Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: Ygw8pDA//wSoQ+CqNjKGVOeLx1KpyKN4hIbfUoOmh0s=
Subject key identifier: 22:FB:38:7F:F2:8C:A2:67:33:A1:D9:A0:13:B9:60:60:0C:09:39:1F
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 01967ED8B19868FDBB14E475653D87154725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 59
Signing time: Tue 29 Apr 2025 00:00:52 +0000
Manifest this update: Tue 29 Apr 2025 00:00:52 +0000
Manifest next update: Wed 30 Apr 2025 00:00:52 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: 5i2h/3BTCnVlflHwuDnTJioKiFFqr113+TozycYSH0w=)
2: g2CXKA0Q172jL1FvPLyV_ep5ju0.roa (hash: 11gRkpCQE+58w0mcA/1mDxt2mYAAWr8ch94H20jZvcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:b1:98:68:fd:bb:14:e4:75:65:3d:87:15:47:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Apr 29 00:00:52 2025 GMT
Not After : Apr 30 00:00:52 2025 GMT
Subject: CN=22fb387ff28ca26733a1d9a013b960600c09391f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:7e:ef:6f:9c:2f:65:bf:4a:0d:b1:ca:c5:
05:ed:d5:8d:cb:1f:f1:3e:84:10:2d:4f:a8:ec:84:
79:cf:a9:1e:52:6c:e2:76:39:e0:a0:7f:87:b3:95:
1f:a8:ed:3c:f1:66:0f:e8:6f:c0:2b:6b:2b:58:39:
97:54:99:da:bc:2d:e2:d4:ef:3f:e5:9e:cd:05:22:
f3:9f:57:32:63:17:96:69:28:7e:ee:5a:d9:e5:f2:
13:5b:02:8e:6f:a8:80:54:af:68:68:bf:0e:1c:33:
cf:73:56:40:a2:99:4f:d6:48:ee:05:dd:5f:eb:37:
eb:c9:f7:fe:45:d5:16:f1:f4:34:ad:ca:a5:a8:89:
b6:98:b3:b4:e8:68:4d:70:79:40:50:20:3e:be:4c:
9f:2f:bb:91:c6:07:f6:a7:e0:c0:60:36:cc:b5:b0:
56:f7:76:b3:84:2d:6b:3d:90:7b:ee:e4:0d:f7:e2:
1a:d2:81:99:a8:2a:7b:9e:8b:84:05:42:f6:76:31:
a4:f8:c9:b8:dd:d2:bd:3c:89:b4:61:40:67:ce:6c:
47:3c:30:21:a6:66:df:68:fe:f6:ce:16:ac:72:6d:
b2:c1:0c:56:d7:9c:9a:84:f0:61:c4:a2:9a:65:dd:
3c:4f:36:b9:73:0e:37:e5:0f:62:9a:2f:6a:bc:e6:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FB:38:7F:F2:8C:A2:67:33:A1:D9:A0:13:B9:60:60:0C:09:39:1F
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d7:36:6a:cb:65:e4:a0:25:49:eb:b7:99:2b:fd:f0:6e:6f:
4a:53:fb:eb:0c:49:5a:bb:f5:7a:73:7b:9d:da:e2:9b:6e:4a:
59:f3:2c:29:51:fd:15:a7:5c:4d:36:db:2c:01:db:68:a3:96:
d0:fd:56:94:20:bc:e0:c4:2f:0f:9e:94:0a:eb:c5:a7:f5:0f:
ba:a9:97:ea:c1:c5:b6:b9:ab:35:20:3b:ad:32:11:b1:8e:b5:
ef:42:77:92:fc:30:9a:d0:a6:97:76:92:ca:91:4b:df:14:af:
b9:c3:5f:27:e1:8c:22:61:83:5e:62:f0:32:9e:cd:2f:43:06:
d9:0b:77:e8:78:89:2f:87:5c:a0:68:56:ca:b2:dd:3f:cb:88:
d3:4c:34:3a:c0:37:47:64:3b:33:48:c6:ac:de:c0:9f:a4:13:
78:97:b0:1e:80:bb:03:0f:a5:06:55:07:ae:00:e5:bc:8f:75:
fa:ab:8e:6a:66:0b:6f:56:d4:1a:90:a9:69:8c:c6:c8:53:f4:
92:9b:1d:43:b8:0e:25:72:3c:c0:4d:40:a9:01:49:70:b6:1c:
d3:c7:d1:9e:c7:da:c1:ff:df:28:f9:a7:66:be:09:5f:fa:84:
cb:db:22:00:7f:f3:e4:f3:67:56:a7:90:2d:c2:b2:2f:46:f0:
c1:e0:88:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2LGYaP27FOR1ZT2HFUclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODE4MjJhOWNhMmEwMDhmNWNkMTFiOWY5ZGJhMTZlZTJj
NjE0NTkwHhcNMjUwNDI5MDAwMDUyWhcNMjUwNDMwMDAwMDUyWjAzMTEwLwYDVQQD
EygyMmZiMzg3ZmYyOGNhMjY3MzNhMWQ5YTAxM2I5NjA2MDBjMDkzOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx5+72+cL2W/Sg2xysUF7dWNyx/x
PoQQLU+o7IR5z6keUmzidjngoH+Hs5UfqO088WYP6G/AK2srWDmXVJnavC3i1O8/
5Z7NBSLzn1cyYxeWaSh+7lrZ5fITWwKOb6iAVK9oaL8OHDPPc1ZAoplP1kjuBd1f
6zfryff+RdUW8fQ0rcqlqIm2mLO06GhNcHlAUCA+vkyfL7uRxgf2p+DAYDbMtbBW
93azhC1rPZB77uQN9+Ia0oGZqCp7nouEBUL2djGk+Mm43dK9PIm0YUBnzmxHPDAh
pmbfaP72zhascm2ywQxW15yahPBhxKKaZd08Tza5cw435Q9imi9qvOZXSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCL7OH/yjKJnM6HZoBO5YGAMCTkfMB8GA1UdIwQY
MBaAFAGBgiqcoqAI9c0RufnboW7ixhRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQt
ODBkNDk0NTkxMWRkLzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQtODBkNDk0NTkxMWRk
LzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9c2astl
5KAlSeu3mSv98G5vSlP76wxJWrv1enN7ndrim25KWfMsKVH9FadcTTbbLAHbaKOW
0P1WlCC84MQvD56UCuvFp/UPuqmX6sHFtrmrNSA7rTIRsY6170J3kvwwmtCml3aS
ypFL3xSvucNfJ+GMImGDXmLwMp7NL0MG2Qt36HiJL4dcoGhWyrLdP8uI00w0OsA3
R2Q7M0jGrN7An6QTeJewHoC7Aw+lBlUHrgDlvI91+quOamYLb1bUGpCpaYzGyFP0
kpsdQ7gOJXI8wE1AqQFJcLYc08fRnsfawf/fKPmnZr4JX/qEy9siAH/z5PNnVqeQ
LcKyL0bwweCIUg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:45 2025 by rpki-client