Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: dgWgow1uD4EMW49AcqvhzGm7S8aYa9xsaE4TM9ZyvxU=
Subject key identifier: 64:F7:D1:EC:7A:0D:04:1D:1A:86:B9:A8:CB:76:F6:B1:C8:E8:DC:17
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 01967378F5739925E756CB8145BC9892577D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 150B
Signing time: Sat 26 Apr 2025 19:00:28 +0000
Manifest this update: Sat 26 Apr 2025 19:00:28 +0000
Manifest next update: Sun 27 Apr 2025 19:00:28 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: 4Iz006+2J4Zzpqra7+kKUMu366bV4LZhJ1JajRjz4XI=)
2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:f5:73:99:25:e7:56:cb:81:45:bc:98:92:57:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Apr 26 19:00:28 2025 GMT
Not After : Apr 27 19:00:28 2025 GMT
Subject: CN=64f7d1ec7a0d041d1a86b9a8cb76f6b1c8e8dc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:05:d0:0b:f8:17:87:76:b2:40:0e:ce:7b:
a4:cd:84:5f:81:aa:5a:fb:a1:03:27:fb:89:f8:4e:
6e:6d:c7:a1:7d:30:9f:ec:bb:d7:c8:b3:e2:00:29:
c6:92:bb:93:11:35:ae:17:d5:ad:7a:1c:be:f7:10:
f4:1f:3d:c8:04:25:dc:a3:5a:44:24:94:76:3d:05:
76:92:36:c9:bc:80:a8:58:87:37:c1:9a:4d:81:90:
12:92:6a:b2:91:26:f9:f8:50:92:23:e5:7d:c0:38:
81:e8:d3:54:33:33:bd:59:95:d4:3d:ab:19:c0:67:
3b:8b:80:9b:7c:80:f8:11:77:ab:9f:3d:e1:98:3e:
99:8f:c1:a0:5d:d7:72:eb:23:e9:ef:20:ca:b9:06:
ca:22:77:ab:ee:dc:46:53:17:5d:55:d0:b3:3c:ca:
f6:42:4a:15:08:a2:b1:87:2f:40:af:95:83:cc:bb:
6c:42:5c:45:47:08:20:24:f1:4b:80:ce:f6:7e:89:
7d:af:67:bc:cd:ab:c8:bd:bb:28:b8:a2:fc:7f:64:
9f:a4:af:4d:22:7d:01:3b:c1:31:6a:71:e8:e7:71:
a5:25:bc:7b:c5:a1:61:18:f9:09:ff:e4:d6:77:f0:
9b:48:f4:51:a9:fc:81:73:5f:58:dd:f2:4a:e1:53:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F7:D1:EC:7A:0D:04:1D:1A:86:B9:A8:CB:76:F6:B1:C8:E8:DC:17
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e4:91:52:26:13:59:69:df:a3:83:a5:83:b6:af:27:b4:12:
30:67:b5:f7:86:2a:ce:cb:cb:cd:cb:fc:f7:86:e6:cb:d9:d3:
f5:70:db:95:5f:87:cc:e2:9d:66:bd:f2:ce:bc:34:08:8b:20:
50:32:5c:e5:c5:a8:0b:05:8f:06:df:f4:40:d6:2e:fa:d5:13:
e0:14:91:65:7a:9e:4b:65:e4:89:fe:d1:3a:d5:f4:bb:98:f4:
17:d5:bd:b8:90:ab:2a:43:45:f6:c1:74:47:1f:40:e7:6f:cf:
83:ea:e5:ad:84:44:92:b4:2b:2e:c1:55:82:da:5f:b8:f6:fc:
9d:dd:d7:87:95:5f:a9:1e:f8:62:7f:08:60:16:fc:0a:ad:96:
1f:77:74:88:3b:c3:64:e4:24:14:69:cd:7d:4a:a4:5a:a7:9b:
51:be:df:e9:99:98:ee:a8:fd:f3:ac:b1:17:98:3b:78:0c:16:
e4:3c:6f:d9:24:a7:70:61:cd:92:29:57:db:49:91:08:78:41:
0d:08:43:4d:4d:09:d0:38:af:67:b5:25:8e:d2:65:52:df:40:
af:27:a6:80:bd:5a:58:e3:ee:61:0d:f4:57:37:d0:33:fc:33:
a5:e5:1b:03:ef:b5:93:6c:2d:d2:3d:d8:18:6a:8e:44:2c:5a:
2e:32:63:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzePVzmSXnVsuBRbyYkld9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMmQ3YzIzOGU4OWRjZDUyZjZmYjIyOTZkZmE0NzU4YzYx
Yzk3YmUwHhcNMjUwNDI2MTkwMDI4WhcNMjUwNDI3MTkwMDI4WjAzMTEwLwYDVQQD
Eyg2NGY3ZDFlYzdhMGQwNDFkMWE4NmI5YThjYjc2ZjZiMWM4ZThkYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFkF0Av4F4d2skAOznukzYRfgapa
+6EDJ/uJ+E5ubcehfTCf7LvXyLPiACnGkruTETWuF9Wtehy+9xD0Hz3IBCXco1pE
JJR2PQV2kjbJvICoWIc3wZpNgZASkmqykSb5+FCSI+V9wDiB6NNUMzO9WZXUPasZ
wGc7i4CbfID4EXernz3hmD6Zj8GgXddy6yPp7yDKuQbKIner7txGUxddVdCzPMr2
QkoVCKKxhy9Ar5WDzLtsQlxFRwggJPFLgM72fol9r2e8zavIvbsouKL8f2SfpK9N
In0BO8ExanHo53GlJbx7xaFhGPkJ/+TWd/CbSPRRqfyBc19Y3fJK4VPetwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGT30ex6DQQdGoa5qMt29rHI6NwXMB8GA1UdIwQY
MBaAFAwtfCOOidzVL2+yKW36R1jGHJe+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREMxOEk0NkozTlV2YjdJcGJmcEhXTVljbDc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80NjkxNmUtZTg2Yy00NGE4LThhYjkt
NTM4NDliYWYxYjQ1LzEvREMxOEk0NkozTlV2YjdJcGJmcEhXTVljbDc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80NjkxNmUtZTg2Yy00NGE4LThhYjktNTM4NDliYWYxYjQ1
LzEvREMxOEk0NkozTlV2YjdJcGJmcEhXTVljbDc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOSRUiYT
WWnfo4Olg7avJ7QSMGe194YqzsvLzcv894bmy9nT9XDblV+HzOKdZr3yzrw0CIsg
UDJc5cWoCwWPBt/0QNYu+tUT4BSRZXqeS2Xkif7ROtX0u5j0F9W9uJCrKkNF9sF0
Rx9A52/Pg+rlrYREkrQrLsFVgtpfuPb8nd3Xh5VfqR74Yn8IYBb8Cq2WH3d0iDvD
ZOQkFGnNfUqkWqebUb7f6ZmY7qj986yxF5g7eAwW5Dxv2SSncGHNkilX20mRCHhB
DQhDTU0J0DivZ7UljtJlUt9AryemgL1aWOPuYQ30VzfQM/wzpeUbA++1k2wt0j3Y
GGqORCxaLjJjZw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:27:16 2025 by rpki-client