Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: +3l+/kkLBZYfiB+ZVDFiOQVMUBdGEJOLLwdzIoBgO8s=
Subject key identifier: A6:8A:B0:78:A0:1A:EC:4D:C9:43:48:AA:F2:BB:60:15:FF:56:75:B4
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 019673791BC6BBE0E65F1965DEAACC17EE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 19:00:38 +0000
Manifest this update: Sat 26 Apr 2025 19:00:38 +0000
Manifest next update: Sun 27 Apr 2025 19:00:38 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: 1KDnsMD+XIxNiLzZXWhFz/kasqdJY5+lvvCptCFi1Mw=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:1b:c6:bb:e0:e6:5f:19:65:de:aa:cc:17:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Apr 26 19:00:38 2025 GMT
Not After : Apr 27 19:00:38 2025 GMT
Subject: CN=a68ab078a01aec4dc94348aaf2bb6015ff5675b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:61:f6:f2:b9:ed:cd:25:b2:96:a0:a2:69:
5c:80:17:87:16:ba:af:20:24:2c:fb:39:73:af:0d:
76:8a:6d:92:f8:d7:62:66:5d:c2:b0:c3:a6:1e:5b:
25:90:a0:da:a2:8a:95:af:e5:a3:de:60:9a:15:5b:
6a:9d:55:a1:9d:04:5f:cc:87:ed:f4:5b:d0:14:5b:
3a:a9:77:be:e6:3b:09:ce:5c:95:8e:4b:1b:a5:de:
3c:90:45:ad:a0:3e:eb:ac:30:5c:20:f7:ec:78:d4:
a1:b5:cc:ea:ec:4f:9f:d4:ed:af:16:47:69:c5:ca:
0f:80:43:5a:84:99:10:1a:2b:2a:89:cf:39:18:2d:
64:e5:62:a9:32:9a:d7:66:df:28:f3:36:b4:90:ff:
84:4e:05:6e:0b:4e:de:28:33:19:15:c4:93:1d:62:
22:c5:54:d3:0e:49:bf:61:88:ac:11:b1:ed:8e:22:
54:8e:bf:35:5c:df:33:98:2e:a4:64:b6:93:dd:83:
85:5b:21:57:10:c0:a3:23:a2:7c:cd:d1:f7:65:79:
73:e4:7d:ec:8c:79:6c:46:d3:da:b5:c9:14:a4:36:
67:21:2c:41:c6:ca:f6:8e:17:59:1c:a6:77:ed:4b:
61:bd:f4:3f:74:60:00:d3:52:a0:6b:37:02:82:37:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8A:B0:78:A0:1A:EC:4D:C9:43:48:AA:F2:BB:60:15:FF:56:75:B4
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:be:f0:1d:df:17:c8:1c:3c:18:ed:f2:57:92:9e:51:97:c1:
66:6a:af:45:78:ac:44:a5:e5:06:02:48:54:77:98:86:4f:d3:
df:70:22:26:a2:fc:37:ab:da:d6:cd:d8:7c:7a:46:7e:64:ea:
76:7c:b2:ba:f2:3a:a7:d1:85:77:16:0f:04:3a:37:7a:49:5f:
8a:a7:88:b1:05:1d:56:dc:61:1a:3b:a4:29:70:20:60:5d:bd:
b2:ff:7a:3f:e6:35:a1:58:eb:85:d7:09:1d:81:b7:66:54:0e:
40:37:bc:ad:1c:ff:c0:3d:70:45:fc:5c:97:43:fb:c4:20:1a:
2b:90:9e:73:d6:83:cc:63:13:52:11:74:13:51:dd:5f:1d:0b:
de:8f:4c:df:5e:e2:3d:68:14:01:a8:6d:40:95:25:60:48:a1:
bf:1d:bd:2e:17:94:04:34:0e:f7:69:e5:b9:4b:ec:46:05:58:
fb:44:f6:31:f6:fe:e6:2c:4e:77:89:09:43:fc:09:8a:67:71:
3c:63:6c:03:7a:66:4c:52:ee:14:34:44:73:97:ab:a5:ba:02:
f4:83:72:26:64:3f:e9:1c:39:79:28:f9:80:3f:2c:8d:e7:ef:
d9:dc:0f:f3:81:0b:24:f7:f4:1a:fe:45:a6:63:f9:31:ad:f9:
ba:1f:70:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzeRvGu+DmXxll3qrMF+4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTczNmY2NTcyMjFmYzEzNDMxNjMyM2IwNzQwNTg1YTlj
MWIyMGMwHhcNMjUwNDI2MTkwMDM4WhcNMjUwNDI3MTkwMDM4WjAzMTEwLwYDVQQD
EyhhNjhhYjA3OGEwMWFlYzRkYzk0MzQ4YWFmMmJiNjAxNWZmNTY3NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiRh9vK57c0lspagomlcgBeHFrqv
ICQs+zlzrw12im2S+NdiZl3CsMOmHlslkKDaooqVr+Wj3mCaFVtqnVWhnQRfzIft
9FvQFFs6qXe+5jsJzlyVjksbpd48kEWtoD7rrDBcIPfseNShtczq7E+f1O2vFkdp
xcoPgENahJkQGisqic85GC1k5WKpMprXZt8o8za0kP+ETgVuC07eKDMZFcSTHWIi
xVTTDkm/YYisEbHtjiJUjr81XN8zmC6kZLaT3YOFWyFXEMCjI6J8zdH3ZXlz5H3s
jHlsRtPatckUpDZnISxBxsr2jhdZHKZ37UthvfQ/dGAA01KgazcCgjfXMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaKsHigGuxNyUNIqvK7YBX/VnW0MB8GA1UdIwQY
MBaAFHQXNvZXIh/BNDFjI7B0BYWpwbIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUt
Y2JmYmE0NTlkOGY3LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUtY2JmYmE0NTlkOGY3
LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAub7wHd8X
yBw8GO3yV5KeUZfBZmqvRXisRKXlBgJIVHeYhk/T33AiJqL8N6va1s3YfHpGfmTq
dnyyuvI6p9GFdxYPBDo3eklfiqeIsQUdVtxhGjukKXAgYF29sv96P+Y1oVjrhdcJ
HYG3ZlQOQDe8rRz/wD1wRfxcl0P7xCAaK5Cec9aDzGMTUhF0E1HdXx0L3o9M317i
PWgUAahtQJUlYEihvx29LheUBDQO92nluUvsRgVY+0T2Mfb+5ixOd4kJQ/wJimdx
PGNsA3pmTFLuFDREc5erpboC9INyJmQ/6Rw5eSj5gD8sjefv2dwP84ELJPf0Gv5F
pmP5Ma35uh9w7g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:28 2025 by rpki-client