Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File: aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier: O7il61i7irjCHv/3P5ChEkit/CzM1Wjx4vGXLvrBgVY=
Subject key identifier: 2C:D9:20:5E:B1:B0:35:A4:D1:B2:46:C6:74:94:6C:60:62:0F:68:88
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial: 019690DEDA5A5A26A51D5CEF901EC4672AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number: 1521
Signing time: Fri 02 May 2025 12:00:46 +0000
Manifest this update: Fri 02 May 2025 12:00:46 +0000
Manifest next update: Sat 03 May 2025 12:00:46 +0000
Files and hashes: 1: PXiDqudXgKmzyY9YiAzq4s46dWE.roa (hash: 5TBNAVFbP2ChjbJK1BJdzLBXEkgEKjRymZk/TEDkDEM=)
2: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: PkJjdbHZqNpH/08kwe4L9KPC+/m1hhgikqGKQuYKCVo=)
3: q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa (hash: acnCrGpXIM7lWKiBoJxoUduhJbjnt+3LzoU7dLDO7Fo=)
4: yX0Sl7S1CDrX-G7aHHH7HF-0TIU.roa (hash: Y4Ls4yPY2OiPCKdVraBwQCc1dEKhm1VWZBF9yLJSXfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:de:da:5a:5a:26:a5:1d:5c:ef:90:1e:c4:67:2a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Validity
Not Before: May 2 12:00:46 2025 GMT
Not After : May 3 12:00:46 2025 GMT
Subject: CN=2cd9205eb1b035a4d1b246c674946c60620f6888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:87:3d:ec:d6:2c:52:c0:5e:70:c5:f3:11:
ef:d8:a9:21:d9:f7:d7:41:c4:35:0f:d0:85:19:23:
e8:db:90:d0:1c:55:32:af:65:e1:77:2e:68:79:38:
34:e9:be:cd:e8:93:b3:3d:bf:18:69:9a:3d:6f:03:
49:b7:a1:b6:40:3e:4a:04:39:9e:64:56:67:4a:c8:
ea:d6:36:ff:f0:61:97:a4:f3:4c:b1:82:b6:c0:3a:
d8:f8:ad:d5:ce:5e:1e:4a:83:2f:6e:39:12:43:4e:
05:dd:de:46:5c:97:46:9e:8d:c7:13:f3:a9:46:98:
70:9c:2d:90:b1:1e:c3:8f:74:73:58:63:d8:2a:b1:
e2:0a:2a:8c:79:34:4c:fb:e8:e2:b7:aa:24:c2:d2:
38:2e:87:6d:27:a1:f0:f4:bf:e9:1f:78:a5:78:47:
d1:90:d5:49:ce:bf:fc:85:83:99:07:07:12:01:27:
24:84:0c:61:cd:2d:9f:bc:27:85:a8:76:63:15:2e:
d5:a5:4d:ca:5c:03:3b:8d:7d:7d:68:a0:17:fb:c2:
cf:bb:c4:6b:ee:44:6b:90:20:ca:34:ad:72:44:8e:
12:e3:63:1e:69:c5:07:da:9b:1a:79:10:2e:a9:58:
77:7b:a0:b2:58:25:89:36:0e:35:aa:cc:63:b2:52:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D9:20:5E:B1:B0:35:A4:D1:B2:46:C6:74:94:6C:60:62:0F:68:88
X509v3 Authority Key Identifier:
keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:26:30:f0:14:0d:80:f7:d0:3b:ba:d8:ab:9b:5d:ec:68:0c:
