Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File: aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier: 7I49JB+KKcRrR9V5cIDs20kHJYVVIk5TMBXy9/YSJRs=
Subject key identifier: B1:26:AF:94:F7:A7:E7:66:72:2B:7B:86:01:E2:4B:69:C4:C3:52:AE
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer: /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial: 019677FADA9C3E5CF2D4033E16AE2AB62170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 16:00:50 +0000
Manifest this update: Sun 27 Apr 2025 16:00:50 +0000
Manifest next update: Mon 28 Apr 2025 16:00:50 +0000
Files and hashes: 1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: +kZ/Q/pM4ZqCaAFRv8PtJedoais7yGGCnwvgO60FWaQ=)
2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:da:9c:3e:5c:f2:d4:03:3e:16:ae:2a:b6:21:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
Validity
Not Before: Apr 27 16:00:50 2025 GMT
Not After : Apr 28 16:00:50 2025 GMT
Subject: CN=b126af94f7a7e766722b7b8601e24b69c4c352ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:05:2e:c7:f5:84:69:c9:89:c3:60:35:98:
af:08:a2:53:00:69:1b:2a:96:24:34:13:93:d9:0a:
81:55:e2:05:5d:1f:a4:9a:11:b1:c6:74:7e:a0:73:
15:e0:07:85:90:b1:6b:2e:b5:cf:60:d6:56:68:d3:
df:c0:85:ec:72:67:4d:0b:bb:45:2b:8b:2c:3d:8f:
7e:24:3e:b5:fe:3b:22:bc:c4:9c:54:d6:4f:dc:29:
c7:a1:a6:be:db:8a:52:20:1d:9d:bf:0f:b7:f7:89:
c1:fc:06:2f:9a:cf:5f:d2:38:3f:f2:a6:05:e0:61:
dd:9c:85:68:25:b9:e2:63:bc:70:59:05:a7:2d:cd:
43:7a:66:bd:d5:4e:f7:e7:93:74:56:26:95:84:37:
8b:90:9c:49:6a:35:4f:90:e1:0a:7b:07:34:fa:28:
a3:ff:84:de:f2:f3:cb:2a:bf:2f:a4:e6:7e:f9:a2:
e6:90:d0:ad:65:40:0c:8b:57:fe:06:da:8d:7a:e3:
1c:f1:30:63:b7:27:d5:be:7c:66:e5:36:36:21:b5:
0f:e9:3d:46:09:19:60:07:a0:e8:03:d8:e9:5b:44:
65:a5:61:04:c2:d7:d8:1b:1a:96:1b:96:f4:49:ff:
69:60:33:55:a1:14:83:f9:c3:ab:1b:d7:d4:4c:9d:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:26:AF:94:F7:A7:E7:66:72:2B:7B:86:01:E2:4B:69:C4:C3:52:AE
X509v3 Authority Key Identifier:
keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2c:d3:6d:78:80:0f:27:8e:0f:81:ff:5f:d7:78:72:c8:f0:
f8:37:1f:0c:e6:c2:f7:aa:2e:5f:ac:a2:14:de:ac:9e:7f:d0:
b4:17:14:a2:0a:cd:17:2a:5e:b2:6c:d9:4e:19:4a:67:6c:2c:
dd:a9:8e:e8:63:b5:16:85:ed:17:ae:ed:a6:4e:3d:06:af:1e:
de:75:77:7b:a9:8a:45:ac:88:5e:3b:97:91:cd:eb:bc:9a:ab:
b6:5d:0c:f1:4b:39:bc:c5:9c:95:9f:72:c0:d6:10:54:cf:e6:
bf:50:f0:71:fd:bf:12:7a:a9:9d:4c:42:0e:b6:55:f0:7e:31:
db:49:67:f6:f6:e1:79:b5:41:06:ea:7b:3a:29:55:6a:22:bd:
f1:60:b8:58:9f:93:7d:91:89:85:95:2c:f7:9e:b7:13:c8:7b:
84:c2:03:45:25:7a:9d:7b:65:48:8f:21:a7:2a:cf:a6:5a:17:
25:e4:b7:d5:e9:36:6d:2f:97:db:a2:3c:20:9e:39:b8:52:28:
3c:da:3a:3e:cc:aa:88:d9:f0:e3:fb:de:e9:ff:13:86:e4:dd:
f5:5c:4a:95:fc:7b:bb:7f:70:2b:79:da:9c:51:93:c0:8f:fa:
af:3a:60:28:35:9e:b5:2a:73:9a:2f:4b:ab:05:ad:6a:f4:bc:
bf:34:2e:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+tqcPlzy1AM+Fq4qtiFwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTEyNDVhZTIwMjUxNTVjMDliZWMyNWE4OTkxZDU2N2Fm
MTg0MWQwHhcNMjUwNDI3MTYwMDUwWhcNMjUwNDI4MTYwMDUwWjAzMTEwLwYDVQQD
EyhiMTI2YWY5NGY3YTdlNzY2NzIyYjdiODYwMWUyNGI2OWM0YzM1MmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+4FLsf1hGnJicNgNZivCKJTAGkb
KpYkNBOT2QqBVeIFXR+kmhGxxnR+oHMV4AeFkLFrLrXPYNZWaNPfwIXscmdNC7tF
K4ssPY9+JD61/jsivMScVNZP3CnHoaa+24pSIB2dvw+394nB/AYvms9f0jg/8qYF
4GHdnIVoJbniY7xwWQWnLc1Dema91U7355N0ViaVhDeLkJxJajVPkOEKewc0+iij
/4Te8vPLKr8vpOZ++aLmkNCtZUAMi1f+BtqNeuMc8TBjtyfVvnxm5TY2IbUP6T1G
CRlgB6DoA9jpW0RlpWEEwtfYGxqWG5b0Sf9pYDNVoRSD+cOrG9fUTJ0s5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEmr5T3p+dmcit7hgHiS2nEw1KuMB8GA1UdIwQY
MBaAFGkRJFriAlFVwJvsJaiZHVZ68YQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wZTRkZDUtOWM4Zi00ODU2LTkwZDct
MWUxZTljYmY0N2RhLzEvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wZTRkZDUtOWM4Zi00ODU2LTkwZDctMWUxZTljYmY0N2Rh
LzEvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCzTbXiA
DyeOD4H/X9d4csjw+DcfDObC96ouX6yiFN6snn/QtBcUogrNFypesmzZThlKZ2ws
3amO6GO1FoXtF67tpk49Bq8e3nV3e6mKRayIXjuXkc3rvJqrtl0M8Us5vMWclZ9y
wNYQVM/mv1Dwcf2/EnqpnUxCDrZV8H4x20ln9vbhebVBBup7OilVaiK98WC4WJ+T
fZGJhZUs9563E8h7hMIDRSV6nXtlSI8hpyrPploXJeS31ek2bS+X26I8IJ45uFIo
PNo6PsyqiNnw4/ve6f8ThuTd9VxKlfx7u39wK3nanFGTwI/6rzpgKDWetSpzmi9L
qwWtavS8vzQu+g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:19:26 2025 by rpki-client