Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File: aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier: BbPByOvwGgo9v0w/S0PDIiYl3yNk/6UA+IUC6ux7CiQ=
Subject key identifier: 09:5C:A0:56:B6:82:B2:67:20:E1:71:12:E6:D9:B1:65:21:D5:02:8C
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 0196580217AB05DCD3F4FBBA9CA8ED7FF0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number: 1249
Signing time: Mon 21 Apr 2025 11:00:54 +0000
Manifest this update: Mon 21 Apr 2025 11:00:54 +0000
Manifest next update: Tue 22 Apr 2025 11:00:54 +0000
Files and hashes: 1: HaUn7tg_GQoLwUeKln7B89E1Zus.roa (hash: UBP04zlDEuw8zGqO58s8vILU4LoszVd4p1cFKyVRANw=)
2: Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa (hash: 2ufypWC+H0u1FT85vML3Y3XXLbc7QafpFQUC4EhAO8E=)
3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: /xBgI6R1AzlFNGTA1p2ZvZd9EFFgyHxU418XmfvM5xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:02:17:ab:05:dc:d3:f4:fb:ba:9c:a8:ed:7f:f0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Apr 21 11:00:54 2025 GMT
Not After : Apr 22 11:00:54 2025 GMT
Subject: CN=095ca056b682b26720e17112e6d9b16521d5028c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:80:b3:99:1c:f8:a3:20:7b:fa:0e:50:64:
b5:cb:2e:b2:c8:ab:b9:a9:0a:55:05:1b:32:1a:38:
47:52:5d:93:4d:07:71:c9:23:99:3c:f8:74:fd:41:
af:ea:7b:6a:35:d6:22:86:2b:65:bb:69:3c:a6:89:
7a:91:f3:76:f5:38:6d:ca:a5:d0:4e:e0:19:32:b1:
ed:79:7b:f2:b1:00:fe:7c:9b:70:c6:f1:e0:84:06:
20:11:9d:34:92:4a:2f:58:c9:88:8f:ca:8e:83:be:
eb:88:6e:f4:21:ef:0a:5d:e8:ee:bb:d4:0f:e3:eb:
d1:8e:f6:6f:f1:0a:ec:58:2b:41:f5:8e:cd:3b:74:
c0:e3:54:ce:91:ad:d0:c6:38:41:a1:c0:73:3a:bc:
07:da:09:65:b5:68:a9:ea:30:62:55:7b:d9:a9:ef:
bf:51:63:09:a0:f1:f8:3f:94:ff:9e:41:c9:db:66:
30:dc:6f:17:21:fa:98:37:ca:03:34:be:cd:97:fc:
71:95:de:21:61:15:43:26:d5:43:34:d4:4e:ff:31:
a1:ab:46:c0:8b:ca:18:69:41:66:a2:3b:9f:4c:f0:
93:41:28:62:1a:e2:97:c3:44:1d:78:7c:d8:9d:29:
97:ff:7d:22:f8:9c:00:4a:9c:c8:e5:3e:db:fb:e2:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5C:A0:56:B6:82:B2:67:20:E1:71:12:E6:D9:B1:65:21:D5:02:8C
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:92:98:c4:7d:a6:9a:70:29:34:e7:4e:67:fe:f2:b2:8f:84:
9f:54:dc:d3:d2:d6:af:fe:ce:78:0c:29:ec:e0:cb:1d:43:2d:
48:ba:2b:72:72:ee:56:e8:08:38:45:a6:f2:8f:f5:83:f1:84:
fb:7c:6d:26:64:e5:68:b3:3a:6c:e9:35:f9:49:7c:28:9c:62:
bd:fd:78:fe:4b:47:6e:1e:f0:55:2b:c4:5c:50:20:92:2e:40:
db:ee:3f:80:75:c8:3b:a8:8c:95:4c:05:3b:d4:d8:f5:b7:26:
67:28:33:4b:09:51:89:23:7a:8d:59:c3:a6:00:fd:e6:69:c0:
99:4b:ee:16:00:42:c7:33:38:e5:80:13:16:38:3d:f4:fa:f0:
35:10:a0:2d:a3:e8:e3:21:8b:6c:af:7e:ba:35:aa:8f:b5:0e:
00:59:cd:7c:b9:34:72:9e:6e:8f:41:03:df:f6:f7:93:17:ac:
57:c3:14:3b:ee:69:03:d0:de:fd:3a:e8:f9:23:d4:43:f5:8f:
d3:df:38:a4:33:f2:99:48:82:3e:4c:27:1e:89:9a:03:62:ad:
38:71:13:5e:36:0c:6c:a8:0c:e6:3c:e2:c7:00:a0:a8:3e:db:
0d:0b:af:16:30:a2:74:c6:15:f4:78:e9:64:33:a6:fd:4f:6d:
b5:b0:5d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAherBdzT9Pu6nKjtf/DnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM5YTIxNzU5Nzk2ZmUzYTFkOTE5ZjliNTczN2ViNjhk
NzA4ZTQwHhcNMjUwNDIxMTEwMDU0WhcNMjUwNDIyMTEwMDU0WjAzMTEwLwYDVQQD
EygwOTVjYTA1NmI2ODJiMjY3MjBlMTcxMTJlNmQ5YjE2NTIxZDUwMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgmAs5kc+KMge/oOUGS1yy6yyKu5
qQpVBRsyGjhHUl2TTQdxySOZPPh0/UGv6ntqNdYihitlu2k8pol6kfN29ThtyqXQ
TuAZMrHteXvysQD+fJtwxvHghAYgEZ00kkovWMmIj8qOg77riG70Ie8KXejuu9QP
4+vRjvZv8QrsWCtB9Y7NO3TA41TOka3QxjhBocBzOrwH2glltWip6jBiVXvZqe+/
UWMJoPH4P5T/nkHJ22Yw3G8XIfqYN8oDNL7Nl/xxld4hYRVDJtVDNNRO/zGhq0bA
i8oYaUFmojufTPCTQShiGuKXw0QdeHzYnSmX/30i+JwASpzI5T7b++LpyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlcoFa2grJnIOFxEubZsWUh1QKMMB8GA1UdIwQY
MBaAFGhjmiF1l5b+Oh2Rn5tXN+to1wjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTct
MTNkMTY4ZDU5YjExLzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTctMTNkMTY4ZDU5YjEx
LzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJKYxH2m
mnApNOdOZ/7yso+En1Tc09LWr/7OeAwp7ODLHUMtSLorcnLuVugIOEWm8o/1g/GE
+3xtJmTlaLM6bOk1+Ul8KJxivf14/ktHbh7wVSvEXFAgki5A2+4/gHXIO6iMlUwF
O9TY9bcmZygzSwlRiSN6jVnDpgD95mnAmUvuFgBCxzM45YATFjg99PrwNRCgLaPo
4yGLbK9+ujWqj7UOAFnNfLk0cp5uj0ED3/b3kxesV8MUO+5pA9De/Tro+SPUQ/WP
0984pDPymUiCPkwnHomaA2KtOHETXjYMbKgM5jzixwCgqD7bDQuvFjCidMYV9Hjp
ZDOm/U9ttbBdcQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:10:20 2025 by rpki-client