Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: EBX0UatI6EziP4CGZewGV3J14FqnBhjJxnXVBwB4YEI=
Subject key identifier: 84:E6:00:23:43:21:6D:FB:8B:9F:A7:38:AF:D0:F8:7E:6A:7F:2A:E7
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 01967F0F68910B5CEF745579EEA5819373C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 1302
Signing time: Tue 29 Apr 2025 01:00:38 +0000
Manifest this update: Tue 29 Apr 2025 01:00:38 +0000
Manifest next update: Wed 30 Apr 2025 01:00:38 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: RGfkCWrlDgxyDAp5Wyen7CGdWT3hWzhqzIn1/yQ+RCo=)
2: wC7Ohmh2aveKOZ7_Cl4a1vLomLo.roa (hash: hPiN8yhRbkkwhBqX7IPJBoamojlDhfcUtcDIIbpri30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:68:91:0b:5c:ef:74:55:79:ee:a5:81:93:73:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Apr 29 01:00:38 2025 GMT
Not After : Apr 30 01:00:38 2025 GMT
Subject: CN=84e6002343216dfb8b9fa738afd0f87e6a7f2ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:7b:66:b9:fa:92:95:82:48:3d:bc:7f:b9:
a8:3b:bc:88:25:b1:3c:85:77:47:9a:e9:2a:f1:d0:
01:af:01:f6:72:35:34:cf:63:fc:bb:69:06:98:35:
df:b9:b7:35:34:61:6f:af:5d:61:48:9f:aa:54:6d:
0a:b9:cd:ee:19:7b:96:fd:75:58:52:db:ee:bd:30:
a4:09:4f:69:80:2d:1e:7f:23:cd:65:fa:1c:22:81:
1b:97:9c:80:21:50:d2:5f:7d:07:34:ce:0b:fe:53:
ba:80:8d:a8:14:c4:e3:f4:19:4d:52:b2:2f:e9:4d:
31:06:eb:e7:1d:96:9d:af:cf:58:b0:e0:3e:7a:15:
fd:4b:20:b0:16:3a:e7:a7:cd:17:9b:35:9f:44:02:
3f:eb:3d:67:3f:81:12:1a:17:9a:83:b6:6a:e4:cb:
69:08:b8:62:07:93:b7:bb:ed:de:56:af:f6:da:7b:
2e:34:23:2c:aa:da:7f:92:94:2f:45:83:21:5a:9a:
f0:e9:df:a7:38:e6:db:6f:f7:b8:78:20:91:cc:6b:
45:cc:75:8c:8e:a2:53:94:a6:3c:bf:09:79:74:d0:
45:59:25:d0:20:e0:f5:f7:e3:cc:64:e3:56:cb:a9:
8f:52:d8:07:14:00:cf:3a:5a:a2:f4:97:06:82:c1:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E6:00:23:43:21:6D:FB:8B:9F:A7:38:AF:D0:F8:7E:6A:7F:2A:E7
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9b:11:c7:86:9d:63:3b:bb:af:9a:6e:7c:61:d6:42:ac:77:
b5:bc:61:88:ef:f0:44:92:e6:ea:1d:bc:11:36:77:9d:03:68:
4e:b2:bb:cc:fc:1c:63:b3:7a:6c:aa:d9:d1:40:d2:3d:b7:e8:
1e:cc:23:79:51:20:5c:a4:c0:80:ba:34:86:8f:4a:7f:c0:3c:
49:f6:0f:4f:b8:17:4b:35:b3:57:21:05:e5:86:ca:92:ca:a5:
a5:d6:ba:df:44:4b:2f:72:23:d6:19:0e:dd:ff:9c:d6:6d:28:
99:61:2d:1e:99:06:15:a0:be:e9:f9:98:ca:f8:31:85:77:54:
35:c0:fb:c7:5d:90:27:94:3b:2d:1a:46:31:3c:8a:92:d8:1d:
7d:4d:b6:b4:01:33:e4:69:4b:72:60:32:65:28:66:f9:1a:fe:
7b:1a:2a:d8:3e:53:11:3d:c1:ce:f5:71:6e:e6:46:64:b2:19:
0d:5d:36:49:b5:35:ca:1b:a3:ca:be:13:a8:97:0b:65:a1:e4:
e7:23:f0:ca:d2:dc:96:4d:c4:a7:70:16:77:b7:48:9b:b5:b8:
7b:de:0c:2e:4a:97:52:7f:16:36:4f:2f:3c:39:cc:5a:02:3c:
50:f5:12:5f:39:ed:0f:53:6e:3a:89:c7:a1:ae:69:10:4f:c1:
63:8c:a2:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/D2iRC1zvdFV57qWBk3PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTFkYjQ2NmNmODA4MjA2MjkzZDA3ZTY1ZjIxMjFmZWI0
OWEzM2UwHhcNMjUwNDI5MDEwMDM4WhcNMjUwNDMwMDEwMDM4WjAzMTEwLwYDVQQD
Eyg4NGU2MDAyMzQzMjE2ZGZiOGI5ZmE3MzhhZmQwZjg3ZTZhN2YyYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM17Zrn6kpWCSD28f7moO7yIJbE8
hXdHmukq8dABrwH2cjU0z2P8u2kGmDXfubc1NGFvr11hSJ+qVG0Kuc3uGXuW/XVY
UtvuvTCkCU9pgC0efyPNZfocIoEbl5yAIVDSX30HNM4L/lO6gI2oFMTj9BlNUrIv
6U0xBuvnHZadr89YsOA+ehX9SyCwFjrnp80XmzWfRAI/6z1nP4ESGheag7Zq5Mtp
CLhiB5O3u+3eVq/22nsuNCMsqtp/kpQvRYMhWprw6d+nOObbb/e4eCCRzGtFzHWM
jqJTlKY8vwl5dNBFWSXQIOD19+PMZONWy6mPUtgHFADPOlqi9JcGgsFMPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITmACNDIW37i5+nOK/Q+H5qfyrnMB8GA1UdIwQY
MBaAFNCh20Zs+AggYpPQfmXyEh/rSaM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMt
NDc2MmIwMTBlZjFlLzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMtNDc2MmIwMTBlZjFl
LzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZsRx4ad
Yzu7r5pufGHWQqx3tbxhiO/wRJLm6h28ETZ3nQNoTrK7zPwcY7N6bKrZ0UDSPbfo
HswjeVEgXKTAgLo0ho9Kf8A8SfYPT7gXSzWzVyEF5YbKksqlpda630RLL3Ij1hkO
3f+c1m0omWEtHpkGFaC+6fmYyvgxhXdUNcD7x12QJ5Q7LRpGMTyKktgdfU22tAEz
5GlLcmAyZShm+Rr+exoq2D5TET3BzvVxbuZGZLIZDV02SbU1yhujyr4TqJcLZaHk
5yPwytLclk3Ep3AWd7dIm7W4e94MLkqXUn8WNk8vPDnMWgI8UPUSXzntD1NuOonH
oa5pEE/BY4yiRg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:31:14 2025 by rpki-client