Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: 3loYZFe7LDn+MrbvuhEeKE3ZrnN37SXDuKzGShUx5Es=
Subject key identifier: 64:A0:23:B7:D7:2F:02:D4:56:39:3B:24:E6:56:C8:4A:C3:3F:EB:81
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 01969B2C09F5EC0D1F09752825A34FE06195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 11BA
Signing time: Sun 04 May 2025 12:01:16 +0000
Manifest this update: Sun 04 May 2025 12:01:16 +0000
Manifest next update: Mon 05 May 2025 12:01:16 +0000
Files and hashes: 1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: cfbQBDmL2zMuPZabsxJgdDpWPtDlrl0j1pyFWfJ8ybs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:2c:09:f5:ec:0d:1f:09:75:28:25:a3:4f:e0:61:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: May 4 12:01:16 2025 GMT
Not After : May 5 12:01:16 2025 GMT
Subject: CN=64a023b7d72f02d456393b24e656c84ac33feb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:ba:b4:0f:65:19:c6:c8:b8:29:9e:c8:1e:
01:83:58:1d:c4:a7:a4:1e:d5:86:af:9b:69:4a:1a:
1d:e5:67:85:f2:2f:6f:1e:2f:6e:04:7a:35:e8:dc:
60:a2:37:ed:95:a4:2d:ab:22:68:9e:09:04:c5:11:
a4:84:1b:cd:d4:06:81:cd:de:3b:f3:e1:56:f5:1c:
af:27:5e:ab:e3:27:5f:57:be:fd:a3:f9:56:1b:d3:
fb:29:aa:17:2b:32:4a:ff:e8:db:15:cc:79:38:f0:
bf:b9:3c:93:3f:1e:7f:9e:f8:cf:5d:58:38:6e:bd:
a8:60:e3:0a:6f:c3:0e:fd:4e:49:50:82:76:67:79:
13:7f:e4:76:51:c7:9d:8f:c4:4d:f0:f1:2d:2f:99:
76:19:70:db:78:f6:f2:4a:4e:99:12:d1:3e:2e:7e:
21:b3:f1:6d:ee:0d:54:5f:70:5a:95:29:69:bb:6c:
cf:2c:e0:4e:ec:6f:c6:de:0e:29:63:42:61:be:02:
57:1c:bd:8b:96:44:9d:37:83:61:fd:53:98:6d:76:
89:c3:1e:2d:a0:0a:1e:75:b6:9d:f7:08:15:99:b6:
4c:24:ba:3e:5f:23:4a:43:fe:a5:46:91:e7:52:df:
a6:5d:59:61:99:3a:94:0f:0e:ec:0e:3e:fd:b3:97:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A0:23:B7:D7:2F:02:D4:56:39:3B:24:E6:56:C8:4A:C3:3F:EB:81
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:47:53:d7:46:cd:9f:74:b8:5c:6d:c6:77:06:23:e3:32:89:
a5:00:b9:fe:77:26:3a:42:95:1a:d0:08:04:9e:48:37:a6:2a:
86:91:2d:62:da:4f:b2:57:5d:01:ce:5d:f9:91:48:19:05:bc:
32:f4:ea:1f:18:77:c6:b0:05:fc:06:3f:69:ec:08:7f:04:68:
31:db:0f:53:19:74:81:08:bf:02:ff:c9:df:2a:45:3f:97:db:
c1:69:8f:ca:69:b3:dd:f4:34:f7:0c:68:40:4f:cc:2a:ef:bb:
df:a3:4a:a4:85:b8:4c:d6:b7:db:d4:e2:c9:90:ae:f5:62:f4:
a3:e4:3f:f1:cc:81:44:69:10:3e:b7:55:05:20:12:d0:44:0e:
25:1d:7d:23:49:4a:1c:74:65:d8:cd:07:07:83:29:a2:48:74:
3b:93:10:7f:f4:a9:16:05:51:a4:96:b3:20:69:da:09:e0:21:
d1:30:ad:74:12:74:8c:09:f8:56:a4:cd:72:20:c2:3e:85:8d:
7b:d5:67:40:5f:ed:a6:92:86:75:f0:b9:6f:61:f9:3b:37:3e:
52:52:18:55:7c:5a:41:a5:a8:ae:56:30:a6:b8:28:38:95:56:
08:5d:2d:43:4d:6a:62:42:30:b1:a7:1a:4b:f6:4f:51:57:12:
28:b5:85:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZabLAn17A0fCXUoJaNP4GGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTg3Y2E1YjhhZWUxOTVjYzhjYWRjZmI0OGM1NDRiMTgx
NDc3ZWYwHhcNMjUwNTA0MTIwMTE2WhcNMjUwNTA1MTIwMTE2WjAzMTEwLwYDVQQD
Eyg2NGEwMjNiN2Q3MmYwMmQ0NTYzOTNiMjRlNjU2Yzg0YWMzM2ZlYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyW6tA9lGcbIuCmeyB4Bg1gdxKek
HtWGr5tpShod5WeF8i9vHi9uBHo16NxgojftlaQtqyJongkExRGkhBvN1AaBzd47
8+FW9RyvJ16r4ydfV779o/lWG9P7KaoXKzJK/+jbFcx5OPC/uTyTPx5/nvjPXVg4
br2oYOMKb8MO/U5JUIJ2Z3kTf+R2Ucedj8RN8PEtL5l2GXDbePbySk6ZEtE+Ln4h
s/Ft7g1UX3BalSlpu2zPLOBO7G/G3g4pY0JhvgJXHL2LlkSdN4Nh/VOYbXaJwx4t
oAoedbad9wgVmbZMJLo+XyNKQ/6lRpHnUt+mXVlhmTqUDw7sDj79s5cCbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSgI7fXLwLUVjk7JOZWyErDP+uBMB8GA1UdIwQY
MBaAFGoYfKW4ruGVzIytz7SMVEsYFHfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmIt
YmYwM2RjODM3OTAwLzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmItYmYwM2RjODM3OTAw
LzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkdT10bN
n3S4XG3GdwYj4zKJpQC5/ncmOkKVGtAIBJ5IN6YqhpEtYtpPslddAc5d+ZFIGQW8
MvTqHxh3xrAF/AY/aewIfwRoMdsPUxl0gQi/Av/J3ypFP5fbwWmPymmz3fQ09wxo
QE/MKu+736NKpIW4TNa329TiyZCu9WL0o+Q/8cyBRGkQPrdVBSAS0EQOJR19I0lK
HHRl2M0HB4Mpokh0O5MQf/SpFgVRpJazIGnaCeAh0TCtdBJ0jAn4VqTNciDCPoWN
e9VnQF/tppKGdfC5b2H5Ozc+UlIYVXxaQaWorlYwprgoOJVWCF0tQ01qYkIwsaca
S/ZPUVcSKLWFaQ==
-----END CERTIFICATE-----
Generated at Sun May 4 20:37:38 2025 by rpki-client