Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: LelD3hx3R7TYVxMLW9KspMULiDZy8GCQ2mY6qiB0BKQ=
Subject key identifier: EE:37:7D:72:C6:34:1D:54:B6:34:6C:9C:9E:90:73:89:2A:CE:F1:D6
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 01969CAC287C146DD344A084D68B98E60398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0601
Signing time: Sun 04 May 2025 19:00:50 +0000
Manifest this update: Sun 04 May 2025 19:00:50 +0000
Manifest next update: Mon 05 May 2025 19:00:50 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: y50d3AWLdA+CSxYRq9tOXwR5hZzZNm3FulZ09O8A1Hc=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:28:7c:14:6d:d3:44:a0:84:d6:8b:98:e6:03:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: May 4 19:00:50 2025 GMT
Not After : May 5 19:00:50 2025 GMT
Subject: CN=ee377d72c6341d54b6346c9c9e9073892acef1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:45:e8:cc:21:38:b0:d1:36:6e:30:f8:64:
75:1b:bb:42:bf:4c:18:20:29:40:8a:6d:65:bf:41:
44:4c:aa:0a:6d:3e:d5:c8:9d:24:ad:66:6c:9f:45:
fd:28:99:dc:1b:d0:10:0c:b8:b3:f9:86:ae:1d:2b:
c0:47:1e:1a:88:d5:44:a0:15:be:90:0b:f0:28:05:
e5:2c:40:c6:ac:2a:c3:47:8a:82:ec:56:ee:c2:6a:
fa:e8:9d:1d:77:cd:ff:c2:c6:83:39:8e:b4:4e:1b:
6d:41:1b:0a:05:1c:76:ee:a9:78:99:27:9d:cb:4d:
b7:91:be:b6:d5:62:26:84:cd:0b:ed:85:22:a0:6a:
d8:c3:0b:e5:6a:f7:ac:82:a3:13:05:97:3b:15:fb:
f2:d5:34:8e:f4:19:6a:ac:ed:53:69:bb:e4:3d:31:
8c:17:13:6e:08:d7:6d:00:2c:bf:40:1b:5d:04:7b:
7c:3a:7c:2f:e5:5a:4f:13:80:c1:97:29:67:0b:ea:
35:e2:24:c7:5a:87:13:34:b8:e2:4a:13:03:c8:3d:
b3:0f:95:d8:b9:59:15:1d:ed:b9:8d:cb:dc:65:4e:
56:19:9b:cd:62:c0:4d:24:73:0b:3b:21:7c:e7:60:
f6:37:73:b1:ca:32:39:f0:45:cd:05:e3:b5:0e:96:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:37:7D:72:C6:34:1D:54:B6:34:6C:9C:9E:90:73:89:2A:CE:F1:D6
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bb:83:ed:8d:dc:f5:dd:ef:49:bc:14:86:4e:5f:c7:3f:84:
c0:2c:84:5b:c6:85:ad:b8:57:c5:0f:3f:b5:97:b7:c6:c9:d1:
e8:8b:06:75:38:09:08:7c:5f:b1:c8:52:84:11:06:be:70:b7:
bc:6a:d6:84:10:26:a5:ca:bc:d3:08:87:96:17:cc:58:fb:d8:
b1:18:f3:c8:17:b1:c6:f6:70:20:ec:d3:4a:28:ec:4e:6c:66:
83:bc:81:c3:89:0b:ff:87:24:76:70:fa:f6:01:29:a8:f0:75:
8f:60:ae:be:0d:dc:24:12:51:ce:92:68:02:3b:a9:7c:28:b6:
9a:14:85:bd:24:f2:ae:85:97:9a:b8:d0:e3:a1:1c:cf:3e:b0:
ea:75:22:c3:45:d4:0d:9a:16:76:d3:ff:d5:78:f5:10:f0:cd:
7e:fa:74:a6:f7:59:f3:d9:37:cc:93:d6:f7:e4:8f:f4:7f:d9:
9c:c4:76:02:2c:f2:fc:3f:93:6c:72:e1:dc:25:66:27:7e:74:
57:8e:89:cc:41:74:70:b7:66:42:8d:f8:3e:7f:0a:e7:89:75:
e8:f5:30:65:c6:5a:36:a4:c2:e7:69:22:73:9c:cf:5d:47:c8:
6c:0a:b5:00:ad:f4:73:23:79:d3:81:f6:7d:98:1c:6e:1f:68:
fb:30:11:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZacrCh8FG3TRKCE1ouY5gOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYWQ2MzY1MjMxZWQ3OTM5Njk0MDkyMDE0OWRmNzFjMGFh
MDhlMWYwHhcNMjUwNTA0MTkwMDUwWhcNMjUwNTA1MTkwMDUwWjAzMTEwLwYDVQQD
EyhlZTM3N2Q3MmM2MzQxZDU0YjYzNDZjOWM5ZTkwNzM4OTJhY2VmMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEFF6MwhOLDRNm4w+GR1G7tCv0wY
IClAim1lv0FETKoKbT7VyJ0krWZsn0X9KJncG9AQDLiz+YauHSvARx4aiNVEoBW+
kAvwKAXlLEDGrCrDR4qC7Fbuwmr66J0dd83/wsaDOY60ThttQRsKBRx27ql4mSed
y023kb621WImhM0L7YUioGrYwwvlavesgqMTBZc7Ffvy1TSO9BlqrO1TabvkPTGM
FxNuCNdtACy/QBtdBHt8Onwv5VpPE4DBlylnC+o14iTHWocTNLjiShMDyD2zD5XY
uVkVHe25jcvcZU5WGZvNYsBNJHMLOyF852D2N3OxyjI58EXNBeO1DpZDYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO43fXLGNB1UtjRsnJ6Qc4kqzvHWMB8GA1UdIwQY
MBaAFAOtY2UjHteTlpQJIBSd9xwKoI4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTkt
NDE0OWRlNTI4ODMzLzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTktNDE0OWRlNTI4ODMz
LzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLuD7Y3c
9d3vSbwUhk5fxz+EwCyEW8aFrbhXxQ8/tZe3xsnR6IsGdTgJCHxfschShBEGvnC3
vGrWhBAmpcq80wiHlhfMWPvYsRjzyBexxvZwIOzTSijsTmxmg7yBw4kL/4ckdnD6
9gEpqPB1j2Cuvg3cJBJRzpJoAjupfCi2mhSFvSTyroWXmrjQ46Eczz6w6nUiw0XU
DZoWdtP/1Xj1EPDNfvp0pvdZ89k3zJPW9+SP9H/ZnMR2Aizy/D+TbHLh3CVmJ350
V46JzEF0cLdmQo34Pn8K54l16PUwZcZaNqTC52kic5zPXUfIbAq1AK30cyN504H2
fZgcbh9o+zARKg==
-----END CERTIFICATE-----
Generated at Sun May 4 23:41:17 2025 by rpki-client