Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: sOHawO168Scd9Tqa/h6L5kE/ERSGvUCyW1S8dS85NXI=
Subject key identifier: 37:1F:B0:D0:F1:7D:14:4E:6F:A2:F5:29:FB:76:1E:41:2E:21:C3:25
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 019677C38C08808493EF45EB81DCF8CF956B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 120C
Signing time: Sun 27 Apr 2025 15:00:26 +0000
Manifest this update: Sun 27 Apr 2025 15:00:26 +0000
Manifest next update: Mon 28 Apr 2025 15:00:26 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: Dohgv+5h9CuEdg3iE3qKSGFN/q2jHZuR2HVjnTvgBl0=)
2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:8c:08:80:84:93:ef:45:eb:81:dc:f8:cf:95:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Apr 27 15:00:26 2025 GMT
Not After : Apr 28 15:00:26 2025 GMT
Subject: CN=371fb0d0f17d144e6fa2f529fb761e412e21c325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:4f:35:92:5a:96:e8:c1:23:9d:b9:63:95:
ca:82:91:da:92:de:3d:90:37:dd:e0:09:01:56:bf:
86:ba:f0:0b:81:f9:ab:12:44:f8:b5:f1:86:d5:87:
d1:89:bb:81:ea:ac:3c:49:19:8f:30:19:dc:87:45:
1b:3d:fe:ca:48:c9:87:02:89:86:9e:e3:c2:59:7c:
93:1b:c1:6b:fa:3a:7a:a0:83:b9:16:fe:33:74:d8:
43:a3:6a:2f:57:4c:ab:f9:67:1d:34:7e:fa:f2:47:
34:f1:ac:3f:81:84:99:33:28:4b:00:ec:23:e2:27:
8b:06:fd:1d:b8:ac:15:23:9e:5f:3d:09:29:99:31:
11:e4:4e:97:fe:39:49:09:18:ce:0f:bc:11:fa:23:
5e:b8:63:0a:92:bc:b5:1e:a0:07:16:05:0f:54:bd:
31:f9:4b:80:d4:3d:f1:3a:dd:88:28:3c:26:1f:30:
8e:b5:65:d1:0a:44:6b:19:c5:9a:1b:9a:d4:a2:32:
08:71:ae:67:c8:d3:3c:ed:9c:fb:0d:4f:7d:4c:59:
c2:26:20:dd:6b:e5:ec:fe:4e:65:99:43:fd:85:87:
62:53:7d:22:fc:60:2f:96:b7:b1:52:a1:4c:59:32:
4e:8e:c6:4e:50:85:fc:5c:78:06:4e:1c:1b:b9:16:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1F:B0:D0:F1:7D:14:4E:6F:A2:F5:29:FB:76:1E:41:2E:21:C3:25
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a2:9f:80:30:04:f5:62:10:29:f9:e8:93:79:3e:22:a2:e4:
40:c7:c4:03:58:8b:87:15:8c:7d:c4:ad:1e:7a:37:91:09:09:
6b:5a:6f:89:00:fd:68:39:6c:f0:b2:11:dc:54:1a:8d:7d:ee:
e5:06:cc:77:49:d3:ee:41:6f:04:37:bf:ce:23:d9:6f:d2:7a:
6a:98:ae:a5:da:13:01:c7:49:d5:85:d2:9f:4e:5a:79:20:44:
fe:52:bc:0b:a2:61:ed:96:2e:ac:a4:45:ce:ba:48:b8:74:d0:
ba:ea:e6:7b:15:4b:5e:f0:88:81:dc:23:f4:b7:ed:16:86:3d:
cb:d0:44:c7:6c:87:fe:0c:b4:3f:df:81:b2:63:01:17:b1:b1:
74:55:94:d4:18:5a:25:d9:a4:60:ae:85:e7:d6:5c:4e:7c:48:
1c:f7:2e:be:dc:2f:b6:32:3a:40:1e:db:38:cf:18:05:96:5a:
0e:d4:06:60:5a:1f:97:a5:5c:bd:62:b6:e4:ec:eb:8b:01:09:
8c:48:22:87:6b:b4:02:af:f7:93:d4:31:72:00:bd:1f:6e:72:
69:9c:ea:0b:da:d7:17:0f:66:bc:ee:df:7e:be:bd:a3:4d:a8:
cb:e8:35:55:bd:66:43:33:2a:34:d7:22:c9:43:aa:c4:86:c8:
b2:86:53:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w4wIgIST70Xrgdz4z5VrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNDcxOGU3YTI2M2ViZTQ1ZTc3MDY3MzkyNDFlYzZkNmFl
NThlNzQwHhcNMjUwNDI3MTUwMDI2WhcNMjUwNDI4MTUwMDI2WjAzMTEwLwYDVQQD
EygzNzFmYjBkMGYxN2QxNDRlNmZhMmY1MjlmYjc2MWU0MTJlMjFjMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3hPNZJalujBI525Y5XKgpHakt49
kDfd4AkBVr+GuvALgfmrEkT4tfGG1YfRibuB6qw8SRmPMBnch0UbPf7KSMmHAomG
nuPCWXyTG8Fr+jp6oIO5Fv4zdNhDo2ovV0yr+WcdNH768kc08aw/gYSZMyhLAOwj
4ieLBv0duKwVI55fPQkpmTER5E6X/jlJCRjOD7wR+iNeuGMKkry1HqAHFgUPVL0x
+UuA1D3xOt2IKDwmHzCOtWXRCkRrGcWaG5rUojIIca5nyNM87Zz7DU99TFnCJiDd
a+Xs/k5lmUP9hYdiU30i/GAvlrexUqFMWTJOjsZOUIX8XHgGThwbuRadOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcfsNDxfRROb6L1Kft2HkEuIcMlMB8GA1UdIwQY
MBaAFABHGOeiY+vkXncGc5JB7G1q5Y50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zZWVjZjgtZWIwNC00MWNlLWE5ZjYt
M2E5MWE2MTNhNDA3LzEvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8zZWVjZjgtZWIwNC00MWNlLWE5ZjYtM2E5MWE2MTNhNDA3
LzEvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaKfgDAE
9WIQKfnok3k+IqLkQMfEA1iLhxWMfcStHno3kQkJa1pviQD9aDls8LIR3FQajX3u
5QbMd0nT7kFvBDe/ziPZb9J6apiupdoTAcdJ1YXSn05aeSBE/lK8C6Jh7ZYurKRF
zrpIuHTQuurmexVLXvCIgdwj9LftFoY9y9BEx2yH/gy0P9+BsmMBF7GxdFWU1Bha
JdmkYK6F59ZcTnxIHPcuvtwvtjI6QB7bOM8YBZZaDtQGYFofl6VcvWK25OzriwEJ
jEgih2u0Aq/3k9QxcgC9H25yaZzqC9rXFw9mvO7ffr69o02oy+g1Vb1mQzMqNNci
yUOqxIbIsoZTDA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:29:06 2025 by rpki-client