Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: VTAFKk5LJuxUoxsjMRUeA676iOc6FkEehSY5XgQiip8=
Subject key identifier: 11:5C:E3:98:FF:37:48:7C:2C:D4:42:48:70:8E:70:BA:60:67:9A:01
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 0196A4653AB2315A817886DFF349957EDFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 0F22
Signing time: Tue 06 May 2025 07:00:19 +0000
Manifest this update: Tue 06 May 2025 07:00:19 +0000
Manifest next update: Wed 07 May 2025 07:00:19 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: Is1lQvlvVPkN9WvmFt1co4LzOvGPd2DtXGD9Ox1YWFI=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:3a:b2:31:5a:81:78:86:df:f3:49:95:7e:df:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: May 6 07:00:19 2025 GMT
Not After : May 7 07:00:19 2025 GMT
Subject: CN=115ce398ff37487c2cd44248708e70ba60679a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:b1:da:a0:08:14:b2:bd:6b:78:ed:99:b0:
29:19:7d:a5:2b:bc:4b:1c:8d:52:40:4a:52:eb:65:
4d:06:fe:45:ec:2e:97:96:a1:99:dd:05:33:e2:c2:
69:65:68:95:57:e6:d0:c4:45:c5:71:ae:9d:5b:fe:
c0:e3:30:37:12:4e:97:fe:bc:06:a1:7f:00:2e:81:
ee:9a:19:fc:c2:21:04:5b:74:2b:38:01:d1:67:ff:
b7:98:f7:5f:75:80:db:db:7b:0b:e5:ac:eb:68:9d:
49:51:b8:22:6b:eb:d8:a5:74:32:65:96:e5:ae:bb:
26:69:e4:c3:f5:19:d1:f1:ae:30:17:a3:05:d1:3b:
10:7c:64:17:4e:3c:51:0e:c9:86:b0:d4:9a:05:5a:
85:1d:be:da:32:f8:2c:40:07:fd:9c:ce:04:f2:1b:
a1:6e:3f:ff:40:ff:14:0d:eb:aa:07:7b:27:3b:59:
b6:01:f4:4c:aa:96:eb:79:1a:91:15:fd:d2:9d:c5:
18:c7:9d:6e:9f:db:3b:c1:b8:db:4e:32:d7:34:30:
90:7a:e9:45:0a:ff:b7:d9:17:1f:f7:b6:49:e1:bc:
8e:8e:cd:72:d2:67:66:36:9f:c7:56:3a:00:e5:fe:
8f:50:61:c7:cc:dd:bf:1c:7e:b9:f5:f6:6b:fb:17:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5C:E3:98:FF:37:48:7C:2C:D4:42:48:70:8E:70:BA:60:67:9A:01
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:48:ae:7c:5c:ad:08:b9:2d:20:4b:36:5e:bc:aa:08:56:
5d:08:88:8a:e7:ce:fd:02:fa:8d:18:e2:ed:64:61:3e:f0:f0:
e1:1c:57:20:a8:ba:98:28:da:e2:77:c4:2b:7a:04:a6:41:cb:
e4:22:7b:96:0f:f1:fd:50:54:cd:fc:4a:ef:fb:b7:76:9c:0e:
da:c0:b4:c1:fa:ca:8d:89:84:5a:ab:85:4b:28:1f:7f:88:7b:
b6:f4:dd:15:1a:e0:de:3a:53:1d:69:3f:0d:f1:7f:32:57:9b:
6b:f5:86:dc:f6:c8:02:b0:cc:f3:34:1a:e9:5a:62:4f:6d:f8:
6e:30:b6:a3:f0:f4:64:35:cf:cf:2c:96:47:c8:6b:78:e8:63:
33:6e:4f:ee:63:3c:65:cf:fb:62:e6:e1:82:10:12:09:e3:4f:
c1:57:bf:ed:64:e5:f7:37:d4:eb:11:15:2a:6a:d9:7b:a7:3b:
94:77:37:94:35:9e:de:e1:c8:73:ba:83:a1:71:67:d8:27:61:
6e:97:3a:51:f5:f7:ac:ee:18:db:d1:7c:c4:4c:a5:42:3e:71:
7a:e0:7f:06:c9:34:23:d2:63:05:5d:c6:67:51:53:84:fd:28:
b3:a0:07:ac:4d:55:d2:f6:d4:f2:fa:81:47:25:bd:27:1f:d5:
18:3a:9a:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZakZTqyMVqBeIbf80mVft/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDcwMDJiZjNhMmVhY2ZjODgxZDVlMWEwMjExMDk4YzY2
OTk1NmMwHhcNMjUwNTA2MDcwMDE5WhcNMjUwNTA3MDcwMDE5WjAzMTEwLwYDVQQD
EygxMTVjZTM5OGZmMzc0ODdjMmNkNDQyNDg3MDhlNzBiYTYwNjc5YTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9qx2qAIFLK9a3jtmbApGX2lK7xL
HI1SQEpS62VNBv5F7C6XlqGZ3QUz4sJpZWiVV+bQxEXFca6dW/7A4zA3Ek6X/rwG
oX8ALoHumhn8wiEEW3QrOAHRZ/+3mPdfdYDb23sL5azraJ1JUbgia+vYpXQyZZbl
rrsmaeTD9RnR8a4wF6MF0TsQfGQXTjxRDsmGsNSaBVqFHb7aMvgsQAf9nM4E8huh
bj//QP8UDeuqB3snO1m2AfRMqpbreRqRFf3SncUYx51un9s7wbjbTjLXNDCQeulF
Cv+32Rcf97ZJ4byOjs1y0mdmNp/HVjoA5f6PUGHHzN2/HH659fZr+xdCcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFc45j/N0h8LNRCSHCOcLpgZ5oBMB8GA1UdIwQY
MBaAFP3XACvzourPyIHV4aAhEJjGaZVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWIt
MjE2MWZmNDc4ODFjLzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWItMjE2MWZmNDc4ODFj
LzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJblIrnxc
rQi5LSBLNl68qghWXQiIiufO/QL6jRji7WRhPvDw4RxXIKi6mCja4nfEK3oEpkHL
5CJ7lg/x/VBUzfxK7/u3dpwO2sC0wfrKjYmEWquFSygff4h7tvTdFRrg3jpTHWk/
DfF/Mleba/WG3PbIArDM8zQa6VpiT234bjC2o/D0ZDXPzyyWR8hreOhjM25P7mM8
Zc/7YubhghASCeNPwVe/7WTl9zfU6xEVKmrZe6c7lHc3lDWe3uHIc7qDoXFn2Cdh
bpc6UfX3rO4Y29F8xEylQj5xeuB/Bsk0I9JjBV3GZ1FThP0os6AHrE1V0vbU8vqB
RyW9Jx/VGDqaYA==
-----END CERTIFICATE-----
Generated at Tue May 6 10:35:49 2025 by rpki-client