Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: sW/aurt7di4g86B9IjCpoJCglX6g6DO1QVVoZWIYGLw=
Subject key identifier: 49:1B:11:33:EC:EF:4E:06:EB:54:14:01:32:63:09:B3:25:09:73:DE
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 0196783157BD733EC476ADF6ACBD5D8E6D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 17:00:21 +0000
Manifest this update: Sun 27 Apr 2025 17:00:21 +0000
Manifest next update: Mon 28 Apr 2025 17:00:21 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: 4aAJeR+Mw+9fMPGDa/NyykpU+YkeIMalyCup85I15UI=)
2: YeUbav6EAp2mAnn2v72RBK_mFZw.roa (hash: 6lsjmApYWIJWgcJbH7Xr/EBHcstui66uMy/hUDB8r3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:57:bd:73:3e:c4:76:ad:f6:ac:bd:5d:8e:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Apr 27 17:00:21 2025 GMT
Not After : Apr 28 17:00:21 2025 GMT
Subject: CN=491b1133ecef4e06eb541401326309b3250973de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:ce:2c:f8:05:37:b2:04:1d:5e:1f:16:a7:
88:32:d0:52:4b:ca:e3:85:55:45:7f:0c:33:4a:84:
0a:b6:f6:c1:90:39:a3:52:0a:fb:db:97:b1:44:c4:
4a:6b:5b:e6:99:52:c8:bc:c5:38:a0:94:26:d3:23:
63:80:32:d9:a5:72:04:4a:02:a7:0a:c5:ff:b1:5c:
fa:71:7c:ce:bd:37:ea:bf:64:14:5c:00:d8:dd:c2:
98:8b:78:e5:ef:23:a0:65:f1:56:3e:79:ae:f5:7f:
66:ab:85:eb:88:65:01:c3:53:03:19:40:ff:e0:d8:
8c:2b:0c:70:33:f3:85:6e:1e:b9:fe:04:6b:89:c9:
8a:a1:1f:8b:61:5e:76:17:13:02:a8:fd:60:fb:a8:
15:76:c6:5d:c5:86:dc:68:17:8e:8c:f5:51:54:f7:
48:27:b0:b0:e2:05:85:04:1b:ce:0f:90:d2:81:91:
67:ce:87:65:e0:18:e9:d0:15:62:e0:d4:83:68:f1:
d3:80:90:dc:2a:01:4d:34:6a:a9:ba:1c:9e:ab:38:
14:1c:5d:e4:a2:11:37:32:31:0b:ad:41:f6:a2:4c:
f7:00:b1:d8:ac:a5:b8:6d:23:32:7e:06:4c:06:67:
24:7f:a5:8b:b0:45:3d:86:a2:73:65:ef:53:57:82:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1B:11:33:EC:EF:4E:06:EB:54:14:01:32:63:09:B3:25:09:73:DE
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:58:6a:17:9f:4a:2e:70:36:a5:3c:62:5c:f3:ed:8f:2a:b6:
ff:dd:2d:8a:af:74:4a:ec:2c:3b:c6:09:dc:96:a7:66:11:3c:
51:fc:ef:54:03:73:22:92:51:f1:ad:6a:96:83:6d:d2:2c:c2:
f0:58:01:45:d5:dc:ca:a9:ed:0e:a8:4d:fc:ad:40:54:47:f4:
ca:e9:23:94:dd:58:80:f3:57:ab:1e:8a:f2:aa:68:cd:5b:a0:
3e:eb:e9:9d:ed:a6:b7:05:11:89:86:84:ea:f6:07:5d:94:6c:
db:13:cb:93:b1:17:2f:e2:74:bb:1a:fc:90:b6:98:db:72:14:
f1:3b:8e:ce:af:21:40:ac:62:3b:ec:2e:f6:8f:5f:67:b8:86:
ba:9b:a8:b9:f9:5d:18:90:f0:f3:ca:ab:a1:2b:ed:7e:f2:c8:
74:6b:21:fb:75:f2:ba:66:da:ff:ff:f0:93:9a:10:76:a4:58:
45:87:0d:77:73:c0:8b:9c:b9:f6:14:3b:7b:29:f5:76:0c:3a:
f1:99:dd:81:75:6e:67:19:eb:98:3f:5c:c4:f3:25:35:31:92:
88:94:52:10:e8:a5:3d:51:59:ba:3a:ef:6f:e2:ec:6b:c1:70:
d9:7c:6d:c5:bc:70:53:85:6c:3f:9a:9c:78:a3:dc:c2:5c:08:
2e:05:b4:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4MVe9cz7Edq32rL1djm1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWJjMWIxNGYwZDk2NTNmNTE0ZWMxNjc3NzFiNzc1NTlh
YzYzY2MwHhcNMjUwNDI3MTcwMDIxWhcNMjUwNDI4MTcwMDIxWjAzMTEwLwYDVQQD
Eyg0OTFiMTEzM2VjZWY0ZTA2ZWI1NDE0MDEzMjYzMDliMzI1MDk3M2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+3OLPgFN7IEHV4fFqeIMtBSS8rj
hVVFfwwzSoQKtvbBkDmjUgr725exRMRKa1vmmVLIvMU4oJQm0yNjgDLZpXIESgKn
CsX/sVz6cXzOvTfqv2QUXADY3cKYi3jl7yOgZfFWPnmu9X9mq4XriGUBw1MDGUD/
4NiMKwxwM/OFbh65/gRricmKoR+LYV52FxMCqP1g+6gVdsZdxYbcaBeOjPVRVPdI
J7Cw4gWFBBvOD5DSgZFnzodl4Bjp0BVi4NSDaPHTgJDcKgFNNGqpuhyeqzgUHF3k
ohE3MjELrUH2okz3ALHYrKW4bSMyfgZMBmckf6WLsEU9hqJzZe9TV4LH8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkbETPs704G61QUATJjCbMlCXPeMB8GA1UdIwQY
MBaAFAybwbFPDZZT9RTsFndxt3VZrGPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgt
MWQxOTQ5OWQwOThmLzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgtMWQxOTQ5OWQwOThm
LzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1hqF59K
LnA2pTxiXPPtjyq2/90tiq90SuwsO8YJ3JanZhE8UfzvVANzIpJR8a1qloNt0izC
8FgBRdXcyqntDqhN/K1AVEf0yukjlN1YgPNXqx6K8qpozVugPuvpne2mtwURiYaE
6vYHXZRs2xPLk7EXL+J0uxr8kLaY23IU8TuOzq8hQKxiO+wu9o9fZ7iGupuoufld
GJDw88qroSvtfvLIdGsh+3Xyumba///wk5oQdqRYRYcNd3PAi5y59hQ7eyn1dgw6
8ZndgXVuZxnrmD9cxPMlNTGSiJRSEOilPVFZujrvb+Lsa8Fw2XxtxbxwU4VsP5qc
eKPcwlwILgW0MA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:58:36 2025 by rpki-client