Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: NPavyYoEgfT/vIjxT+9Ddj1j+W0p/J3KRnR6ifv9Ky8=
Subject key identifier: 24:11:3D:BF:CB:9D:53:F2:34:43:EC:35:D9:6D:F4:0A:98:64:28:7B
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 01964BFE3ED75C546FEC4A9D8944183D4560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 148D
Signing time: Sat 19 Apr 2025 03:01:15 +0000
Manifest this update: Sat 19 Apr 2025 03:01:15 +0000
Manifest next update: Sun 20 Apr 2025 03:01:15 +0000
Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: QiISsU8l9nJkH63VvfqH+tzj87f/vrgo5bJmLCme52k=)
3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:3e:d7:5c:54:6f:ec:4a:9d:89:44:18:3d:45:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Apr 19 03:01:15 2025 GMT
Not After : Apr 20 03:01:15 2025 GMT
Subject: CN=24113dbfcb9d53f23443ec35d96df40a9864287b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:a8:4d:9a:6b:2a:e9:e1:6f:ad:e0:76:d2:
3e:df:90:ef:4b:2b:b5:18:ec:52:40:57:81:b4:bf:
d7:eb:04:c3:0c:b2:82:77:99:53:09:03:f6:c2:73:
51:fc:f1:03:97:20:9a:77:8c:97:65:10:3f:d3:68:
d5:5a:48:fb:d2:2c:1f:37:b0:af:23:84:87:1c:51:
f3:0c:bd:cb:9d:5c:b6:c8:5b:f4:52:1d:c4:11:2a:
83:68:9c:25:1c:69:30:98:63:7b:16:45:06:f6:7b:
4c:0f:5c:75:0f:31:b4:c9:c3:c6:04:57:4b:a7:8d:
da:f7:c4:d4:ac:9a:1d:c2:ca:e5:4e:5b:d6:fb:af:
d4:e9:e2:4f:f7:a8:bb:c3:89:79:4e:83:62:af:1e:
93:29:09:9e:c4:94:43:e2:c2:44:d6:52:d7:04:f1:
1d:5e:d4:61:dc:b8:08:0f:3f:fd:19:dc:40:ee:e6:
54:36:c3:2a:fe:7c:78:70:27:fa:96:c3:9c:4e:64:
dc:2f:89:05:e4:51:3b:3c:23:2f:0c:09:06:a9:7c:
47:5c:9c:3f:31:9f:f2:a8:0c:dd:fb:11:22:36:18:
ce:b4:a8:7a:2d:3e:e1:35:5f:ef:98:81:d3:38:bc:
e1:2f:8e:74:0d:46:35:5f:a0:07:ba:9d:af:0d:4e:
4f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:11:3D:BF:CB:9D:53:F2:34:43:EC:35:D9:6D:F4:0A:98:64:28:7B
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9a:9e:ab:6e:ef:35:2e:f3:8e:fe:1e:bf:18:84:79:36:63:
89:07:9a:4b:0f:ba:0f:68:59:e1:4d:4d:48:0a:c8:90:39:7b:
0e:02:2f:60:b8:92:03:d9:e9:a6:e9:5e:a5:d1:17:49:61:0e:
03:94:65:a5:e8:06:38:8d:9f:07:c6:6d:bf:4e:0e:94:75:fd:
94:0b:5f:ea:41:54:dc:80:f8:d7:f7:0d:7f:4e:8c:54:32:46:
33:72:36:7d:52:c1:43:b3:67:af:be:19:1f:cf:34:25:1f:6d:
a2:c8:d7:83:52:3f:51:d1:4b:16:e0:67:10:86:42:22:1a:ac:
56:21:25:55:5f:72:a6:18:49:ac:a5:cc:60:36:74:b1:49:33:
b8:ee:17:fc:30:31:ab:33:8e:3c:7f:d2:97:91:44:af:e8:a0:
ce:a4:5e:a3:34:c3:f8:e1:a1:d1:3f:5f:cf:c5:a3:94:6a:8f:
1c:08:8c:fa:34:1c:ba:35:4d:fa:05:aa:23:91:a8:30:71:2d:
e1:16:c7:9c:5a:b0:71:56:5e:aa:09:95:06:bb:a3:df:19:8b:
e6:9f:7b:2d:72:40:45:3c:7e:d7:16:de:cf:b5:ce:5a:6e:bb:
c5:a4:a3:b0:df:8c:0f:12:a5:69:e6:e3:64:aa:68:bd:44:9d:
fe:5e:c0:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/j7XXFRv7EqdiUQYPUVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTE0MDBkNTQ4ZmEyMWFmODE5YTBjNmUyM2U3N2E2MDEy
ZWI1ZTkwHhcNMjUwNDE5MDMwMTE1WhcNMjUwNDIwMDMwMTE1WjAzMTEwLwYDVQQD
EygyNDExM2RiZmNiOWQ1M2YyMzQ0M2VjMzVkOTZkZjQwYTk4NjQyODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg+oTZprKunhb63gdtI+35DvSyu1
GOxSQFeBtL/X6wTDDLKCd5lTCQP2wnNR/PEDlyCad4yXZRA/02jVWkj70iwfN7Cv
I4SHHFHzDL3LnVy2yFv0Uh3EESqDaJwlHGkwmGN7FkUG9ntMD1x1DzG0ycPGBFdL
p43a98TUrJodwsrlTlvW+6/U6eJP96i7w4l5ToNirx6TKQmexJRD4sJE1lLXBPEd
XtRh3LgIDz/9GdxA7uZUNsMq/nx4cCf6lsOcTmTcL4kF5FE7PCMvDAkGqXxHXJw/
MZ/yqAzd+xEiNhjOtKh6LT7hNV/vmIHTOLzhL450DUY1X6AHup2vDU5PvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQRPb/LnVPyNEPsNdlt9AqYZCh7MB8GA1UdIwQY
MBaAFAARQA1Uj6Ia+BmgxuI+d6YBLrXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2Ut
MDFmNDYwNmM2NWVjLzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2UtMDFmNDYwNmM2NWVj
LzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZqeq27v
NS7zjv4evxiEeTZjiQeaSw+6D2hZ4U1NSArIkDl7DgIvYLiSA9nppulepdEXSWEO
A5RlpegGOI2fB8Ztv04OlHX9lAtf6kFU3ID41/cNf06MVDJGM3I2fVLBQ7Nnr74Z
H880JR9tosjXg1I/UdFLFuBnEIZCIhqsViElVV9yphhJrKXMYDZ0sUkzuO4X/DAx
qzOOPH/Sl5FEr+igzqReozTD+OGh0T9fz8WjlGqPHAiM+jQcujVN+gWqI5GoMHEt
4RbHnFqwcVZeqgmVBruj3xmL5p97LXJARTx+1xbez7XOWm67xaSjsN+MDxKlaebj
ZKpovUSd/l7AqA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:06 2025 by rpki-client