Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier: I9/V2eNW9Zhx3DlY0152Cgtg4oZI+beCzFQxNYd5FuA=
Subject key identifier: 18:A9:EA:9F:2D:96:55:36:35:BB:CA:CB:D0:17:C6:AA:39:34:B0:DC
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 01968FCC13AD0A9E745C94001D5875649AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number: 1032
Signing time: Fri 02 May 2025 07:00:38 +0000
Manifest this update: Fri 02 May 2025 07:00:38 +0000
Manifest next update: Sat 03 May 2025 07:00:38 +0000
Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: QqLrXThdIffKejbdcSsw3+vVDjnRZaQ7xaqLcm4CjCI=)
2: jM6ObOeKnGJ-XMKGH2l4W5ZCd2A.roa (hash: KTQ2TAHXzAzojs4IsYPpcpBSdUKcZYE1gqliIFvrHcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:13:ad:0a:9e:74:5c:94:00:1d:58:75:64:9a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: May 2 07:00:38 2025 GMT
Not After : May 3 07:00:38 2025 GMT
Subject: CN=18a9ea9f2d96553635bbcacbd017c6aa3934b0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:83:34:4b:59:fc:df:b3:ea:24:9e:d9:58:9e:
93:1b:66:cc:90:21:60:84:5a:84:a2:06:32:44:c8:
b9:d7:3d:01:19:ae:53:59:12:c0:e4:18:d1:a9:2d:
78:aa:85:46:1f:5c:ba:61:52:53:1c:e6:53:1a:bb:
36:ef:1c:bf:a5:55:da:6b:88:97:23:db:52:b4:2c:
d4:4b:26:df:c8:13:20:99:a2:73:2f:fa:aa:76:0c:
f3:29:44:0e:4c:b4:b8:c8:92:08:0e:bd:3b:ed:0c:
31:d5:43:1d:dd:fe:0a:d0:39:fc:0d:f1:8e:ad:79:
ff:e0:0d:83:b2:30:51:bf:2f:83:ae:df:ae:2c:ea:
19:f8:65:e4:da:88:b9:f3:b0:3f:83:34:b7:8e:66:
0c:27:38:4e:f4:d6:f8:c4:e6:a1:46:91:8f:4a:9c:
73:7b:14:09:73:b1:50:75:b0:9e:a7:d1:46:95:2b:
da:6e:d7:50:b1:6d:bf:a8:ff:2d:d7:ad:97:de:bf:
a2:4d:b4:89:63:27:a9:de:51:2b:d5:e4:28:f1:14:
ea:fa:9c:bb:bf:1a:68:ed:86:94:51:94:dc:7d:bb:
82:6d:68:cf:cd:2a:cb:a2:8a:fd:8a:a6:89:65:01:
30:95:89:23:ea:d7:50:9f:98:9b:cc:3a:5d:75:bd:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A9:EA:9F:2D:96:55:36:35:BB:CA:CB:D0:17:C6:AA:39:34:B0:DC
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:44:10:cf:08:b1:5a:41:e9:14:e4:e3:18:b4:5f:4a:5a:fa:
06:5d:8e:76:82:96:8a:e8:87:45:78:37:74:76:a4:24:e6:e4:
4e:d1:80:a6:99:02:79:28:d6:dd:7c:57:2c:d8:02:b6:ec:bc:
4e:05:ff:d2:e5:90:4b:8f:d3:39:d0:ae:6b:c3:e1:01:f7:b2:
ea:72:db:cb:5b:98:22:4c:ad:50:8a:ab:1f:ea:d0:a4:79:7f:
98:6e:c0:8c:a4:d0:e0:f0:1c:44:10:24:65:d9:26:18:14:00:
07:48:19:7b:6b:9a:0c:36:c4:bb:1f:21:bd:30:0f:9a:ed:bb:
1a:ab:18:4b:e1:fc:b4:1e:9a:e5:e6:0d:09:1c:76:21:8b:b7:
c7:bd:59:e0:58:c3:6f:2b:d9:fb:86:b7:24:0a:7d:b3:19:2c:
42:fe:d8:34:d2:64:77:4f:ff:d8:ee:af:c2:ec:50:69:f0:72:
d7:a2:02:7a:fa:a8:41:42:66:a7:40:67:d8:e2:4c:38:0d:32:
a1:ac:cf:37:32:4e:83:ae:a5:7b:1b:6b:cd:6c:ae:1c:e9:f4:
cc:5c:c2:a1:49:91:bc:0e:49:44:b3:a0:48:4d:23:e4:da:72:
d3:99:4c:94:70:4c:e4:1a:c7:9a:02:95:3c:7f:cc:81:da:39:
9e:05:1a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPzBOtCp50XJQAHVh1ZJqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGJmMzFmZDkzNzljYWI1YzUwYWZkMzkyYTJlZTkwNTcx
ODgzNWYwHhcNMjUwNTAyMDcwMDM4WhcNMjUwNTAzMDcwMDM4WjAzMTEwLwYDVQQD
EygxOGE5ZWE5ZjJkOTY1NTM2MzViYmNhY2JkMDE3YzZhYTM5MzRiMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIM0S1n837PqJJ7ZWJ6TG2bMkCFg
hFqEogYyRMi51z0BGa5TWRLA5BjRqS14qoVGH1y6YVJTHOZTGrs27xy/pVXaa4iX
I9tStCzUSybfyBMgmaJzL/qqdgzzKUQOTLS4yJIIDr077Qwx1UMd3f4K0Dn8DfGO
rXn/4A2DsjBRvy+Drt+uLOoZ+GXk2oi587A/gzS3jmYMJzhO9Nb4xOahRpGPSpxz
exQJc7FQdbCep9FGlSvabtdQsW2/qP8t162X3r+iTbSJYyep3lEr1eQo8RTq+py7
vxpo7YaUUZTcfbuCbWjPzSrLoor9iqaJZQEwlYkj6tdQn5ibzDpddb05LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBip6p8tllU2NbvKy9AXxqo5NLDcMB8GA1UdIwQY
MBaAFNHb8x/ZN5yrXFCv05Ki7pBXGINfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUt
OGUwYjNmNTg5N2I5LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81ZDgzMjctZjAxZC00ZjdhLWI5NTUtOGUwYjNmNTg5N2I5
LzEvMGR2ekg5azNuS3RjVUtfVGtxTHVrRmNZZzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUQQzwix
WkHpFOTjGLRfSlr6Bl2OdoKWiuiHRXg3dHakJObkTtGAppkCeSjW3XxXLNgCtuy8
TgX/0uWQS4/TOdCua8PhAfey6nLby1uYIkytUIqrH+rQpHl/mG7AjKTQ4PAcRBAk
ZdkmGBQAB0gZe2uaDDbEux8hvTAPmu27GqsYS+H8tB6a5eYNCRx2IYu3x71Z4FjD
byvZ+4a3JAp9sxksQv7YNNJkd0//2O6vwuxQafBy16ICevqoQUJmp0Bn2OJMOA0y
oazPNzJOg66lextrzWyuHOn0zFzCoUmRvA5JRLOgSE0j5Npy05lMlHBM5BrHmgKV
PH/Mgdo5ngUa+A==
-----END CERTIFICATE-----
Generated at Fri May 2 09:36:47 2025 by rpki-client