Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
File: aQvbGIma-yf-H_eAUW_MC5PIuA0.mft (raw, json)
Hash identifier: 6o1sUp9fuLCYexNcXOewACubH7F/Gp/CENpV38+E8TM=
Subject key identifier: F2:51:DA:72:5D:BD:FA:33:44:5C:F0:AF:7A:3C:0B:7A:78:39:F5:D9
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Certificate issuer: /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial: 0196997439A1847CCDC6EFFFD3906D142AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
Manifest number: 06A9
Signing time: Sun 04 May 2025 04:00:52 +0000
Manifest this update: Sun 04 May 2025 04:00:52 +0000
Manifest next update: Mon 05 May 2025 04:00:52 +0000
Files and hashes: 1: 5qlyqHqHN9fm7YIJbWQAFC8mvBE.roa (hash: i7ncddTAht6A90LZTtfDRpJSDX/ZI6t1vgckOHtmIjg=)
2: aQvbGIma-yf-H_eAUW_MC5PIuA0.crl (hash: 8XlDJiZSvm0wAplfu/ORCmGt0VZUcVHxGFiBheirMmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:74:39:a1:84:7c:cd:c6:ef:ff:d3:90:6d:14:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Validity
Not Before: May 4 04:00:52 2025 GMT
Not After : May 5 04:00:52 2025 GMT
Subject: CN=f251da725dbdfa33445cf0af7a3c0b7a7839f5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:f7:44:b5:67:d3:ed:13:e2:6c:d8:2a:c6:
82:71:65:c7:90:a8:6f:c0:1a:35:74:1d:b5:d2:fe:
fa:b2:80:a1:4e:36:26:60:26:ea:58:4e:d2:19:2d:
0d:8a:a8:9e:fe:46:0c:bf:f6:19:4b:df:81:1a:54:
a9:60:5e:3c:f0:7e:72:82:61:11:a6:58:53:70:5b:
cf:1b:61:f6:9e:33:44:7c:1d:b8:31:8b:a1:89:6f:
11:1c:d9:06:46:93:cb:87:5f:c2:7a:52:16:a0:0b:
d1:12:0b:30:fb:bf:c3:6b:62:90:68:25:b0:4b:dc:
41:fd:9e:55:76:48:f7:b6:a7:49:cd:bd:ab:87:46:
f7:ce:f6:6d:ac:36:99:53:90:e9:09:40:42:b3:43:
ef:92:cf:f9:c7:d0:1e:11:6b:62:8a:0e:a4:85:ba:
96:3a:98:18:f5:2a:96:81:ff:eb:f6:fd:0a:b9:6c:
57:33:b3:ab:14:4e:43:67:b9:2d:c5:a3:f4:46:8f:
83:14:55:99:69:8b:1a:f3:dd:f7:89:58:d2:86:e5:
64:eb:63:87:50:d3:cd:7c:71:c7:16:29:5c:00:e0:
13:43:a4:a3:39:7f:81:db:a7:b6:2c:85:2d:b4:9c:
85:d3:83:28:78:29:3a:46:ec:08:7e:21:65:bc:81:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:51:DA:72:5D:BD:FA:33:44:5C:F0:AF:7A:3C:0B:7A:78:39:F5:D9
X509v3 Authority Key Identifier:
keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c1:39:78:50:42:a4:2f:ea:34:38:fe:5d:b0:c4:d4:9a:f6:
4f:3b:46:f6:e1:f9:03:fa:b5:43:40:bb:5f:12:54:e7:b8:de:
7f:af:25:f0:72:44:02:d5:ff:7e:0f:23:f0:d8:7a:17:d0:cc:
0e:18:d4:f0:23:09:46:0e:3a:c9:ec:27:47:a3:12:0f:2f:fb:
89:9a:cf:71:04:97:eb:3c:06:ad:23:a4:80:49:2f:0b:f3:c1:
df:13:c6:e6:3d:a6:30:cb:13:73:55:fb:13:77:1d:d5:0a:47:
fd:dd:b9:95:23:11:53:98:b6:80:9c:a9:c5:0b:2d:b2:a2:a6:
98:87:b9:36:cd:d3:58:ee:d5:49:ad:37:23:7f:f3:84:53:c1:
74:e7:73:ff:e5:7c:21:ec:cd:5e:99:02:d5:34:62:96:24:b5:
c2:cb:2c:28:ee:e4:80:3d:7f:5f:1f:ac:9e:51:95:c1:c5:4b:
e4:b7:db:7f:80:f8:54:73:8e:e0:da:ab:ea:4c:aa:57:4a:a8:
48:1e:e5:26:a5:11:ba:76:ff:d3:03:8e:6a:d1:f8:39:c4:ad:
a2:4c:57:f0:72:7c:e1:b4:45:d2:ed:ae:1b:0e:99:30:0d:b2:
55:43:13:fc:27:b5:fb:4c:26:91:c6:d4:47:03:59:27:2c:6e:
97:e9:28:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaZdDmhhHzNxu//05BtFCrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGJkYjE4ODk5YWZiMjdmZTFmZjc4MDUxNmZjYzBiOTNj
OGI4MGQwHhcNMjUwNTA0MDQwMDUyWhcNMjUwNTA1MDQwMDUyWjAzMTEwLwYDVQQD
EyhmMjUxZGE3MjVkYmRmYTMzNDQ1Y2YwYWY3YTNjMGI3YTc4MzlmNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpL3RLVn0+0T4mzYKsaCcWXHkKhv
wBo1dB210v76soChTjYmYCbqWE7SGS0Niqie/kYMv/YZS9+BGlSpYF488H5ygmER
plhTcFvPG2H2njNEfB24MYuhiW8RHNkGRpPLh1/CelIWoAvREgsw+7/Da2KQaCWw
S9xB/Z5Vdkj3tqdJzb2rh0b3zvZtrDaZU5DpCUBCs0Pvks/5x9AeEWtiig6khbqW
OpgY9SqWgf/r9v0KuWxXM7OrFE5DZ7ktxaP0Ro+DFFWZaYsa8933iVjShuVk62OH
UNPNfHHHFilcAOATQ6SjOX+B26e2LIUttJyF04MoeCk6RuwIfiFlvIFjzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJR2nJdvfozRFzwr3o8C3p4OfXZMB8GA1UdIwQY
MBaAFGkL2xiJmvsn/h/3gFFvzAuTyLgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82ZDg0NzAtNDg2MS00MTZkLWE3MmEt
MjhhZGVkOGRkZmFiLzEvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82ZDg0NzAtNDg2MS00MTZkLWE3MmEtMjhhZGVkOGRkZmFi
LzEvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8E5eFBC
pC/qNDj+XbDE1Jr2TztG9uH5A/q1Q0C7XxJU57jef68l8HJEAtX/fg8j8Nh6F9DM
DhjU8CMJRg46yewnR6MSDy/7iZrPcQSX6zwGrSOkgEkvC/PB3xPG5j2mMMsTc1X7
E3cd1QpH/d25lSMRU5i2gJypxQstsqKmmIe5Ns3TWO7VSa03I3/zhFPBdOdz/+V8
IezNXpkC1TRiliS1wsssKO7kgD1/Xx+snlGVwcVL5Lfbf4D4VHOO4Nqr6kyqV0qo
SB7lJqURunb/0wOOatH4OcStokxX8HJ84bRF0u2uGw6ZMA2yVUMT/Ce1+0wmkcbU
RwNZJyxul+koqQ==
-----END CERTIFICATE-----
Generated at Sun May 4 13:54:30 2025 by rpki-client