Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: +IlmlVNOBQ6cHDQxuzC6OTclfQiN+7/cb1YCSt3reQs=
Subject key identifier: 2B:5F:93:90:75:E7:27:C6:1F:40:DD:26:DA:E5:15:EB:98:44:D8:53
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 019685483483F19F44390D74CC91C647AF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 02D8
Signing time: Wed 30 Apr 2025 06:00:23 +0000
Manifest this update: Wed 30 Apr 2025 06:00:23 +0000
Manifest next update: Thu 01 May 2025 06:00:23 +0000
Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: LzXZ3io6phSX6im9WVG3VBnou589VvqFJcENJnkH1AQ=)
3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:34:83:f1:9f:44:39:0d:74:cc:91:c6:47:af:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Apr 30 06:00:23 2025 GMT
Not After : May 1 06:00:23 2025 GMT
Subject: CN=2b5f939075e727c61f40dd26dae515eb9844d853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:98:6a:e2:8e:cc:dc:4a:04:3d:9d:32:e2:
93:91:fe:f2:af:bc:c1:cd:63:a5:66:af:45:21:66:
98:62:73:0e:d9:77:a1:42:41:4d:94:ab:40:3c:bf:
c7:94:94:d6:e4:60:88:8f:9b:f0:1e:1d:73:43:6e:
6d:41:7b:b3:96:3c:00:ca:70:48:57:b4:00:1d:de:
ba:c8:59:68:02:38:f8:bc:36:f0:7d:da:b8:a4:e6:
4d:5c:b4:bc:eb:ee:d8:1b:81:0c:92:07:cb:6b:f9:
21:de:a3:27:62:e5:70:c9:2e:f5:fc:45:e3:9f:fa:
80:5e:1a:e8:ab:7c:f7:d6:68:40:be:cc:45:c3:41:
e1:3b:af:09:64:5b:a5:d1:58:03:b4:18:f8:a2:6b:
ca:bb:20:0b:7e:6a:f0:44:2d:48:de:46:e1:b8:62:
d3:05:eb:7b:c9:c4:81:54:c5:7f:f0:5f:a1:4c:94:
fc:fa:0e:29:85:04:72:6f:1e:3a:5e:82:58:ec:07:
5a:19:36:f3:ec:97:1b:91:cc:6a:e4:96:87:da:3d:
93:59:5e:38:41:cd:42:c5:b6:11:31:54:12:88:08:
9c:16:21:89:08:a4:ba:f4:dd:15:e3:24:25:10:a4:
e0:50:9c:ca:31:10:47:ba:81:a6:9d:da:08:22:f6:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5F:93:90:75:E7:27:C6:1F:40:DD:26:DA:E5:15:EB:98:44:D8:53
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:55:31:43:b5:77:a3:26:ab:47:ef:4e:eb:06:ea:16:d7:
43:e6:6b:fd:e1:38:f1:53:e6:65:f0:a0:fa:08:7c:b8:bc:87:
25:b3:c6:ef:e4:b2:3b:04:ff:11:76:43:60:90:78:27:39:7d:
86:43:32:56:c5:1a:dc:e9:6c:76:33:53:c6:cd:f9:4f:71:dc:
9d:3e:4b:ab:7a:9c:f5:d1:4e:d6:ba:01:2c:3c:fd:87:4c:07:
b4:77:e9:49:e5:b8:70:7a:2f:df:f8:0e:c9:bd:f9:d7:aa:37:
35:54:02:ac:95:73:14:8d:03:82:78:0f:86:eb:8d:9c:4e:49:
02:cb:94:9a:b7:54:5d:6a:de:28:d3:e3:35:18:90:de:08:98:
e5:8e:d7:2d:89:3d:5e:fc:f8:73:c1:89:c2:9b:a6:43:80:b9:
43:43:2f:c2:64:09:91:91:69:ca:6b:e6:c3:25:5b:40:6f:ef:
8a:56:17:c2:1a:81:66:c3:cb:4f:b2:85:cb:0c:d1:49:c8:51:
ff:a6:f3:c9:0d:a7:de:be:97:de:51:2a:90:db:d1:34:82:22:
ae:e0:34:ae:4f:dc:50:13:23:f5:77:1a:71:0a:eb:a3:50:41:
0b:8c:d1:4f:73:ee:7e:51:3b:3e:77:17:d3:64:37:99:90:90:
e8:27:b9:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFSDSD8Z9EOQ10zJHGR68NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYWNjNjYyY2ViZmFkOWZmZjljMGY4NzQwMGNmMGNmMDNm
NTQ3YTIwHhcNMjUwNDMwMDYwMDIzWhcNMjUwNTAxMDYwMDIzWjAzMTEwLwYDVQQD
EygyYjVmOTM5MDc1ZTcyN2M2MWY0MGRkMjZkYWU1MTVlYjk4NDRkODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhCYauKOzNxKBD2dMuKTkf7yr7zB
zWOlZq9FIWaYYnMO2XehQkFNlKtAPL/HlJTW5GCIj5vwHh1zQ25tQXuzljwAynBI
V7QAHd66yFloAjj4vDbwfdq4pOZNXLS86+7YG4EMkgfLa/kh3qMnYuVwyS71/EXj
n/qAXhroq3z31mhAvsxFw0HhO68JZFul0VgDtBj4omvKuyALfmrwRC1I3kbhuGLT
Bet7ycSBVMV/8F+hTJT8+g4phQRybx46XoJY7AdaGTbz7Jcbkcxq5JaH2j2TWV44
Qc1CxbYRMVQSiAicFiGJCKS69N0V4yQlEKTgUJzKMRBHuoGmndoIIvZAZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtfk5B15yfGH0DdJtrlFeuYRNhTMB8GA1UdIwQY
MBaAFA6sxmLOv62f/5wPh0AM8M8D9UeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgt
MTg4MGU3ZWYxZGI0LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgtMTg4MGU3ZWYxZGI0
LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjtVMUO1
d6Mmq0fvTusG6hbXQ+Zr/eE48VPmZfCg+gh8uLyHJbPG7+SyOwT/EXZDYJB4Jzl9
hkMyVsUa3OlsdjNTxs35T3HcnT5Lq3qc9dFO1roBLDz9h0wHtHfpSeW4cHov3/gO
yb3516o3NVQCrJVzFI0DgngPhuuNnE5JAsuUmrdUXWreKNPjNRiQ3giY5Y7XLYk9
Xvz4c8GJwpumQ4C5Q0MvwmQJkZFpymvmwyVbQG/vilYXwhqBZsPLT7KFywzRSchR
/6bzyQ2n3r6X3lEqkNvRNIIiruA0rk/cUBMj9XcacQrro1BBC4zRT3PuflE7PncX
02Q3mZCQ6Ce5cA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:17:32 2025 by rpki-client