
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft
File: Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft (raw, json)
Hash identifier: Quv7d/RBFILvjHLBWcSglodpnHG+mgaU2pCgcQ9CsP8=
Subject key identifier: 97:97:60:BC:32:61:29:0A:A2:20:14:1D:E9:C4:83:37:CB:97:9F:8F
Authority key identifier: 0A:6D:5B:2C:6E:A0:09:31:63:15:54:06:6F:99:51:46:E3:FF:01:44
Certificate issuer: /CN=0a6d5b2c6ea00931631554066f995146e3ff0144
Certificate serial: 01965914187CE4BDB033B9A78CDBA71415D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft
Manifest number: 04AF
Signing time: Mon 21 Apr 2025 16:00:11 +0000
Manifest this update: Mon 21 Apr 2025 16:00:11 +0000
Manifest next update: Tue 22 Apr 2025 16:00:11 +0000
Files and hashes: 1: Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.crl (hash: /BgmCfeFnmLCxfKpRaXq2m45Y/Ed3Jn70WSCG0p5nyI=)
2: ibL-wM5Utk3qSFo0-NrYlsVtpTI.roa (hash: H67n/HQzKROWvSa4M/HKFg5PRZKUR6a+MTAqwbhiOYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:18:7c:e4:bd:b0:33:b9:a7:8c:db:a7:14:15:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a6d5b2c6ea00931631554066f995146e3ff0144
Validity
Not Before: Apr 21 16:00:11 2025 GMT
Not After : Apr 22 16:00:11 2025 GMT
Subject: CN=979760bc3261290aa220141de9c48337cb979f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:c9:d7:f8:be:62:ea:00:7b:72:72:ef:78:
e6:48:ea:e3:c9:d8:e0:ac:ab:ad:81:5a:be:3a:4f:
1c:12:a8:b1:f3:37:7b:79:36:a9:85:82:af:2e:af:
41:b3:0f:0f:7f:0c:ba:0d:bb:2f:11:bf:ac:dc:af:
b5:97:a5:0a:ce:09:91:d8:1f:14:ee:ad:d1:b8:88:
83:fa:12:5c:19:c2:94:a0:08:78:3d:64:a1:66:04:
e2:e4:a8:e8:dc:41:1d:98:bf:cc:81:64:c6:19:df:
33:32:23:c9:65:db:c2:0b:b7:9a:fd:a0:f7:29:aa:
11:d1:ed:38:57:b1:b3:1f:d1:8a:f4:2e:a4:2f:a2:
ad:8a:d1:d1:4f:cc:0a:d5:38:35:21:61:f5:5c:a5:
18:c1:e3:74:a7:36:a7:82:c2:ce:06:ce:62:08:c5:
ab:87:f4:21:49:6a:ba:5e:8a:9d:d3:62:1a:4a:e2:
76:5b:d5:00:86:40:4b:64:ef:ad:6f:5b:0a:66:4b:
a1:e6:0d:29:ff:9e:5b:e1:91:02:c2:e4:ec:52:aa:
f6:d9:56:57:02:93:cb:8a:db:3b:d1:3b:77:a4:9a:
78:79:ed:36:1c:e3:91:9c:f7:39:21:db:71:34:f9:
eb:87:c6:67:85:9d:47:88:b3:75:cc:28:ab:d8:c3:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:60:BC:32:61:29:0A:A2:20:14:1D:E9:C4:83:37:CB:97:9F:8F
X509v3 Authority Key Identifier:
keyid:0A:6D:5B:2C:6E:A0:09:31:63:15:54:06:6F:99:51:46:E3:FF:01:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:dc:c5:c9:b4:99:c6:fd:44:9c:21:55:95:8e:37:2b:6d:09:
