Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: oXv1XXwdb0YQYF4eTe88s9ryjgVruAp/gspuLQTmYmA=
Subject key identifier: 36:88:61:A2:EE:9E:48:FC:89:24:F9:31:16:2B:21:A2:AF:70:1E:3E
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 01958FCF16F963FB62BF0A2B60C3FEA57ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 092D
Signing time: Thu 13 Mar 2025 14:01:08 +0000
Manifest this update: Thu 13 Mar 2025 14:01:08 +0000
Manifest next update: Fri 14 Mar 2025 14:01:08 +0000
Files and hashes: 1: 0avBUZc0fRe5pdYzvDk9HgX1ajQ.roa (hash: vHaXs0oLz+thOA7Ry4E1jwe2sP/zqNcNu+NOGxEA+rM=)
2: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: n6y+OBRXVs7gjO4urfIY4LleHvEYfeUkB2/JrFyczfM=)
3: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (hash: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:16:f9:63:fb:62:bf:0a:2b:60:c3:fe:a5:7e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Mar 13 14:01:08 2025 GMT
Not After : Mar 14 14:01:08 2025 GMT
Subject: CN=368861a2ee9e48fc8924f931162b21a2af701e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:72:31:45:e2:bc:16:f2:d3:53:04:f7:1b:
e0:b8:63:3a:7e:ba:45:ec:d1:87:81:b3:e8:e5:08:
84:9a:ad:0d:cb:a5:71:cb:d0:94:70:76:71:ce:fd:
07:38:28:96:46:b3:c1:9a:bc:77:ff:5c:32:54:0f:
36:7c:11:b4:9c:c7:ee:35:de:c2:5a:3e:cf:22:1d:
09:d6:aa:9f:48:52:53:a3:37:d6:c6:aa:b8:66:af:
a3:f6:f8:76:a0:0f:6b:9f:fe:e2:ac:fa:19:ef:58:
64:63:5e:43:3b:2b:6c:1c:3b:48:4b:85:35:ab:5d:
3f:ba:96:4c:0d:21:a0:f5:c8:f0:3e:ab:88:b7:a0:
d7:a0:42:86:d9:90:6d:9e:86:be:a7:ee:2f:70:15:
38:a3:8d:9a:5f:97:81:86:31:59:c4:25:7e:37:c7:
62:f5:40:b8:02:bc:35:90:db:aa:a9:b3:f9:19:55:
b0:9e:8f:af:06:91:66:4a:85:1e:08:9b:12:cd:15:
b3:34:fd:c6:42:34:33:e1:7b:3f:0f:ab:6f:48:ee:
0e:fe:f1:a8:d0:c2:bc:1c:66:ae:b2:6d:18:ad:03:
90:34:90:cc:4d:3e:22:18:29:32:1b:62:de:77:1c:
29:a3:54:1c:cd:2e:d9:5f:5b:3b:f4:6f:5a:01:3e:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:88:61:A2:EE:9E:48:FC:89:24:F9:31:16:2B:21:A2:AF:70:1E:3E
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:2f:c5:98:4a:31:28:dd:48:03:51:5b:46:7a:1f:a0:2f:
e5:08:4a:c4:3b:6e:50:9e:8c:72:1c:54:f2:ad:f8:b8:c7:7a:
7d:3d:e0:05:c6:dd:a7:1e:6b:db:f6:c2:e3:96:7e:a4:1d:a7:
3b:d4:5e:38:18:97:7d:cc:59:7a:03:31:04:25:02:a1:88:b7:
fa:c8:e4:a9:4e:2f:c1:8b:47:2e:bb:40:da:c9:b5:c6:04:e7:
7d:76:bd:e9:ce:70:33:9a:3f:75:13:2d:d8:5f:58:a5:19:f6:
19:c9:bf:3e:e4:c3:5f:dc:71:33:e8:53:a3:e2:cb:37:05:f3:
96:88:5c:55:d4:7a:9b:c2:c7:72:7e:a2:82:38:c8:24:f2:17:
63:bb:8d:79:da:4d:d9:b0:43:4c:e5:df:33:85:05:d2:d1:cd:
82:3c:30:ff:9c:b7:26:c0:c2:22:45:81:a9:78:5d:86:35:68:
50:ab:06:ae:cd:8c:62:bb:17:8d:10:dd:ce:6b:e8:1e:fa:d8:
ec:6b:f4:c6:14:20:43:c8:1a:12:fd:2c:20:ab:2f:a8:fd:0d:
4c:c9:c0:30:12:43:d5:e1:af:74:c8:16:e8:f7:db:f6:68:b4:
de:ef:1a:05:c7:ca:a2:b3:5d:c5:fd:97:9e:07:e4:8d:9c:8d:
3d:4c:f7:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPzxb5Y/tivworYMP+pX7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWQ2ZDgzYzgwODM3MjlkN2E5ZDg1NzFkNjVjZTk3ZTA1
OGI4MjEwHhcNMjUwMzEzMTQwMTA4WhcNMjUwMzE0MTQwMTA4WjAzMTEwLwYDVQQD
EygzNjg4NjFhMmVlOWU0OGZjODkyNGY5MzExNjJiMjFhMmFmNzAxZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BxyMUXivBby01ME9xvguGM6frpF
7NGHgbPo5QiEmq0Ny6Vxy9CUcHZxzv0HOCiWRrPBmrx3/1wyVA82fBG0nMfuNd7C
Wj7PIh0J1qqfSFJTozfWxqq4Zq+j9vh2oA9rn/7irPoZ71hkY15DOytsHDtIS4U1
q10/upZMDSGg9cjwPquIt6DXoEKG2ZBtnoa+p+4vcBU4o42aX5eBhjFZxCV+N8di
9UC4Arw1kNuqqbP5GVWwno+vBpFmSoUeCJsSzRWzNP3GQjQz4Xs/D6tvSO4O/vGo
0MK8HGausm0YrQOQNJDMTT4iGCkyG2Ledxwpo1QczS7ZX1s79G9aAT5EzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaIYaLunkj8iST5MRYrIaKvcB4+MB8GA1UdIwQY
MBaAFACtbYPICDcp16nYVx1lzpfgWLghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjkt
YTU1Zjc3YjgzZTZiLzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjktYTU1Zjc3YjgzZTZi
LzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDUvxZhK
MSjdSANRW0Z6H6Av5QhKxDtuUJ6MchxU8q34uMd6fT3gBcbdpx5r2/bC45Z+pB2n
O9ReOBiXfcxZegMxBCUCoYi3+sjkqU4vwYtHLrtA2sm1xgTnfXa96c5wM5o/dRMt
2F9YpRn2Gcm/PuTDX9xxM+hTo+LLNwXzlohcVdR6m8LHcn6igjjIJPIXY7uNedpN
2bBDTOXfM4UF0tHNgjww/5y3JsDCIkWBqXhdhjVoUKsGrs2MYrsXjRDdzmvoHvrY
7Gv0xhQgQ8gaEv0sIKsvqP0NTMnAMBJD1eGvdMgW6Pfb9mi03u8aBcfKorNdxf2X
ngfkjZyNPUz3Zw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:15 2025 by rpki-client