Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File: AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier: mPPyA8gp+xYyvKtXYeleltM7Dv95CkPxNytZvHOITYA=
Subject key identifier: 60:F0:E3:B5:73:6B:1C:B5:9E:38:92:FC:DC:E3:A1:B0:1F:1F:F6:42
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial: 019687DC3058731B9868E508E84258604004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number: 065F
Signing time: Wed 30 Apr 2025 18:01:16 +0000
Manifest this update: Wed 30 Apr 2025 18:01:16 +0000
Manifest next update: Thu 01 May 2025 18:01:16 +0000
Files and hashes: 1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: 93iDgAshOAhlgmcIJKggFL/qAE9zb8mR6ShKRuq1Sjw=)
2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:dc:30:58:73:1b:98:68:e5:08:e8:42:58:60:40:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Validity
Not Before: Apr 30 18:01:16 2025 GMT
Not After : May 1 18:01:16 2025 GMT
Subject: CN=60f0e3b5736b1cb59e3892fcdce3a1b01f1ff642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:38:32:9e:b4:29:cd:59:7b:17:a6:44:fd:
ea:0b:8c:ae:65:2e:8f:44:59:86:fa:f2:41:2a:bb:
a5:d5:88:a6:18:12:2c:9b:91:3b:e0:42:6b:84:d3:
4c:77:da:e3:3c:59:cc:f8:48:d1:33:35:89:46:6a:
ab:bb:28:8d:2b:04:9e:4c:1c:7a:06:f5:19:7f:5f:
2f:c1:11:aa:77:d3:10:7f:2b:3c:01:00:33:13:a0:
6a:1f:38:10:2e:ff:0c:49:58:b9:aa:12:7d:e5:f8:
21:74:de:f8:c6:34:65:03:d2:93:99:07:f8:cd:e0:
fe:17:c8:b3:1b:30:ff:cb:1f:35:c3:99:84:be:5f:
44:19:2d:db:eb:fa:49:9a:c8:0f:19:ea:4d:52:9d:
ed:6b:44:02:df:1c:54:bd:95:06:d1:c1:c9:0e:68:
c4:ba:1b:71:0e:71:cb:2f:f0:7e:5f:c5:8b:6e:ac:
ac:92:de:a6:91:db:ae:28:a2:02:21:91:12:a2:9c:
73:80:b5:88:16:c9:56:14:5e:97:71:50:31:1e:44:
f1:cd:7a:30:d4:6c:00:d2:af:81:df:de:b7:5e:eb:
b5:90:94:dd:af:7c:39:bd:78:5c:ec:24:8d:01:b3:
96:46:28:9c:59:ca:e5:5a:dd:34:41:e5:19:04:b9:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F0:E3:B5:73:6B:1C:B5:9E:38:92:FC:DC:E3:A1:B0:1F:1F:F6:42
X509v3 Authority Key Identifier:
keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:e5:9e:61:ad:f5:ed:df:15:a1:9e:83:18:4e:32:62:88:
19:11:5b:08:8a:9a:0a:ac:c0:99:ad:c7:12:2f:5e:09:3f:ce:
f6:2c:89:4b:f4:7e:65:d6:c7:ac:0d:bf:b8:4c:fe:a2:09:cb:
16:6a:22:5f:12:49:36:d8:25:0e:cb:66:06:ca:a2:7b:2c:61:
2d:d7:90:be:02:ac:21:70:d4:07:ba:bb:04:88:df:62:af:a6:
13:19:93:8c:bc:05:b3:31:d3:17:28:39:a3:2f:05:fa:9b:2f:
9e:ab:5e:fe:83:32:e5:66:42:89:a7:95:91:a0:d0:d1:20:5c:
42:f1:c9:63:2a:22:e7:dd:e7:a1:38:5c:a1:4d:e9:d4:a9:84:
f1:f4:ec:22:6c:80:ea:21:59:3a:c1:b7:48:be:4a:ce:67:2c:
a4:d2:3b:96:4a:e8:02:26:5f:ae:e0:67:f2:75:86:64:cb:1b:
79:b9:a5:67:84:70:c8:26:51:d1:61:42:1c:db:b1:2b:ab:a5:
e3:8e:a3:aa:92:e6:02:aa:68:4a:1b:4a:1d:9f:62:fa:e4:43:
d9:fb:e0:fe:95:6c:5b:52:20:9f:f2:89:75:ea:75:51:40:c4:
1b:76:b9:34:a6:1b:28:f4:a7:90:df:f4:f0:59:d3:43:df:2a:
b7:38:6b:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH3DBYcxuYaOUI6EJYYEAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODI1YzdhOWUyNzAxYjZiYTM2NzBkMDhkMmExMGE5ZWEx
NWQzZTMwHhcNMjUwNDMwMTgwMTE2WhcNMjUwNTAxMTgwMTE2WjAzMTEwLwYDVQQD
Eyg2MGYwZTNiNTczNmIxY2I1OWUzODkyZmNkY2UzYTFiMDFmMWZmNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssM4Mp60Kc1ZexemRP3qC4yuZS6P
RFmG+vJBKrul1YimGBIsm5E74EJrhNNMd9rjPFnM+EjRMzWJRmqruyiNKwSeTBx6
BvUZf18vwRGqd9MQfys8AQAzE6BqHzgQLv8MSVi5qhJ95fghdN74xjRlA9KTmQf4
zeD+F8izGzD/yx81w5mEvl9EGS3b6/pJmsgPGepNUp3ta0QC3xxUvZUG0cHJDmjE
uhtxDnHLL/B+X8WLbqyskt6mkduuKKICIZESopxzgLWIFslWFF6XcVAxHkTxzXow
1GwA0q+B3963Xuu1kJTdr3w5vXhc7CSNAbOWRiicWcrlWt00QeUZBLlAtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDw47Vzaxy1njiS/NzjobAfH/ZCMB8GA1UdIwQY
MBaAFAGCXHqeJwG2ujZw0I0qEKnqFdPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWFjMDMtZGM2YS00MGMwLTgyY2It
OGYxMGQ1Yjk2ZmQ0LzEvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWFjMDMtZGM2YS00MGMwLTgyY2ItOGYxMGQ1Yjk2ZmQ0
LzEvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMvlnmGt
9e3fFaGegxhOMmKIGRFbCIqaCqzAma3HEi9eCT/O9iyJS/R+ZdbHrA2/uEz+ognL
FmoiXxJJNtglDstmBsqieyxhLdeQvgKsIXDUB7q7BIjfYq+mExmTjLwFszHTFyg5
oy8F+psvnqte/oMy5WZCiaeVkaDQ0SBcQvHJYyoi593noThcoU3p1KmE8fTsImyA
6iFZOsG3SL5KzmcspNI7lkroAiZfruBn8nWGZMsbebmlZ4RwyCZR0WFCHNuxK6ul
446jqpLmAqpoShtKHZ9i+uRD2fvg/pVsW1Ign/KJdep1UUDEG3a5NKYbKPSnkN/0
8FnTQ98qtzhruQ==
-----END CERTIFICATE-----
Generated at Thu May 1 05:02:07 2025 by rpki-client