Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: DneVgKlHOs9ykxb2d8xRjWU8RPUvMWpN6yywQvE9aDI=
Subject key identifier: 5F:E2:83:80:62:7F:9E:97:D6:3C:3F:98:A5:BE:F0:B8:7C:EB:F8:0B
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 01968ADC4AF56355C082D57E3CC0DFCDBAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 08:00:15 +0000
Manifest this update: Thu 01 May 2025 08:00:15 +0000
Manifest next update: Fri 02 May 2025 08:00:15 +0000
Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: cqHiYce8wkKx4B9K14JdHbBu36Z+xFYi6MO07lABKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:4a:f5:63:55:c0:82:d5:7e:3c:c0:df:cd:ba:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: May 1 08:00:15 2025 GMT
Not After : May 2 08:00:15 2025 GMT
Subject: CN=5fe28380627f9e97d63c3f98a5bef0b87cebf80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:82:f7:67:38:8c:bd:8c:45:66:8f:fb:70:
c6:51:26:cb:9f:83:d4:93:2d:3f:3d:eb:e3:e4:d5:
de:bc:22:4a:97:56:91:9e:9c:f0:d3:5b:5f:c4:64:
df:e9:51:6f:01:ff:6e:2d:47:1d:6b:26:96:e8:ce:
16:f1:5a:d5:a9:0d:77:2e:e4:87:25:fd:f3:c3:48:
92:88:9a:cc:bc:78:b5:e3:61:a5:be:4d:a2:fd:5c:
e7:a9:81:8d:4b:95:03:fb:3e:43:97:89:ec:ad:79:
52:30:4c:40:01:95:0d:d6:0d:37:43:5c:2a:3c:53:
36:96:61:02:82:e9:e8:c8:15:29:42:78:19:ee:5e:
cd:61:92:47:84:53:2f:d1:a8:bb:28:e6:51:e9:0c:
cc:87:fc:29:fe:a1:1b:d7:0d:ad:b1:67:4a:af:a5:
42:4d:2d:0d:33:47:fd:97:a2:6e:3f:a3:90:18:20:
b7:24:4a:4d:7f:13:00:9b:e1:8b:15:fb:2b:cb:22:
86:3d:a8:df:89:d1:19:e0:52:11:ef:a4:6e:79:48:
7c:68:6e:9d:fe:47:ae:34:e9:03:ff:0e:c8:6c:6a:
4e:4c:b9:a1:68:26:0d:7e:ea:f1:30:7a:a6:2b:f5:
f7:31:59:12:42:62:e4:e6:03:62:44:0e:f2:83:76:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E2:83:80:62:7F:9E:97:D6:3C:3F:98:A5:BE:F0:B8:7C:EB:F8:0B
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:01:b9:be:83:4f:8a:46:b2:b5:e2:6f:9a:22:1a:6f:e4:72:
db:a9:61:c4:cd:c2:3b:30:3c:d4:1a:78:9d:e3:33:d5:d6:c0:
de:da:0c:ba:6b:23:28:ac:79:cc:55:84:89:c1:bb:50:23:31:
22:cd:6d:8a:99:2a:5b:2e:fc:17:2a:11:86:14:89:02:f2:2d:
55:52:0a:bb:0f:18:44:95:46:e4:4e:f8:62:c0:02:0b:58:d8:
d4:1d:e1:f3:70:d7:cb:bd:16:3c:51:59:1a:4e:9f:aa:6f:8c:
7a:34:74:11:74:39:6a:85:31:44:d0:58:2d:d2:7c:ad:fa:9e:
5b:4c:df:f3:21:bb:68:22:78:86:7a:58:5b:90:ac:bd:2a:4c:
24:64:f4:d5:18:dc:39:e3:d3:16:91:51:f3:9e:09:12:79:17:
2d:62:47:a8:02:a0:7f:08:71:67:4a:15:89:27:c5:82:35:1e:
3f:b9:8c:a8:a9:9f:06:7b:51:6e:62:3c:f4:a3:0c:4e:13:8f:
3a:5c:d0:df:d9:fe:42:dc:ed:ab:ec:4a:6f:6d:ea:43:a7:de:
9f:ed:aa:ed:de:9b:ee:9e:11:1f:bc:25:c7:15:01:4b:19:67:
e1:36:2c:d6:47:9b:2a:f6:8a:cc:61:d6:18:7f:16:a6:e4:d1:
d0:7d:cb:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaK3Er1Y1XAgtV+PMDfzbrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOGI5OTYzYzk3MmMxZDdhMDNkZjk2ZmFkMjVmNjhlYmQ0
ZmExNDkwHhcNMjUwNTAxMDgwMDE1WhcNMjUwNTAyMDgwMDE1WjAzMTEwLwYDVQQD
Eyg1ZmUyODM4MDYyN2Y5ZTk3ZDYzYzNmOThhNWJlZjBiODdjZWJmODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9uC92c4jL2MRWaP+3DGUSbLn4PU
ky0/Pevj5NXevCJKl1aRnpzw01tfxGTf6VFvAf9uLUcdayaW6M4W8VrVqQ13LuSH
Jf3zw0iSiJrMvHi142Glvk2i/VznqYGNS5UD+z5Dl4nsrXlSMExAAZUN1g03Q1wq
PFM2lmECgunoyBUpQngZ7l7NYZJHhFMv0ai7KOZR6QzMh/wp/qEb1w2tsWdKr6VC
TS0NM0f9l6JuP6OQGCC3JEpNfxMAm+GLFfsryyKGPajfidEZ4FIR76RueUh8aG6d
/keuNOkD/w7IbGpOTLmhaCYNfurxMHqmK/X3MVkSQmLk5gNiRA7yg3Yi/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/ig4Bif56X1jw/mKW+8Lh86/gLMB8GA1UdIwQY
MBaAFAOLmWPJcsHXoD35b60l9o69T6FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWIt
NjE2M2I5OTdiNjQyLzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWItNjE2M2I5OTdiNjQy
LzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAG5voNP
ikayteJvmiIab+Ry26lhxM3COzA81Bp4neMz1dbA3toMumsjKKx5zFWEicG7UCMx
Is1tipkqWy78FyoRhhSJAvItVVIKuw8YRJVG5E74YsACC1jY1B3h83DXy70WPFFZ
Gk6fqm+MejR0EXQ5aoUxRNBYLdJ8rfqeW0zf8yG7aCJ4hnpYW5CsvSpMJGT01Rjc
OePTFpFR854JEnkXLWJHqAKgfwhxZ0oViSfFgjUeP7mMqKmfBntRbmI89KMMThOP
OlzQ39n+Qtztq+xKb23qQ6fen+2q7d6b7p4RH7wlxxUBSxln4TYs1kebKvaKzGHW
GH8WpuTR0H3Lqg==
-----END CERTIFICATE-----
Generated at Thu May 1 10:06:23 2025 by rpki-client