Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File: DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier: IIbuCPPbC3ENEEEQJrYxiHrzUKgDHQqzbqJcLgVH4QQ=
Subject key identifier: EB:6A:08:9A:19:39:87:E5:B6:99:D8:5E:D7:11:BF:3A:39:4A:52:C1
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer: /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial: 019677561F817086E05AC5BC8AC4D37E1241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 13:00:54 +0000
Manifest this update: Sun 27 Apr 2025 13:00:54 +0000
Manifest next update: Mon 28 Apr 2025 13:00:54 +0000
Files and hashes: 1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: NSXE+JPG/k1/71P1uYyqLLpybNHz03kJ9QYi4clwQsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:1f:81:70:86:e0:5a:c5:bc:8a:c4:d3:7e:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Validity
Not Before: Apr 27 13:00:54 2025 GMT
Not After : Apr 28 13:00:54 2025 GMT
Subject: CN=eb6a089a193987e5b699d85ed711bf3a394a52c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:57:d4:32:a9:fe:ad:df:fb:4f:66:3c:89:
cb:10:c6:0c:25:9e:95:88:bb:27:77:57:cf:31:cf:
44:91:8e:d2:54:32:fd:34:dc:b1:51:c2:5f:50:fa:
0c:31:e7:ae:ea:65:27:13:b3:59:8f:cf:4a:d9:89:
bf:6b:10:20:ba:65:bd:4f:40:87:45:8d:54:88:db:
90:93:73:05:9b:e3:d4:81:36:7e:14:9a:18:ea:bf:
b3:34:9d:79:cc:16:3a:80:9c:55:cc:94:5b:30:71:
05:16:1c:c5:82:06:05:0e:17:12:d5:20:04:e0:cb:
72:fd:9a:3c:8d:70:96:ee:31:62:a6:f6:9a:cd:5d:
ef:fd:78:d7:c5:07:78:79:18:06:f7:7c:9d:0c:64:
7a:b2:7f:62:b3:45:c1:62:6e:ec:55:0d:9c:d1:8b:
06:d6:f9:6b:e9:89:16:16:7a:53:01:f3:49:b5:84:
40:d4:d0:69:da:13:aa:d3:df:da:c9:75:2c:a1:d5:
a9:9e:bc:c6:77:5a:65:dd:84:28:91:b2:a0:76:77:
09:7c:4e:d9:81:01:36:af:78:18:1a:16:38:c1:c5:
e5:e2:d1:df:87:b4:4c:2e:ff:13:55:b6:28:b6:af:
26:59:42:12:1d:e4:77:87:5b:86:6e:9c:b8:b1:3c:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:08:9A:19:39:87:E5:B6:99:D8:5E:D7:11:BF:3A:39:4A:52:C1
X509v3 Authority Key Identifier:
keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:43:5f:43:7e:bd:34:5b:cb:96:7e:4f:df:4f:43:60:44:48:
6b:fa:d4:c9:18:df:ae:05:7d:9e:dd:ad:1b:ac:0a:4e:b5:1a:
0e:4d:7a:c3:f1:2c:d6:fa:b1:f4:45:44:2e:97:cb:43:d6:45:
3b:62:44:89:46:6d:26:b5:d6:fb:8d:cb:75:d1:7c:49:93:cf:
99:6b:e2:65:7e:ec:32:75:d9:bd:f2:53:ad:77:fc:33:9d:eb:
e7:41:e8:20:5e:66:6d:f5:42:5f:9a:92:1b:7f:ea:05:24:1c:
ca:e6:b7:3d:81:bd:ba:8b:90:73:29:e8:73:f0:7a:b9:41:41:
f3:94:fb:e2:e0:5d:3a:d2:38:c5:25:95:94:88:f7:60:4a:cb:
ca:b7:b7:23:69:d1:c5:21:98:2d:6e:fb:b6:59:70:d4:0b:86:
30:69:53:b0:18:71:94:30:2a:c2:a0:cd:52:1a:db:3a:b4:6b:
78:90:01:eb:d6:ec:40:25:ec:1c:20:e9:d5:ef:e3:39:ad:7b:
89:37:0d:53:f3:2f:77:8d:fc:f0:e2:3a:c7:3b:41:82:4b:99:
48:1d:6b:14:43:88:4c:14:c0:35:e9:9f:6e:f5:5f:df:6c:d3:
b8:b8:0c:2d:62:ff:16:92:d0:f4:2c:f1:36:b7:c3:f3:d4:2f:
f2:aa:7e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3Vh+BcIbgWsW8isTTfhJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDgxZDM1ODhjN2UxMGE4OTliMGQwNDgxNTY2ZTZkOTQ4
ZGFkZDAwHhcNMjUwNDI3MTMwMDU0WhcNMjUwNDI4MTMwMDU0WjAzMTEwLwYDVQQD
EyhlYjZhMDg5YTE5Mzk4N2U1YjY5OWQ4NWVkNzExYmYzYTM5NGE1MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFdX1DKp/q3f+09mPInLEMYMJZ6V
iLsnd1fPMc9EkY7SVDL9NNyxUcJfUPoMMeeu6mUnE7NZj89K2Ym/axAgumW9T0CH
RY1UiNuQk3MFm+PUgTZ+FJoY6r+zNJ15zBY6gJxVzJRbMHEFFhzFggYFDhcS1SAE
4Mty/Zo8jXCW7jFipvaazV3v/XjXxQd4eRgG93ydDGR6sn9is0XBYm7sVQ2c0YsG
1vlr6YkWFnpTAfNJtYRA1NBp2hOq09/ayXUsodWpnrzGd1pl3YQokbKgdncJfE7Z
gQE2r3gYGhY4wcXl4tHfh7RMLv8TVbYotq8mWUISHeR3h1uGbpy4sTy4+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtqCJoZOYfltpnYXtcRvzo5SlLBMB8GA1UdIwQY
MBaAFA3YHTWIx+EKiZsNBIFWbm2Uja3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lODZmNWYtMTE1ZS00ZTkyLWFjMzkt
Yzc2YjhkYjVhZDE0LzEvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lODZmNWYtMTE1ZS00ZTkyLWFjMzktYzc2YjhkYjVhZDE0
LzEvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkNfQ369
NFvLln5P309DYERIa/rUyRjfrgV9nt2tG6wKTrUaDk16w/Es1vqx9EVELpfLQ9ZF
O2JEiUZtJrXW+43LddF8SZPPmWviZX7sMnXZvfJTrXf8M53r50HoIF5mbfVCX5qS
G3/qBSQcyua3PYG9uouQcynoc/B6uUFB85T74uBdOtI4xSWVlIj3YErLyre3I2nR
xSGYLW77tllw1AuGMGlTsBhxlDAqwqDNUhrbOrRreJAB69bsQCXsHCDp1e/jOa17
iTcNU/Mvd4388OI6xztBgkuZSB1rFEOITBTANemfbvVf32zTuLgMLWL/FpLQ9Czx
NrfD89Qv8qp+Gw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:39:08 2025 by rpki-client