Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: hgoUByAVa3RoNnelRZbAMSbXfJf04/PJdTqVGiXUMtU=
Subject key identifier: 06:A3:BC:25:E7:9B:E7:D9:54:CE:A6:61:E9:5E:5B:FC:4D:4F:A5:E4
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 019679E9D0BEDA8BBAF8357C8F26584CDCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 01EB
Signing time: Mon 28 Apr 2025 01:01:28 +0000
Manifest this update: Mon 28 Apr 2025 01:01:28 +0000
Manifest next update: Tue 29 Apr 2025 01:01:28 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: +4Hw5TSuvYIC2f9lOAwga1xr5E9B27U5GRVzfkLACtQ=)
2: rtEx3Op6iiS7UiDW09qCJKnWeDg.roa (hash: 2wI3hDpLjlRGiKeHXtROGiZLVSVg2X+p2EcwYyyykiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:d0:be:da:8b:ba:f8:35:7c:8f:26:58:4c:dc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Apr 28 01:01:28 2025 GMT
Not After : Apr 29 01:01:28 2025 GMT
Subject: CN=06a3bc25e79be7d954cea661e95e5bfc4d4fa5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:ba:cc:f5:b9:13:c0:d8:77:71:7b:52:0e:
18:05:33:67:82:18:69:2f:73:4a:82:dc:78:eb:8f:
ef:ae:40:15:46:bd:bf:b1:9e:96:b0:40:ee:96:f8:
47:e4:70:56:77:63:f3:18:89:71:44:1a:74:68:f5:
e5:43:d7:03:bf:72:4b:96:66:c7:6f:92:28:08:87:
2e:fa:fd:eb:2d:80:c9:5a:5a:b0:0f:ba:a1:56:50:
eb:13:e1:44:97:4c:f9:7d:c0:df:51:45:1c:5c:13:
a6:51:51:ef:aa:b7:0c:5a:2f:cf:1a:91:bd:82:59:
27:22:6e:33:54:36:f1:c5:a4:b0:d3:30:e5:19:fd:
1c:6e:e9:0a:21:29:f1:d1:41:10:bb:75:07:19:07:
ed:20:20:c7:e1:aa:f0:7f:08:bb:f8:e1:55:a0:2b:
6a:8f:c7:c9:2e:60:e7:1d:9e:c3:53:f1:af:bd:c0:
d5:3c:f5:43:0b:84:ff:e1:70:e7:f0:4a:45:ed:7a:
3c:8f:d1:8b:41:e9:cd:cd:ab:f9:72:94:45:f6:00:
6e:97:64:fe:7d:a7:77:4a:5f:9f:ef:4b:3f:6d:3e:
14:9e:dc:99:92:c7:66:99:f4:1d:65:5d:31:b7:52:
53:22:81:6e:d1:85:d3:e3:73:f5:be:31:94:ca:18:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A3:BC:25:E7:9B:E7:D9:54:CE:A6:61:E9:5E:5B:FC:4D:4F:A5:E4
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:84:f3:93:a6:9d:6b:a9:ee:68:f7:47:31:5d:39:e6:98:49:
d8:12:7f:b7:9f:89:f2:75:c9:29:50:18:f1:94:c6:ac:7f:c9:
80:c0:0b:93:b8:35:ec:a5:c6:a2:9c:5e:85:53:0e:d9:a4:56:
33:d9:71:1e:83:fd:30:d7:8c:60:4c:c7:40:5b:4c:35:ec:f8:
29:66:1c:c4:b0:73:c7:b7:5b:87:2e:be:d9:eb:ba:66:8a:2a:
9e:34:d9:15:ee:03:3d:fa:6e:96:8e:c2:37:47:b0:68:06:d1:
37:6a:4a:94:86:88:39:01:f9:84:db:c9:83:c6:4e:a0:16:d5:
aa:36:e5:fd:1c:ae:55:bb:48:13:f2:fc:42:a0:01:c4:37:1b:
b4:b3:46:42:74:91:50:61:bb:9e:e1:03:fe:ee:fe:15:c9:7c:
1b:fb:da:ae:80:85:7d:da:b0:d5:f7:0d:83:bf:68:01:46:dd:
ed:59:79:93:00:08:7b:c8:bb:e9:df:45:82:41:ab:2e:5f:a0:
43:60:37:d2:81:f8:d2:9d:d2:e0:13:cc:94:cf:b8:a8:62:c6:
7f:fa:52:1b:cc:16:cf:d6:1d:82:b4:4d:91:1d:a3:19:cf:5d:
7c:79:42:7e:b2:2b:f1:cf:c0:e2:31:20:60:9d:77:35:17:57:
be:29:cb:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56dC+2ou6+DV8jyZYTNzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDAxOWVkMmNiNjIxOTdiMGNhOTZlMWU3MTYxYzk4NjQ5
MDg2YWYwHhcNMjUwNDI4MDEwMTI4WhcNMjUwNDI5MDEwMTI4WjAzMTEwLwYDVQQD
EygwNmEzYmMyNWU3OWJlN2Q5NTRjZWE2NjFlOTVlNWJmYzRkNGZhNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsse6zPW5E8DYd3F7Ug4YBTNnghhp
L3NKgtx464/vrkAVRr2/sZ6WsEDulvhH5HBWd2PzGIlxRBp0aPXlQ9cDv3JLlmbH
b5IoCIcu+v3rLYDJWlqwD7qhVlDrE+FEl0z5fcDfUUUcXBOmUVHvqrcMWi/PGpG9
glknIm4zVDbxxaSw0zDlGf0cbukKISnx0UEQu3UHGQftICDH4arwfwi7+OFVoCtq
j8fJLmDnHZ7DU/GvvcDVPPVDC4T/4XDn8EpF7Xo8j9GLQenNzav5cpRF9gBul2T+
fad3Sl+f70s/bT4UntyZksdmmfQdZV0xt1JTIoFu0YXT43P1vjGUyhiiDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAajvCXnm+fZVM6mYeleW/xNT6XkMB8GA1UdIwQY
MBaAFA4AGe0stiGXsMqW4ecWHJhkkIavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEt
MDU5YjAwNmYzOWQ5LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEtMDU5YjAwNmYzOWQ5
LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoTzk6ad
a6nuaPdHMV055phJ2BJ/t5+J8nXJKVAY8ZTGrH/JgMALk7g17KXGopxehVMO2aRW
M9lxHoP9MNeMYEzHQFtMNez4KWYcxLBzx7dbhy6+2eu6ZooqnjTZFe4DPfpulo7C
N0ewaAbRN2pKlIaIOQH5hNvJg8ZOoBbVqjbl/RyuVbtIE/L8QqABxDcbtLNGQnSR
UGG7nuED/u7+Fcl8G/varoCFfdqw1fcNg79oAUbd7Vl5kwAIe8i76d9FgkGrLl+g
Q2A30oH40p3S4BPMlM+4qGLGf/pSG8wWz9YdgrRNkR2jGc9dfHlCfrIr8c/A4jEg
YJ13NRdXvinLGg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:34:03 2025 by rpki-client