Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
File: aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json)
Hash identifier: yTg69AXVFLD10O2bvWugI8jhOKbq0Bd3y+y7iwzVGqo=
Subject key identifier: 29:E6:2F:19:CE:7E:59:74:09:6D:10:9D:7C:2E:04:F6:4B:64:A7:4D
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 01958EBD45A2A8680CE1286BEAB5125D6DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
Manifest number: 14A4
Signing time: Thu 13 Mar 2025 09:02:03 +0000
Manifest this update: Thu 13 Mar 2025 09:02:03 +0000
Manifest next update: Fri 14 Mar 2025 09:02:03 +0000
Files and hashes: 1: NUwDMl0uceCiZ1NG2N5fFGq-BY0.roa (hash: W5ChUYN7fI8J46aNSrBpqKGe97TpyG1Z0u4eXPpkx48=)
2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: FYU4c6aTIVf++4cy0L2WzBQpatE5QZX6QMZBBYiCX94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:45:a2:a8:68:0c:e1:28:6b:ea:b5:12:5d:6d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Mar 13 09:02:03 2025 GMT
Not After : Mar 14 09:02:03 2025 GMT
Subject: CN=29e62f19ce7e5974096d109d7c2e04f64b64a74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d3:50:57:99:3f:b7:4f:73:e5:fd:d6:27:b7:
9e:38:cd:13:e7:8e:fa:cd:a0:93:13:5c:d8:2a:7e:
7d:12:06:60:82:de:37:23:45:c2:26:fa:d4:a4:0e:
7d:47:29:a4:79:1c:a7:f5:ec:be:67:c0:c9:67:6e:
0e:a7:67:7f:6e:ea:cc:a9:44:7c:92:91:53:e5:67:
7b:0d:72:8b:b7:ad:01:6a:06:3a:d8:14:00:20:27:
8e:43:5c:84:cb:cb:fd:e8:a7:ca:6b:21:da:77:9a:
f4:04:c7:fb:e9:01:1c:60:74:31:2c:c4:41:09:e3:
8b:af:15:9e:e5:49:64:dc:c1:31:d3:77:b4:ac:61:
55:ea:82:66:62:e1:4f:3e:9a:17:ef:33:16:32:88:
45:96:19:93:8a:2d:07:11:f0:ba:75:fb:15:70:34:
af:d4:17:87:d5:2f:26:4a:1a:d7:36:b7:28:2f:bc:
eb:d2:75:c3:9e:3d:fb:f9:2d:73:76:ee:35:ec:89:
04:42:aa:36:06:66:ed:cc:e2:8e:45:f2:e9:bf:1c:
32:ab:d5:30:b6:1d:c4:ad:91:4f:60:a5:39:f1:f5:
9b:2d:88:61:c2:5f:84:6e:01:e1:df:ea:5a:5b:12:
9c:1d:02:6d:fb:01:4a:bc:f1:bc:9e:b0:40:7f:1d:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E6:2F:19:CE:7E:59:74:09:6D:10:9D:7C:2E:04:F6:4B:64:A7:4D
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6f:27:67:73:3a:ed:47:fa:55:33:5b:c9:25:52:e6:82:42:
a8:20:4d:b2:76:92:d0:77:81:25:a7:2b:03:99:16:49:6a:bd:
82:99:07:f2:1b:ae:4e:b4:ae:82:04:09:50:b1:19:ef:ff:16:
60:00:33:09:56:8b:bc:6b:97:55:21:98:1e:eb:16:88:c8:91:
75:e8:b6:fa:f1:35:39:94:23:e7:0b:b3:b5:46:6b:8b:3d:05:
c8:f7:36:9a:82:81:d1:82:14:7e:00:f7:d6:d6:48:e8:a2:18:
4c:17:ea:da:fa:f8:77:fc:1e:da:cd:2c:74:f4:57:7b:a1:5a:
56:fb:a6:d1:d6:15:dc:e6:42:6d:b8:82:dd:99:44:6e:64:38:
07:cd:84:1c:ea:29:01:22:a6:57:6e:f8:d1:b5:7c:15:a0:a1:
8a:fe:1d:ab:a9:76:19:6e:f7:f0:ea:80:6e:2d:c9:c8:e6:c2:
a3:de:27:7d:d7:57:0a:04:e8:01:8b:c6:4a:ba:87:8c:b6:b2:
71:bd:19:35:f6:d3:ea:6b:5c:cf:b2:ee:e1:41:b0:c6:c4:8f:
04:7a:86:fe:08:7a:f5:90:2a:68:13:57:74:3f:90:c4:fa:f4:
2d:16:b7:16:f8:86:a9:d8:d3:33:f3:0e:3a:1d:58:ad:50:12:
ca:93:d4:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWOvUWiqGgM4Shr6rUSXW2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MWNlNGQ5OWJhOGViYjkxYTc5NGFiZmNiZGQxNWJkZTA5
Yzk5ZjgwHhcNMjUwMzEzMDkwMjAzWhcNMjUwMzE0MDkwMjAzWjAzMTEwLwYDVQQD
EygyOWU2MmYxOWNlN2U1OTc0MDk2ZDEwOWQ3YzJlMDRmNjRiNjRhNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99NQV5k/t09z5f3WJ7eeOM0T5476
zaCTE1zYKn59EgZggt43I0XCJvrUpA59RymkeRyn9ey+Z8DJZ24Op2d/burMqUR8
kpFT5Wd7DXKLt60BagY62BQAICeOQ1yEy8v96KfKayHad5r0BMf76QEcYHQxLMRB
CeOLrxWe5Ulk3MEx03e0rGFV6oJmYuFPPpoX7zMWMohFlhmTii0HEfC6dfsVcDSv
1BeH1S8mShrXNrcoL7zr0nXDnj37+S1zdu417IkEQqo2BmbtzOKORfLpvxwyq9Uw
th3ErZFPYKU58fWbLYhhwl+EbgHh3+paWxKcHQJt+wFKvPG8nrBAfx10qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnmLxnOfll0CW0QnXwuBPZLZKdNMB8GA1UdIwQY
MBaAFGgc5NmbqOu5GnlKv8vdFb3gnJn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82YjllZTgtOTI0Yi00YTMxLWE0NjQt
OWY5OWMxNDc3ZmJlLzEvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82YjllZTgtOTI0Yi00YTMxLWE0NjQtOWY5OWMxNDc3ZmJl
LzEvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqm8nZ3M6
7Uf6VTNbySVS5oJCqCBNsnaS0HeBJacrA5kWSWq9gpkH8huuTrSuggQJULEZ7/8W
YAAzCVaLvGuXVSGYHusWiMiRdei2+vE1OZQj5wuztUZriz0FyPc2moKB0YIUfgD3
1tZI6KIYTBfq2vr4d/we2s0sdPRXe6FaVvum0dYV3OZCbbiC3ZlEbmQ4B82EHOop
ASKmV2740bV8FaChiv4dq6l2GW738OqAbi3JyObCo94nfddXCgToAYvGSrqHjLay
cb0ZNfbT6mtcz7Lu4UGwxsSPBHqG/gh69ZAqaBNXdD+QxPr0LRa3FviGqdjTM/MO
Oh1YrVASypPUbQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:30 2025 by rpki-client