Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
File: aVHUVR0mpRwPkrd8LTePs0dYuHc.mft (raw, json)
Hash identifier: 401aaDmWfSDAriWm2dlk+14Inb4sQdk9uGwWBWc491Q=
Subject key identifier: D1:58:94:28:2E:5F:E7:33:90:DD:53:2D:9A:6B:5F:76:FB:9F:0C:AD
Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
Certificate issuer: /CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Certificate serial: 0196797B69155C58CF7B64211438F0B8184E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
Manifest number: 0621
Signing time: Sun 27 Apr 2025 23:00:53 +0000
Manifest this update: Sun 27 Apr 2025 23:00:53 +0000
Manifest next update: Mon 28 Apr 2025 23:00:53 +0000
Files and hashes: 1: PxyIfomodD9RHY4nPMUQ_8FG_F0.roa (hash: GQBwkJMiYlMRNPb5m5PsI1lq6MhgUy7JaZpjCwR+Ch8=)
2: aVHUVR0mpRwPkrd8LTePs0dYuHc.crl (hash: MicXF3BCEuTgcyzCKDk54lYp0dAioC6LTjhWJacWxfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:69:15:5c:58:cf:7b:64:21:14:38:f0:b8:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Validity
Not Before: Apr 27 23:00:53 2025 GMT
Not After : Apr 28 23:00:53 2025 GMT
Subject: CN=d15894282e5fe73390dd532d9a6b5f76fb9f0cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:79:9b:a4:ae:cd:ca:55:76:f6:7e:0d:c8:
b0:c2:13:6d:4f:1e:cf:eb:d8:ee:42:75:e0:ab:19:
87:95:da:b8:4a:5a:d5:3e:94:6b:7d:d0:27:39:12:
de:1c:d4:42:35:54:e9:4c:1e:a4:85:80:f7:85:86:
49:d3:6c:12:16:e5:7f:32:36:36:e0:da:19:a2:c6:
e0:2b:db:d9:eb:4c:56:a3:b4:3d:b4:6a:bd:07:a5:
05:c6:ad:08:62:45:14:b4:14:6e:77:b4:29:7c:58:
f2:c5:6a:1f:e2:3f:bd:d4:0a:b0:25:10:cb:31:6e:
7d:e2:54:b9:4d:89:cf:25:05:62:6b:e1:4b:8d:f3:
ca:31:96:8c:ef:33:36:f4:e2:57:b0:89:9e:3d:12:
57:eb:af:fe:fe:88:bb:34:45:a4:bf:97:10:7f:5f:
93:cb:c9:e2:c2:cd:bb:06:01:25:56:6e:1d:72:89:
7b:42:be:cd:6c:20:10:dc:da:44:f9:e4:cf:fb:51:
20:79:97:26:e8:2a:6a:d6:46:b5:45:88:33:c7:5f:
75:c0:b8:6c:f1:a4:d4:8b:de:3d:7b:52:b7:67:b0:
f0:3e:3f:c0:cd:97:1f:bb:9d:4f:73:de:2a:ee:25:
41:0f:19:e0:2f:54:3a:f9:f5:7b:94:97:81:01:1c:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:58:94:28:2E:5F:E7:33:90:DD:53:2D:9A:6B:5F:76:FB:9F:0C:AD
X509v3 Authority Key Identifier:
keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1e:31:04:3d:05:1a:e2:1b:dc:a1:a0:7a:69:3d:d4:b3:31:
d5:5d:2a:0b:59:f7:6c:f2:77:f8:e2:90:40:95:89:58:5c:db:
04:d9:57:d9:54:ad:2a:a6:70:9a:86:b9:a5:72:01:af:ef:71:
0a:10:42:27:f7:0d:a4:78:32:e6:4a:d3:ae:59:3c:46:4a:9e:
27:96:f1:85:56:5f:4b:26:ff:b9:88:f7:c9:b3:4b:b3:8e:07:
b5:0a:a6:0a:28:42:5b:37:3d:23:f9:3d:c1:c4:c7:76:66:0d:
b1:5d:89:7c:e4:35:e1:cb:b2:2b:ba:bb:e7:58:7c:d5:a2:1a:
aa:a1:ff:36:cb:41:15:16:fb:00:da:3e:09:e0:50:12:1b:54:
89:77:80:37:ad:30:2b:43:a4:49:51:12:6c:f1:28:45:06:3a:
49:c8:bb:76:71:39:d0:2c:bb:dd:ee:80:b4:b5:8a:f0:8e:d8:
94:4f:aa:33:43:58:d3:99:2b:11:78:93:30:c1:5e:6c:d2:04:
0b:f8:21:c4:67:06:07:a2:69:92:52:38:5a:60:2c:c4:34:8f:
ed:6b:f2:d2:e4:df:a0:d6:e8:02:49:64:1c:12:70:07:c6:eb:
5c:f0:a9:2e:bf:be:58:97:e7:cf:f2:29:d9:54:b1:d4:a2:36:
44:6a:17:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5e2kVXFjPe2QhFDjwuBhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTFkNDU1MWQyNmE1MWMwZjkyYjc3YzJkMzc4ZmIzNDc1
OGI4NzcwHhcNMjUwNDI3MjMwMDUzWhcNMjUwNDI4MjMwMDUzWjAzMTEwLwYDVQQD
EyhkMTU4OTQyODJlNWZlNzMzOTBkZDUzMmQ5YTZiNWY3NmZiOWYwY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph15m6SuzcpVdvZ+DciwwhNtTx7P
69juQnXgqxmHldq4SlrVPpRrfdAnORLeHNRCNVTpTB6khYD3hYZJ02wSFuV/MjY2
4NoZosbgK9vZ60xWo7Q9tGq9B6UFxq0IYkUUtBRud7QpfFjyxWof4j+91AqwJRDL
MW594lS5TYnPJQVia+FLjfPKMZaM7zM29OJXsImePRJX66/+/oi7NEWkv5cQf1+T
y8niws27BgElVm4dcol7Qr7NbCAQ3NpE+eTP+1EgeZcm6Cpq1ka1RYgzx191wLhs
8aTUi949e1K3Z7DwPj/AzZcfu51Pc94q7iVBDxngL1Q6+fV7lJeBARyHwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFYlCguX+czkN1TLZprX3b7nwytMB8GA1UdIwQY
MBaAFGlR1FUdJqUcD5K3fC03j7NHWLh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wMjYxMGYtNjkxMy00MDQ5LTk3ZjAt
YTJlZGE5NDZlZDI5LzEvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wMjYxMGYtNjkxMy00MDQ5LTk3ZjAtYTJlZGE5NDZlZDI5
LzEvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAER4xBD0F
GuIb3KGgemk91LMx1V0qC1n3bPJ3+OKQQJWJWFzbBNlX2VStKqZwmoa5pXIBr+9x
ChBCJ/cNpHgy5krTrlk8RkqeJ5bxhVZfSyb/uYj3ybNLs44HtQqmCihCWzc9I/k9
wcTHdmYNsV2JfOQ14cuyK7q751h81aIaqqH/NstBFRb7ANo+CeBQEhtUiXeAN60w
K0OkSVESbPEoRQY6Sci7dnE50Cy73e6AtLWK8I7YlE+qM0NY05krEXiTMMFebNIE
C/ghxGcGB6JpklI4WmAsxDSP7Wvy0uTfoNboAklkHBJwB8brXPCpLr++WJfnz/Ip
2VSx1KI2RGoXTg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:44:25 2025 by rpki-client