Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: ySGMhT8O0fx+1JM4Dker9nq6FneobohGAdqgZ6Q7xKc=
Subject key identifier: 81:2D:01:9F:84:E9:E4:13:5E:10:C5:5F:E3:94:0A:95:AA:8E:52:C5
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 01967D8ECE67F86A8EDB1F2C08B546BF72C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 0E7E
Signing time: Mon 28 Apr 2025 18:00:32 +0000
Manifest this update: Mon 28 Apr 2025 18:00:32 +0000
Manifest next update: Tue 29 Apr 2025 18:00:32 +0000
Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: D02sBCcUobOUdlhHIdRYrYtBioxky3ZgospBKIU/5zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:ce:67:f8:6a:8e:db:1f:2c:08:b5:46:bf:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Apr 28 18:00:32 2025 GMT
Not After : Apr 29 18:00:32 2025 GMT
Subject: CN=812d019f84e9e4135e10c55fe3940a95aa8e52c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:db:01:c5:60:bf:d4:f1:38:8f:b4:ca:eb:
ae:e5:1a:cb:9a:81:06:9b:0d:0f:44:a0:d3:24:5f:
31:ab:4e:9a:99:52:3b:f9:fe:12:66:2d:3b:a2:f0:
4f:1a:57:16:88:ef:f2:30:56:bf:3e:17:a0:a6:2f:
f3:00:62:d0:59:4b:bd:2d:63:8d:84:a9:8e:4a:9a:
e7:6e:b2:41:43:48:25:04:f7:9e:55:2f:ca:ec:d7:
99:c8:81:24:0e:9c:4d:0a:12:19:8c:08:6e:1b:ff:
15:59:72:ca:27:91:c6:53:a3:55:48:3c:0a:c1:de:
9e:93:8a:b8:3f:8f:08:8f:ed:8c:e7:db:1d:47:8a:
8d:07:d4:a9:31:5b:30:75:0c:10:aa:e7:e9:42:88:
ff:7b:90:52:c2:e8:fb:d9:ec:7c:35:76:7c:a6:55:
29:92:49:0b:92:f6:4c:b9:b1:27:64:d7:b1:6b:8b:
c9:74:91:a3:c1:61:38:f0:86:f5:a9:a1:a7:af:14:
3c:6b:f8:ce:fe:5e:d3:9d:be:ff:89:22:0f:e9:d8:
51:f2:6f:06:63:03:95:6f:c0:83:78:82:63:c8:bd:
d0:ea:e6:1a:63:1f:e4:7d:fb:de:9d:d5:a4:73:b1:
23:35:cf:90:a8:e4:bc:d4:7d:05:2e:43:6b:68:51:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2D:01:9F:84:E9:E4:13:5E:10:C5:5F:E3:94:0A:95:AA:8E:52:C5
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:82:d9:47:e7:7a:57:ed:df:43:1c:7d:28:37:73:dc:5f:70:
9e:e3:5d:e4:e3:18:79:33:cd:7c:56:89:31:7e:a4:d2:6b:61:
af:44:b7:99:3a:db:70:0b:0a:30:e2:f4:8a:75:af:42:68:e3:
6c:92:9c:cb:3f:da:16:2e:6b:75:e2:43:44:ff:49:ab:ac:63:
b8:82:3c:9f:df:dd:c1:0e:75:a7:70:b8:d2:a0:3c:48:35:52:
1c:2b:f7:37:a7:b3:50:4e:cc:26:51:15:62:0b:34:b3:32:e5:
8d:b7:22:c9:a4:03:41:1d:bc:ec:f1:b0:ec:1f:14:2b:61:02:
f1:48:e7:24:19:08:57:3e:65:d5:11:5a:a2:10:99:13:34:70:
a7:b2:56:83:55:b5:03:9d:24:69:e4:9a:dd:94:e0:00:f5:8e:
09:9a:18:93:0c:7a:7d:a1:a2:34:24:0b:25:00:d7:51:fa:61:
e3:f2:4b:bc:3c:10:8f:a2:86:7f:2c:29:6f:f8:d5:3c:12:d3:
1c:5d:b4:57:32:c1:15:17:90:ca:f1:8d:98:1a:e5:cb:c7:9f:
a3:96:80:a5:95:ef:a8:03:e9:c5:5b:c2:74:66:5b:06:51:51:
48:80:99:f9:ef:c4:3b:9c:f4:74:f8:eb:3f:5f:12:0d:d6:b7:
c1:24:b3:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9js5n+GqO2x8sCLVGv3LDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDljMDczYjRmNzA2OTdlMjE3NWMxYTk1NWY2Y2E4YzNh
NjI0NmIwHhcNMjUwNDI4MTgwMDMyWhcNMjUwNDI5MTgwMDMyWjAzMTEwLwYDVQQD
Eyg4MTJkMDE5Zjg0ZTllNDEzNWUxMGM1NWZlMzk0MGE5NWFhOGU1MmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllHbAcVgv9TxOI+0yuuu5RrLmoEG
mw0PRKDTJF8xq06amVI7+f4SZi07ovBPGlcWiO/yMFa/Phegpi/zAGLQWUu9LWON
hKmOSprnbrJBQ0glBPeeVS/K7NeZyIEkDpxNChIZjAhuG/8VWXLKJ5HGU6NVSDwK
wd6ek4q4P48Ij+2M59sdR4qNB9SpMVswdQwQqufpQoj/e5BSwuj72ex8NXZ8plUp
kkkLkvZMubEnZNexa4vJdJGjwWE48Ib1qaGnrxQ8a/jO/l7Tnb7/iSIP6dhR8m8G
YwOVb8CDeIJjyL3Q6uYaYx/kffvendWkc7EjNc+QqOS81H0FLkNraFEymQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEtAZ+E6eQTXhDFX+OUCpWqjlLFMB8GA1UdIwQY
MBaAFHTZwHO09waX4hdcGpVfbKjDpiRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85Y2QxZDctMzRlNy00N2MxLTg0ODQt
YzE5MTQxMGRjODg5LzEvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi85Y2QxZDctMzRlNy00N2MxLTg0ODQtYzE5MTQxMGRjODg5
LzEvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbILZR+d6
V+3fQxx9KDdz3F9wnuNd5OMYeTPNfFaJMX6k0mthr0S3mTrbcAsKMOL0inWvQmjj
bJKcyz/aFi5rdeJDRP9Jq6xjuII8n9/dwQ51p3C40qA8SDVSHCv3N6ezUE7MJlEV
Ygs0szLljbciyaQDQR287PGw7B8UK2EC8UjnJBkIVz5l1RFaohCZEzRwp7JWg1W1
A50kaeSa3ZTgAPWOCZoYkwx6faGiNCQLJQDXUfph4/JLvDwQj6KGfywpb/jVPBLT
HF20VzLBFReQyvGNmBrly8efo5aApZXvqAPpxVvCdGZbBlFRSICZ+e/EO5z0dPjr
P18SDda3wSSzig==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:09:09 2025 by rpki-client