Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: Wqo/Ib/UrAyd7Jr3m5m7ryXrw3KWvO/ri4P2IoQVQSw=
Subject key identifier: B7:D7:F1:F3:25:D0:96:52:48:13:32:85:24:7A:36:71:2D:83:C2:10
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 01962037CBC0E351D34D087C7698807BC16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 14E3
Signing time: Thu 10 Apr 2025 15:00:49 +0000
Manifest this update: Thu 10 Apr 2025 15:00:49 +0000
Manifest next update: Fri 11 Apr 2025 15:00:49 +0000
Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: C+F774xgTPhvttrGee8BNDHFS0NCw2nL+Ta8hhN1vas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:37:cb:c0:e3:51:d3:4d:08:7c:76:98:80:7b:c1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Apr 10 15:00:49 2025 GMT
Not After : Apr 11 15:00:49 2025 GMT
Subject: CN=b7d7f1f325d0965248133285247a36712d83c210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:fe:be:ce:00:8b:a6:13:92:98:0d:b3:7a:
0d:7b:d0:16:fc:cb:ea:7e:84:be:1d:b8:83:b8:9e:
13:09:78:36:30:48:46:39:69:a4:33:06:6c:ee:70:
59:4d:12:77:e6:85:7a:fe:e2:b5:5b:47:59:0f:ae:
b8:6d:c7:51:d1:94:f1:95:a2:d0:b1:04:06:34:53:
ba:db:f1:1a:ef:a4:a2:f5:d9:8f:74:8a:9a:99:84:
2a:f0:34:89:43:ef:94:12:fc:2e:d6:6d:2e:35:32:
95:0e:ae:d3:ad:03:06:b7:1b:d7:12:f4:3d:f4:40:
fe:96:9d:43:ad:13:e3:f4:4a:58:fa:b8:88:8c:5e:
90:f6:fc:74:35:fb:50:99:4d:1e:ab:51:cc:23:08:
97:6d:05:d0:6a:cb:c3:61:f6:5e:6d:4c:b6:8a:bb:
73:80:41:a3:a4:8e:05:c2:dd:ca:3e:ee:5e:fb:80:
1d:04:8d:74:83:08:de:ac:63:44:b7:61:04:a1:08:
79:b0:2b:db:a6:2c:9e:e1:2f:64:0c:13:68:5d:cd:
64:1f:95:ca:e0:4c:37:4e:aa:e3:0b:ad:34:2e:f4:
d0:25:58:5f:4d:6a:a9:24:cd:d5:fb:58:81:f0:43:
aa:f4:86:66:88:aa:32:70:ee:68:7d:fd:55:46:c2:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:F1:F3:25:D0:96:52:48:13:32:85:24:7A:36:71:2D:83:C2:10
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:73:e5:e3:be:ee:a2:be:f8:69:16:d7:ca:2a:60:66:0a:0c:
7a:c0:3e:6e:c3:7a:7f:71:09:ef:e3:e7:42:f3:3f:0a:83:19:
33:33:ce:d4:a4:b6:5f:9b:87:e8:43:e9:c3:4f:71:7b:c3:16:
0b:21:12:12:ff:85:65:5b:bd:4f:3b:90:7e:da:00:4a:06:74:
7a:57:20:de:b0:af:ac:cd:50:1b:e4:e5:be:07:90:6d:d1:e8:
41:8c:5a:64:2e:b1:46:f3:ef:af:4a:43:a5:d2:67:73:69:19:
9a:1d:23:df:e9:80:07:0b:5b:e2:96:13:95:6c:bf:16:05:53:
e9:21:54:d7:6e:e5:b1:36:54:fe:60:84:dc:c2:e6:2b:83:98:
e8:59:43:2b:ed:46:d2:7d:88:66:99:88:de:3f:45:e6:5c:2c:
e0:72:3e:08:41:f7:31:2d:a4:4a:66:35:47:de:b8:5e:1c:e8:
b5:85:8a:71:be:50:71:7a:7b:98:ab:f5:aa:75:96:80:ed:72:
59:88:e9:06:6d:3a:47:07:9d:a2:d5:a5:59:00:1c:93:2c:03:
7c:e2:7b:cb:a8:bb:96:f2:fc:e3:ae:a9:ab:9f:30:4b:54:ed:
2d:85:1a:ea:88:13:bd:e7:19:7b:64:42:05:1f:8e:6e:e7:f1:
e9:5e:7c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYgN8vA41HTTQh8dpiAe8FvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWM1ODFhZmYzZDBhOTAxNzhjZmFiNTY1YTM4OGNjZDli
YzAxY2UwHhcNMjUwNDEwMTUwMDQ5WhcNMjUwNDExMTUwMDQ5WjAzMTEwLwYDVQQD
EyhiN2Q3ZjFmMzI1ZDA5NjUyNDgxMzMyODUyNDdhMzY3MTJkODNjMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxP+vs4Ai6YTkpgNs3oNe9AW/Mvq
foS+HbiDuJ4TCXg2MEhGOWmkMwZs7nBZTRJ35oV6/uK1W0dZD664bcdR0ZTxlaLQ
sQQGNFO62/Ea76Si9dmPdIqamYQq8DSJQ++UEvwu1m0uNTKVDq7TrQMGtxvXEvQ9
9ED+lp1DrRPj9EpY+riIjF6Q9vx0NftQmU0eq1HMIwiXbQXQasvDYfZebUy2irtz
gEGjpI4Fwt3KPu5e+4AdBI10gwjerGNEt2EEoQh5sCvbpiye4S9kDBNoXc1kH5XK
4Ew3TqrjC600LvTQJVhfTWqpJM3V+1iB8EOq9IZmiKoycO5off1VRsIuvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfX8fMl0JZSSBMyhSR6NnEtg8IQMB8GA1UdIwQY
MBaAFGmcWBr/PQqQF4z6tWWjiMzZvAHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUt
ZTVkZGQyYmI1MWM1LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUtZTVkZGQyYmI1MWM1
LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHPl477u
or74aRbXyipgZgoMesA+bsN6f3EJ7+PnQvM/CoMZMzPO1KS2X5uH6EPpw09xe8MW
CyESEv+FZVu9TzuQftoASgZ0elcg3rCvrM1QG+TlvgeQbdHoQYxaZC6xRvPvr0pD
pdJnc2kZmh0j3+mABwtb4pYTlWy/FgVT6SFU127lsTZU/mCE3MLmK4OY6FlDK+1G
0n2IZpmI3j9F5lws4HI+CEH3MS2kSmY1R964XhzotYWKcb5QcXp7mKv1qnWWgO1y
WYjpBm06RwedotWlWQAckywDfOJ7y6i7lvL8466pq58wS1TtLYUa6ogTvecZe2RC
BR+Obufx6V58Pw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:15 2025 by rpki-client