Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: uE4S4yVA+Qp41ShzFm8GiRdYF2yyuqPjWOCXy4eqpfY=
Subject key identifier: D7:72:FB:F5:03:E9:82:B5:98:7A:72:86:0B:0B:D6:D8:22:1C:BA:3C
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 01968B4B39D74101FD0B11B25DB671327172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1256
Signing time: Thu 01 May 2025 10:01:25 +0000
Manifest this update: Thu 01 May 2025 10:01:25 +0000
Manifest next update: Fri 02 May 2025 10:01:25 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: AoKuEOUKhrtoep9bIZy83u8nuyeUg6v6eQGL6QihHF8=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4b:39:d7:41:01:fd:0b:11:b2:5d:b6:71:32:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: May 1 10:01:25 2025 GMT
Not After : May 2 10:01:25 2025 GMT
Subject: CN=d772fbf503e982b5987a72860b0bd6d8221cba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:90:9c:91:59:75:17:fa:0b:17:d9:ef:96:
2d:c2:5a:c1:aa:d8:d9:68:13:f4:6a:49:c7:a6:f1:
8e:53:fd:11:7a:28:2e:6b:24:6c:43:1c:18:6f:fb:
6d:0d:af:60:2c:6d:9a:36:57:96:c4:39:27:fe:a1:
7f:06:00:63:ee:b9:fa:e6:96:a8:b7:df:c1:e9:ba:
08:4e:54:b7:b2:37:65:70:f0:eb:b3:fc:b6:02:02:
f0:cf:d8:80:93:ae:29:f0:23:16:30:0a:b7:7d:c7:
7c:1f:77:10:49:1b:06:bc:69:65:a9:db:52:a5:40:
be:08:53:69:97:85:98:6d:96:f6:97:9a:a2:4d:d5:
0a:ea:61:6b:46:37:d7:f8:b3:85:c0:53:40:e7:ef:
a6:d1:dd:14:21:b6:6d:5e:4c:4f:1e:24:d1:59:0f:
85:ef:f4:b5:54:fe:f0:00:a4:f2:7d:84:aa:9d:60:
87:66:ec:3d:fd:a3:6b:c2:ab:eb:8c:82:0f:63:b4:
a7:02:7d:30:e8:e5:40:b2:79:77:2f:88:25:de:8e:
e6:e9:ab:da:5e:7b:8a:4d:85:82:02:69:66:9b:8e:
19:bc:e6:3e:1b:be:db:53:0c:1f:65:69:e3:45:f2:
f4:b4:20:a2:7b:54:e9:c0:43:cf:3e:0d:e2:de:29:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:72:FB:F5:03:E9:82:B5:98:7A:72:86:0B:0B:D6:D8:22:1C:BA:3C
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:34:50:71:ac:80:61:44:7c:6f:5f:04:02:0e:63:50:28:29:
8f:4e:bf:a6:9a:45:00:9f:fd:ed:06:81:60:b8:7f:27:61:b5:
6d:11:32:a7:c4:04:95:24:e3:3b:b0:93:9e:7d:e9:78:15:73:
80:c8:56:24:1c:aa:16:82:8c:fa:8b:2b:81:92:24:40:02:63:
5d:ad:b5:0c:2d:a3:97:9c:b7:d1:30:8f:18:ba:32:5b:c8:4a:
b5:b0:0b:63:34:3d:a8:b7:9c:5d:e7:be:ca:52:cd:13:71:90:
d5:36:7d:81:5e:af:01:a3:85:13:15:5a:60:72:9b:b1:30:79:
d5:b2:2c:30:de:b7:3f:5d:29:30:fe:28:7c:3c:bf:70:3d:94:
20:8b:1b:98:b1:6f:81:22:4c:fb:74:f4:b0:f8:3f:af:69:1b:
8e:01:a9:ab:7e:e0:e4:b4:e9:1a:30:14:6d:5c:5a:48:ed:f1:
bb:59:09:14:c5:03:57:31:13:f3:6c:95:a4:16:fa:6c:82:91:
c9:69:69:98:93:93:0b:5d:4d:3f:5d:ff:ab:a6:b8:63:1b:72:
e8:ee:79:9e:3c:61:77:13:e7:fc:1f:f4:ba:f9:a9:ea:a2:58:
a3:53:07:22:a7:ff:af:04:7c:39:ca:6f:f6:9a:e7:2f:94:ae:
5e:be:0c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLSznXQQH9CxGyXbZxMnFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDM4MjI3NGI0NTc2NjJiYTcyZDE4ODY1NzNhMmM3ZGNj
MzU0ODYwHhcNMjUwNTAxMTAwMTI1WhcNMjUwNTAyMTAwMTI1WjAzMTEwLwYDVQQD
EyhkNzcyZmJmNTAzZTk4MmI1OTg3YTcyODYwYjBiZDZkODIyMWNiYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqSQnJFZdRf6CxfZ75YtwlrBqtjZ
aBP0aknHpvGOU/0ReiguayRsQxwYb/ttDa9gLG2aNleWxDkn/qF/BgBj7rn65pao
t9/B6boITlS3sjdlcPDrs/y2AgLwz9iAk64p8CMWMAq3fcd8H3cQSRsGvGllqdtS
pUC+CFNpl4WYbZb2l5qiTdUK6mFrRjfX+LOFwFNA5++m0d0UIbZtXkxPHiTRWQ+F
7/S1VP7wAKTyfYSqnWCHZuw9/aNrwqvrjIIPY7SnAn0w6OVAsnl3L4gl3o7m6ava
XnuKTYWCAmlmm44ZvOY+G77bUwwfZWnjRfL0tCCie1TpwEPPPg3i3ik7OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdy+/UD6YK1mHpyhgsL1tgiHLo8MB8GA1UdIwQY
MBaAFNvTgidLRXZiunLRiGVzosfcw1SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMt
YzY1NDM1NmIwN2M0LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMtYzY1NDM1NmIwN2M0
LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTRQcayA
YUR8b18EAg5jUCgpj06/pppFAJ/97QaBYLh/J2G1bREyp8QElSTjO7CTnn3peBVz
gMhWJByqFoKM+osrgZIkQAJjXa21DC2jl5y30TCPGLoyW8hKtbALYzQ9qLecXee+
ylLNE3GQ1TZ9gV6vAaOFExVaYHKbsTB51bIsMN63P10pMP4ofDy/cD2UIIsbmLFv
gSJM+3T0sPg/r2kbjgGpq37g5LTpGjAUbVxaSO3xu1kJFMUDVzET82yVpBb6bIKR
yWlpmJOTC11NP13/q6a4Yxty6O55njxhdxPn/B/0uvmp6qJYo1MHIqf/rwR8Ocpv
9prnL5SuXr4MXg==
-----END CERTIFICATE-----
Generated at Thu May 1 17:08:56 2025 by rpki-client