Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: 6n1iKxghnotvYGaCBSLNTXimY2RL9isRLtA+PrYZlio=
Subject key identifier: C7:84:2A:B9:44:71:7D:25:29:44:FB:ED:45:3D:31:DE:A4:01:63:58
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 0196748B8FD45FCE39EF2E30BA30776D7B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 1153
Signing time: Sun 27 Apr 2025 00:00:25 +0000
Manifest this update: Sun 27 Apr 2025 00:00:25 +0000
Manifest next update: Mon 28 Apr 2025 00:00:25 +0000
Files and hashes: 1: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (hash: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=)
2: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: YpvydcdGKq75I9NfSdajsIocVo6XwuF2xTX0U2C9B4w=)
3: xkqO4aVLIZUckL31oh3PJoWcGDw.roa (hash: U3ieRFwqG7N/E8wCUCYGjMDFUjBJb6rB66D0tY2rBtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:8f:d4:5f:ce:39:ef:2e:30:ba:30:77:6d:7b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Apr 27 00:00:25 2025 GMT
Not After : Apr 28 00:00:25 2025 GMT
Subject: CN=c7842ab944717d252944fbed453d31dea4016358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:0d:8a:5c:5d:d2:ee:d1:e0:b2:9a:0e:1b:
0e:f9:9a:8b:87:49:f5:60:50:03:67:52:f4:b9:cd:
de:dc:4a:5c:d0:9f:54:ea:44:da:52:f9:a9:61:96:
30:94:d7:76:24:ef:da:6b:03:0e:5d:d4:f2:55:57:
8b:b0:33:92:e2:9e:59:2e:ab:6d:41:c4:c7:a2:c4:
bf:2a:45:de:be:1c:0c:c0:78:85:ac:4a:6f:25:10:
31:ce:68:24:2d:40:ea:35:01:7c:46:29:75:04:26:
4c:64:47:b0:97:b8:dd:a4:43:36:7b:60:78:64:0e:
13:7b:45:6e:e0:ac:03:d6:da:70:28:92:c4:a6:c8:
aa:6d:23:b0:ba:70:14:be:56:40:c0:78:e5:0c:32:
c3:a7:b3:a9:f0:67:30:6c:bc:4a:f5:2f:c2:71:9c:
6f:8c:21:ff:b3:d2:ad:ef:33:7b:f5:53:7b:a5:f3:
f6:b6:a3:d1:6c:0b:9d:6c:fc:00:6b:4c:79:1b:75:
bb:e8:b2:b8:59:2a:b3:56:c3:53:31:bf:bf:81:77:
65:ee:9b:13:81:33:fb:63:15:d1:27:89:ab:6a:fc:
80:b6:e8:fc:a9:e9:91:c3:ce:88:83:be:14:da:47:
0b:d1:d2:d5:75:bb:09:90:f9:32:68:80:d3:43:7b:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:2A:B9:44:71:7D:25:29:44:FB:ED:45:3D:31:DE:A4:01:63:58
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:16:b3:6a:bf:3c:d0:a2:69:30:f6:3f:81:7d:e8:8d:36:6e:
be:2f:40:b6:1d:ec:83:29:f1:20:0a:80:be:b7:d5:e5:a5:a7:
50:92:9c:cf:74:04:92:b4:2c:6c:9b:eb:2c:7c:b9:2b:5c:55:
6b:9f:67:ae:fb:03:f1:cf:49:fe:8f:10:fc:4a:8d:ab:fa:6b:
a5:85:71:eb:a2:ff:d5:30:49:fc:99:87:fd:21:d4:4b:c6:00:
18:5b:1e:d6:51:4a:f2:55:e6:c9:fa:52:54:f9:5d:f9:99:31:
e1:29:c1:1a:13:ad:06:c1:66:32:d4:2d:dc:92:3c:b4:aa:08:
94:07:72:ba:a0:f6:f1:e8:d5:da:e5:73:be:ec:01:2e:84:00:
a6:10:bc:7f:f0:be:1f:28:a1:27:42:01:9a:ee:77:97:56:25:
5b:6b:a5:d5:d8:f6:91:91:dc:fb:2f:f7:47:39:59:4c:95:d5:
6e:7f:65:ba:35:88:c1:3f:80:c1:fb:3c:d0:62:fd:8f:56:95:
33:84:ef:e5:3e:bf:f4:a6:90:ac:61:8a:64:bf:e9:f6:1b:00:
82:d8:4c:ec:0f:18:f0:02:9a:48:55:21:af:66:5a:3b:d4:f2:
d9:c4:db:d4:46:1e:01:ec:28:e5:77:95:b6:48:2d:aa:68:4a:
bf:4e:08:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i4/UX8457y4wujB3bXsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDRkYWY4NThiN2IwMGI1MWNiYjk0YWZiMjhmMDNlYTIx
ZTQxMWQwHhcNMjUwNDI3MDAwMDI1WhcNMjUwNDI4MDAwMDI1WjAzMTEwLwYDVQQD
EyhjNzg0MmFiOTQ0NzE3ZDI1Mjk0NGZiZWQ0NTNkMzFkZWE0MDE2MzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+8Nilxd0u7R4LKaDhsO+ZqLh0n1
YFADZ1L0uc3e3Epc0J9U6kTaUvmpYZYwlNd2JO/aawMOXdTyVVeLsDOS4p5ZLqtt
QcTHosS/KkXevhwMwHiFrEpvJRAxzmgkLUDqNQF8Ril1BCZMZEewl7jdpEM2e2B4
ZA4Te0Vu4KwD1tpwKJLEpsiqbSOwunAUvlZAwHjlDDLDp7Op8GcwbLxK9S/CcZxv
jCH/s9Kt7zN79VN7pfP2tqPRbAudbPwAa0x5G3W76LK4WSqzVsNTMb+/gXdl7psT
gTP7YxXRJ4mravyAtuj8qemRw86Ig74U2kcL0dLVdbsJkPkyaIDTQ3su3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeEKrlEcX0lKUT77UU9Md6kAWNYMB8GA1UdIwQY
MBaAFGkE2vhYt7ALUcu5Svso8D6iHkEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQt
OGFkMWQwZjgwMjE3LzEvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQtOGFkMWQwZjgwMjE3
LzEvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhazar88
0KJpMPY/gX3ojTZuvi9Ath3sgynxIAqAvrfV5aWnUJKcz3QEkrQsbJvrLHy5K1xV
a59nrvsD8c9J/o8Q/EqNq/prpYVx66L/1TBJ/JmH/SHUS8YAGFse1lFK8lXmyfpS
VPld+Zkx4SnBGhOtBsFmMtQt3JI8tKoIlAdyuqD28ejV2uVzvuwBLoQAphC8f/C+
HyihJ0IBmu53l1YlW2ul1dj2kZHc+y/3RzlZTJXVbn9lujWIwT+Awfs80GL9j1aV
M4Tv5T6/9KaQrGGKZL/p9hsAgthM7A8Y8AKaSFUhr2ZaO9Ty2cTb1EYeAewo5XeV
tkgtqmhKv04IWA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:45 2025 by rpki-client