Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier: zggZDFv+Qtgn3P6BZ0A7Dv9ryZVKFwZ4hyGcEbry/Fo=
Subject key identifier: DB:96:71:20:EC:49:97:3E:AC:7A:F2:CE:AF:61:36:35:D9:E6:9A:15
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial: 019677C39A95871CD5647DD5F9876A8EE18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number: 0191
Signing time: Sun 27 Apr 2025 15:00:29 +0000
Manifest this update: Sun 27 Apr 2025 15:00:29 +0000
Manifest next update: Mon 28 Apr 2025 15:00:29 +0000
Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: 2Uq8+smCUel6hnlFLs8Xf6tM9FeBNwLi9QN89/R8Wmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:9a:95:87:1c:d5:64:7d:d5:f9:87:6a:8e:e1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Validity
Not Before: Apr 27 15:00:29 2025 GMT
Not After : Apr 28 15:00:29 2025 GMT
Subject: CN=db967120ec49973eac7af2ceaf613635d9e69a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ef:f7:04:0e:85:bd:83:2a:86:af:36:20:d1:
bc:f6:7f:9f:58:3b:72:ec:52:bf:fb:a5:71:a9:38:
7e:e7:ac:c2:0a:aa:6a:9f:b9:2c:db:ac:fd:e7:4a:
26:4e:3b:64:a8:a1:0f:54:3e:03:47:9f:2b:f2:d2:
99:8e:1a:91:c4:6c:c1:26:d8:cf:26:0a:7f:5b:1e:
d0:69:9b:66:fb:6f:82:c7:dd:dc:a2:f2:de:a2:f6:
14:46:64:2b:76:aa:09:16:41:12:2d:87:5e:f5:3b:
4b:0a:9a:b1:95:58:13:5c:34:92:33:72:c4:0d:75:
2b:ae:be:92:be:b4:79:3e:a1:f5:69:88:59:cd:9c:
2e:0a:52:47:63:da:3f:b2:ae:34:e8:bf:7f:a2:99:
69:ea:ee:06:6b:fb:fe:e7:2f:20:a1:17:c5:4e:9e:
51:77:64:4f:75:b0:20:a8:e5:c7:21:bd:88:c1:46:
45:eb:05:41:25:c7:a0:07:19:3a:33:cc:cb:09:6d:
d6:d4:e8:1b:6c:ea:6c:65:cc:77:f0:a5:8c:e7:42:
d7:e1:cd:a0:e7:ba:a0:d2:7c:2f:2c:f2:d5:a1:ad:
f2:85:f2:a1:b5:7c:2f:1f:36:ae:90:70:42:ff:e8:
24:f6:c6:50:d4:00:64:4c:e6:3c:bf:af:1b:04:8f:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:96:71:20:EC:49:97:3E:AC:7A:F2:CE:AF:61:36:35:D9:E6:9A:15
X509v3 Authority Key Identifier:
keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:75:1c:2c:4c:90:c1:3d:a4:b6:e6:31:10:f0:69:cc:c6:42:
ff:c9:eb:9b:26:4f:27:73:6c:95:ae:78:ac:8e:a2:c3:36:ac:
25:ac:e0:05:ba:f3:2d:77:7b:7e:d2:ac:60:28:f4:4e:85:eb:
75:ac:f6:b7:40:82:d4:a8:31:c3:78:9e:a4:7a:52:74:20:10:
35:20:63:a8:52:59:16:63:39:c0:dc:82:50:d4:1f:61:6b:f3:
6d:cb:9c:72:d9:24:c9:13:32:17:39:86:66:b5:4d:5b:24:ed:
32:4a:e0:13:4b:9f:1d:33:3c:ba:ba:36:1a:84:c8:10:5b:e3:
74:ab:5b:4f:9c:60:c6:5c:a3:cc:b1:34:4a:56:f4:08:15:10:
a3:66:c8:87:b6:79:f4:b6:9e:6f:e2:e6:24:90:a6:c3:fe:4e:
4a:ed:26:be:2d:74:75:1f:e0:81:2b:1d:57:1a:b9:85:43:32:
28:e7:6f:94:87:c3:7f:3d:08:2f:b3:3c:fd:e4:eb:32:26:31:
46:6e:1c:c1:36:41:f9:b6:11:25:aa:9c:fe:21:d6:3d:f4:f7:
d8:7f:36:51:b1:67:3e:ec:0a:f6:6f:68:8d:37:f7:be:7b:2c:
0f:2f:f7:c9:71:ae:32:6e:16:02:89:db:46:c9:2e:e4:a0:aa:
63:49:96:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w5qVhxzVZH3V+YdqjuGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNjFiZmQ0NTBlMTJlOTk1NDA0YTQ0ZWIzN2EyZjllNDJi
ZmUwN2MwHhcNMjUwNDI3MTUwMDI5WhcNMjUwNDI4MTUwMDI5WjAzMTEwLwYDVQQD
EyhkYjk2NzEyMGVjNDk5NzNlYWM3YWYyY2VhZjYxMzYzNWQ5ZTY5YTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9e/3BA6FvYMqhq82ING89n+fWDty
7FK/+6VxqTh+56zCCqpqn7ks26z950omTjtkqKEPVD4DR58r8tKZjhqRxGzBJtjP
Jgp/Wx7QaZtm+2+Cx93covLeovYURmQrdqoJFkESLYde9TtLCpqxlVgTXDSSM3LE
DXUrrr6SvrR5PqH1aYhZzZwuClJHY9o/sq406L9/oplp6u4Ga/v+5y8goRfFTp5R
d2RPdbAgqOXHIb2IwUZF6wVBJcegBxk6M8zLCW3W1OgbbOpsZcx38KWM50LX4c2g
57qg0nwvLPLVoa3yhfKhtXwvHzaukHBC/+gk9sZQ1ABkTOY8v68bBI9VmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuWcSDsSZc+rHryzq9hNjXZ5poVMB8GA1UdIwQY
MBaAFANhv9RQ4S6ZVASkTrN6L55Cv+B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZWM3ODMtNWI0OC00OTM4LTg3ZTct
NzM3MWI3ZDFhMTA3LzEvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iZWM3ODMtNWI0OC00OTM4LTg3ZTctNzM3MWI3ZDFhMTA3
LzEvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3UcLEyQ
wT2ktuYxEPBpzMZC/8nrmyZPJ3Nsla54rI6iwzasJazgBbrzLXd7ftKsYCj0ToXr
daz2t0CC1Kgxw3iepHpSdCAQNSBjqFJZFmM5wNyCUNQfYWvzbcucctkkyRMyFzmG
ZrVNWyTtMkrgE0ufHTM8uro2GoTIEFvjdKtbT5xgxlyjzLE0Slb0CBUQo2bIh7Z5
9Laeb+LmJJCmw/5OSu0mvi10dR/ggSsdVxq5hUMyKOdvlIfDfz0IL7M8/eTrMiYx
Rm4cwTZB+bYRJaqc/iHWPfT32H82UbFnPuwK9m9ojTf3vnssDy/3yXGuMm4WAonb
Rsku5KCqY0mWZw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:38 2025 by rpki-client