Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: hfb8+EFdL0z2knQYYDeCJW0RKh2+CmWhagXvvpjvmpQ=
Subject key identifier: D7:DC:D2:09:1D:22:FD:EA:A2:DB:35:F1:AB:3A:67:C9:19:DA:F1:C5
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 01968022599E891B7DA9CD7FC67421FB061C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 0328
Signing time: Tue 29 Apr 2025 06:00:56 +0000
Manifest this update: Tue 29 Apr 2025 06:00:56 +0000
Manifest next update: Wed 30 Apr 2025 06:00:56 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: FiZKXZoiSITWJ2StQpjKb0NTPIa7juxZYaSte6BP00A=)
2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:59:9e:89:1b:7d:a9:cd:7f:c6:74:21:fb:06:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Apr 29 06:00:56 2025 GMT
Not After : Apr 30 06:00:56 2025 GMT
Subject: CN=d7dcd2091d22fdeaa2db35f1ab3a67c919daf1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:5e:09:11:59:5d:f5:dc:bc:d8:d5:41:7c:
5d:88:b3:fb:6c:c9:0c:b2:47:d2:b2:21:f5:f2:68:
31:af:09:aa:94:ff:50:0b:07:8c:27:ee:60:0c:63:
52:5a:01:9d:bb:21:8c:8f:67:0c:c6:28:a9:ed:25:
cb:b9:fe:04:16:66:7b:7c:95:0d:8e:17:b3:67:98:
26:6b:24:e7:2d:bd:f0:22:2f:61:b1:bb:9a:63:d3:
16:32:98:12:29:25:65:e5:a2:b7:9a:92:f1:2f:fe:
ab:62:df:68:80:c3:be:51:20:30:74:70:eb:87:01:
6e:c2:87:de:8f:e5:da:10:41:3b:01:00:5a:8e:bd:
d9:dd:5f:26:6e:ee:c8:46:7c:ba:af:9e:9c:4a:e0:
c4:42:2b:af:77:d3:67:e6:ec:67:7b:1b:cb:b3:c1:
01:8e:2f:b7:39:2d:99:f7:f5:d8:93:69:7b:41:05:
ed:d1:f6:c8:c3:a0:25:99:4a:27:71:62:9d:b9:0a:
cf:1b:4e:fc:ee:31:6c:76:3a:43:a4:18:1c:f3:0e:
c1:33:ed:2d:90:05:65:e9:17:83:9f:6a:51:d7:63:
e7:62:d0:d0:c8:48:d8:9b:6c:0f:fa:31:4b:0a:e4:
15:99:6e:cd:09:23:97:14:ad:9c:91:21:cc:7c:97:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:D2:09:1D:22:FD:EA:A2:DB:35:F1:AB:3A:67:C9:19:DA:F1:C5
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:41:db:7e:e2:28:7e:aa:b3:fc:3a:77:59:c6:ae:fe:4f:66:
f3:d9:13:39:49:59:17:54:66:34:b3:9c:42:13:4f:15:2d:25:
ba:51:83:a5:00:c8:02:2e:78:79:42:12:97:3e:5f:fd:b1:7c:
45:04:1a:d9:f7:ae:6e:8a:eb:02:70:ed:5c:c5:7e:bb:9b:15:
09:41:e4:78:15:0d:74:2d:a0:20:81:ad:7f:68:d8:7d:39:30:
99:0d:e7:9d:68:b4:e2:be:9e:fb:99:51:fc:70:18:a0:06:d4:
9a:3b:71:b4:2f:7e:af:a2:1d:8f:0e:07:96:54:dd:5c:93:e1:
d6:5e:90:86:0d:3e:4b:af:50:c8:a1:3b:d4:e8:13:6d:f8:59:
ec:af:b8:f5:f2:57:aa:62:91:a2:9c:d5:21:43:97:10:e3:3e:
c3:92:63:6d:00:61:24:32:46:4d:b6:8f:02:87:34:f5:ea:dd:
4f:64:a3:92:1b:56:e6:0c:0f:fc:9e:37:04:53:24:4c:da:26:
8f:9c:be:cf:17:59:a4:06:7b:3e:15:24:08:d3:3e:b4:c4:71:
3f:15:90:a1:12:da:2a:9a:46:10:a3:0f:84:09:1b:0a:50:ce:
88:06:8c:db:5b:57:84:ec:52:88:fd:be:7c:da:27:4a:37:2c:
3e:9a:f2:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIlmeiRt9qc1/xnQh+wYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1
ZDViOTQwHhcNMjUwNDI5MDYwMDU2WhcNMjUwNDMwMDYwMDU2WjAzMTEwLwYDVQQD
EyhkN2RjZDIwOTFkMjJmZGVhYTJkYjM1ZjFhYjNhNjdjOTE5ZGFmMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVVeCRFZXfXcvNjVQXxdiLP7bMkM
skfSsiH18mgxrwmqlP9QCweMJ+5gDGNSWgGduyGMj2cMxiip7SXLuf4EFmZ7fJUN
jhezZ5gmayTnLb3wIi9hsbuaY9MWMpgSKSVl5aK3mpLxL/6rYt9ogMO+USAwdHDr
hwFuwofej+XaEEE7AQBajr3Z3V8mbu7IRny6r56cSuDEQiuvd9Nn5uxnexvLs8EB
ji+3OS2Z9/XYk2l7QQXt0fbIw6AlmUoncWKduQrPG0787jFsdjpDpBgc8w7BM+0t
kAVl6ReDn2pR12PnYtDQyEjYm2wP+jFLCuQVmW7NCSOXFK2ckSHMfJcGLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfc0gkdIv3qots18as6Z8kZ2vHFMB8GA1UdIwQY
MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt
ZDNkMzBlYmMzNmFjLzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj
LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEHbfuIo
fqqz/Dp3Wcau/k9m89kTOUlZF1RmNLOcQhNPFS0lulGDpQDIAi54eUISlz5f/bF8
RQQa2feuborrAnDtXMV+u5sVCUHkeBUNdC2gIIGtf2jYfTkwmQ3nnWi04r6e+5lR
/HAYoAbUmjtxtC9+r6Idjw4HllTdXJPh1l6Qhg0+S69QyKE71OgTbfhZ7K+49fJX
qmKRopzVIUOXEOM+w5JjbQBhJDJGTbaPAoc09erdT2SjkhtW5gwP/J43BFMkTNom
j5y+zxdZpAZ7PhUkCNM+tMRxPxWQoRLaKppGEKMPhAkbClDOiAaM21tXhOxSiP2+
fNonSjcsPprykw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:24:40 2025 by rpki-client