Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: 9ICTg11+EN0IHvN1iMA+rwapDcR/8R6Mqj+fFupwTOw=
Subject key identifier: 79:E1:81:59:19:A7:2E:89:E6:C4:D2:99:FE:69:C1:DB:7C:D0:7A:C9
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019675671509E6C1C811B2C51A0E82D0C52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 04:00:11 +0000
Manifest this update: Sun 27 Apr 2025 04:00:11 +0000
Manifest next update: Mon 28 Apr 2025 04:00:11 +0000
Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: hMUpQYaQUwJTbF9jh8Sml5imKo62wY+OBlIoRSiMhKs=)
3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:15:09:e6:c1:c8:11:b2:c5:1a:0e:82:d0:c5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Apr 27 04:00:11 2025 GMT
Not After : Apr 28 04:00:11 2025 GMT
Subject: CN=79e1815919a72e89e6c4d299fe69c1db7cd07ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:72:89:74:97:02:81:5f:56:9b:ed:2d:5b:
56:65:e1:ef:5c:1d:ec:56:bf:57:bd:64:89:e1:a3:
bc:2c:57:53:5b:d7:e8:29:29:fb:e7:2c:a4:f6:92:
5c:65:4b:92:25:c6:e8:91:ea:02:e3:0d:d5:f8:d8:
f9:f3:f5:2f:7e:b4:52:57:3b:cd:98:96:4b:87:38:
cb:4a:e7:45:45:dd:99:24:12:c2:15:fd:95:52:a0:
92:da:34:03:c3:db:ba:45:a2:2a:28:a5:2e:23:7e:
a9:91:de:1c:19:48:83:03:45:58:80:22:7b:ad:c1:
4e:3c:87:57:69:83:78:92:e2:02:a7:aa:7a:4c:25:
39:70:7c:8d:c8:54:d5:b1:df:eb:3c:1d:29:ae:5f:
33:42:8b:13:98:6a:0f:54:6f:8a:07:db:03:61:26:
ec:22:b1:1f:a0:19:aa:1d:34:9c:b9:d9:3f:30:a5:
aa:ae:67:0f:b8:8a:48:d2:81:d8:64:25:17:a7:cc:
bb:85:e2:4c:a3:12:2b:05:67:ad:8e:92:db:2e:91:
6e:d9:a2:11:44:ce:8e:ef:57:d7:5c:9d:97:83:39:
fe:6c:87:c0:1e:35:96:24:80:a7:59:2e:8e:be:c0:
d0:2a:26:ab:71:ed:de:bc:40:8d:e9:4b:13:09:e6:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:81:59:19:A7:2E:89:E6:C4:D2:99:FE:69:C1:DB:7C:D0:7A:C9
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:27:e3:e9:bd:6d:74:95:50:3a:69:95:6a:49:2b:af:14:73:
5d:38:35:da:d3:93:6e:f7:1d:b6:fe:3a:2a:26:a5:23:76:8b:
e8:6c:ff:3c:78:df:35:e8:ed:8d:b1:28:fb:11:d6:14:9d:25:
28:2e:34:34:9f:95:64:1b:82:d9:58:85:8d:82:b0:cc:b6:8f:
38:f1:6b:dc:29:c0:7e:63:79:79:a9:5e:eb:15:61:f4:21:ff:
61:3e:ab:cd:0b:37:4d:62:30:fc:fa:2a:f5:83:96:84:7f:a0:
b9:c2:2e:c9:5e:f2:c0:10:d7:d6:e3:49:8a:ec:07:7a:35:ce:
ae:d7:c5:9a:b0:d0:a0:c4:29:3f:92:e2:ef:3e:67:d8:fc:42:
29:96:fb:75:3d:a6:61:63:33:2c:e3:fe:82:99:4d:bc:ee:69:
61:1d:9f:e7:db:2d:c6:f9:03:46:4f:17:18:e3:6c:d0:98:3c:
3a:c1:51:b4:e1:03:7d:e0:ab:7c:f2:a9:28:5f:7b:cd:9e:1f:
7a:13:bf:d0:0c:f7:0d:f8:0b:30:3f:32:cb:e4:9a:38:17:30:
26:3a:b1:b6:03:e0:fc:9a:0c:06:f5:6a:bd:74:62:b4:aa:31:
e2:a9:22:92:89:17:75:67:d5:7d:ec:c1:fb:7b:a1:92:29:17:
62:e5:ef:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1ZxUJ5sHIEbLFGg6C0MUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm
YjEyMDkwHhcNMjUwNDI3MDQwMDExWhcNMjUwNDI4MDQwMDExWjAzMTEwLwYDVQQD
Eyg3OWUxODE1OTE5YTcyZTg5ZTZjNGQyOTlmZTY5YzFkYjdjZDA3YWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurFyiXSXAoFfVpvtLVtWZeHvXB3s
Vr9XvWSJ4aO8LFdTW9foKSn75yyk9pJcZUuSJcbokeoC4w3V+Nj58/UvfrRSVzvN
mJZLhzjLSudFRd2ZJBLCFf2VUqCS2jQDw9u6RaIqKKUuI36pkd4cGUiDA0VYgCJ7
rcFOPIdXaYN4kuICp6p6TCU5cHyNyFTVsd/rPB0prl8zQosTmGoPVG+KB9sDYSbs
IrEfoBmqHTScudk/MKWqrmcPuIpI0oHYZCUXp8y7heJMoxIrBWetjpLbLpFu2aIR
RM6O71fXXJ2Xgzn+bIfAHjWWJICnWS6OvsDQKiarce3evECN6UsTCeZM5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnhgVkZpy6J5sTSmf5pwdt80HrJMB8GA1UdIwQY
MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt
MGI4YjA3NWU4NmRiLzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi
LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARifj6b1t
dJVQOmmVakkrrxRzXTg12tOTbvcdtv46KialI3aL6Gz/PHjfNejtjbEo+xHWFJ0l
KC40NJ+VZBuC2ViFjYKwzLaPOPFr3CnAfmN5eale6xVh9CH/YT6rzQs3TWIw/Poq
9YOWhH+gucIuyV7ywBDX1uNJiuwHejXOrtfFmrDQoMQpP5Li7z5n2PxCKZb7dT2m
YWMzLOP+gplNvO5pYR2f59stxvkDRk8XGONs0Jg8OsFRtOEDfeCrfPKpKF97zZ4f
ehO/0Az3DfgLMD8yy+SaOBcwJjqxtgPg/JoMBvVqvXRitKox4qkikokXdWfVfezB
+3uhkikXYuXvOg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:03 2025 by rpki-client