Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: HEDMFNiwSTb6fzIlwYZCDTvXLj+02jZfyS6/TIbeDvI=
Subject key identifier: F4:AF:CF:8B:42:7B:64:CF:70:C5:D5:F4:2C:B2:6D:25:6F:C0:7D:67
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 0196771E9874E8E435D56095AAD8D1B57D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 12:00:15 +0000
Manifest this update: Sun 27 Apr 2025 12:00:15 +0000
Manifest next update: Mon 28 Apr 2025 12:00:15 +0000
Files and hashes: 1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: 9Gbw9FyekbIebO+8an8JZy6GvLibulyYPy9yOetISsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:98:74:e8:e4:35:d5:60:95:aa:d8:d1:b5:7d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Apr 27 12:00:15 2025 GMT
Not After : Apr 28 12:00:15 2025 GMT
Subject: CN=f4afcf8b427b64cf70c5d5f42cb26d256fc07d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:80:ec:fe:9e:4e:b3:a7:e1:46:cb:25:1d:
6d:45:6b:47:b4:2f:c5:e8:9c:b3:23:73:aa:72:40:
02:a3:aa:f1:3b:18:6b:a4:bd:b8:f5:ac:36:a7:47:
44:ee:41:19:bf:6e:86:97:c5:db:b1:20:73:63:66:
14:d6:42:5c:7e:3f:f5:51:e7:88:e0:58:e8:93:5b:
f3:1f:fd:dd:6d:b9:18:5f:ad:a4:7c:1b:07:c2:72:
08:74:a1:37:a8:85:3a:7c:00:14:a8:b5:f6:2d:c6:
a0:8e:f2:4e:fb:d3:9f:81:a8:f6:96:77:6f:65:dd:
a7:80:fe:ec:0b:c7:a3:d5:80:61:d2:97:60:c9:cd:
7d:93:64:cb:55:0b:3b:7b:df:18:04:5a:1e:f5:aa:
3e:33:f9:8b:50:87:7d:fa:91:27:62:d8:ec:4c:06:
09:55:87:6e:fd:62:26:5c:99:3f:c5:47:65:f3:4f:
a0:ab:88:b4:bb:30:67:43:df:08:08:01:b3:1f:6c:
a4:01:5d:c0:42:8d:57:e1:66:8f:c6:73:6e:71:57:
20:b6:73:4d:95:fc:6f:63:2b:23:8c:08:4d:2e:9d:
62:ca:16:b5:fd:d3:c7:14:01:1f:f9:26:72:96:eb:
e1:f6:6c:3f:3b:8d:ec:d5:14:28:05:54:eb:ff:72:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:CF:8B:42:7B:64:CF:70:C5:D5:F4:2C:B2:6D:25:6F:C0:7D:67
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:94:9b:9c:85:5f:51:60:c5:bd:f0:b4:86:be:34:a4:cc:ed:
ee:a5:d0:48:f4:41:17:bc:68:cb:13:c7:f7:ac:6b:b4:63:57:
ff:22:0b:c1:b8:5e:5b:87:4f:0e:2d:aa:4a:94:2c:e9:07:fa:
58:7a:6e:ad:2f:88:46:c2:39:b8:37:c1:53:54:92:a2:fa:53:
3a:e5:00:5a:61:96:d0:07:48:84:cd:ac:db:17:0b:f5:06:24:
d3:a5:e6:37:2f:eb:6a:2b:79:80:15:18:64:fd:cb:9c:80:0b:
9d:35:a7:04:8f:05:b0:12:c8:80:b6:a7:74:b2:58:17:d7:46:
05:ec:f9:b4:54:bc:82:d4:e1:d4:14:dd:dd:44:e1:9a:e8:4e:
5e:8b:4c:cc:43:37:df:93:f4:53:ad:2f:3d:c6:93:e3:67:63:
62:a8:8d:73:af:39:72:dc:19:29:9f:a5:41:56:55:02:55:79:
59:e9:f0:19:f7:94:ca:9e:25:3d:8b:20:df:b6:cc:27:93:11:
ed:01:92:f8:91:9f:a0:58:17:54:e8:81:53:fc:03:93:ce:e2:
4f:eb:b4:2b:b0:18:f6:a5:63:fe:48:3f:0d:68:76:8f:63:e6:
81:1d:f4:fe:71:1c:06:f3:0d:d5:ae:88:e2:f1:8e:b1:ae:f7:
55:63:2d:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3Hph06OQ11WCVqtjRtX2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTRmM2MwYjY2YTRjOTNlODBmZjVmNmQ4OWFkODY3M2U5
NDNjNWYwHhcNMjUwNDI3MTIwMDE1WhcNMjUwNDI4MTIwMDE1WjAzMTEwLwYDVQQD
EyhmNGFmY2Y4YjQyN2I2NGNmNzBjNWQ1ZjQyY2IyNmQyNTZmYzA3ZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvmA7P6eTrOn4UbLJR1tRWtHtC/F
6JyzI3OqckACo6rxOxhrpL249aw2p0dE7kEZv26Gl8XbsSBzY2YU1kJcfj/1UeeI
4Fjok1vzH/3dbbkYX62kfBsHwnIIdKE3qIU6fAAUqLX2LcagjvJO+9Ofgaj2lndv
Zd2ngP7sC8ej1YBh0pdgyc19k2TLVQs7e98YBFoe9ao+M/mLUId9+pEnYtjsTAYJ
VYdu/WImXJk/xUdl80+gq4i0uzBnQ98ICAGzH2ykAV3AQo1X4WaPxnNucVcgtnNN
lfxvYysjjAhNLp1iyha1/dPHFAEf+SZyluvh9mw/O43s1RQoBVTr/3IXFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSvz4tCe2TPcMXV9CyybSVvwH1nMB8GA1UdIwQY
MBaAFHSk88C2akyT6A/19tia2Gc+lDxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMt
MmNhNDkyZjZkN2E4LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMtMmNhNDkyZjZkN2E4
LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapSbnIVf
UWDFvfC0hr40pMzt7qXQSPRBF7xoyxPH96xrtGNX/yILwbheW4dPDi2qSpQs6Qf6
WHpurS+IRsI5uDfBU1SSovpTOuUAWmGW0AdIhM2s2xcL9QYk06XmNy/rait5gBUY
ZP3LnIALnTWnBI8FsBLIgLandLJYF9dGBez5tFS8gtTh1BTd3UThmuhOXotMzEM3
35P0U60vPcaT42djYqiNc685ctwZKZ+lQVZVAlV5WenwGfeUyp4lPYsg37bMJ5MR
7QGS+JGfoFgXVOiBU/wDk87iT+u0K7AY9qVj/kg/DWh2j2PmgR30/nEcBvMN1a6I
4vGOsa73VWMt4w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:19:39 2025 by rpki-client