Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: fz5gFeSOI0o/XzyUwAtILRQ9QTG5H6ZJm1zNtwzk/nc=
Subject key identifier: 3D:8B:F1:F1:28:5E:47:79:61:DC:98:84:2B:DA:42:EB:49:F8:17:CD
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019656B7E62D55282B60A56D18A676E51BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 06C9
Signing time: Mon 21 Apr 2025 05:00:14 +0000
Manifest this update: Mon 21 Apr 2025 05:00:14 +0000
Manifest next update: Tue 22 Apr 2025 05:00:14 +0000
Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=)
2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: Lxn/37Um/zgTzAkms/nt6oMvoJBHqy9pbaevgJNqjgE=)
4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b7:e6:2d:55:28:2b:60:a5:6d:18:a6:76:e5:1b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Apr 21 05:00:14 2025 GMT
Not After : Apr 22 05:00:14 2025 GMT
Subject: CN=3d8bf1f1285e477961dc98842bda42eb49f817cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:ca:0f:3d:73:37:22:a7:f2:f9:16:29:11:
91:c7:98:dc:85:50:9c:c6:db:a8:fb:29:77:72:72:
e5:2a:a4:ef:fe:86:75:3e:f0:30:02:b7:a3:bf:30:
0e:09:dc:ae:bb:28:be:fa:fc:74:e6:2b:ef:1e:a2:
f8:36:91:16:48:11:6f:26:56:2f:11:e9:c3:6d:e2:
3d:f9:92:d4:9c:f3:bc:8b:2e:d3:f5:e5:3d:a7:f9:
df:6f:74:07:83:fd:ff:6e:c2:d8:84:97:db:c1:46:
af:d5:e5:3a:19:8e:da:0c:e1:1d:61:ea:62:35:0b:
df:e6:c5:cc:5c:8b:b1:d6:6f:5e:c1:da:14:64:a5:
de:db:b2:70:1a:70:9f:39:d8:b9:d0:00:7d:7f:fd:
46:3a:b0:d1:f8:a2:26:3d:dc:ce:6c:7e:94:8a:58:
e8:92:01:3d:7c:d0:5d:83:f0:6b:f1:eb:1a:24:a5:
39:b6:23:8d:9e:2e:e7:39:bd:82:b9:a6:17:e1:b0:
79:c3:bf:8b:bc:4e:8c:1f:bd:04:8b:34:f8:70:5b:
78:a0:dd:71:d6:41:1d:45:27:75:76:c7:93:5e:8d:
ba:5b:9d:2b:d9:d0:05:e1:59:25:5e:e9:85:a9:ab:
01:4c:3d:85:ee:54:ca:be:0f:27:ac:90:0b:86:ce:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8B:F1:F1:28:5E:47:79:61:DC:98:84:2B:DA:42:EB:49:F8:17:CD
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:39:51:58:e1:3a:cd:3d:7d:ed:fa:88:91:b0:cd:72:8b:09:
58:9b:f3:aa:ca:70:e0:f3:af:1c:d8:97:3d:ab:61:1d:26:e1:
05:6c:2b:6e:ef:9a:0a:29:8e:5d:a8:57:73:54:39:f3:e5:c3:
15:da:e8:db:a0:a3:ac:a5:97:c9:27:95:93:8b:53:52:3a:69:
45:09:1f:dc:d3:da:57:61:b4:14:2d:e8:5e:50:3e:5f:29:2a:
2d:c6:fc:a6:9a:d9:3a:7c:78:36:f2:f1:55:97:41:e2:7d:59:
7a:10:d6:e6:40:52:bd:3b:f4:a6:77:22:b1:58:0e:85:d8:fb:
7f:43:d0:e4:cc:50:6e:f4:ef:7c:54:15:72:15:26:80:75:e9:
4c:74:8c:a5:f2:e9:56:cb:40:e2:65:12:20:a6:49:d6:fd:a9:
b5:a0:03:a6:89:93:c2:0a:c7:1b:c1:7e:2c:8a:6d:28:10:1e:
f7:3c:cb:25:d8:e4:4d:fb:0e:d2:91:ac:7f:e7:5c:6c:2c:ef:
13:4a:1e:08:77:61:0c:f5:d5:17:a3:4f:7b:b2:33:65:b4:ae:
57:87:49:ed:d3:ba:ad:1f:6a:f8:7c:66:d8:c2:c3:84:90:f2:
6d:bf:1d:8f:7b:d2:97:b6:e5:ac:88:b0:b7:9b:fa:32:81:be:
5d:75:93:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWt+YtVSgrYKVtGKZ25RvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm
NmExMTMwHhcNMjUwNDIxMDUwMDE0WhcNMjUwNDIyMDUwMDE0WjAzMTEwLwYDVQQD
EygzZDhiZjFmMTI4NWU0Nzc5NjFkYzk4ODQyYmRhNDJlYjQ5ZjgxN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWnKDz1zNyKn8vkWKRGRx5jchVCc
xtuo+yl3cnLlKqTv/oZ1PvAwArejvzAOCdyuuyi++vx05ivvHqL4NpEWSBFvJlYv
EenDbeI9+ZLUnPO8iy7T9eU9p/nfb3QHg/3/bsLYhJfbwUav1eU6GY7aDOEdYepi
NQvf5sXMXIux1m9ewdoUZKXe27JwGnCfOdi50AB9f/1GOrDR+KImPdzObH6Uiljo
kgE9fNBdg/Br8esaJKU5tiONni7nOb2CuaYX4bB5w7+LvE6MH70EizT4cFt4oN1x
1kEdRSd1dseTXo26W50r2dAF4VklXumFqasBTD2F7lTKvg8nrJALhs7w1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2L8fEoXkd5YdyYhCvaQutJ+BfNMB8GA1UdIwQY
MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et
ZTY2NzllN2I3OTVhLzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh
LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzlRWOE6
zT197fqIkbDNcosJWJvzqspw4POvHNiXPathHSbhBWwrbu+aCimOXahXc1Q58+XD
Fdro26CjrKWXySeVk4tTUjppRQkf3NPaV2G0FC3oXlA+XykqLcb8pprZOnx4NvLx
VZdB4n1ZehDW5kBSvTv0pncisVgOhdj7f0PQ5MxQbvTvfFQVchUmgHXpTHSMpfLp
VstA4mUSIKZJ1v2ptaADpomTwgrHG8F+LIptKBAe9zzLJdjkTfsO0pGsf+dcbCzv
E0oeCHdhDPXVF6NPe7IzZbSuV4dJ7dO6rR9q+Hxm2MLDhJDybb8dj3vSl7blrIiw
t5v6MoG+XXWTTQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:00:06 2025 by rpki-client