85:5c:46:e2:c6:dd:b6:fe:8b:51:8b:90:4c:41:5f:65:d4:53:
57:79:6f:7f:93:14:bf:5d:0d:fc:e4:62:a7:80:b6:fa:82:66:
6c:e8:8f:4a:51:e9:5c:f3:53:83:40:2b:a4:d4:b3:c6:94:8a:
05:74:5c:5d:8e:90:10:97:7e:f2:80:26:45:b6:89:b1:c6:b6:
c7:87:e6:61:e4:02:c3:01:31:42:dc:47:3a:54:bc:9f:e6:22:
60:59:2e:3d:b1:e3:ec:c1:a5:03:85:20:dc:ee:c7:44:d3:5d:
6c:43:46:54:3b:ce:f4:80:e5:88:e0:9d:0e:32:e7:3a:7e:4c:
b7:fe:28:44:af:a9:dd:8a:ee:6b:a4:b9:d0:c3:8b:ef:29:4e:
2e:16:6a:6e:25:80:c4:5b:4b:86:5d:11:4c:32:f5:6d:d7:95:
8e:de:cc:8d:a9:a5:ff:08:ac:33:fe:e8:0f:35:28:db:40:8e:
2d:c6:d0:e0:e4:d9:2d:fe:b3:3e:27:bd:ce:e6:04:13:41:36:
81:42:f8:de:84:40:68:b9:63:05:03:37:b4:3d:23:c9:c0:87:
ca:cf:fb:4a:1c:1e:95:ff:d9:94:a6:68:0c:81:d4:71:e0:7a:
38:5b:07:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaQ3tpaWialHVzvkB7EZyrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYTZmOWUzZTI2MjJhNzgxNWEyNTllNThkNTUyNDM5YzI1
NWEzMWIwHhcNMjUwNTAyMTIwMDQ2WhcNMjUwNTAzMTIwMDQ2WjAzMTEwLwYDVQQD
EygyY2Q5MjA1ZWIxYjAzNWE0ZDFiMjQ2YzY3NDk0NmM2MDYyMGY2ODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVKHPezWLFLAXnDF8xHv2Kkh2ffX
QcQ1D9CFGSPo25DQHFUyr2Xhdy5oeTg06b7N6JOzPb8YaZo9bwNJt6G2QD5KBDme
ZFZnSsjq1jb/8GGXpPNMsYK2wDrY+K3Vzl4eSoMvbjkSQ04F3d5GXJdGno3HE/Op
RphwnC2QsR7Dj3RzWGPYKrHiCiqMeTRM++jit6okwtI4LodtJ6Hw9L/pH3ileEfR
kNVJzr/8hYOZBwcSASckhAxhzS2fvCeFqHZjFS7VpU3KXAM7jX19aKAX+8LPu8Rr
7kRrkCDKNK1yRI4S42MeacUH2psaeRAuqVh3e6CyWCWJNg41qsxjslINsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzZIF6xsDWk0bJGxnSUbGBiD2iIMB8GA1UdIwQY
MBaAFGqm+ePiYip4FaJZ5Y1VJDnCVaMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MzY4MDYtYmI2ZC00NWYzLTg4Mzct
YzUwNzM0ZDAyMGYwLzEvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MzY4MDYtYmI2ZC00NWYzLTg4MzctYzUwNzM0ZDAyMGYw
LzEvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciYw8BQN
gPfQO7rYq5td7GgMhVxG4sbdtv6LUYuQTEFfZdRTV3lvf5MUv10N/ORip4C2+oJm
bOiPSlHpXPNTg0ArpNSzxpSKBXRcXY6QEJd+8oAmRbaJsca2x4fmYeQCwwExQtxH
OlS8n+YiYFkuPbHj7MGlA4Ug3O7HRNNdbENGVDvO9IDliOCdDjLnOn5Mt/4oRK+p
3Yrua6S50MOL7ylOLhZqbiWAxFtLhl0RTDL1bdeVjt7Mjaml/wisM/7oDzUo20CO
LcbQ4OTZLf6zPie9zuYEE0E2gUL43oRAaLljBQM3tD0jycCHys/7Shwelf/ZlKZo
DIHUceB6OFsHOw==
-----END CERTIFICATE-----
Generated at Fri May 2 22:22:31 2025 by rpki-client