Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: CwiLi//4RsOXeW5rRREriBAnvDBtuTS+2UPaB6y33kk=
Subject key identifier: 48:AF:E4:25:1E:97:28:D6:8A:A0:81:43:EA:71:55:FF:F1:9E:23:74
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 0196729D7D99B40829D08A076CD96622FD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 1514
Signing time: Sat 26 Apr 2025 15:00:45 +0000
Manifest this update: Sat 26 Apr 2025 15:00:45 +0000
Manifest next update: Sun 27 Apr 2025 15:00:45 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: fHAlUppBGV09jVK60KKPpXWCzQoC7q9Et+6TmC3y3ko=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:7d:99:b4:08:29:d0:8a:07:6c:d9:66:22:fd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Apr 26 15:00:45 2025 GMT
Not After : Apr 27 15:00:45 2025 GMT
Subject: CN=48afe4251e9728d68aa08143ea7155fff19e2374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:86:20:4f:c9:0f:d1:c3:2e:94:db:f1:65:5c:
9b:bd:6d:dd:c3:47:b5:30:fa:57:48:9b:7a:40:c1:
d5:91:ef:0e:eb:83:68:67:c5:bf:53:77:68:27:e5:
8e:3a:5d:41:93:0f:51:b9:f4:71:bc:dc:c1:ab:ff:
3f:f0:1a:b1:42:c7:cb:99:84:56:80:6a:34:88:bc:
2a:ce:d1:77:8e:f3:b2:72:03:b6:7a:7f:b9:79:5a:
1f:65:b3:5f:54:a8:81:39:36:a6:b9:6f:10:aa:3d:
cd:92:85:77:6f:c1:4d:a0:fe:16:38:6b:54:56:27:
1b:b2:01:91:84:97:f1:62:7e:91:e0:7c:a1:ac:e1:
d9:5f:04:70:03:8c:7f:2e:5b:2b:78:19:d4:d1:f6:
dc:d6:ef:df:ad:d3:94:f0:ea:57:bc:f0:41:68:49:
2c:16:0a:43:62:6c:88:ee:1c:79:01:20:8e:76:d7:
2a:5d:5b:52:a4:d0:56:86:26:83:91:29:0c:1a:6d:
d3:27:8d:29:a7:8d:5d:14:a2:6c:d4:da:30:3c:d9:
e4:b7:a6:0f:3d:b3:99:a3:99:6f:ef:47:a7:da:25:
b3:26:20:db:fc:ff:c2:88:e5:96:cf:3d:2f:7e:90:
69:55:c3:53:8e:f0:54:e9:8a:f7:7f:1a:d0:20:a0:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AF:E4:25:1E:97:28:D6:8A:A0:81:43:EA:71:55:FF:F1:9E:23:74
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:86:39:06:18:51:aa:f3:c2:4c:2f:e3:2b:35:75:bb:c0:a6:
be:32:9e:32:c2:4c:95:6a:12:64:9e:1a:87:07:63:25:2c:23:
ea:f0:b4:2f:5b:df:a2:65:48:2e:82:5a:85:97:e4:f0:2d:19:
ff:51:48:3b:86:b7:b7:4a:2f:59:d9:11:63:65:97:7e:a4:d6:
6f:51:a0:55:ef:be:cb:9b:3e:3b:56:30:cf:c1:51:75:20:bb:
f6:34:67:7f:8f:a7:2a:67:c4:f0:0d:ce:47:c7:e8:46:28:34:
70:4f:b2:76:73:08:8c:8b:56:d0:1f:34:a4:f5:8d:f9:02:15:
ef:ab:3a:11:9f:2b:68:cf:b0:c7:e9:31:87:71:39:da:e2:83:
a4:54:d6:ae:25:ad:5c:5f:19:0b:92:ee:c3:c2:1a:bc:d6:9b:
5a:fd:45:52:48:88:60:21:3d:52:7a:98:7d:39:dc:3f:1a:79:
e7:45:61:91:72:a6:43:61:c2:d6:eb:92:08:b4:af:b1:3f:5a:
d4:c8:38:ed:c2:87:8e:cb:40:22:c3:06:63:14:b8:89:1c:26:
2f:5a:04:89:ac:19:f4:38:6f:8d:a9:27:8a:0e:f0:3f:0d:c2:
14:cc:bb:1b:ff:5a:e9:62:30:4e:f4:88:72:d1:d6:ba:7f:1e:
fb:c8:c8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynX2ZtAgp0IoHbNlmIv1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw
YTIxNzYwHhcNMjUwNDI2MTUwMDQ1WhcNMjUwNDI3MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg0OGFmZTQyNTFlOTcyOGQ2OGFhMDgxNDNlYTcxNTVmZmYxOWUyMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IYgT8kP0cMulNvxZVybvW3dw0e1
MPpXSJt6QMHVke8O64NoZ8W/U3doJ+WOOl1Bkw9RufRxvNzBq/8/8BqxQsfLmYRW
gGo0iLwqztF3jvOycgO2en+5eVofZbNfVKiBOTamuW8Qqj3NkoV3b8FNoP4WOGtU
VicbsgGRhJfxYn6R4HyhrOHZXwRwA4x/LlsreBnU0fbc1u/frdOU8OpXvPBBaEks
FgpDYmyI7hx5ASCOdtcqXVtSpNBWhiaDkSkMGm3TJ40pp41dFKJs1NowPNnkt6YP
PbOZo5lv70en2iWzJiDb/P/CiOWWzz0vfpBpVcNTjvBU6Yr3fxrQIKAsxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiv5CUelyjWiqCBQ+pxVf/xniN0MB8GA1UdIwQY
MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt
NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0
LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoY5BhhR
qvPCTC/jKzV1u8CmvjKeMsJMlWoSZJ4ahwdjJSwj6vC0L1vfomVILoJahZfk8C0Z
/1FIO4a3t0ovWdkRY2WXfqTWb1GgVe++y5s+O1Ywz8FRdSC79jRnf4+nKmfE8A3O
R8foRig0cE+ydnMIjItW0B80pPWN+QIV76s6EZ8raM+wx+kxh3E52uKDpFTWriWt
XF8ZC5Luw8IavNabWv1FUkiIYCE9UnqYfTncPxp550VhkXKmQ2HC1uuSCLSvsT9a
1Mg47cKHjstAIsMGYxS4iRwmL1oEiawZ9Dhvjaknig7wPw3CFMy7G/9a6WIwTvSI
ctHWun8e+8jIOA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:35:34 2025 by rpki-client