Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: 9p/7Q4d48HGDNedZI4QGxHoasHsGDi4qBodkndCYpFc=
Subject key identifier: C0:25:B7:93:02:95:AF:51:B9:47:54:A4:93:6A:D5:38:EF:59:CE:E6
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 0196764308D3986D285629676166872328F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 08:00:26 +0000
Manifest this update: Sun 27 Apr 2025 08:00:26 +0000
Manifest next update: Mon 28 Apr 2025 08:00:26 +0000
Files and hashes: 1: 2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (hash: R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=)
2: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: eEW2GYOMa6b/mTONbnnNssQhD7yX4HSjZfjXO0imwKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:08:d3:98:6d:28:56:29:67:61:66:87:23:28:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Apr 27 08:00:26 2025 GMT
Not After : Apr 28 08:00:26 2025 GMT
Subject: CN=c025b7930295af51b94754a4936ad538ef59cee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:5f:55:47:23:82:73:32:2f:06:4a:4d:12:
9f:cf:23:79:55:f3:9b:25:49:89:74:40:22:58:f3:
07:55:f3:2c:37:d4:ee:0f:63:2a:b7:84:6c:36:4c:
47:cd:06:a2:84:fc:58:bb:31:e7:c8:b0:3d:ec:9b:
79:19:2e:bb:e9:1e:c3:99:4e:69:92:a6:26:eb:db:
67:cf:75:70:fd:a4:d5:8e:71:68:6d:86:e7:02:96:
35:37:d9:dc:16:39:58:7e:9a:1f:be:c6:cb:08:fe:
20:07:b4:24:4c:61:a7:01:b8:6f:dc:6c:58:01:e7:
25:59:33:2d:60:8f:d1:6e:50:e0:85:19:d5:fc:64:
d0:fe:25:26:3f:75:57:35:29:fa:24:d2:66:ef:ce:
b2:d7:f9:49:a5:11:98:1c:cb:77:bf:c3:65:f9:33:
e2:bb:d4:8f:15:7b:7a:67:ae:35:79:30:9d:21:64:
80:d6:d5:e4:40:51:0c:cc:47:a6:a3:19:fe:cf:1a:
10:30:0e:95:53:52:63:b4:26:52:73:75:a5:32:89:
d6:7f:22:ac:64:a3:21:51:ca:75:e9:82:26:13:10:
b3:37:05:b0:7f:d3:e6:4c:25:43:77:41:3d:ae:63:
60:cc:3a:fb:b5:7f:2e:1b:e3:a8:ab:5e:de:8f:f5:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:25:B7:93:02:95:AF:51:B9:47:54:A4:93:6A:D5:38:EF:59:CE:E6
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3e:4c:34:fc:f6:27:46:8c:16:10:ab:bb:a9:fc:f1:95:77:
f9:ec:83:37:88:ad:d2:d1:c2:74:4f:fc:00:8f:2d:86:ef:fd:
16:c3:b1:ad:18:83:b7:63:63:bb:ea:94:c0:44:39:2e:ab:c7:
ee:30:9e:19:57:3f:8c:e7:77:84:75:d6:0c:27:ff:5f:74:2f:
26:94:8d:0d:c0:b7:d3:65:0c:80:b8:6f:92:7e:fa:1a:08:23:
eb:bc:cf:3b:49:b5:56:ac:e0:48:a8:91:bd:f4:b0:74:1c:ed:
52:70:08:b8:41:89:f4:72:01:2f:41:b0:cc:f9:a4:d6:32:20:
af:02:b6:ae:13:37:93:30:f4:ee:85:1b:c5:c5:58:65:4b:f0:
66:c8:84:38:55:ef:6a:f0:6f:39:09:7a:5b:ba:6e:cf:50:4e:
ae:2a:5f:19:f7:07:59:8b:09:41:25:77:75:9e:4d:f1:86:54:
57:c8:f5:8e:cb:3f:e3:d4:42:8d:59:f9:f1:11:6f:f8:87:7d:
76:3d:e7:4a:7a:dd:42:0f:32:d6:36:39:1f:98:a2:38:2f:8f:
14:ad:f7:94:98:fe:14:ec:05:08:00:04:f9:93:77:16:ae:c5:
99:dc:c9:18:3c:57:44:8e:b6:84:ac:12:bc:08:0f:fc:d7:06:
04:42:97:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QwjTmG0oVilnYWaHIyj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODM2MTMwN2VmZDlmM2FiZWZlNjliZDE0ZGUwZTFiZDYw
YjZlNmEwHhcNMjUwNDI3MDgwMDI2WhcNMjUwNDI4MDgwMDI2WjAzMTEwLwYDVQQD
EyhjMDI1Yjc5MzAyOTVhZjUxYjk0NzU0YTQ5MzZhZDUzOGVmNTljZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtNfVUcjgnMyLwZKTRKfzyN5VfOb
JUmJdEAiWPMHVfMsN9TuD2Mqt4RsNkxHzQaihPxYuzHnyLA97Jt5GS676R7DmU5p
kqYm69tnz3Vw/aTVjnFobYbnApY1N9ncFjlYfpofvsbLCP4gB7QkTGGnAbhv3GxY
AeclWTMtYI/RblDghRnV/GTQ/iUmP3VXNSn6JNJm786y1/lJpRGYHMt3v8Nl+TPi
u9SPFXt6Z641eTCdIWSA1tXkQFEMzEemoxn+zxoQMA6VU1JjtCZSc3WlMonWfyKs
ZKMhUcp16YImExCzNwWwf9PmTCVDd0E9rmNgzDr7tX8uG+Ooq17ej/Xp9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAlt5MCla9RuUdUpJNq1TjvWc7mMB8GA1UdIwQY
MBaAFAKDYTB+/Z86vv5pvRTeDhvWC25qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lODEwMWEtMjQwZi00ZTMyLWEwOTct
MjdjMjczYTYwNzg4LzEvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lODEwMWEtMjQwZi00ZTMyLWEwOTctMjdjMjczYTYwNzg4
LzEvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcz5MNPz2
J0aMFhCru6n88ZV3+eyDN4it0tHCdE/8AI8thu/9FsOxrRiDt2Nju+qUwEQ5LqvH
7jCeGVc/jOd3hHXWDCf/X3QvJpSNDcC302UMgLhvkn76Gggj67zPO0m1VqzgSKiR
vfSwdBztUnAIuEGJ9HIBL0GwzPmk1jIgrwK2rhM3kzD07oUbxcVYZUvwZsiEOFXv
avBvOQl6W7puz1BOripfGfcHWYsJQSV3dZ5N8YZUV8j1jss/49RCjVn58RFv+Id9
dj3nSnrdQg8y1jY5H5iiOC+PFK33lJj+FOwFCAAE+ZN3Fq7FmdzJGDxXRI62hKwS
vAgP/NcGBEKXYQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:21:16 2025 by rpki-client