b4:b2:1b:c9:95:0c:aa:96:00:a6:e8:d6:2c:20:54:
71:14:4b:05:b4:48:f0:99:5d:2a:75:f7:72:72:91:
f9:12:76:60:bc:2a:52:bf:c3:dd:9c:62:ff:f3:f5:
7b:89:8e:aa:7c:10:81:eb:69:df:e2:a2:b2:36:c1:
59:45:b6:18:7c:e8:d1:de:32:be:a5:b2:83:53:90:
75:cb:2e:8e:1d:8a:2d:c1:9e:17:8c:78:b4:ec:00:
21:5a:84:5d:2c:d4:ef:52:5b:67:a1:45:af:11:67:
3b:56:6c:0c:f2:4f:a2:df:81:5e:38:86:e7:5a:58:
5d:31:c7:c8:a8:a3:9e:04:1b:62:e6:ed:12:96:e3:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D4:88:BD:F3:41:C1:4B:83:DE:00:A6:9E:B3:68:96:2E:B9:39:E3
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c9:43:d4:c8:1d:d2:6a:b5:9b:cc:c6:79:ab:d9:ce:e4:04:
3b:88:ec:d5:68:f4:20:21:f8:af:d0:a9:6a:90:a6:1c:10:42:
b9:3e:88:0a:85:4b:ca:08:9a:7c:d1:5a:5e:bb:43:04:54:f8:
00:17:d3:58:48:8d:13:3e:14:9f:b2:ea:7c:fa:56:02:8f:7b:
c9:c0:32:06:f1:8b:17:b6:ef:8a:60:7e:57:3f:72:68:4d:2a:
1b:23:39:10:77:bf:75:f6:c6:70:cc:c7:47:c8:de:c0:78:73:
16:4a:9f:9c:29:b8:8e:47:bd:0b:10:c5:a9:06:a5:60:0b:76:
10:2f:38:67:94:b8:bd:76:26:ad:75:9e:e8:9d:3c:3c:20:ae:
2d:79:6d:d6:77:27:8a:41:05:83:c8:25:b9:02:85:8a:fe:c9:
e1:1e:33:27:83:2b:89:e1:0a:4d:19:a5:e7:72:36:25:73:a3:
8a:bc:c2:2d:17:ce:97:92:00:07:71:0a:4f:3a:7e:22:50:3e:
f3:f2:6e:ee:b7:c7:fc:40:9c:79:cb:a3:ea:35:ea:84:4b:a6:
f9:98:9a:ae:82:95:be:00:cd:2f:8a:d7:b0:0a:2a:b6:08:14:
b2:bb:f2:69:1d:a3:76:b7:45:54:06:9f:26:1f:b9:ad:a5:b0:
d0:e6:1b:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZ8BDOHLfYPW3isnyT1zHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzIxNTYwYjEyMjE5Y2Y4ZWFiNTVmNzRkOThmMmU5YWVk
NTE3NDYwHhcNMjUwNDIxMjAwMDI3WhcNMjUwNDIyMjAwMDI3WjAzMTEwLwYDVQQD
EyhhMGQ0ODhiZGYzNDFjMTRiODNkZTAwYTY5ZWIzNjg5NjJlYjkzOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsYAj/Dss1m7uMefdAtDrl8LdjO6
Q9qSkbeb9Rl+Ddpz2gJspwctWPkNPPHIU9NQoFXeGb8TjTJX15vTyj6Dnrp/3m0a
bnTRDiqZyFKh+/vef6rehGNwCII6Vuq/e02IvZGIPNpZvv3eAbZIa5dsSfIwPPEd
/eq0shvJlQyqlgCm6NYsIFRxFEsFtEjwmV0qdfdycpH5EnZgvCpSv8PdnGL/8/V7
iY6qfBCB62nf4qKyNsFZRbYYfOjR3jK+pbKDU5B1yy6OHYotwZ4XjHi07AAhWoRd
LNTvUltnoUWvEWc7VmwM8k+i34FeOIbnWlhdMcfIqKOeBBti5u0SluNSlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDUiL3zQcFLg94App6zaJYuuTnjMB8GA1UdIwQY
MBaAFGjCFWCxIhnPjqtV902Y8umu1RdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0Yjkt
YWMxZWRiYjQ3N2MwLzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0YjktYWMxZWRiYjQ3N2Mw
LzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMlD1Mgd
0mq1m8zGeavZzuQEO4js1Wj0ICH4r9CpapCmHBBCuT6ICoVLygiafNFaXrtDBFT4
ABfTWEiNEz4Un7LqfPpWAo97ycAyBvGLF7bvimB+Vz9yaE0qGyM5EHe/dfbGcMzH
R8jewHhzFkqfnCm4jke9CxDFqQalYAt2EC84Z5S4vXYmrXWe6J08PCCuLXlt1ncn
ikEFg8gluQKFiv7J4R4zJ4MrieEKTRml53I2JXOjirzCLRfOl5IAB3EKTzp+IlA+
8/Ju7rfH/ECcecuj6jXqhEum+ZiaroKVvgDNL4rXsAoqtggUsrvyaR2jdrdFVAaf
Jh+5raWw0OYbWg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:57:50 2025 by rpki-client