Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: CWp1R8gYStHk2D+NjCjkGYzN4U71KVA5Q+ydyS6cQtU=
Subject key identifier: 91:78:6B:55:67:B8:56:4F:9F:AC:7B:44:28:C6:1C:58:1B:15:85:24
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 01959073F644FD6A3C02D45B7FC78F766D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 08D0
Signing time: Thu 13 Mar 2025 17:01:13 +0000
Manifest this update: Thu 13 Mar 2025 17:01:13 +0000
Manifest next update: Fri 14 Mar 2025 17:01:13 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: qdz9tBl1TFZfO6xEQQxjGnDUOLsVPvszXAI8Ihaq7L8=)
3: i86Qnss2Hx--RBAsZcussull0WM.roa (hash: ZSa0NJzxbSdhBzuGRMo0rW/M52VwcaybfD76Q9/vKd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:f6:44:fd:6a:3c:02:d4:5b:7f:c7:8f:76:6d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Mar 13 17:01:13 2025 GMT
Not After : Mar 14 17:01:13 2025 GMT
Subject: CN=91786b5567b8564f9fac7b4428c61c581b158524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:6f:0d:d0:ca:29:44:b8:22:1d:22:fd:3e:
a2:67:18:44:1c:ab:df:ca:e2:69:02:04:b0:4f:69:
c0:07:2c:f2:97:f8:37:6d:8f:e9:1a:17:e8:76:1b:
cc:4a:3d:02:f4:ab:d7:2c:c5:ec:fb:a5:20:e8:92:
78:3b:f0:84:8f:0f:2c:f5:0e:79:38:01:e1:e8:c4:
8c:3e:93:a8:a2:35:6b:74:36:90:d0:78:b9:ec:72:
c8:02:06:a4:db:e1:7f:f0:d8:b7:54:73:d3:cd:d3:
dc:ae:d2:ee:5f:52:a4:3b:46:07:3b:bb:3c:20:bf:
8e:39:6c:3c:7d:24:90:f6:43:42:98:e0:dc:4e:9c:
28:1b:95:d1:af:02:2c:d5:81:3a:d6:14:ca:c7:aa:
6d:a8:b1:22:a5:94:55:60:0b:b8:58:b4:d0:29:90:
60:ba:2a:e8:61:55:63:ca:67:8d:df:2d:35:6d:43:
f5:b2:74:16:15:09:63:d5:f4:33:41:a5:3d:35:27:
1b:7d:24:71:99:1f:b7:4a:9c:0b:62:da:27:d1:3f:
db:e7:df:34:82:1c:a2:13:48:3c:9a:35:a1:f7:de:
06:64:d0:bb:94:f1:be:93:cc:6c:df:9e:a8:15:1b:
a6:74:4f:f5:cd:08:97:2b:2c:d9:7d:7a:1e:3e:28:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:78:6B:55:67:B8:56:4F:9F:AC:7B:44:28:C6:1C:58:1B:15:85:24
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e6:84:36:45:04:a7:32:0e:f6:7d:43:a5:b7:4b:bd:ff:37:
bf:83:1a:cb:1d:81:22:6e:59:44:3f:5a:bb:e8:ee:9c:d2:0c:
ad:2a:8a:64:ac:b3:3e:c7:e7:38:e1:97:3d:d7:43:f2:a2:aa:
40:f6:0b:16:fb:23:29:ee:bc:39:48:75:97:72:a3:4b:b0:93:
f6:5e:12:88:0f:13:d1:05:cd:54:80:91:95:96:40:96:d7:c1:
d5:48:ec:e1:b9:c3:4f:1c:eb:f9:3a:2d:b5:6f:a4:e1:53:76:
9b:8d:ba:ab:43:81:52:b6:b9:a5:0e:12:0c:04:d1:fe:23:69:
f3:5a:62:22:32:3c:99:cf:31:d7:ea:01:15:2c:cd:b1:cf:6e:
bc:1d:9a:dd:d2:c8:17:38:d5:65:7d:49:9c:d3:aa:24:11:2e:
b8:7c:d0:84:b9:c4:a2:7c:94:e4:04:e8:2a:6f:f4:b6:6c:e2:
f4:c1:cc:c2:d2:6d:c6:a4:1d:78:64:9f:15:0e:50:12:10:f3:
ef:b7:b6:64:e6:c2:43:a8:d1:f0:d0:cc:1f:1e:e0:64:a1:34:
34:95:24:2f:76:05:6d:45:c3:22:a7:db:6f:48:4a:86:ac:b5:
9c:1e:ed:32:7f:51:c4:c7:b9:86:38:3b:f2:54:e4:ea:c9:b1:
36:70:13:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQc/ZE/Wo8AtRbf8ePdm0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjAxOTI3YTFhMTc3ZDQyNjEyMjFkOTQ2Mjg1MTRhNTI1
YTk2ZTAwHhcNMjUwMzEzMTcwMTEzWhcNMjUwMzE0MTcwMTEzWjAzMTEwLwYDVQQD
Eyg5MTc4NmI1NTY3Yjg1NjRmOWZhYzdiNDQyOGM2MWM1ODFiMTU4NTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34pvDdDKKUS4Ih0i/T6iZxhEHKvf
yuJpAgSwT2nAByzyl/g3bY/pGhfodhvMSj0C9KvXLMXs+6Ug6JJ4O/CEjw8s9Q55
OAHh6MSMPpOoojVrdDaQ0Hi57HLIAgak2+F/8Ni3VHPTzdPcrtLuX1KkO0YHO7s8
IL+OOWw8fSSQ9kNCmODcTpwoG5XRrwIs1YE61hTKx6ptqLEipZRVYAu4WLTQKZBg
uiroYVVjymeN3y01bUP1snQWFQlj1fQzQaU9NScbfSRxmR+3SpwLYton0T/b5980
ghyiE0g8mjWh994GZNC7lPG+k8xs356oFRumdE/1zQiXKyzZfXoePijMNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJF4a1VnuFZPn6x7RCjGHFgbFYUkMB8GA1UdIwQY
MBaAFGmwGSehoXfUJhIh2UYoUUpSWpbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTIt
MjI1MmJjY2ZkYmY5LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTItMjI1MmJjY2ZkYmY5
LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+aENkUE
pzIO9n1DpbdLvf83v4Mayx2BIm5ZRD9au+junNIMrSqKZKyzPsfnOOGXPddD8qKq
QPYLFvsjKe68OUh1l3KjS7CT9l4SiA8T0QXNVICRlZZAltfB1Ujs4bnDTxzr+Tot
tW+k4VN2m426q0OBUra5pQ4SDATR/iNp81piIjI8mc8x1+oBFSzNsc9uvB2a3dLI
FzjVZX1JnNOqJBEuuHzQhLnEonyU5AToKm/0tmzi9MHMwtJtxqQdeGSfFQ5QEhDz
77e2ZObCQ6jR8NDMHx7gZKE0NJUkL3YFbUXDIqfbb0hKhqy1nB7tMn9RxMe5hjg7
8lTk6smxNnAT6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:12 2025 by rpki-client