
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: dks3T3fNwztNuOQyWbjfywl96GHCd7pN+mXGr4G6Ni4=
Subject key identifier: D4:10:54:50:89:38:67:7B:5E:AD:29:BA:6A:50:9D:7C:46:87:24:22
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 01968DDDA227B0BD7288646DB5F7C5331D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 153A
Signing time: Thu 01 May 2025 22:00:34 +0000
Manifest this update: Thu 01 May 2025 22:00:34 +0000
Manifest next update: Fri 02 May 2025 22:00:34 +0000
Files and hashes: 1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: +HMPTae8Uzvxk++Uv1Lwmq56YKwpjkRDb6fdyCbrGKw=)
3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
5: IC2VX1jV_Dwi9TgKflm59IYMQeg.roa (hash: 4Tq4DinpdRGqkwFnGKnQe2ovlPCcyDT8nlsjtJqn5tw=)
6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:dd:a2:27:b0:bd:72:88:64:6d:b5:f7:c5:33:1d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: May 1 22:00:34 2025 GMT
Not After : May 2 22:00:34 2025 GMT
Subject: CN=d41054508938677b5ead29ba6a509d7c46872422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:30:55:47:fb:5e:44:ca:8b:ba:4c:01:d7:
68:4f:9c:8e:12:26:dd:ea:d4:12:22:ca:54:b8:2c:
e9:af:de:73:71:98:b2:c2:83:85:68:4d:03:a5:69:
36:10:27:9f:71:4e:d7:01:5c:3b:1c:1c:3c:15:ec:
2c:b5:ab:25:91:27:de:44:a9:b2:ba:a2:cf:6e:4f:
1f:64:ae:7d:bb:45:f7:c3:d4:c5:1a:65:52:dc:a7:
78:9d:ac:1c:0e:8a:97:7b:fb:da:24:0b:39:4c:87:
75:56:a8:75:e6:52:31:ca:e4:83:65:18:cf:7b:35:
64:c3:0c:99:ad:d5:f3:3a:2b:a5:e9:5f:b2:1f:b2:
4d:d2:25:bf:b9:08:ba:72:fe:92:8d:ba:f4:d3:ed:
7e:2c:a5:61:e4:72:21:2d:4d:4c:c6:bf:e6:1c:f6:
fc:c5:dc:10:5e:7d:d7:5b:bc:dd:cd:73:5a:e8:12:
6e:a4:38:c3:43:64:69:83:eb:d7:5d:26:21:a0:ce:
b3:49:3b:76:2e:4a:2c:fe:40:06:64:88:cd:87:58:
92:6d:d4:4e:97:47:a2:e4:af:39:53:7d:37:32:52:
f4:b9:13:85:e4:0f:12:b3:fb:27:58:d4:8c:67:b2:
75:f4:06:cb:c6:84:62:8e:6f:44:33:34:b9:de:90:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:10:54:50:89:38:67:7B:5E:AD:29:BA:6A:50:9D:7C:46:87:24:22
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2f:3a:cb:a4:b0:7e:d5:28:4f:2a:c9:80:16:0a:b0:35:51:
c7:be:21:38:1a:3b:09:f3:d3:83:de:ab:68:ac:27:3e:4d:35:
7c:6c:59:dd:c2:09:c0:20:ed:f1:37:c2:a5:86:fb:11:fe:33:
e3:1d:e3:f3:36:b4:0d:a3:7b:0a:40:25:46:86:27:4d:61:3f:
06:e4:43:bc:62:5d:7e:c5:3c:d7:79:fa:63:1d:e5:03:26:e3:
8f:bf:c9:c0:cc:d4:23:fc:e6:e3:1d:af:a1:67:d8:8d:42:61:
87:de:e6:7b:2c:e7:01:28:df:fd:ec:af:f9:71:b8:5f:70:24:
da:3c:b9:b0:af:fd:21:da:00:f6:32:2c:de:bc:51:7f:6f:9a:
ab:8c:a0:b0:11:a4:2e:e2:a3:36:23:12:a4:8b:51:26:40:65:
f9:d1:29:f8:22:5f:d3:08:13:9e:7c:3c:ab:0a:da:33:b4:6c:
da:82:7d:e2:95:92:58:58:77:53:88:2b:e7:6b:56:0d:7f:0c:
2d:c7:a4:ef:57:dc:aa:d5:c2:c5:38:2b:4b:bf:4b:9f:7a:e2:
63:74:e0:38:9d:06:20:a0:db:86:93:e2:11:27:4a:5d:c9:30:
6b:88:e8:32:05:ec:f1:ff:30:1a:e4:e0:f4:1d:7d:53:7e:51:
aa:74:2e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaN3aInsL1yiGRttffFMx0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2
ODcyMzQwHhcNMjUwNTAxMjIwMDM0WhcNMjUwNTAyMjIwMDM0WjAzMTEwLwYDVQQD
EyhkNDEwNTQ1MDg5Mzg2NzdiNWVhZDI5YmE2YTUwOWQ3YzQ2ODcyNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW4wVUf7XkTKi7pMAddoT5yOEibd
6tQSIspUuCzpr95zcZiywoOFaE0DpWk2ECefcU7XAVw7HBw8FewstaslkSfeRKmy
uqLPbk8fZK59u0X3w9TFGmVS3Kd4nawcDoqXe/vaJAs5TId1Vqh15lIxyuSDZRjP
ezVkwwyZrdXzOiul6V+yH7JN0iW/uQi6cv6Sjbr00+1+LKVh5HIhLU1Mxr/mHPb8
xdwQXn3XW7zdzXNa6BJupDjDQ2Rpg+vXXSYhoM6zSTt2Lkos/kAGZIjNh1iSbdRO
l0ei5K85U303MlL0uROF5A8Ss/snWNSMZ7J19AbLxoRijm9EMzS53pDxLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQQVFCJOGd7Xq0pumpQnXxGhyQiMB8GA1UdIwQY
MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt
MzUzYjNhNjMzYWRhLzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh
LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPy86y6Sw
ftUoTyrJgBYKsDVRx74hOBo7CfPTg96raKwnPk01fGxZ3cIJwCDt8TfCpYb7Ef4z
4x3j8za0DaN7CkAlRoYnTWE/BuRDvGJdfsU813n6Yx3lAybjj7/JwMzUI/zm4x2v
oWfYjUJhh97meyznASjf/eyv+XG4X3Ak2jy5sK/9IdoA9jIs3rxRf2+aq4ygsBGk
LuKjNiMSpItRJkBl+dEp+CJf0wgTnnw8qwraM7Rs2oJ94pWSWFh3U4gr52tWDX8M
Lcek71fcqtXCxTgrS79Ln3riY3TgOJ0GIKDbhpPiESdKXckwa4joMgXs8f8wGuTg
9B19U35RqnQucg==
-----END CERTIFICATE-----
Generated at Fri May 2 06:57:16 2025 by rpki-client