Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: QxL+roa0lar0Nm95jB63SkcORDDhiXtA7uJg5filoVY=
Subject key identifier: DD:BC:75:32:62:A7:5C:B2:BB:4E:5C:13:6C:01:BD:5E:C6:EE:49:81
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 0196760BF9F566F402881E0DC534F8F302DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 091B
Signing time: Sun 27 Apr 2025 07:00:18 +0000
Manifest this update: Sun 27 Apr 2025 07:00:18 +0000
Manifest next update: Mon 28 Apr 2025 07:00:18 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: gjlMT2/TVGUP4DgJnETaKouqFXBrprIeORZzzQqIWZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:f9:f5:66:f4:02:88:1e:0d:c5:34:f8:f3:02:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Apr 27 07:00:18 2025 GMT
Not After : Apr 28 07:00:18 2025 GMT
Subject: CN=ddbc753262a75cb2bb4e5c136c01bd5ec6ee4981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:6d:a2:a4:8c:6d:84:08:f1:a9:ad:6e:e7:
cc:5f:4e:46:5b:11:f9:f6:e3:0a:2e:3d:e4:74:7d:
ca:77:c3:99:a7:e2:83:83:92:87:88:b5:fa:17:8a:
0e:7a:c3:d2:e4:7c:e4:6b:ee:89:92:97:82:0f:ab:
d8:f8:73:68:a0:23:66:fb:a1:dd:59:c1:0d:de:89:
bc:33:de:b2:fe:c1:a3:aa:3a:bd:c1:4a:90:91:66:
3c:3e:8a:4d:15:9c:7f:5e:bb:d3:da:ab:b2:73:1c:
8d:5f:60:8f:69:d0:9b:b7:36:f8:ac:69:8b:8f:52:
bd:eb:38:94:f6:e7:24:ae:14:eb:f1:a9:33:57:3e:
0d:78:01:7a:73:01:5e:ca:f1:fe:51:5e:4d:4a:29:
7d:61:1d:44:4c:f9:a1:2a:96:c2:4d:84:ac:5b:50:
0f:cf:e0:43:0e:26:6d:d2:b8:f6:6e:b1:99:9e:a1:
42:a5:a0:e3:59:81:4c:c8:5c:4d:d7:f8:27:9c:16:
84:37:86:f9:ba:56:e8:7d:f7:2a:58:75:48:df:d3:
9d:25:d5:b8:5c:46:11:e6:a3:78:f2:ca:4e:ba:25:
78:42:69:23:08:1a:d2:92:35:af:88:35:a6:5e:55:
8a:6e:fb:fa:3b:6c:5a:4d:ac:a3:ff:cb:31:65:a6:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BC:75:32:62:A7:5C:B2:BB:4E:5C:13:6C:01:BD:5E:C6:EE:49:81
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f9:22:8f:9c:b2:88:47:90:43:24:16:a7:42:8b:39:43:4d:
71:85:52:fd:4b:27:35:fc:da:1c:86:dd:43:c8:e5:82:0c:95:
f3:f7:eb:fa:d1:9d:30:98:bf:e6:82:0b:74:a3:74:9a:3e:04:
07:e3:49:eb:be:08:e4:71:a6:5a:ec:04:31:c0:67:c4:6d:96:
00:05:9b:a7:ac:20:45:35:db:40:e4:fc:30:08:c2:69:fc:39:
35:f7:79:f0:f8:6f:d0:e2:c6:cc:d1:b0:6c:cc:22:8b:5d:a4:
94:b3:7c:8a:3d:65:e5:b1:7c:8a:33:fd:f3:4a:6a:09:67:8c:
34:0a:33:8e:21:1e:5c:b9:64:9a:00:54:49:74:f3:04:63:0b:
86:e1:0b:a6:3f:f0:68:07:16:e7:67:fa:13:dd:fd:75:13:38:
1e:f4:55:0a:65:15:9f:7c:98:51:b0:d2:04:0e:54:c2:56:99:
21:e3:cf:12:d4:82:7d:32:69:b4:eb:04:99:61:9b:1f:80:d4:
c6:8b:b6:55:6d:f3:6c:ea:f7:d8:f1:b5:28:77:db:0f:af:5b:
a4:f7:2e:90:99:04:34:00:e4:e9:90:3c:d2:8d:6b:1d:3a:25:
51:4c:d2:e8:91:8a:a1:92:d3:4c:e1:f5:e4:7a:e4:04:c6:ef:
c0:5a:99:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2C/n1ZvQCiB4NxTT48wLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWQxYjZjY2E1MzA5MWY2ZjkwZDFhNTk1MGNlYjZkNTNi
MDNhYWQwHhcNMjUwNDI3MDcwMDE4WhcNMjUwNDI4MDcwMDE4WjAzMTEwLwYDVQQD
EyhkZGJjNzUzMjYyYTc1Y2IyYmI0ZTVjMTM2YzAxYmQ1ZWM2ZWU0OTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUltoqSMbYQI8amtbufMX05GWxH5
9uMKLj3kdH3Kd8OZp+KDg5KHiLX6F4oOesPS5Hzka+6JkpeCD6vY+HNooCNm+6Hd
WcEN3om8M96y/sGjqjq9wUqQkWY8PopNFZx/XrvT2quycxyNX2CPadCbtzb4rGmL
j1K96ziU9uckrhTr8akzVz4NeAF6cwFeyvH+UV5NSil9YR1ETPmhKpbCTYSsW1AP
z+BDDiZt0rj2brGZnqFCpaDjWYFMyFxN1/gnnBaEN4b5ulboffcqWHVI39OdJdW4
XEYR5qN48spOuiV4QmkjCBrSkjWviDWmXlWKbvv6O2xaTayj/8sxZaZAkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN28dTJip1yyu05cE2wBvV7G7kmBMB8GA1UdIwQY
MBaAFNLtG2zKUwkfb5DRpZUM621TsDqtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUt
OTQzN2U1ZmU2ZGI0LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUtOTQzN2U1ZmU2ZGI0
LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfkij5yy
iEeQQyQWp0KLOUNNcYVS/UsnNfzaHIbdQ8jlggyV8/fr+tGdMJi/5oILdKN0mj4E
B+NJ674I5HGmWuwEMcBnxG2WAAWbp6wgRTXbQOT8MAjCafw5Nfd58Phv0OLGzNGw
bMwii12klLN8ij1l5bF8ijP980pqCWeMNAozjiEeXLlkmgBUSXTzBGMLhuELpj/w
aAcW52f6E939dRM4HvRVCmUVn3yYUbDSBA5UwlaZIePPEtSCfTJptOsEmWGbH4DU
xou2VW3zbOr32PG1KHfbD69bpPcukJkENADk6ZA80o1rHTolUUzS6JGKoZLTTOH1
5HrkBMbvwFqZtg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:01 2025 by rpki-client