Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: /M3/0YTD6PF3ozlnSdMVXtPb8ZSFn15ZxPJUTqnb8+k=
Subject key identifier: 2D:30:FA:48:75:DD:9D:A3:A4:7F:80:B3:D8:D5:D1:7D:9A:67:5C:5A
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 01967C0E5EE897800E4112821914C0C08B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0BA8
Signing time: Mon 28 Apr 2025 11:00:38 +0000
Manifest this update: Mon 28 Apr 2025 11:00:38 +0000
Manifest next update: Tue 29 Apr 2025 11:00:38 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: ku7GQaFvhmXT0bSWaOuV71apjWNoXlF8j0Q39VH1y2c=)
2: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (hash: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:5e:e8:97:80:0e:41:12:82:19:14:c0:c0:8b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Apr 28 11:00:38 2025 GMT
Not After : Apr 29 11:00:38 2025 GMT
Subject: CN=2d30fa4875dd9da3a47f80b3d8d5d17d9a675c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:85:3d:d1:24:ce:39:8d:cc:90:25:5b:d3:
c5:4a:3b:eb:53:a7:cb:9e:7d:bf:3a:6c:bd:42:d1:
1e:fc:81:b9:d5:52:bd:c1:6a:ad:ae:64:6e:0c:5e:
1f:bd:7c:a9:a6:0a:22:71:69:5e:bb:66:15:6a:b2:
d2:ef:c0:a4:a7:5d:c2:55:17:86:7f:8e:38:15:17:
e0:3c:a6:05:55:77:ff:c8:8b:ea:06:12:99:83:b9:
2c:76:14:30:f3:fb:41:3b:09:9f:92:d9:86:1f:50:
27:13:a0:5b:1f:ee:d9:2d:aa:d9:e0:ab:fc:58:e6:
0c:a2:22:71:05:18:b7:7b:33:b8:1f:38:d0:aa:7a:
13:0f:3f:b5:78:f6:d5:4c:67:8e:00:de:30:4a:a0:
a7:9a:71:c2:4e:36:fb:b1:0a:84:46:2b:47:2f:85:
70:7b:dc:b5:c3:23:94:fe:92:78:f7:de:6d:35:d9:
67:7e:4f:05:ae:bb:d3:86:c0:20:8c:e7:42:32:5a:
21:ad:4c:21:1d:d0:1c:c6:96:a3:2f:0e:2e:a1:ac:
be:a9:eb:4c:ed:98:88:82:e2:fa:b5:cb:5b:84:51:
86:07:d8:23:72:8f:1b:ca:e4:f0:27:b9:ba:81:95:
26:73:2e:e8:90:d6:22:ce:bb:b9:0c:5f:8e:59:6b:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:FA:48:75:DD:9D:A3:A4:7F:80:B3:D8:D5:D1:7D:9A:67:5C:5A
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:be:53:4c:04:02:11:b2:a3:3e:98:0f:ae:ac:7f:6c:96:84:
4c:89:11:2a:e2:ad:54:47:38:f9:a3:7d:67:7a:d9:f2:12:f1:
3e:b5:5c:b6:e5:45:76:04:8f:1e:37:fd:9a:28:19:1f:0b:ad:
45:9e:eb:6e:ff:0d:77:d4:45:f8:b0:74:58:d7:06:be:06:cb:
72:95:6a:5a:ec:69:48:5d:08:17:d8:bd:73:fe:9e:4f:56:8c:
66:13:3d:5b:fb:fe:55:84:84:30:71:6a:aa:23:2f:2d:c9:9e:
e4:aa:06:85:61:d4:65:d4:6d:46:a0:47:0f:ad:ec:1f:5c:a7:
24:17:ef:df:48:6c:e3:08:a2:e6:29:09:ca:99:cc:4f:2c:06:
92:b8:75:40:10:53:55:08:f6:f3:25:21:0d:96:34:e4:77:6f:
a9:fa:d9:7d:74:dc:18:89:03:6f:a1:dd:61:7e:22:60:ab:1c:
b7:ff:73:55:4a:c7:44:bd:e1:ff:ad:cf:ec:6c:1a:2e:3f:2e:
cb:cc:82:bb:77:3d:d9:52:01:e9:89:06:55:2f:9a:c0:0e:bb:
f8:67:1a:9e:ea:32:4d:71:cc:9c:2a:bd:89:58:56:f7:49:4e:
d9:0d:21:7a:dc:c0:63:3f:1c:25:ee:a3:05:5e:c1:fe:f1:fd:
92:88:94:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8Dl7ol4AOQRKCGRTAwItuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODMyYzEwMTQ0ZTRkN2Y2YTY0MmM2MGRjZWFlMTQzNmZj
OTljYTEwHhcNMjUwNDI4MTEwMDM4WhcNMjUwNDI5MTEwMDM4WjAzMTEwLwYDVQQD
EygyZDMwZmE0ODc1ZGQ5ZGEzYTQ3ZjgwYjNkOGQ1ZDE3ZDlhNjc1YzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmeFPdEkzjmNzJAlW9PFSjvrU6fL
nn2/Omy9QtEe/IG51VK9wWqtrmRuDF4fvXyppgoicWleu2YVarLS78Ckp13CVReG
f444FRfgPKYFVXf/yIvqBhKZg7ksdhQw8/tBOwmfktmGH1AnE6BbH+7ZLarZ4Kv8
WOYMoiJxBRi3ezO4HzjQqnoTDz+1ePbVTGeOAN4wSqCnmnHCTjb7sQqERitHL4Vw
e9y1wyOU/pJ4995tNdlnfk8FrrvThsAgjOdCMlohrUwhHdAcxpajLw4uoay+qetM
7ZiIguL6tctbhFGGB9gjco8byuTwJ7m6gZUmcy7okNYizru5DF+OWWu7RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0w+kh13Z2jpH+As9jV0X2aZ1xaMB8GA1UdIwQY
MBaAFA+DLBAUTk1/amQsYNzq4UNvyZyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzkt
Y2M2OGUzN2QyNDVmLzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzktY2M2OGUzN2QyNDVm
LzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML5TTAQC
EbKjPpgPrqx/bJaETIkRKuKtVEc4+aN9Z3rZ8hLxPrVctuVFdgSPHjf9migZHwut
RZ7rbv8Nd9RF+LB0WNcGvgbLcpVqWuxpSF0IF9i9c/6eT1aMZhM9W/v+VYSEMHFq
qiMvLcme5KoGhWHUZdRtRqBHD63sH1ynJBfv30hs4wii5ikJypnMTywGkrh1QBBT
VQj28yUhDZY05HdvqfrZfXTcGIkDb6HdYX4iYKsct/9zVUrHRL3h/63P7GwaLj8u
y8yCu3c92VIB6YkGVS+awA67+GcanuoyTXHMnCq9iVhW90lO2Q0hetzAYz8cJe6j
BV7B/vH9koiUYw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:37:48 2025 by rpki-client