Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: E+Tf7N0YtuSlSCTAbmRTWlc4HwgrzrDRyolrNAagyyg=
Subject key identifier: E4:0C:E7:A3:6B:66:08:B6:56:02:B3:B5:A6:D1:CA:AC:56:FD:1C:5E
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 01967E6AD88B8862DB8744EB8F236413F194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0BA3
Signing time: Mon 28 Apr 2025 22:00:53 +0000
Manifest this update: Mon 28 Apr 2025 22:00:53 +0000
Manifest next update: Tue 29 Apr 2025 22:00:53 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: PKdGfWPfjY926/bd91FXBlcAqjWtcUzBOetQgrixQec=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:d8:8b:88:62:db:87:44:eb:8f:23:64:13:f1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Apr 28 22:00:53 2025 GMT
Not After : Apr 29 22:00:53 2025 GMT
Subject: CN=e40ce7a36b6608b65602b3b5a6d1caac56fd1c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:61:0c:4f:b1:64:7a:e7:f4:04:62:c3:b4:
70:6f:e4:7a:41:d3:fd:43:c7:27:b3:e0:8c:b0:f8:
a5:4a:90:d8:7a:92:1b:4a:fc:f3:1f:8c:d7:a6:c1:
58:37:f0:af:b3:5b:b9:d4:26:99:b4:b0:62:8d:a8:
f6:d4:05:7c:c6:71:56:b5:49:32:ae:bf:3f:fa:18:
2c:85:dc:62:0b:17:5c:b0:62:cf:40:d1:bc:27:38:
48:3f:9d:2f:d7:26:d1:60:0d:c4:be:ff:57:e4:87:
1c:49:6d:34:8e:d4:33:5b:5a:54:32:e8:a9:69:82:
87:5e:72:bf:6d:58:0c:c2:86:15:55:21:f8:5b:9a:
2a:81:50:9c:b9:76:d9:f9:bc:e6:49:10:70:64:6e:
52:7d:4a:40:cf:55:db:fa:5b:21:5d:c7:62:1c:c0:
4c:fe:95:60:65:2b:8e:62:a3:6e:98:0b:b4:a9:e3:
e9:3f:68:0b:05:1f:5d:9f:df:04:c0:a2:25:f4:2d:
bf:1b:77:39:5c:a3:7e:03:17:f8:42:2f:89:ba:20:
78:f4:54:84:3b:07:83:6a:1b:64:2c:32:b5:18:3b:
00:71:e6:ae:0e:51:b5:45:c4:9a:b9:22:f5:37:e0:
b6:4a:88:f2:20:ba:a3:a6:42:34:0b:e2:2b:09:bd:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0C:E7:A3:6B:66:08:B6:56:02:B3:B5:A6:D1:CA:AC:56:FD:1C:5E
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a3:a3:32:48:69:a3:5a:7d:50:f8:51:ed:0e:44:d7:a0:b8:
49:03:fa:3c:64:9d:bf:40:97:27:87:94:f3:89:55:2c:2f:93:
59:cf:5d:37:e4:b9:51:f3:27:06:2e:66:51:14:ad:24:74:a2:
f5:b2:62:92:ab:07:05:8d:ba:dc:6b:94:c3:0b:16:8a:0d:fc:
2a:11:24:ae:fa:d0:2a:ae:c2:00:77:20:4c:6a:38:55:62:87:
d4:4a:a3:2a:e5:2e:b2:3c:d4:80:9b:b1:2b:8b:89:93:bc:f7:
2c:ba:91:af:97:80:3a:e0:86:5c:43:60:ac:68:cd:76:2a:1c:
73:a0:35:3f:74:7c:4c:67:ef:f5:8a:d5:58:85:d5:e0:79:78:
32:a7:50:c8:2c:6c:e9:dd:8e:36:37:4b:ef:1d:7c:95:82:17:
1c:ef:c1:ec:f0:08:03:86:c3:e5:e5:b8:91:54:24:23:7a:92:
ac:5b:60:2c:1f:af:82:ad:15:39:f6:6f:5c:33:b2:bc:65:90:
77:db:97:39:68:5c:63:62:e7:c5:5c:1e:02:8c:6b:1e:cc:c6:
94:db:c1:fd:a5:f2:71:cc:f8:df:ba:d0:b9:bc:1a:1b:22:33:
97:42:e8:46:f4:c2:87:96:5d:9d:cb:27:51:e3:49:d6:ec:e4:
e2:4b:89:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+atiLiGLbh0TrjyNkE/GUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDkwMmEwN2ZjN2Q0OGUwZGIyOWJmZmJlM2FiMTA1NDNm
YzE0NjUwHhcNMjUwNDI4MjIwMDUzWhcNMjUwNDI5MjIwMDUzWjAzMTEwLwYDVQQD
EyhlNDBjZTdhMzZiNjYwOGI2NTYwMmIzYjVhNmQxY2FhYzU2ZmQxYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFphDE+xZHrn9ARiw7Rwb+R6QdP9
Q8cns+CMsPilSpDYepIbSvzzH4zXpsFYN/Cvs1u51CaZtLBijaj21AV8xnFWtUky
rr8/+hgshdxiCxdcsGLPQNG8JzhIP50v1ybRYA3Evv9X5IccSW00jtQzW1pUMuip
aYKHXnK/bVgMwoYVVSH4W5oqgVCcuXbZ+bzmSRBwZG5SfUpAz1Xb+lshXcdiHMBM
/pVgZSuOYqNumAu0qePpP2gLBR9dn98EwKIl9C2/G3c5XKN+Axf4Qi+JuiB49FSE
OweDahtkLDK1GDsAceauDlG1RcSauSL1N+C2SojyILqjpkI0C+IrCb2ERQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQM56NrZgi2VgKztabRyqxW/RxeMB8GA1UdIwQY
MBaAFNXZAqB/x9SODbKb/746sQVD/BRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEt
YTZjZWMyNWI4MDA2LzEvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEtYTZjZWMyNWI4MDA2
LzEvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6OjMkhp
o1p9UPhR7Q5E16C4SQP6PGSdv0CXJ4eU84lVLC+TWc9dN+S5UfMnBi5mURStJHSi
9bJikqsHBY263GuUwwsWig38KhEkrvrQKq7CAHcgTGo4VWKH1EqjKuUusjzUgJux
K4uJk7z3LLqRr5eAOuCGXENgrGjNdiocc6A1P3R8TGfv9YrVWIXV4Hl4MqdQyCxs
6d2ONjdL7x18lYIXHO/B7PAIA4bD5eW4kVQkI3qSrFtgLB+vgq0VOfZvXDOyvGWQ
d9uXOWhcY2LnxVweAoxrHszGlNvB/aXyccz437rQubwaGyIzl0LoRvTCh5Zdncsn
UeNJ1uzk4kuJOQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:59:16 2025 by rpki-client