Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File: dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier: EOeFY8E0Pkwp2cLQrs+CfH05gNeDdA2sjhPzzpKvevU=
Subject key identifier: A0:35:BE:01:4F:E9:15:1E:D4:CF:EC:43:BA:CD:DB:E0:0C:71:76:1C
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer: /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial: 01967755BA3292D2E139477FDB2B37D49D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 13:00:29 +0000
Manifest this update: Sun 27 Apr 2025 13:00:29 +0000
Manifest next update: Mon 28 Apr 2025 13:00:29 +0000
Files and hashes: 1: UdkvXpXGLdhITVh5jtCCMBnxb7M.roa (hash: HifSo99m/eGKn8WJh44GwrCR837RJMUrmbV81B/JjSg=)
2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: bhiWG4fMEEYkB6OsQ2G5uJqK5r7Z20cBEJO9vZqyd04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:ba:32:92:d2:e1:39:47:7f:db:2b:37:d4:9d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
Validity
Not Before: Apr 27 13:00:29 2025 GMT
Not After : Apr 28 13:00:29 2025 GMT
Subject: CN=a035be014fe9151ed4cfec43bacddbe00c71761c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:4f:3b:01:1c:09:47:bc:4d:80:6a:1b:d0:
33:a7:91:3c:bc:cb:1e:ed:e9:60:0e:55:68:5a:f6:
bc:11:75:1e:fe:e8:a7:00:f9:e8:23:b4:ef:94:ac:
9a:fc:ba:f5:3f:d1:f6:45:54:b7:f2:89:d3:d5:54:
2d:41:ad:83:1c:18:dd:05:87:3d:1a:06:65:d2:85:
7b:42:48:52:4b:28:f3:f0:b2:f0:2a:cf:dc:c7:4f:
a0:50:d8:a0:58:6e:49:61:26:a1:e0:be:0b:6f:3c:
1f:2e:ef:9b:b0:94:37:34:1d:70:92:dc:06:b9:ec:
bf:fa:33:0e:f9:e4:ff:60:8a:52:8a:2a:fa:a6:65:
0f:98:86:05:a8:a9:f8:b3:3c:a9:2b:95:7e:a2:b6:
15:f1:c3:b4:3e:0c:8b:6f:77:92:90:b4:f8:73:58:
1b:7d:f9:f9:b7:2b:19:ca:8a:33:49:61:1a:b3:dd:
15:7b:47:c1:7e:d2:fb:93:6a:69:a9:30:c4:ac:0e:
62:dc:d5:2d:93:a8:c7:fb:34:45:c0:ff:ef:97:a8:
a2:6a:77:a4:ae:19:99:3a:96:dc:ed:c7:4d:9c:ac:
0e:25:c0:30:1b:da:86:3d:63:2a:04:90:26:53:ac:
c6:a6:f5:d4:5e:10:b2:25:48:5b:f1:8d:46:6d:33:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:35:BE:01:4F:E9:15:1E:D4:CF:EC:43:BA:CD:DB:E0:0C:71:76:1C
X509v3 Authority Key Identifier:
keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:08:03:25:56:68:d5:0c:8e:cb:fb:a8:67:2d:a9:b9:a7:c1:
b9:c9:7d:82:5f:8c:9b:38:d4:19:98:44:87:ed:5f:95:65:02:
44:81:b8:fd:b9:34:9c:84:c9:9c:1d:ee:87:fb:1c:54:f0:5d:
ce:15:af:2e:5f:76:cd:bb:2f:2e:16:dc:d2:87:69:8d:36:b3:
ed:b9:ae:d1:07:7d:4e:db:db:4c:e4:80:41:c9:50:19:36:e9:
f5:1f:87:70:ac:55:b2:15:0e:79:9b:ce:54:2b:4a:72:52:5b:
45:b4:b3:a6:c2:18:ef:63:4b:7e:50:01:62:0e:29:d8:18:1f:
65:7b:ec:e0:cf:59:0f:0e:1e:4c:28:1b:eb:42:03:6c:e7:17:
5e:26:ce:2b:ea:55:27:de:3f:c0:b4:23:83:2e:61:ea:f9:50:
2f:12:1c:7d:1a:55:0d:ed:16:77:a0:3e:df:6d:38:88:13:f4:
27:b3:13:88:48:63:7e:e3:db:7a:6f:09:a6:64:79:52:ae:bc:
dc:ad:ff:50:27:ef:91:7b:e9:c5:83:3d:b2:08:4f:ec:3f:c6:
60:dd:a2:ab:2d:d5:2a:9a:ed:d9:8c:ff:0b:d2:d0:c3:85:21:
89:92:3a:8b:cd:b1:6b:ae:bb:e3:5c:10:59:a2:7c:f2:1f:50:
3e:63:6a:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3VboyktLhOUd/2ys31J1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWFjZmQ2NDljOGVlYWQ4NTUxOTQyNzgxZmExNmY2OGRi
ZDEwZjMwHhcNMjUwNDI3MTMwMDI5WhcNMjUwNDI4MTMwMDI5WjAzMTEwLwYDVQQD
EyhhMDM1YmUwMTRmZTkxNTFlZDRjZmVjNDNiYWNkZGJlMDBjNzE3NjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiZPOwEcCUe8TYBqG9Azp5E8vMse
7elgDlVoWva8EXUe/uinAPnoI7TvlKya/Lr1P9H2RVS38onT1VQtQa2DHBjdBYc9
GgZl0oV7QkhSSyjz8LLwKs/cx0+gUNigWG5JYSah4L4LbzwfLu+bsJQ3NB1wktwG
uey/+jMO+eT/YIpSiir6pmUPmIYFqKn4szypK5V+orYV8cO0PgyLb3eSkLT4c1gb
ffn5tysZyoozSWEas90Ve0fBftL7k2ppqTDErA5i3NUtk6jH+zRFwP/vl6iianek
rhmZOpbc7cdNnKwOJcAwG9qGPWMqBJAmU6zGpvXUXhCyJUhb8Y1GbTPQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA1vgFP6RUe1M/sQ7rN2+AMcXYcMB8GA1UdIwQY
MBaAFHYaz9ZJyO6thVGUJ4H6FvaNvRDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWIt
YzczMjAxZGY5OTk1LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWItYzczMjAxZGY5OTk1
LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASggDJVZo
1QyOy/uoZy2puafBucl9gl+MmzjUGZhEh+1flWUCRIG4/bk0nITJnB3uh/scVPBd
zhWvLl92zbsvLhbc0odpjTaz7bmu0Qd9TtvbTOSAQclQGTbp9R+HcKxVshUOeZvO
VCtKclJbRbSzpsIY72NLflABYg4p2BgfZXvs4M9ZDw4eTCgb60IDbOcXXibOK+pV
J94/wLQjgy5h6vlQLxIcfRpVDe0Wd6A+3204iBP0J7MTiEhjfuPbem8JpmR5Uq68
3K3/UCfvkXvpxYM9sghP7D/GYN2iqy3VKprt2Yz/C9LQw4UhiZI6i82xa66741wQ
WaJ88h9QPmNqSg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:47:23 2025 by rpki-client