Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: PK3W/eHn8KsHEEDn/2k9eCzTL2qSZ+Z6XwvUcbq903Y=
Subject key identifier: AA:6A:87:05:59:7F:43:BE:54:6A:A4:D2:61:BE:0B:5F:3B:40:EE:95
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 01962B97C63FF95C9F93F1865B2C2B1C92F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 12D8
Signing time: Sat 12 Apr 2025 20:01:29 +0000
Manifest this update: Sat 12 Apr 2025 20:01:29 +0000
Manifest next update: Sun 13 Apr 2025 20:01:29 +0000
Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: af+Cfn/Gk6stDVjJMtu2PNmZZBHWzNapG7e202/9Q3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:97:c6:3f:f9:5c:9f:93:f1:86:5b:2c:2b:1c:92:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Apr 12 20:01:29 2025 GMT
Not After : Apr 13 20:01:29 2025 GMT
Subject: CN=aa6a8705597f43be546aa4d261be0b5f3b40ee95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:7b:56:e5:4f:48:4d:b0:e5:03:96:18:b5:
99:6e:2d:ab:4b:13:25:13:7a:a7:41:27:28:72:ef:
c0:03:da:b3:58:9a:0e:45:24:ef:e7:9f:21:15:db:
57:b4:b6:5f:c5:7c:18:ab:37:a4:db:de:44:de:3f:
a2:34:44:ff:1d:8a:4e:f0:58:4c:4c:f2:64:06:dd:
56:69:cf:d2:c8:9a:f9:ad:ad:4f:b5:be:17:52:8d:
f2:d2:ed:e0:fa:4c:e7:54:b6:01:de:31:17:43:2b:
31:d4:b0:b0:61:49:c8:32:f7:20:70:82:40:6c:8a:
6c:8e:d6:df:2a:d3:84:70:e6:10:55:60:92:73:46:
c2:45:95:de:a0:79:6a:60:97:be:07:90:aa:fe:90:
66:25:97:e8:16:60:bc:b3:a7:44:e9:ea:a9:1a:0e:
39:db:29:f4:a4:25:bd:fd:90:e0:72:7f:ed:d6:7f:
ce:7e:c8:61:24:4c:32:2a:d0:fe:1e:95:75:0e:97:
7d:de:bc:c3:34:ba:a9:0d:59:d2:7d:22:99:e0:cb:
ee:27:6d:64:9d:36:dc:d9:9d:71:45:76:b6:bd:be:
74:da:19:27:42:33:8d:b3:d4:f7:c8:e8:36:be:cb:
80:f6:1a:52:e1:0b:ae:4c:ea:0c:2c:fb:af:b1:ab:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6A:87:05:59:7F:43:BE:54:6A:A4:D2:61:BE:0B:5F:3B:40:EE:95
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:62:0a:ed:7d:36:93:a5:a8:4c:6d:8e:35:0b:65:b8:04:7f:
4a:8b:06:00:54:04:26:0a:da:a6:54:11:f4:4c:cc:53:ec:8d:
f1:84:50:bd:1f:db:b2:d7:ed:d1:d1:a8:06:23:de:8e:69:da:
7f:4a:a5:8a:7e:82:af:6a:6e:74:48:33:80:09:e4:77:f1:31:
f0:86:22:52:4f:d5:f2:4e:32:b0:11:94:0f:34:6d:58:94:c1:
df:0b:81:0a:d7:2a:a6:bf:aa:41:ef:1f:2e:1b:c8:5f:b7:ff:
05:16:0b:a7:0f:98:66:4d:f5:1b:1c:cc:d4:f7:8d:15:0e:8a:
c7:5e:61:09:8a:a7:ac:3c:ce:d9:92:5a:3e:e7:ec:9d:92:d9:
2b:63:91:27:a8:6e:f7:0f:bd:58:5d:7a:9d:c0:d4:7c:5b:2b:
14:6d:9e:8c:7b:40:10:b4:34:e6:7d:af:f4:aa:f1:79:b8:e4:
de:da:65:38:2e:a9:ec:54:64:f8:2c:34:e2:9c:33:7a:62:d5:
b1:73:a1:48:8b:ad:cf:5b:60:16:a9:9c:4a:14:75:fd:d2:92:
52:ff:c2:46:94:6b:9a:6c:ff:e3:ff:7f:95:af:e6:f0:9d:76:
dd:53:1e:8d:7d:79:cc:e2:ea:30:ab:af:8e:83:bd:b0:9f:90:
2b:8d:c5:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYrl8Y/+Vyfk/GGWywrHJLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYTNjOWM0NDk3YzFmYTQ4NWU5ZGQxNzU4YWY5ZjAwMGUy
YmQ0YmYwHhcNMjUwNDEyMjAwMTI5WhcNMjUwNDEzMjAwMTI5WjAzMTEwLwYDVQQD
EyhhYTZhODcwNTU5N2Y0M2JlNTQ2YWE0ZDI2MWJlMGI1ZjNiNDBlZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1x7VuVPSE2w5QOWGLWZbi2rSxMl
E3qnQScocu/AA9qzWJoORSTv558hFdtXtLZfxXwYqzek295E3j+iNET/HYpO8FhM
TPJkBt1Wac/SyJr5ra1Ptb4XUo3y0u3g+kznVLYB3jEXQysx1LCwYUnIMvcgcIJA
bIpsjtbfKtOEcOYQVWCSc0bCRZXeoHlqYJe+B5Cq/pBmJZfoFmC8s6dE6eqpGg45
2yn0pCW9/ZDgcn/t1n/OfshhJEwyKtD+HpV1Dpd93rzDNLqpDVnSfSKZ4MvuJ21k
nTbc2Z1xRXa2vb502hknQjONs9T3yOg2vsuA9hpS4QuuTOoMLPuvsas5SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpqhwVZf0O+VGqk0mG+C187QO6VMB8GA1UdIwQY
MBaAFA6jycRJfB+khendF1ivnwAOK9S/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2Ut
YTk5MGY5MDY0YTU3LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2UtYTk5MGY5MDY0YTU3
LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGIK7X02
k6WoTG2ONQtluAR/SosGAFQEJgraplQR9EzMU+yN8YRQvR/bstft0dGoBiPejmna
f0qlin6Cr2pudEgzgAnkd/Ex8IYiUk/V8k4ysBGUDzRtWJTB3wuBCtcqpr+qQe8f
LhvIX7f/BRYLpw+YZk31GxzM1PeNFQ6Kx15hCYqnrDzO2ZJaPufsnZLZK2ORJ6hu
9w+9WF16ncDUfFsrFG2ejHtAELQ05n2v9Krxebjk3tplOC6p7FRk+Cw04pwzemLV
sXOhSIutz1tgFqmcShR1/dKSUv/CRpRrmmz/4/9/la/m8J123VMejX15zOLqMKuv
joO9sJ+QK43FJA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:39:00 2025 by rpki-client