Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File: aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier: FrqHBRty7Jk827dMfjigp/ZLoD4VZOTBDP+H/wqm89A=
Subject key identifier: 03:18:8D:36:60:F7:0B:5C:B2:E2:79:94:C1:B3:6D:8C:EC:B1:13:57
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 01968849A5EE17F582C1966E8D48A6FA250F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number: 1262
Signing time: Wed 30 Apr 2025 20:00:50 +0000
Manifest this update: Wed 30 Apr 2025 20:00:50 +0000
Manifest next update: Thu 01 May 2025 20:00:50 +0000
Files and hashes: 1: HaUn7tg_GQoLwUeKln7B89E1Zus.roa (hash: UBP04zlDEuw8zGqO58s8vILU4LoszVd4p1cFKyVRANw=)
2: Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa (hash: 2ufypWC+H0u1FT85vML3Y3XXLbc7QafpFQUC4EhAO8E=)
3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: Yk2t/mC6HVlqP2uZ4mgC2HmwiZYFd+wbV+z7HsUH/CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:a5:ee:17:f5:82:c1:96:6e:8d:48:a6:fa:25:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Apr 30 20:00:50 2025 GMT
Not After : May 1 20:00:50 2025 GMT
Subject: CN=03188d3660f70b5cb2e27994c1b36d8cecb11357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:0e:4f:16:bb:42:1d:59:be:20:7a:26:19:
41:1c:ff:d9:eb:3e:4c:80:75:3b:db:7f:b3:a6:01:
ce:6f:c9:3c:d6:e3:d0:b6:58:85:e5:87:94:ee:f6:
d2:9a:04:37:9a:a8:67:76:1f:ad:c9:e6:36:fe:b7:
8b:2e:3d:63:1a:46:40:21:d0:b8:eb:d5:d0:12:de:
32:65:98:89:82:cd:92:e9:1e:2a:bf:da:ee:48:9d:
4d:b8:ec:f2:c2:30:49:d4:1f:e3:87:4d:50:eb:5c:
6c:b6:91:80:fc:f1:62:7c:b4:dd:31:cb:47:a8:a8:
49:9b:d4:e7:16:fb:7c:00:6f:92:7a:51:c0:4d:0a:
64:c1:b4:44:f1:de:d3:d2:d1:d8:4f:70:75:7c:fe:
f9:8b:00:32:6c:96:12:3c:1c:36:26:03:90:58:fc:
c5:26:2e:af:5a:a0:27:c8:d5:25:8f:1a:12:6b:94:
1f:63:05:c0:b0:c5:cb:04:6a:a9:a3:a5:67:78:a3:
c8:2b:c6:08:d7:56:79:ac:e1:e9:a8:6c:b9:cf:68:
6c:e7:48:cf:20:e7:ac:12:98:8b:f1:f8:c3:0c:46:
35:39:d6:35:e7:46:d0:81:73:85:22:4c:b2:4c:a9:
ae:1a:9b:8b:9b:29:94:e7:55:1b:b0:70:f8:6a:87:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:18:8D:36:60:F7:0B:5C:B2:E2:79:94:C1:B3:6D:8C:EC:B1:13:57
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:00:56:3d:e3:bc:c0:86:4b:41:64:aa:f8:75:be:7d:ce:47:
ea:6b:11:2a:26:71:93:c2:a0:26:ba:ce:e7:93:2f:a0:60:17:
b2:54:92:d3:f2:6a:2f:b6:fc:f9:45:41:87:49:12:69:52:ec:
c0:84:c3:14:ba:c9:95:cd:fd:de:55:3d:b5:ab:10:e7:52:aa:
38:17:a0:df:d6:ee:38:fe:f0:1e:87:c5:16:63:f6:e7:bd:f8:
0b:17:7b:45:17:61:45:f2:a6:21:37:f5:18:74:d0:9b:bd:ec:
22:ea:5c:2b:3d:b9:14:30:82:39:e5:9b:f8:81:d6:fd:18:9b:
5d:c8:2b:2a:d5:bd:ce:35:5d:da:b7:34:02:4a:7b:0c:f5:0b:
3f:b1:f8:5c:1d:e1:c1:ec:9e:f9:e6:5b:9a:5b:7d:12:b1:97:
86:d4:8a:08:25:0d:66:f4:4f:87:81:52:c3:3a:96:d4:c5:58:
88:c0:e9:73:c8:1d:66:74:0b:cc:88:77:cf:8a:d2:2c:c4:44:
67:c3:18:e9:be:b2:20:f4:f1:9b:7d:75:c4:6a:86:61:04:cf:
35:ca:30:bd:a9:16:21:9f:cc:97:3d:3e:14:46:05:97:87:a5:
63:e2:8a:82:56:24:c2:be:88:13:57:64:e3:59:70:e0:72:ef:
fd:7f:93:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaISaXuF/WCwZZujUim+iUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM5YTIxNzU5Nzk2ZmUzYTFkOTE5ZjliNTczN2ViNjhk
NzA4ZTQwHhcNMjUwNDMwMjAwMDUwWhcNMjUwNTAxMjAwMDUwWjAzMTEwLwYDVQQD
EygwMzE4OGQzNjYwZjcwYjVjYjJlMjc5OTRjMWIzNmQ4Y2VjYjExMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR8OTxa7Qh1ZviB6JhlBHP/Z6z5M
gHU723+zpgHOb8k81uPQtliF5YeU7vbSmgQ3mqhndh+tyeY2/reLLj1jGkZAIdC4
69XQEt4yZZiJgs2S6R4qv9ruSJ1NuOzywjBJ1B/jh01Q61xstpGA/PFifLTdMctH
qKhJm9TnFvt8AG+SelHATQpkwbRE8d7T0tHYT3B1fP75iwAybJYSPBw2JgOQWPzF
Ji6vWqAnyNUljxoSa5QfYwXAsMXLBGqpo6VneKPIK8YI11Z5rOHpqGy5z2hs50jP
IOesEpiL8fjDDEY1OdY150bQgXOFIkyyTKmuGpuLmymU51UbsHD4aoevZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMYjTZg9wtcsuJ5lMGzbYzssRNXMB8GA1UdIwQY
MBaAFGhjmiF1l5b+Oh2Rn5tXN+to1wjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTct
MTNkMTY4ZDU5YjExLzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTctMTNkMTY4ZDU5YjEx
LzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwBWPeO8
wIZLQWSq+HW+fc5H6msRKiZxk8KgJrrO55MvoGAXslSS0/JqL7b8+UVBh0kSaVLs
wITDFLrJlc393lU9tasQ51KqOBeg39buOP7wHofFFmP25734Cxd7RRdhRfKmITf1
GHTQm73sIupcKz25FDCCOeWb+IHW/RibXcgrKtW9zjVd2rc0Akp7DPULP7H4XB3h
weye+eZbmlt9ErGXhtSKCCUNZvRPh4FSwzqW1MVYiMDpc8gdZnQLzIh3z4rSLMRE
Z8MY6b6yIPTxm311xGqGYQTPNcowvakWIZ/Mlz0+FEYFl4elY+KKglYkwr6IE1dk
41lw4HLv/X+Tag==
-----END CERTIFICATE-----
Generated at Thu May 1 01:48:01 2025 by rpki-client