Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File: 00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier: S7uY81KuY2bb0V1wCIOlgxb1BRJRZZC2UIv5bDd+Hfg=
Subject key identifier: 57:6E:D6:86:2A:7E:7F:99:50:F6:41:E1:E8:46:D0:BF:1C:17:1C:EC
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 01968390D5DE63071961D791731C441A203C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number: 1376
Signing time: Tue 29 Apr 2025 22:00:29 +0000
Manifest this update: Tue 29 Apr 2025 22:00:29 +0000
Manifest next update: Wed 30 Apr 2025 22:00:29 +0000
Files and hashes: 1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: 4piuBRo9ZfpXXwclfVyTG8yFjseYVFE+KNkXbuspa/c=)
2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:d5:de:63:07:19:61:d7:91:73:1c:44:1a:20:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Apr 29 22:00:29 2025 GMT
Not After : Apr 30 22:00:29 2025 GMT
Subject: CN=576ed6862a7e7f9950f641e1e846d0bf1c171cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:85:09:9c:2d:9f:56:7c:7f:ea:46:46:f9:
e7:fe:60:19:19:57:a2:5f:8d:a3:ee:ec:34:62:5f:
9e:b0:d1:83:a1:43:95:04:7e:06:4c:bd:d0:bb:06:
d0:e1:d9:5d:2c:5f:5b:b4:89:24:de:b2:e1:8d:f3:
52:e5:a2:47:1e:e6:d9:37:62:61:71:55:e7:4f:a6:
84:b7:ff:7d:2d:58:1c:7f:42:a6:c2:47:10:72:39:
d8:b1:09:45:03:5d:1e:c1:b5:36:d4:f0:e2:3b:b7:
a5:e4:62:9f:ef:48:4c:25:14:6c:8b:3a:4d:4b:91:
bc:ed:0c:d7:74:ca:9f:5c:5e:b7:5e:0c:89:23:75:
79:42:b5:eb:ee:24:20:98:66:fc:55:b4:d8:6f:f0:
51:98:87:35:ce:c9:87:d9:78:d3:2f:ed:b0:23:8d:
bc:8a:76:ff:c0:f6:e9:1b:63:92:55:b7:22:e5:48:
76:95:fc:31:94:e8:d8:33:2e:f1:03:32:e5:89:14:
ad:9a:bd:db:46:45:0b:a9:71:f2:8a:99:67:b6:49:
d4:72:c9:07:74:32:35:a9:f9:70:6e:dd:04:62:cc:
be:d4:4b:75:9f:ac:78:5e:90:b7:97:ea:ca:0e:27:
14:d4:f4:3f:13:ff:65:cc:8d:0a:ec:a0:a3:47:af:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6E:D6:86:2A:7E:7F:99:50:F6:41:E1:E8:46:D0:BF:1C:17:1C:EC
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a4:dd:60:61:79:3e:2f:d5:ae:5e:59:82:0d:ac:82:3b:46:
19:42:22:f0:3f:e0:d9:03:2b:8b:bb:c4:d0:33:fb:9d:68:b3:
89:75:0a:4f:48:93:55:66:57:a9:4d:d0:b5:fc:47:31:55:4f:
a3:ba:f9:11:80:0d:5b:58:1b:76:88:5c:da:6c:10:df:32:e8:
2f:f5:4a:e3:48:96:e4:ee:2c:0b:76:35:c3:93:fc:ad:bd:06:
2d:3c:d6:1b:a7:73:cb:09:3c:8a:50:cc:b1:3c:2b:07:bd:5f:
bf:47:c3:d5:01:75:fa:9d:1a:a7:df:3d:4b:e5:f5:f1:14:0c:
e4:70:be:17:04:ab:aa:00:ee:fb:75:73:ce:9c:71:53:d4:05:
cb:af:f2:1e:bb:0e:4b:7c:5b:70:df:7b:2b:b5:ff:ea:e8:a2:
70:81:36:94:ed:84:c7:99:89:ed:d3:87:64:95:8b:cf:4e:72:
41:5a:7d:4b:34:49:87:a5:34:59:af:72:c2:ed:89:f6:57:7c:
8f:df:0b:4b:2b:63:06:94:70:e3:46:bc:0a:4a:a8:36:ae:b5:
18:10:8d:f5:18:2b:f9:21:e3:ff:90:66:70:04:a1:70:c6:c5:
b1:b4:d0:82:f0:e1:9a:3d:7b:93:41:71:68:5a:d1:22:40:73:
ab:ba:74:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkNXeYwcZYdeRcxxEGiA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDQwM2EzMGIzMTM3NTlhZjk2MjZhZmQ4ZDNkMjM4MDVm
Y2M4MGUwHhcNMjUwNDI5MjIwMDI5WhcNMjUwNDMwMjIwMDI5WjAzMTEwLwYDVQQD
Eyg1NzZlZDY4NjJhN2U3Zjk5NTBmNjQxZTFlODQ2ZDBiZjFjMTcxY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVaFCZwtn1Z8f+pGRvnn/mAZGVei
X42j7uw0Yl+esNGDoUOVBH4GTL3QuwbQ4dldLF9btIkk3rLhjfNS5aJHHubZN2Jh
cVXnT6aEt/99LVgcf0KmwkcQcjnYsQlFA10ewbU21PDiO7el5GKf70hMJRRsizpN
S5G87QzXdMqfXF63XgyJI3V5QrXr7iQgmGb8VbTYb/BRmIc1zsmH2XjTL+2wI428
inb/wPbpG2OSVbci5Uh2lfwxlOjYMy7xAzLliRStmr3bRkULqXHyiplntknUcskH
dDI1qflwbt0EYsy+1Et1n6x4XpC3l+rKDicU1PQ/E/9lzI0K7KCjR6+02QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdu1oYqfn+ZUPZB4ehG0L8cFxzsMB8GA1UdIwQY
MBaAFNNEA6MLMTdZr5Ymr9jT0jgF/MgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBRRG93c3hOMW12bGlhdjJOUFNPQVg4eUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81Njc4Y2QtZDc3Yi00NTYzLWFmZTMt
YjQwNTI3ZGQ0M2ZjLzEvMDBRRG93c3hOMW12bGlhdjJOUFNPQVg4eUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81Njc4Y2QtZDc3Yi00NTYzLWFmZTMtYjQwNTI3ZGQ0M2Zj
LzEvMDBRRG93c3hOMW12bGlhdjJOUFNPQVg4eUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaTdYGF5
Pi/Vrl5Zgg2sgjtGGUIi8D/g2QMri7vE0DP7nWiziXUKT0iTVWZXqU3QtfxHMVVP
o7r5EYANW1gbdohc2mwQ3zLoL/VK40iW5O4sC3Y1w5P8rb0GLTzWG6dzywk8ilDM
sTwrB71fv0fD1QF1+p0ap989S+X18RQM5HC+FwSrqgDu+3VzzpxxU9QFy6/yHrsO
S3xbcN97K7X/6uiicIE2lO2Ex5mJ7dOHZJWLz05yQVp9SzRJh6U0Wa9ywu2J9ld8
j98LSytjBpRw40a8CkqoNq61GBCN9Rgr+SHj/5BmcAShcMbFsbTQgvDhmj17k0Fx
aFrRIkBzq7p0ew==
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:44:05 2025 by rpki-client