Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: X3NJz1sV/BNME/GdPLffgC2BYhxhZsdb9OhEg6X2+50=
Subject key identifier: C5:11:6E:97:E9:9E:1E:6B:79:CE:EA:94:F8:35:69:E7:0B:20:40:BF
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 0196496A4296AE11A3030B6FC42A77421FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 1304
Signing time: Fri 18 Apr 2025 15:00:22 +0000
Manifest this update: Fri 18 Apr 2025 15:00:22 +0000
Manifest next update: Sat 19 Apr 2025 15:00:22 +0000
Files and hashes: 1: A95nvExRv6jB5eSZJpOw7UhU9Cs.roa (hash: 377020JWmLx/vMoWlq0LLQD0jueSe9bNRdwFbBb8JvY=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: UFidMgm0wzhx2HB9fODVp6uSBc1YQMz2j1OPMI7oTvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:42:96:ae:11:a3:03:0b:6f:c4:2a:77:42:1f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Apr 18 15:00:22 2025 GMT
Not After : Apr 19 15:00:22 2025 GMT
Subject: CN=c5116e97e99e1e6b79ceea94f83569e70b2040bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:81:80:2b:2b:08:bf:a6:84:31:8e:16:87:
fc:28:12:11:88:29:6c:f1:80:3c:8d:16:d1:f1:a3:
0e:b0:f0:33:ea:39:a5:81:b4:9e:75:ce:52:6b:51:
17:56:da:ac:1a:c3:16:36:fb:8b:54:67:9b:91:57:
d8:0f:cb:b1:76:cc:87:8c:21:87:7a:67:a0:6c:18:
86:30:14:0a:71:53:2c:20:39:63:ba:94:b9:35:84:
1a:31:b0:5c:56:5d:ba:9d:73:0f:8a:5a:d4:47:24:
b3:43:b7:b6:83:6e:fb:b0:00:a4:f6:15:d7:e6:28:
b4:c3:93:4f:f9:cf:df:f0:4e:fb:bf:19:4f:4d:5c:
68:f7:97:21:0d:0e:54:f3:da:b4:65:83:b9:df:7d:
6a:7c:27:3f:24:2c:41:1d:c6:3c:69:09:39:34:4b:
b0:6f:41:06:f3:be:32:5f:8a:3c:3e:8a:e0:36:ea:
81:0f:a7:fa:c5:01:d8:39:52:74:c8:f2:01:9b:09:
c1:67:6d:fa:e9:14:e5:a1:fd:80:cf:81:ae:b3:27:
6c:51:9e:e4:e5:7d:27:d3:8a:25:39:22:86:18:99:
b0:f6:8d:5e:b3:c6:10:9d:09:bb:2c:20:36:71:e7:
10:af:bd:93:b0:64:7b:6f:16:91:08:0a:00:40:45:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:6E:97:E9:9E:1E:6B:79:CE:EA:94:F8:35:69:E7:0B:20:40:BF
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ef:70:5f:f5:6e:61:fc:c7:ec:51:31:d3:72:eb:96:c8:9c:
56:6f:3e:80:c0:0e:c7:b4:ed:be:b7:41:b0:8b:7d:88:11:7e:
e4:91:e3:32:46:8d:ee:39:62:06:b0:45:97:41:d6:2a:8e:8e:
b6:24:07:14:b0:af:fc:6c:e9:9b:55:ed:e8:9a:27:49:b9:1e:
59:e5:7b:67:e7:d8:dc:89:44:c9:1b:51:f5:de:aa:72:13:b5:
ce:af:02:73:77:d0:99:4c:af:9f:6c:c2:a8:7a:22:ee:5b:0a:
69:ba:46:58:70:0f:05:18:ba:e2:dc:1c:ee:eb:26:df:ca:0d:
b9:74:87:4f:ec:2b:db:13:98:d9:01:90:0f:f3:61:e3:e1:97:
d0:5c:a4:3e:cb:32:3d:93:6e:54:3b:b4:24:9f:f5:d5:6b:1f:
50:b6:41:37:1d:55:fa:ae:31:7d:c6:59:24:ce:a9:f8:a6:9b:
82:6c:9a:3c:59:62:5d:39:87:1f:2b:0b:83:ea:70:6f:fd:60:
f8:d0:b4:f6:5e:c4:18:6f:1b:a5:fc:c2:2b:55:73:7e:13:22:
8c:a0:5b:f5:2e:96:86:71:26:13:b3:9a:62:f2:d5:71:a1:59:
e0:24:4f:db:da:47:50:3b:4c:1d:92:20:c4:84:62:82:27:a8:
ca:f7:86:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJakKWrhGjAwtvxCp3Qh/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDFlZjE2M2E2NjFjY2U1YmM2MjExN2VjNzYzNzU4YjFi
NWJiODkwHhcNMjUwNDE4MTUwMDIyWhcNMjUwNDE5MTUwMDIyWjAzMTEwLwYDVQQD
EyhjNTExNmU5N2U5OWUxZTZiNzljZWVhOTRmODM1NjllNzBiMjA0MGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9iBgCsrCL+mhDGOFof8KBIRiCls
8YA8jRbR8aMOsPAz6jmlgbSedc5Sa1EXVtqsGsMWNvuLVGebkVfYD8uxdsyHjCGH
emegbBiGMBQKcVMsIDljupS5NYQaMbBcVl26nXMPilrURySzQ7e2g277sACk9hXX
5ii0w5NP+c/f8E77vxlPTVxo95chDQ5U89q0ZYO5331qfCc/JCxBHcY8aQk5NEuw
b0EG874yX4o8PorgNuqBD6f6xQHYOVJ0yPIBmwnBZ2366RTlof2Az4GusydsUZ7k
5X0n04olOSKGGJmw9o1es8YQnQm7LCA2cecQr72TsGR7bxaRCAoAQEVV7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMURbpfpnh5rec7qlPg1aecLIEC/MB8GA1UdIwQY
MBaAFGjR7xY6ZhzOW8YhF+x2N1ixtbuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2Qt
M2E4YTYxMDA2YTRmLzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2QtM2E4YTYxMDA2YTRm
LzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiO9wX/Vu
YfzH7FEx03LrlsicVm8+gMAOx7TtvrdBsIt9iBF+5JHjMkaN7jliBrBFl0HWKo6O
tiQHFLCv/Gzpm1Xt6JonSbkeWeV7Z+fY3IlEyRtR9d6qchO1zq8Cc3fQmUyvn2zC
qHoi7lsKabpGWHAPBRi64twc7usm38oNuXSHT+wr2xOY2QGQD/Nh4+GX0FykPssy
PZNuVDu0JJ/11WsfULZBNx1V+q4xfcZZJM6p+KabgmyaPFliXTmHHysLg+pwb/1g
+NC09l7EGG8bpfzCK1VzfhMijKBb9S6WhnEmE7OaYvLVcaFZ4CRP29pHUDtMHZIg
xIRigieoyveGCQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:22:30 2025 by rpki-client