Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: VKkRnoVkbrrMc48pB0pXCb1bjXVaZ4+Jvl5leWqY//Q=
Subject key identifier: 39:57:FC:BD:8D:44:04:3B:9A:03:CA:2D:34:A9:D8:E7:93:92:A3:F3
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 019686C8CB6E1297628596B281C5FD5929DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 151D
Signing time: Wed 30 Apr 2025 13:00:28 +0000
Manifest this update: Wed 30 Apr 2025 13:00:28 +0000
Manifest next update: Thu 01 May 2025 13:00:28 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: rPJUd1T3xlKpB5SUlWbB+LcDetjFYLdmpaD74x601bg=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:cb:6e:12:97:62:85:96:b2:81:c5:fd:59:29:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Apr 30 13:00:28 2025 GMT
Not After : May 1 13:00:28 2025 GMT
Subject: CN=3957fcbd8d44043b9a03ca2d34a9d8e79392a3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:cb:a3:c8:fe:72:1e:ab:7c:83:87:9d:9e:
ee:5b:9e:4f:aa:76:27:0b:a2:cd:49:40:b0:8d:8a:
35:e4:d3:85:6e:f5:c7:45:ef:48:0d:ef:6a:8f:fb:
d1:3f:b3:9e:1e:5e:c3:69:19:fd:a2:7f:02:63:6d:
46:74:f7:5d:20:e1:f4:91:d7:3e:9a:60:8a:82:61:
7f:6c:64:8a:19:86:96:4d:ee:ff:61:98:3f:c0:25:
12:76:24:af:c5:93:da:97:55:56:8f:17:e3:34:76:
2b:63:f6:1f:bc:2f:ef:b7:84:3d:ef:7c:33:78:5f:
95:be:bc:10:2e:a2:58:7d:64:d6:fa:a4:ac:14:ec:
90:5d:e1:7f:b1:72:06:62:a6:bf:9a:06:fd:84:37:
a2:28:e1:8e:45:e6:de:d1:b1:fe:4a:62:85:aa:80:
d0:a9:95:3e:1f:e6:40:a9:b0:27:27:10:c3:00:76:
61:f0:d8:a4:2c:8b:68:de:0f:34:0f:48:48:58:56:
1e:45:1e:2d:14:fe:54:16:25:87:10:c1:95:fa:6c:
1f:7f:c5:35:d3:ef:0c:68:1d:33:92:b8:a6:4c:0f:
56:08:3f:12:50:90:44:6a:c4:15:82:25:82:31:c8:
2d:85:2a:d4:f0:fa:ed:46:f3:65:6d:b1:5e:6f:01:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:57:FC:BD:8D:44:04:3B:9A:03:CA:2D:34:A9:D8:E7:93:92:A3:F3
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ee:e4:08:91:81:de:3a:e0:74:a6:9a:0c:ab:eb:93:b4:e4:
fe:8e:0d:fd:d6:08:02:8b:e6:d0:1d:72:9c:eb:30:20:7b:43:
6f:7b:7d:32:4d:3d:8f:ab:1b:fe:7c:36:02:ff:70:b1:cd:39:
c9:1e:95:27:dd:b7:94:13:a8:a6:19:2d:0e:71:b2:ea:7c:f3:
2a:0c:2d:c3:b1:95:49:6c:a3:f1:88:69:db:83:79:36:66:e8:
25:d6:a4:7b:9a:04:09:c1:fd:19:06:4c:3c:9d:96:de:9a:a6:
b6:2b:b9:27:d0:e1:c6:b2:e1:32:b9:01:3e:fc:8a:a7:8a:33:
5c:ab:67:8e:cb:f6:c0:e7:2f:66:e6:c7:ac:48:b9:9c:9a:71:
46:a1:e6:cc:9f:2e:f8:d1:98:aa:91:90:77:90:df:cd:42:8f:
69:1c:9b:63:07:b6:41:10:7e:8f:0e:e0:ac:a8:71:6b:82:d0:
27:5b:f7:49:39:4d:a9:32:3f:ca:9c:b3:2e:7e:69:7b:f9:bb:
e3:3f:17:c8:1f:88:2a:1a:aa:b2:a0:97:98:e4:77:6f:c3:2f:
8e:bd:1d:4b:09:67:e4:99:30:74:80:0a:c3:ff:3b:93:95:75:
dd:85:3f:a4:28:e5:25:9c:e5:56:bd:84:dc:77:5f:e7:a7:fd:
24:58:ad:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGyMtuEpdihZaygcX9WSnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNDYyM2Y3NmJkNWJiMmRmMGFmNjZmMzYwZmY3NGZmMWMw
MGRiMDIwHhcNMjUwNDMwMTMwMDI4WhcNMjUwNTAxMTMwMDI4WjAzMTEwLwYDVQQD
EygzOTU3ZmNiZDhkNDQwNDNiOWEwM2NhMmQzNGE5ZDhlNzkzOTJhM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxHLo8j+ch6rfIOHnZ7uW55PqnYn
C6LNSUCwjYo15NOFbvXHRe9IDe9qj/vRP7OeHl7DaRn9on8CY21GdPddIOH0kdc+
mmCKgmF/bGSKGYaWTe7/YZg/wCUSdiSvxZPal1VWjxfjNHYrY/YfvC/vt4Q973wz
eF+VvrwQLqJYfWTW+qSsFOyQXeF/sXIGYqa/mgb9hDeiKOGORebe0bH+SmKFqoDQ
qZU+H+ZAqbAnJxDDAHZh8NikLIto3g80D0hIWFYeRR4tFP5UFiWHEMGV+mwff8U1
0+8MaB0zkrimTA9WCD8SUJBEasQVgiWCMcgthSrU8PrtRvNlbbFebwGIUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlX/L2NRAQ7mgPKLTSp2OeTkqPzMB8GA1UdIwQY
MBaAFGpGI/dr1bst8K9m82D/dP8cANsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgt
NmM4MzIwNTBlNzdhLzEvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgtNmM4MzIwNTBlNzdh
LzEvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+7kCJGB
3jrgdKaaDKvrk7Tk/o4N/dYIAovm0B1ynOswIHtDb3t9Mk09j6sb/nw2Av9wsc05
yR6VJ923lBOophktDnGy6nzzKgwtw7GVSWyj8Yhp24N5NmboJdake5oECcH9GQZM
PJ2W3pqmtiu5J9DhxrLhMrkBPvyKp4ozXKtnjsv2wOcvZubHrEi5nJpxRqHmzJ8u
+NGYqpGQd5DfzUKPaRybYwe2QRB+jw7grKhxa4LQJ1v3STlNqTI/ypyzLn5pe/m7
4z8XyB+IKhqqsqCXmOR3b8Mvjr0dSwln5JkwdIAKw/87k5V13YU/pCjlJZzlVr2E
3Hdf56f9JFitiw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:45 2025 by rpki-client