3c:e0:70:a3:10:9b:b0:d0:8a:f3:a2:57:21:c2:10:44:7c:d5:
db:e4:5e:54:d6:2f:a6:83:20:53:19:b6:ca:e5:32:7d:db:37:
76:87:63:eb:e8:9c:b0:6a:a1:70:b1:08:79:b3:69:74:02:56:
70:10:97:df:73:f0:51:39:bc:c9:10:d1:e3:67:e5:5e:90:f8:
c2:22:07:5d:2f:6e:e3:07:b4:7a:34:62:60:3f:1c:6b:50:9a:
b5:a1:c1:c1:62:c4:ea:1f:92:0f:ec:de:73:78:a7:af:1c:ba:
7b:b5:91:51:9f:d7:24:6c:c0:ff:91:ff:8a:c4:e5:ca:18:06:
11:03:34:c0:4b:52:29:53:98:ad:c5:db:e1:b0:99:ad:ff:0a:
4b:c9:45:4c:c0:a2:fc:29:65:de:21:f1:12:40:ad:65:6e:ab:
db:3a:f9:e5:2c:a4:15:a6:da:f4:ba:ea:15:03:e1:fc:89:95:
fb:54:47:f2:bb:6c:80:75:ec:a1:2e:f4:3f:90:42:d3:de:4f:
15:0c:6c:c4:77:58:b9:59:d9:7f:ce:89:31:2e:cc:f0:41:cb:
82:e4:35:9d:9e:6b:b7:de:f1:9c:22:93:92:95:eb:9b:ec:5f:
47:ce:22:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFBh85L2wM7mnjNunFBXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNmQ1YjJjNmVhMDA5MzE2MzE1NTQwNjZmOTk1MTQ2ZTNm
ZjAxNDQwHhcNMjUwNDIxMTYwMDExWhcNMjUwNDIyMTYwMDExWjAzMTEwLwYDVQQD
Eyg5Nzk3NjBiYzMyNjEyOTBhYTIyMDE0MWRlOWM0ODMzN2NiOTc5ZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xzJ1/i+YuoAe3Jy73jmSOrjydjg
rKutgVq+Ok8cEqix8zd7eTaphYKvLq9Bsw8Pfwy6DbsvEb+s3K+1l6UKzgmR2B8U
7q3RuIiD+hJcGcKUoAh4PWShZgTi5Kjo3EEdmL/MgWTGGd8zMiPJZdvCC7ea/aD3
KaoR0e04V7GzH9GK9C6kL6KtitHRT8wK1Tg1IWH1XKUYweN0pzangsLOBs5iCMWr
h/QhSWq6Xoqd02IaSuJ2W9UAhkBLZO+tb1sKZkuh5g0p/55b4ZECwuTsUqr22VZX
ApPLits70Tt3pJp4ee02HOORnPc5IdtxNPnrh8ZnhZ1HiLN1zCir2MML6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeXYLwyYSkKoiAUHenEgzfLl5+PMB8GA1UdIwQY
MBaAFAptWyxuoAkxYxVUBm+ZUUbj/wFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ20xYkxHNmdDVEZqRlZRR2I1bFJSdVBfQVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt
ZDY1NjE3YmQzYjRmLzEvQ20xYkxHNmdDVEZqRlZRR2I1bFJSdVBfQVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm
LzEvQ20xYkxHNmdDVEZqRlZRR2I1bFJSdVBfQVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdzFybSZ
xv1EnCFVlY43K20JPOBwoxCbsNCK86JXIcIQRHzV2+ReVNYvpoMgUxm2yuUyfds3
dodj6+icsGqhcLEIebNpdAJWcBCX33PwUTm8yRDR42flXpD4wiIHXS9u4we0ejRi
YD8ca1CataHBwWLE6h+SD+zec3inrxy6e7WRUZ/XJGzA/5H/isTlyhgGEQM0wEtS
KVOYrcXb4bCZrf8KS8lFTMCi/Cll3iHxEkCtZW6r2zr55SykFaba9LrqFQPh/ImV
+1RH8rtsgHXsoS70P5BC095PFQxsxHdYuVnZf86JMS7M8EHLguQ1nZ5rt97xnCKT
kpXrm+xfR84ibQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:08 2025 by rpki-client