Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier: ozAKCT1sff/3vAM4ujwR4zcWuyzTaqxG9abwDBUoMn4=
Subject key identifier: 72:22:CF:77:B6:CF:3C:63:53:3D:C7:56:2D:5F:A4:BD:54:E6:1D:A0
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial: 01967DC692E1EC956E73693CC308F6A1D2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 19:01:27 +0000
Manifest this update: Mon 28 Apr 2025 19:01:27 +0000
Manifest next update: Tue 29 Apr 2025 19:01:27 +0000
Files and hashes: 1: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: cjijSuj0qWbFxkntTURBVjbvHQC/cJmQErZlUrEgmJQ=)
2: M1fWkBIHAuVSUFxtDGIthqqmrJE.roa (hash: +6gCxjSejI/as6boiaKhDkfwSxB7S4u8Oz//yZsKkyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:92:e1:ec:95:6e:73:69:3c:c3:08:f6:a1:d2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Validity
Not Before: Apr 28 19:01:27 2025 GMT
Not After : Apr 29 19:01:27 2025 GMT
Subject: CN=7222cf77b6cf3c63533dc7562d5fa4bd54e61da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:5e:de:10:38:8d:40:9b:33:d6:21:4d:d8:
11:5b:90:66:47:f3:f7:02:86:14:27:3e:8b:12:e6:
ef:57:eb:a2:9a:f8:d5:f2:ef:ff:12:04:ca:34:eb:
58:0d:9d:00:ea:e3:dd:0c:76:0a:17:73:0a:1f:62:
53:8b:73:7b:ff:21:07:c8:ae:7a:2c:b4:11:20:2b:
fd:dc:ee:7d:ed:04:8a:53:9d:b2:fc:8a:fe:a8:ad:
36:52:27:a4:78:0a:66:a7:62:0f:85:c4:ab:ea:1d:
16:bf:74:74:d7:94:c6:a5:04:32:69:3e:5a:5e:00:
ac:73:1e:69:19:f2:be:5e:e3:56:35:db:e1:49:d9:
f8:c1:a8:3a:47:db:d7:42:a6:4d:aa:91:98:22:d5:
fb:9d:6d:1a:0c:fd:df:a6:62:4c:99:3a:24:b1:0b:
4a:f6:d6:13:80:60:66:d6:e3:88:19:cc:be:4b:73:
0e:cd:f4:12:62:42:55:46:88:cf:99:e3:29:03:c5:
4c:2d:9b:d8:98:8d:58:ca:af:ae:a5:dc:68:87:79:
8c:d8:d3:0d:b5:86:53:40:a8:19:d0:b4:2a:26:24:
5c:b2:d0:57:a4:0e:22:2b:57:d7:b2:b5:6c:29:98:
a8:cf:0b:27:04:37:bc:3a:79:66:32:b6:9e:a0:0c:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:22:CF:77:B6:CF:3C:63:53:3D:C7:56:2D:5F:A4:BD:54:E6:1D:A0
X509v3 Authority Key Identifier:
keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:89:34:df:87:81:6c:fb:6a:7a:e1:64:d0:e8:67:57:b7:d2:
35:c8:b8:b2:6e:da:44:80:03:89:61:87:48:53:88:67:4c:e5:
90:8e:16:9f:3e:3e:b1:7b:44:0b:3b:00:f1:52:8d:0f:e9:14:
ae:b9:9a:90:84:a0:cc:90:fd:9c:0b:5a:ea:b3:13:47:5e:8b:
82:36:42:53:56:4a:84:ca:89:b7:64:b9:6a:75:2d:51:ae:82:
30:28:4b:9b:60:69:6d:eb:7d:90:80:3c:df:0c:81:e0:a2:4c:
7a:90:bf:c4:cc:fe:09:7b:e7:60:b5:87:aa:16:4e:f7:05:29:
3c:2c:30:ea:8f:fe:cc:ec:45:da:75:16:f9:31:93:d9:20:81:
64:c0:4a:f0:9a:b0:a2:77:9d:5a:41:ba:d7:4f:ab:2e:a9:29:
36:b2:0c:56:72:e4:ed:fa:59:f9:8e:dc:32:02:bf:a9:29:a3:
64:fd:d3:d4:4e:d8:9d:cc:29:ef:62:ac:59:38:c4:d9:fc:ae:
88:7b:28:5c:19:34:21:55:fc:1f:b8:54:7a:cd:97:9b:25:3f:
84:02:84:2f:68:08:fa:e5:84:ab:0f:70:97:a0:59:4c:0b:a0:
88:ee:32:90:93:45:51:1d:94:8a:45:eb:dd:37:86:44:56:fb:
79:00:fa:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xpLh7JVuc2k8wwj2odLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODljODY5N2Y3NzkyY2FhZjU5OTY2NGU4OWFjZTY1MjQ0
ZjhhZTgwHhcNMjUwNDI4MTkwMTI3WhcNMjUwNDI5MTkwMTI3WjAzMTEwLwYDVQQD
Eyg3MjIyY2Y3N2I2Y2YzYzYzNTMzZGM3NTYyZDVmYTRiZDU0ZTYxZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpxe3hA4jUCbM9YhTdgRW5BmR/P3
AoYUJz6LEubvV+uimvjV8u//EgTKNOtYDZ0A6uPdDHYKF3MKH2JTi3N7/yEHyK56
LLQRICv93O597QSKU52y/Ir+qK02UiekeApmp2IPhcSr6h0Wv3R015TGpQQyaT5a
XgCscx5pGfK+XuNWNdvhSdn4wag6R9vXQqZNqpGYItX7nW0aDP3fpmJMmToksQtK
9tYTgGBm1uOIGcy+S3MOzfQSYkJVRojPmeMpA8VMLZvYmI1Yyq+updxoh3mM2NMN
tYZTQKgZ0LQqJiRcstBXpA4iK1fXsrVsKZiozwsnBDe8OnlmMraeoAwBcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIiz3e2zzxjUz3HVi1fpL1U5h2gMB8GA1UdIwQY
MBaAFA+JyGl/d5LKr1mWZOiazmUkT4roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQt
ZDZiZDU1YTllMzZkLzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQtZDZiZDU1YTllMzZk
LzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIk034eB
bPtqeuFk0OhnV7fSNci4sm7aRIADiWGHSFOIZ0zlkI4Wnz4+sXtECzsA8VKND+kU
rrmakISgzJD9nAta6rMTR16LgjZCU1ZKhMqJt2S5anUtUa6CMChLm2Bpbet9kIA8
3wyB4KJMepC/xMz+CXvnYLWHqhZO9wUpPCww6o/+zOxF2nUW+TGT2SCBZMBK8Jqw
onedWkG610+rLqkpNrIMVnLk7fpZ+Y7cMgK/qSmjZP3T1E7Yncwp72KsWTjE2fyu
iHsoXBk0IVX8H7hUes2XmyU/hAKEL2gI+uWEqw9wl6BZTAugiO4ykJNFUR2UikXr
3TeGRFb7eQD6XA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:34:15 2025 by rpki-client