Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File: aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier: KymkkuGuB7GYla3U0oZR3oqNk5KntlAYZ9yUE3JlPGk=
Subject key identifier: 1F:22:F7:F1:4E:06:4A:EB:64:90:CB:7E:0E:56:7C:CB:39:29:A8:D5
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 019689C9AAA76D6C94E76270F5564B093957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 03:00:16 +0000
Manifest this update: Thu 01 May 2025 03:00:16 +0000
Manifest next update: Fri 02 May 2025 03:00:16 +0000
Files and hashes: 1: NmoeARNR5KlnZdBERWuM-iNzYM0.roa (hash: HgaWyfSju8BbiVq620WeDucyKoI/pqgp0CZAcN9HrcI=)
2: OxQUm2cc932_SbZHxUC7er0Sf-I.roa (hash: j3K3BKXe7Af0d19rliHQJv9FsfvecTZMNvSiBZonE64=)
3: ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa (hash: WEK6Mlk9pLflVadH6HQ/a95uE6G+8NUpMYALAx2797k=)
4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: G0k1VOzARS/JSeKLiaIemHQetxNj/qvGm3dyPvQ0+eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:c9:aa:a7:6d:6c:94:e7:62:70:f5:56:4b:09:39:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: May 1 03:00:16 2025 GMT
Not After : May 2 03:00:16 2025 GMT
Subject: CN=1f22f7f14e064aeb6490cb7e0e567ccb3929a8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:14:4e:d9:53:db:ad:e1:e2:d7:35:fc:3e:
76:0b:04:77:da:50:4c:11:f8:37:9f:2c:23:9d:19:
0a:35:81:b4:70:c8:8e:da:e6:07:85:c2:6c:0e:35:
90:ee:0e:f5:06:51:19:27:21:f9:ef:6e:cb:b7:6b:
b8:0f:ce:c4:99:b6:93:f3:c2:c3:54:96:22:31:50:
5d:64:6d:98:24:e0:af:05:fe:c9:31:a7:f9:1e:25:
86:02:d5:05:8e:ea:d9:ad:72:05:e7:b7:38:f4:e3:
89:db:f4:dd:de:6f:29:39:a7:71:42:db:6c:24:a4:
c8:be:b3:c5:52:41:08:d9:a2:51:9b:a4:b7:58:b4:
c6:f3:06:a2:3d:23:8c:b5:5c:4b:79:44:7e:1b:79:
7a:e7:11:b2:54:d9:69:5a:7a:b6:2b:dd:20:14:4b:
b1:eb:c6:ec:35:7f:8f:25:fc:a3:c9:45:2f:7b:cf:
58:d5:80:79:00:04:6d:23:9b:b3:9c:81:b7:8d:cb:
43:6a:99:6a:db:c2:e5:41:8a:c9:27:b6:78:37:10:
d3:b4:d1:2a:b7:39:71:b7:1d:5b:e5:5c:6c:68:8c:
ce:35:10:ca:3c:00:9f:f0:19:5a:5f:b7:b3:6e:76:
38:2b:c2:27:6d:a8:1b:8c:89:0f:89:1b:93:81:4b:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:22:F7:F1:4E:06:4A:EB:64:90:CB:7E:0E:56:7C:CB:39:29:A8:D5
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:27:c1:1f:59:5c:3a:0f:36:59:13:78:e0:25:a3:aa:07:0b:
22:e9:fd:9d:cd:e0:9c:87:b1:b3:40:4d:5a:18:1a:06:aa:32:
dd:cb:59:64:e4:c6:cd:72:fd:9a:4f:66:a4:c5:2a:15:ba:98:
60:0e:5a:b2:3b:ac:eb:5d:2f:03:cb:e3:fd:22:b6:3a:8d:a9:
03:6f:f4:10:c7:8a:c6:29:50:ce:54:4e:7b:ed:a1:ab:59:cf:
a0:97:25:65:eb:39:61:43:15:f3:c9:ff:d7:2d:86:6b:fa:1e:
8d:8a:b1:4c:ce:0a:37:1c:7d:a1:3d:9a:e2:52:ae:c6:9f:43:
57:71:f4:c0:eb:38:a3:9f:6c:eb:3e:da:d8:d9:4c:a3:95:cf:
2a:9e:cf:39:35:09:8b:90:8f:72:9a:ab:7c:35:5a:80:97:06:
b2:14:17:6b:81:e3:af:e1:05:86:fa:8f:77:4b:82:cc:36:03:
bb:77:9b:c8:a4:15:4e:4f:9e:34:d0:bb:32:f5:44:c9:c5:d4:
a5:d7:62:e5:63:4b:45:db:1b:5b:ba:db:d7:2a:3b:c4:89:3b:
1d:0e:25:06:de:a2:3d:b1:f7:91:1b:70:bb:69:6f:10:dc:a1:
2e:78:63:5a:1d:7e:d2:14:f7:41:f9:de:e2:97:3a:83:00:d8:
f6:d1:1f:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJyaqnbWyU52Jw9VZLCTlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MjFjOGZmMDQzN2Y3ZWRkODI5MTY2ZmRlMDM0NDZmODYx
MDlkODAwHhcNMjUwNTAxMDMwMDE2WhcNMjUwNTAyMDMwMDE2WjAzMTEwLwYDVQQD
EygxZjIyZjdmMTRlMDY0YWViNjQ5MGNiN2UwZTU2N2NjYjM5MjlhOGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIMUTtlT263h4tc1/D52CwR32lBM
Efg3nywjnRkKNYG0cMiO2uYHhcJsDjWQ7g71BlEZJyH5727Lt2u4D87EmbaT88LD
VJYiMVBdZG2YJOCvBf7JMaf5HiWGAtUFjurZrXIF57c49OOJ2/Td3m8pOadxQtts
JKTIvrPFUkEI2aJRm6S3WLTG8waiPSOMtVxLeUR+G3l65xGyVNlpWnq2K90gFEux
68bsNX+PJfyjyUUve89Y1YB5AARtI5uznIG3jctDaplq28LlQYrJJ7Z4NxDTtNEq
tzlxtx1b5VxsaIzONRDKPACf8BlaX7ezbnY4K8InbagbjIkPiRuTgUulswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8i9/FOBkrrZJDLfg5WfMs5KajVMB8GA1UdIwQY
MBaAFGghyP8EN/ft2CkWb94DRG+GEJ2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMt
MjVhZTkyOTNmNmI0LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMtMjVhZTkyOTNmNmI0
LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyfBH1lc
Og82WRN44CWjqgcLIun9nc3gnIexs0BNWhgaBqoy3ctZZOTGzXL9mk9mpMUqFbqY
YA5asjus610vA8vj/SK2Oo2pA2/0EMeKxilQzlROe+2hq1nPoJclZes5YUMV88n/
1y2Ga/oejYqxTM4KNxx9oT2a4lKuxp9DV3H0wOs4o59s6z7a2NlMo5XPKp7POTUJ
i5CPcpqrfDVagJcGshQXa4Hjr+EFhvqPd0uCzDYDu3ebyKQVTk+eNNC7MvVEycXU
pddi5WNLRdsbW7rb1yo7xIk7HQ4lBt6iPbH3kRtwu2lvENyhLnhjWh1+0hT3Qfne
4pc6gwDY9tEfhA==
-----END CERTIFICATE-----
Generated at Thu May 1 05:39:03 2025 by rpki-client