Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: lcYToTq7iGKF3sPZoWfUZZxx830b+baEnZ0Pje1mw2c=
Subject key identifier: 41:20:58:BE:6A:6F:41:D4:9E:BA:B8:1C:E8:88:1C:57:39:D2:D6:19
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 0196816BBC8A96733C37895ECF73BF255CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 1406
Signing time: Tue 29 Apr 2025 12:00:43 +0000
Manifest this update: Tue 29 Apr 2025 12:00:43 +0000
Manifest next update: Wed 30 Apr 2025 12:00:43 +0000
Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: wDBC/IpYrYbLvG0uSTqWAqcCiX7SALgMSS7RjA53x8g=)
2: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (hash: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=)
3: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (hash: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:bc:8a:96:73:3c:37:89:5e:cf:73:bf:25:5c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Apr 29 12:00:43 2025 GMT
Not After : Apr 30 12:00:43 2025 GMT
Subject: CN=412058be6a6f41d49ebab81ce8881c5739d2d619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:4a:63:51:ef:45:01:61:85:1a:c5:f0:f3:
c6:f7:42:07:d6:61:6a:38:f5:0e:6f:e0:db:46:54:
a7:a0:07:ed:0c:28:99:dc:2d:4c:1f:1f:98:29:78:
95:03:a9:46:28:71:f0:4c:3b:ee:8a:6e:98:7a:5d:
5a:f4:0d:89:0b:a6:3f:2d:ea:d4:99:62:dc:5a:41:
97:03:56:b3:f8:86:ab:8c:bc:de:83:ad:cc:d8:20:
34:3d:9a:60:ba:e4:b9:ad:82:f4:e4:c5:d8:24:f0:
4f:26:66:b9:53:0e:12:62:53:12:61:61:e9:d3:3f:
d2:2c:5a:3e:a8:2d:88:31:8b:d5:30:fd:a0:76:42:
b7:c6:01:84:e1:05:e8:a0:14:27:70:14:94:c7:16:
79:b4:23:26:b1:e8:17:3e:1c:ee:c2:00:71:3b:c2:
6b:ed:91:b0:5b:23:de:1b:18:f1:9f:06:e0:7e:9c:
c0:f7:05:7c:a9:57:b6:f3:ac:91:f1:49:a3:2c:07:
47:cb:e9:e9:4c:ec:d8:90:a2:6a:80:04:e7:10:bc:
31:11:fe:f9:76:1a:ec:ad:36:d2:5e:1a:a0:49:1b:
17:ed:3f:86:d8:2e:61:02:bf:42:1b:24:3a:d0:53:
d2:c3:ca:34:88:15:d1:23:90:f3:52:17:4f:21:db:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:20:58:BE:6A:6F:41:D4:9E:BA:B8:1C:E8:88:1C:57:39:D2:D6:19
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:23:be:d4:82:af:3a:68:60:ea:6b:9e:8f:bb:e4:b4:89:10:
06:b3:bd:1c:e8:d0:55:ca:69:4e:44:97:32:21:44:0c:37:96:
24:83:25:4c:9b:90:16:b4:bf:aa:59:a7:46:57:91:fd:39:da:
23:d1:37:dd:08:9a:de:01:31:74:65:01:75:47:ef:f4:b0:b4:
8b:33:fe:a0:83:0f:e2:d9:26:05:a6:2b:f7:c4:29:1f:17:ae:
b6:84:99:a0:c4:cd:70:4a:6c:09:08:0c:20:cd:e5:5d:c9:a4:
d5:20:84:0f:68:3c:fa:f4:89:c3:bc:ef:ca:42:6d:fe:7d:21:
f5:34:5c:3e:ba:d2:09:cd:dc:2a:c6:b5:cb:57:4e:88:06:ed:
a8:26:fe:08:d7:5e:ac:2e:1e:9b:9d:79:34:ee:3a:ae:f6:23:
b1:d6:a6:e6:25:62:ba:95:79:42:18:c0:b0:eb:cf:e6:b6:f4:
6b:3a:4f:e1:ab:ae:ad:3c:72:ef:ec:54:87:0d:05:a2:ef:28:
a8:0d:1e:bb:3e:52:91:8b:5b:fd:a1:dd:19:cc:ac:31:e8:bd:
86:c7:62:72:24:16:e8:9b:90:fe:fc:ce:0c:6d:bc:c9:69:3f:
08:32:b2:10:94:74:31:79:7d:cf:9e:87:7e:85:30:6f:e3:35:
69:da:90:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBa7yKlnM8N4lez3O/JVzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm
MDRmNjEwHhcNMjUwNDI5MTIwMDQzWhcNMjUwNDMwMTIwMDQzWjAzMTEwLwYDVQQD
Eyg0MTIwNThiZTZhNmY0MWQ0OWViYWI4MWNlODg4MWM1NzM5ZDJkNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq5KY1HvRQFhhRrF8PPG90IH1mFq
OPUOb+DbRlSnoAftDCiZ3C1MHx+YKXiVA6lGKHHwTDvuim6Yel1a9A2JC6Y/LerU
mWLcWkGXA1az+IarjLzeg63M2CA0PZpguuS5rYL05MXYJPBPJma5Uw4SYlMSYWHp
0z/SLFo+qC2IMYvVMP2gdkK3xgGE4QXooBQncBSUxxZ5tCMmsegXPhzuwgBxO8Jr
7ZGwWyPeGxjxnwbgfpzA9wV8qVe286yR8UmjLAdHy+npTOzYkKJqgATnELwxEf75
dhrsrTbSXhqgSRsX7T+G2C5hAr9CGyQ60FPSw8o0iBXRI5DzUhdPIdsNQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEgWL5qb0HUnrq4HOiIHFc50tYZMB8GA1UdIwQY
MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt
MTcxZDlmMmNjZTNkLzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk
LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiO+1IKv
Omhg6muej7vktIkQBrO9HOjQVcppTkSXMiFEDDeWJIMlTJuQFrS/qlmnRleR/Tna
I9E33Qia3gExdGUBdUfv9LC0izP+oIMP4tkmBaYr98QpHxeutoSZoMTNcEpsCQgM
IM3lXcmk1SCED2g8+vSJw7zvykJt/n0h9TRcPrrSCc3cKsa1y1dOiAbtqCb+CNde
rC4em515NO46rvYjsdam5iViupV5QhjAsOvP5rb0azpP4auurTxy7+xUhw0Fou8o
qA0euz5SkYtb/aHdGcysMei9hsdiciQW6JuQ/vzODG28yWk/CDKyEJR0MXl9z56H
foUwb+M1adqQVQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:27:15 2025 by rpki-client