Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: uCVVVG8hI+8lDSasPT2nGK3QtuEnJ1hX48VQgso+O0s=
Subject key identifier: E9:9B:0C:3C:F5:47:47:3A:68:4B:90:41:A8:0E:D0:1E:0A:90:F2:9D
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 0196767A24835337F70C3063D6312B2EE8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 13F4
Signing time: Sun 27 Apr 2025 09:00:38 +0000
Manifest this update: Sun 27 Apr 2025 09:00:38 +0000
Manifest next update: Mon 28 Apr 2025 09:00:38 +0000
Files and hashes: 1: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=)
2: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=)
3: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=)
4: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=)
5: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=)
6: W5nu10iQUnq2WyeNqh0FW5pghzg.roa (hash: ACfKtWV/LqUk5Me2H3s1q6ll6Bv01sLwUkPbncMCuVs=)
7: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: 0ChbUceMZEM+SWxPF8cxrAqkmHuV4BT0Id77JnIF5OM=)
8: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=)
9: vyegIY_7PWJ_35cJ7FHof10Oetc.roa (hash: WbJ2gjaiGN54VhXMkNaf0rgW5sSEbQ1P8bkrjt4iUcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:24:83:53:37:f7:0c:30:63:d6:31:2b:2e:e8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Apr 27 09:00:38 2025 GMT
Not After : Apr 28 09:00:38 2025 GMT
Subject: CN=e99b0c3cf547473a684b9041a80ed01e0a90f29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:7f:32:46:1c:b5:ac:97:e8:92:0a:6c:0f:
e2:a5:d4:d0:7d:e7:10:63:3f:d0:b8:7c:1c:cf:7c:
e8:7e:38:4a:77:80:ff:9c:39:7d:14:bd:b7:c8:f6:
d6:73:54:9d:35:18:19:73:70:01:ee:ad:70:91:99:
5c:1c:e6:b5:d8:fc:20:ea:dd:e6:52:e6:5c:70:67:
63:57:9b:e0:b8:77:27:e8:74:14:9c:f7:7f:95:6f:
dc:19:47:3b:34:5e:f8:f1:77:2c:d9:25:dc:45:f3:
51:7a:38:03:7a:0e:2c:43:fc:86:22:b3:60:50:9e:
48:66:a9:cd:92:b4:26:5c:0f:cf:9f:c4:68:94:58:
19:ba:60:2b:af:3f:71:e0:0a:70:e6:77:cb:9e:80:
2c:98:51:10:64:30:a8:cc:10:3a:c6:50:8a:4a:6f:
89:1a:cc:c8:24:5c:cf:c8:d3:bb:31:3e:c2:49:43:
d2:87:06:54:44:ee:50:4a:e4:ba:d0:53:4f:37:f8:
b6:7d:ce:b5:c5:44:a9:b3:4f:19:d3:39:49:2e:a4:
3c:f5:86:18:cf:66:be:bd:e6:57:d9:fa:5e:be:3c:
35:90:cd:49:62:73:bb:88:82:2a:c7:3b:8b:ce:c1:
40:7d:99:f5:3f:d0:f1:97:fe:65:f3:09:78:9a:02:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9B:0C:3C:F5:47:47:3A:68:4B:90:41:A8:0E:D0:1E:0A:90:F2:9D
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:df:63:6f:a7:3b:e6:e9:8c:74:31:c2:3f:1b:d4:e6:07:24:
ad:4d:05:19:0a:d5:e4:50:76:49:c2:19:c9:d9:cf:a7:bc:e7:
bf:8e:e6:1b:f4:5e:2a:77:a9:99:77:04:1e:2c:69:9f:71:b8:
4c:db:0d:83:53:0f:cf:5f:58:34:6b:ad:74:f4:ca:ee:a5:00:
00:34:e5:74:92:06:25:55:d3:cb:2a:43:dc:05:b8:76:b3:7f:
7c:71:61:d7:5f:db:48:6a:e1:47:c4:a1:a0:89:ed:17:be:90:
eb:d0:32:62:76:a9:92:88:f8:c9:ae:6f:c2:0f:93:b8:4b:fa:
b9:85:bf:8b:7c:2f:b8:9e:c8:b4:25:f4:f4:27:c4:0d:74:95:
19:23:94:92:5c:59:96:1e:2a:c3:f4:0f:3a:67:4c:76:74:e1:
ce:ec:f9:97:e3:61:59:74:76:c3:90:e2:80:15:63:68:f7:74:
a9:e7:2a:25:f4:2f:08:41:8a:85:0b:a0:de:8a:1d:9c:79:45:
0d:d4:db:1d:39:23:1e:ab:28:20:d9:3a:cb:cc:01:a9:e0:a5:
b7:0d:e9:84:10:bc:73:ba:d6:7b:c8:e8:14:af:56:1f:47:d5:
8d:7a:ac:39:f8:39:c0:16:fd:0c:4b:9c:dd:68:af:d4:0b:00:
13:a3:5e:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2eiSDUzf3DDBj1jErLuiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjUwNDI3MDkwMDM4WhcNMjUwNDI4MDkwMDM4WjAzMTEwLwYDVQQD
EyhlOTliMGMzY2Y1NDc0NzNhNjg0YjkwNDFhODBlZDAxZTBhOTBmMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B9/MkYctayX6JIKbA/ipdTQfecQ
Yz/QuHwcz3zofjhKd4D/nDl9FL23yPbWc1SdNRgZc3AB7q1wkZlcHOa12Pwg6t3m
UuZccGdjV5vguHcn6HQUnPd/lW/cGUc7NF748Xcs2SXcRfNRejgDeg4sQ/yGIrNg
UJ5IZqnNkrQmXA/Pn8RolFgZumArrz9x4Apw5nfLnoAsmFEQZDCozBA6xlCKSm+J
GszIJFzPyNO7MT7CSUPShwZURO5QSuS60FNPN/i2fc61xUSps08Z0zlJLqQ89YYY
z2a+veZX2fpevjw1kM1JYnO7iIIqxzuLzsFAfZn1P9Dxl/5l8wl4mgJGBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmbDDz1R0c6aEuQQagO0B4KkPKdMB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK99jb6c7
5umMdDHCPxvU5gckrU0FGQrV5FB2ScIZydnPp7znv47mG/ReKnepmXcEHixpn3G4
TNsNg1MPz19YNGutdPTK7qUAADTldJIGJVXTyypD3AW4drN/fHFh11/bSGrhR8Sh
oIntF76Q69AyYnapkoj4ya5vwg+TuEv6uYW/i3wvuJ7ItCX09CfEDXSVGSOUklxZ
lh4qw/QPOmdMdnThzuz5l+NhWXR2w5DigBVjaPd0qecqJfQvCEGKhQug3oodnHlF
DdTbHTkjHqsoINk6y8wBqeCltw3phBC8c7rWe8joFK9WH0fVjXqsOfg5wBb9DEuc
3Wiv1AsAE6Ne0w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:24 2025 by rpki-client