Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: PKb+7PcQuYABWflvPNpf97V55VnGAKTlmE0A7dL6UoA=
Subject key identifier: 52:AB:A7:D1:7C:1C:9D:68:E4:B4:2E:C5:13:B2:F5:A7:BB:A6:68:76
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 01965123C85E6DE8CDC14FB8DAFF14660A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0B04
Signing time: Sun 20 Apr 2025 03:00:21 +0000
Manifest this update: Sun 20 Apr 2025 03:00:21 +0000
Manifest next update: Mon 21 Apr 2025 03:00:21 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: YcAsmpS1+ky9G3heAoZaML4ZHv7qst7ArAOkTT8eExI=)
2: PF_eVnR65kNetKj7PMmx-v4rMFw.roa (hash: /4k6yxxkJCQSm4rG3gdwumQHjo0wfUW3Pw4ZNvKY7P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:c8:5e:6d:e8:cd:c1:4f:b8:da:ff:14:66:0a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Apr 20 03:00:21 2025 GMT
Not After : Apr 21 03:00:21 2025 GMT
Subject: CN=52aba7d17c1c9d68e4b42ec513b2f5a7bba66876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:79:8d:11:be:06:31:b2:94:c3:4e:e1:d1:
34:c8:36:e6:c9:23:f6:fc:7f:9f:a8:76:85:a9:0b:
a4:06:f6:ae:84:58:70:3f:c3:79:c8:e1:2c:d9:38:
4d:3f:2e:01:42:0f:07:5c:25:c3:4b:12:b5:d6:5e:
9b:86:24:3d:25:ec:b4:0b:b9:61:82:9d:b2:39:47:
98:b0:ad:ee:16:e0:50:06:3f:1d:10:33:10:4a:6b:
2b:7b:14:72:fe:74:ee:1d:95:f0:d8:0f:c9:9b:4d:
37:25:c9:2d:af:23:90:d8:38:a0:da:72:a1:82:2c:
0b:a2:29:e3:32:87:a8:da:1a:45:a5:54:8a:73:ee:
83:83:85:b6:28:69:2c:ee:d4:5f:d2:07:96:64:b4:
d2:ab:93:a1:bc:07:cc:62:30:a1:ab:dc:52:f4:6c:
48:d5:a4:d1:d4:5e:79:8c:90:1e:a4:c1:6d:08:8b:
18:13:0a:7f:05:6a:0b:bc:ac:00:7a:44:65:e0:2b:
2a:43:21:1b:5f:76:a3:20:b4:f9:1e:7d:83:0f:02:
4c:02:d9:93:1e:3a:13:05:d6:ee:9c:ab:9d:79:d6:
dc:64:f2:ba:4a:50:d4:66:23:73:e2:a6:5e:37:9a:
84:0a:31:60:87:2c:4c:85:fc:bb:bd:f3:d0:2b:47:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AB:A7:D1:7C:1C:9D:68:E4:B4:2E:C5:13:B2:F5:A7:BB:A6:68:76
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0c:f8:ce:07:85:90:09:a4:87:fc:37:c6:bc:39:a6:a4:63:
6b:b5:b2:45:bc:fa:a3:a3:bc:6b:4e:5f:79:78:f3:48:54:30:
48:54:91:af:8e:96:0e:4b:2e:fa:4a:8c:9c:d3:7e:42:38:33:
11:d3:ac:0d:c6:7f:0f:6a:0b:8b:fc:34:82:f8:4e:e8:87:10:
4e:f5:10:56:23:a2:74:93:11:de:e6:af:35:f4:a0:ee:68:af:
89:1f:45:4d:2b:e2:01:26:87:00:f3:ae:bc:39:b6:c2:d3:3d:
6d:30:63:45:d0:2d:8c:fa:08:f0:18:9e:47:56:dc:3c:7c:f5:
be:02:17:b9:59:e0:f0:06:49:90:11:20:e3:da:4d:7a:6d:45:
eb:b1:cf:d8:64:9c:a0:62:b6:a1:fd:50:08:f1:e5:7a:57:dc:
9e:31:f3:21:e6:1e:3e:10:cd:86:b1:d9:51:77:12:8c:f0:7d:
1a:72:b8:e5:30:e8:64:d7:4f:86:bc:94:4b:72:e9:30:f8:3c:
f7:6c:1d:42:bc:80:c9:ec:19:7b:ef:61:01:6a:08:85:b3:f7:
34:9b:ec:ca:ab:29:b8:fd:7b:97:c8:be:0b:95:e5:de:7d:f9:
4e:12:76:30:5c:0b:64:60:90:e9:42:a9:81:25:3c:40:19:af:
dc:d4:f5:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRI8hebejNwU+42v8UZgpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOGZkZjcxOWQ0N2ExMDAzMzQ1MWE4MzM4NGE2ZGI2OGRi
ZDViMGYwHhcNMjUwNDIwMDMwMDIxWhcNMjUwNDIxMDMwMDIxWjAzMTEwLwYDVQQD
Eyg1MmFiYTdkMTdjMWM5ZDY4ZTRiNDJlYzUxM2IyZjVhN2JiYTY2ODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw815jRG+BjGylMNO4dE0yDbmySP2
/H+fqHaFqQukBvauhFhwP8N5yOEs2ThNPy4BQg8HXCXDSxK11l6bhiQ9Jey0C7lh
gp2yOUeYsK3uFuBQBj8dEDMQSmsrexRy/nTuHZXw2A/Jm003JcktryOQ2Dig2nKh
giwLoinjMoeo2hpFpVSKc+6Dg4W2KGks7tRf0geWZLTSq5OhvAfMYjChq9xS9GxI
1aTR1F55jJAepMFtCIsYEwp/BWoLvKwAekRl4CsqQyEbX3ajILT5Hn2DDwJMAtmT
HjoTBdbunKudedbcZPK6SlDUZiNz4qZeN5qECjFghyxMhfy7vfPQK0fPmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKrp9F8HJ1o5LQuxROy9ae7pmh2MB8GA1UdIwQY
MBaAFAKP33GdR6EAM0UagzhKbbaNvVsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjct
MDU1YTljYWQ4ZGY3LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjctMDU1YTljYWQ4ZGY3
LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQz4zgeF
kAmkh/w3xrw5pqRja7WyRbz6o6O8a05feXjzSFQwSFSRr46WDksu+kqMnNN+Qjgz
EdOsDcZ/D2oLi/w0gvhO6IcQTvUQViOidJMR3uavNfSg7miviR9FTSviASaHAPOu
vDm2wtM9bTBjRdAtjPoI8BieR1bcPHz1vgIXuVng8AZJkBEg49pNem1F67HP2GSc
oGK2of1QCPHlelfcnjHzIeYePhDNhrHZUXcSjPB9GnK45TDoZNdPhryUS3LpMPg8
92wdQryAyewZe+9hAWoIhbP3NJvsyqspuP17l8i+C5Xl3n35ThJ2MFwLZGCQ6UKp
gSU8QBmv3NT1Ag==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:25:15 2025 by rpki-client