Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: UhHjGm8NSXGSO2eS0Gp3iKa1Ose92VqABRmt+YAIO3g=
Subject key identifier: 85:BA:63:87:5B:2D:3A:26:EE:BF:E8:59:5D:C8:90:D9:FD:F9:6C:06
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019681A2CFB8B3AC470396BFE10C30F66A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 14CF
Signing time: Tue 29 Apr 2025 13:00:52 +0000
Manifest this update: Tue 29 Apr 2025 13:00:52 +0000
Manifest next update: Wed 30 Apr 2025 13:00:52 +0000
Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: lJxxiyXKNIDEy7C9v0ij/CCzoC1AFo4QakXHhNFD8z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:cf:b8:b3:ac:47:03:96:bf:e1:0c:30:f6:6a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Apr 29 13:00:52 2025 GMT
Not After : Apr 30 13:00:52 2025 GMT
Subject: CN=85ba63875b2d3a26eebfe8595dc890d9fdf96c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:b1:17:ad:05:6d:aa:a7:4e:ce:9e:e8:f1:
2e:bc:25:86:43:15:2b:4b:41:d6:93:90:33:ce:c2:
6f:dd:fc:73:bb:b6:f7:7f:96:8f:54:b4:4e:c7:e0:
ee:74:1c:a3:59:4c:98:4e:59:6c:4b:64:0c:3f:16:
56:60:d5:9a:ee:f0:2e:42:6d:5a:18:fa:42:77:3c:
35:b0:cc:e1:83:de:f6:24:2c:2d:c6:ee:3d:ea:55:
97:75:c1:64:1b:06:be:7d:51:c3:d9:51:33:dd:0c:
02:e7:2b:e3:28:18:36:51:fb:6b:b8:74:b5:b7:66:
bd:60:81:4d:80:61:7f:87:58:1d:0a:ab:c8:65:49:
e7:a8:12:3c:b4:b6:04:59:7d:d1:61:46:8c:e7:a0:
3d:4a:f3:f5:07:d3:64:c1:8a:34:c4:fb:76:a4:d3:
ae:fd:84:f8:1a:cf:1a:62:36:76:e4:d8:2c:1d:98:
fc:46:e9:8e:0a:5e:93:86:26:0c:f5:36:a3:0f:e9:
56:38:76:2a:3d:ea:b1:02:9f:db:e6:1d:50:54:4d:
e5:a6:04:5a:9e:06:c6:c4:f4:78:95:fe:c6:1e:2b:
3b:3d:8b:1e:6b:92:da:d0:0a:df:cb:96:49:3c:a8:
68:5e:c4:26:61:5c:0d:81:4e:40:53:df:51:d0:5b:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BA:63:87:5B:2D:3A:26:EE:BF:E8:59:5D:C8:90:D9:FD:F9:6C:06
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ea:5c:37:cb:3a:4a:d9:bb:13:dd:62:89:16:bc:b5:48:94:
04:e9:74:d7:9e:f0:b3:8f:bf:1d:c4:b6:76:b2:14:67:c2:6f:
19:48:20:2b:02:df:f5:11:a0:76:26:1f:90:65:77:bd:47:1d:
34:85:f9:61:d7:72:5c:2d:2c:00:02:2e:9d:cc:ab:f5:97:25:
87:52:2b:70:3a:88:0d:26:94:8e:6f:08:b8:91:b9:c8:b1:49:
0d:48:31:5b:83:f2:49:62:d6:f4:e7:cb:b5:10:5c:33:68:c9:
65:77:5e:75:2e:cb:46:b6:81:7a:9c:69:64:71:2f:97:f9:65:
f5:30:c4:61:31:11:12:9f:6b:4c:21:e0:2b:77:9e:3a:7e:97:
f3:0d:c2:3f:86:e2:34:5a:1e:91:99:d2:7b:19:c2:8a:fd:f8:
af:81:4b:fd:2f:fe:84:c7:97:1d:82:59:92:2c:f1:e2:6b:84:
65:a0:f2:20:4d:e7:48:9d:da:b4:af:c5:dc:b3:a8:92:6c:0b:
29:60:aa:d0:ca:73:4e:68:ac:04:23:1e:53:b4:ec:64:31:1c:
01:c7:d4:eb:14:6b:3a:19:eb:ec:e8:87:af:7e:61:73:c6:2a:
bc:6d:09:b8:3c:a4:dc:02:93:d6:82:ca:e1:39:76:23:f4:0d:
a0:7d:1b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBos+4s6xHA5a/4Qww9mqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1
Njg2ODYwHhcNMjUwNDI5MTMwMDUyWhcNMjUwNDMwMTMwMDUyWjAzMTEwLwYDVQQD
Eyg4NWJhNjM4NzViMmQzYTI2ZWViZmU4NTk1ZGM4OTBkOWZkZjk2YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6SxF60FbaqnTs6e6PEuvCWGQxUr
S0HWk5AzzsJv3fxzu7b3f5aPVLROx+DudByjWUyYTllsS2QMPxZWYNWa7vAuQm1a
GPpCdzw1sMzhg972JCwtxu496lWXdcFkGwa+fVHD2VEz3QwC5yvjKBg2UftruHS1
t2a9YIFNgGF/h1gdCqvIZUnnqBI8tLYEWX3RYUaM56A9SvP1B9NkwYo0xPt2pNOu
/YT4Gs8aYjZ25NgsHZj8RumOCl6ThiYM9TajD+lWOHYqPeqxAp/b5h1QVE3lpgRa
ngbGxPR4lf7GHis7PYsea5La0Arfy5ZJPKhoXsQmYVwNgU5AU99R0FtAEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW6Y4dbLTom7r/oWV3IkNn9+WwGMB8GA1UdIwQY
MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt
ZGQ1ZGRkMDVkYjBiLzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi
LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOpcN8s6
Stm7E91iiRa8tUiUBOl0157ws4+/HcS2drIUZ8JvGUggKwLf9RGgdiYfkGV3vUcd
NIX5YddyXC0sAAIuncyr9Zclh1IrcDqIDSaUjm8IuJG5yLFJDUgxW4PySWLW9OfL
tRBcM2jJZXdedS7LRraBepxpZHEvl/ll9TDEYTEREp9rTCHgK3eeOn6X8w3CP4bi
NFoekZnSexnCiv34r4FL/S/+hMeXHYJZkizx4muEZaDyIE3nSJ3atK/F3LOokmwL
KWCq0MpzTmisBCMeU7TsZDEcAcfU6xRrOhnr7OiHr35hc8YqvG0JuDyk3AKT1oLK
4Tl2I/QNoH0bgg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:20:29 2025 by rpki-client