Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: NAfvetAXbZWF3+/dYwqVftr52WWdx5P9sY3ZOpgYzIE=
Subject key identifier: D8:FC:AB:2F:A2:12:AE:D4:5F:EB:9B:23:4C:9F:D3:01:CB:6F:19:58
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 0196933AD7CD430B4C5AFDFB74C3BE610241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 23:00:29 +0000
Manifest this update: Fri 02 May 2025 23:00:29 +0000
Manifest next update: Sat 03 May 2025 23:00:29 +0000
Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: UXk3cV9l+JR5sef8q+QQ6DhfelS05ajEh6x2qJ0iaXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:3a:d7:cd:43:0b:4c:5a:fd:fb:74:c3:be:61:02:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: May 2 23:00:29 2025 GMT
Not After : May 3 23:00:29 2025 GMT
Subject: CN=d8fcab2fa212aed45feb9b234c9fd301cb6f1958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:f9:82:51:3c:ce:1f:4b:81:3e:a4:96:3c:
fe:33:cd:56:7f:ba:e2:a7:0e:70:3b:34:d1:d4:d0:
b5:f5:5b:30:d8:33:6f:2a:3b:fa:c0:d4:a1:73:da:
1b:93:6e:14:e9:e2:c0:d0:f8:60:ee:df:f3:b1:da:
30:b3:08:74:54:57:ae:9c:32:01:2b:49:50:ce:67:
3a:6a:1f:5d:91:42:e5:48:08:22:81:34:a6:be:e7:
a0:60:79:10:37:0b:d1:74:08:a4:9b:d4:e0:4f:4b:
f0:dc:88:da:80:60:58:dc:79:f3:25:95:e5:12:12:
5f:18:4f:4e:b8:25:fd:60:81:97:22:ea:37:2b:c2:
c2:a7:ee:25:82:e2:8a:7a:cb:09:7d:74:ea:49:c4:
fb:07:f9:70:ad:2c:8d:64:e3:ed:9d:91:04:0d:73:
cf:cc:8c:44:bd:cb:09:c7:5a:48:60:e1:c5:e7:41:
ba:54:8e:7e:48:fd:a0:9f:79:5f:d5:5c:b6:aa:a5:
fc:88:0c:d7:d5:f8:78:34:d1:ed:c3:55:b3:16:85:
4f:f7:5d:31:2e:10:1a:1b:3a:e5:e9:d6:45:45:3e:
39:fd:23:2c:d8:0f:45:df:14:71:77:b3:28:d1:15:
91:6d:07:55:46:e4:35:99:11:4f:f6:72:61:e2:ed:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FC:AB:2F:A2:12:AE:D4:5F:EB:9B:23:4C:9F:D3:01:CB:6F:19:58
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:56:41:c9:6b:33:8b:0f:62:26:a8:9a:44:52:57:96:71:e3:
be:f8:cc:34:33:9a:4e:ca:b5:e4:b1:3d:fe:c0:fa:1d:b5:10:
4a:48:ae:b2:ef:ee:0f:45:c3:03:2e:21:d7:b8:1b:5f:28:70:
72:93:1e:fb:29:5b:f1:38:17:3d:35:40:2a:5a:43:11:03:d8:
01:e7:c8:ba:b9:34:ea:ac:dc:55:fb:0f:3c:d4:bc:de:c9:21:
25:bc:9d:1d:2b:b1:5f:84:f8:84:2f:82:6f:8d:6c:6b:5e:ce:
52:01:9b:e2:f2:ce:4f:94:6e:82:c5:5e:77:c3:d5:44:bd:ed:
17:23:18:5c:db:9e:b8:35:13:5d:42:f7:8c:cf:4a:12:cb:53:
c4:b4:30:8b:f4:f0:83:35:69:4e:b6:d0:07:4d:c7:9c:c8:93:
3b:52:ef:2f:fc:c8:b5:21:a5:3d:d5:4a:75:a9:c6:ca:b6:c7:
61:a4:03:52:f8:dd:b2:a6:39:af:b8:bc:67:ba:7d:59:c5:13:
c1:9a:d7:62:5a:08:d9:80:13:61:58:e6:95:87:f9:6b:9c:d6:
a9:71:4b:9d:9b:9b:bb:51:f8:ad:ab:5c:59:bc:3e:55:34:34:
29:bf:f1:e9:a3:00:8c:fc:6b:25:ad:e7:3a:6b:98:3b:34:4e:
6d:c7:55:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTOtfNQwtMWv37dMO+YQJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTM2ZTFhNjhlOTQ0YjIzNDc5MDhiOGJkZmU3NzQwZDhl
OGFhNDMwHhcNMjUwNTAyMjMwMDI5WhcNMjUwNTAzMjMwMDI5WjAzMTEwLwYDVQQD
EyhkOGZjYWIyZmEyMTJhZWQ0NWZlYjliMjM0YzlmZDMwMWNiNmYxOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+75glE8zh9LgT6kljz+M81Wf7ri
pw5wOzTR1NC19Vsw2DNvKjv6wNShc9obk24U6eLA0Phg7t/zsdowswh0VFeunDIB
K0lQzmc6ah9dkULlSAgigTSmvuegYHkQNwvRdAikm9TgT0vw3IjagGBY3HnzJZXl
EhJfGE9OuCX9YIGXIuo3K8LCp+4lguKKessJfXTqScT7B/lwrSyNZOPtnZEEDXPP
zIxEvcsJx1pIYOHF50G6VI5+SP2gn3lf1Vy2qqX8iAzX1fh4NNHtw1WzFoVP910x
LhAaGzrl6dZFRT45/SMs2A9F3xRxd7Mo0RWRbQdVRuQ1mRFP9nJh4u3pMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj8qy+iEq7UX+ubI0yf0wHLbxlYMB8GA1UdIwQY
MBaAFANTbhpo6USyNHkIuL3+d0DY6KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzkt
NWEzNzdjODc5MWY1LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzktNWEzNzdjODc5MWY1
LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVZByWsz
iw9iJqiaRFJXlnHjvvjMNDOaTsq15LE9/sD6HbUQSkiusu/uD0XDAy4h17gbXyhw
cpMe+ylb8TgXPTVAKlpDEQPYAefIurk06qzcVfsPPNS83skhJbydHSuxX4T4hC+C
b41sa17OUgGb4vLOT5RugsVed8PVRL3tFyMYXNueuDUTXUL3jM9KEstTxLQwi/Tw
gzVpTrbQB03HnMiTO1LvL/zItSGlPdVKdanGyrbHYaQDUvjdsqY5r7i8Z7p9WcUT
wZrXYloI2YATYVjmlYf5a5zWqXFLnZubu1H4ratcWbw+VTQ0Kb/x6aMAjPxrJa3n
OmuYOzRObcdVyg==
-----END CERTIFICATE-----
Generated at Sat May 3 01:41:45 2025 by rpki-client