Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: cIPsJ+OO3vhKL8mqVs0KFJwOHrkDcSY4SSULfJ7ZvC8=
Subject key identifier: C1:99:5A:01:4A:A6:34:8E:00:2A:B4:EB:ED:55:5E:18:73:B4:6C:01
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 0196895C6C4A9A9C89407DD98BB73EBB73F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 04EC
Signing time: Thu 01 May 2025 01:00:57 +0000
Manifest this update: Thu 01 May 2025 01:00:57 +0000
Manifest next update: Fri 02 May 2025 01:00:57 +0000
Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: vP+Qte7kSTLhFMPxzGLjsHGNdbf8OP7kZuu9fDlbo+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:6c:4a:9a:9c:89:40:7d:d9:8b:b7:3e:bb:73:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: May 1 01:00:57 2025 GMT
Not After : May 2 01:00:57 2025 GMT
Subject: CN=c1995a014aa6348e002ab4ebed555e1873b46c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:76:15:6d:4e:2f:0c:98:e3:c4:af:1d:29:10:
f4:dd:bf:49:f8:59:b6:73:db:c4:ae:c3:80:1d:2b:
95:ec:a1:ce:1f:58:30:a3:a3:2b:85:ae:ee:a1:d7:
60:97:13:28:ea:b0:04:54:82:dc:5e:7c:f4:31:fc:
50:36:73:96:51:f3:24:b8:c0:25:ef:8f:bc:a0:73:
bd:2f:8a:9c:bf:21:1e:5d:7d:85:bd:18:78:5c:b2:
dd:24:93:2c:19:ac:e1:99:77:cb:d9:51:15:a5:4e:
7c:31:d8:21:46:85:e1:df:4b:5b:09:d3:ca:2d:b6:
e9:a2:41:88:ac:91:0d:b0:df:bd:5f:51:c6:e0:1d:
e4:82:f8:39:d7:f5:61:c9:6c:48:30:14:37:e6:92:
cc:1b:a3:96:1c:3f:3c:a3:c8:81:da:ef:f6:e8:dd:
1f:74:ae:62:ab:79:e1:d5:db:31:a3:40:86:53:f0:
10:74:de:f4:3c:4e:03:f5:ae:61:32:b7:a8:2d:95:
2d:c7:00:a3:a8:40:6a:3c:4c:c0:97:2f:0c:c5:51:
40:16:9e:14:7e:5e:ca:d8:9b:f5:26:df:b4:52:6f:
60:4b:c7:f2:82:07:c2:d7:01:f4:63:45:d0:d0:04:
2f:a3:7d:30:12:59:4e:28:f9:1b:9f:25:35:aa:3c:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:5A:01:4A:A6:34:8E:00:2A:B4:EB:ED:55:5E:18:73:B4:6C:01
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fe:36:73:aa:dd:a1:c0:14:46:e2:a7:b0:f6:50:4e:e6:1c:
7c:b5:4a:17:05:40:80:26:44:72:47:e1:f1:85:d0:21:3a:a1:
5b:29:66:7d:b9:ff:6c:92:89:69:01:5b:a0:2d:50:9b:8d:68:
f2:c4:a8:c9:80:d0:d8:58:64:db:20:91:07:3e:f5:99:22:b5:
be:3d:b1:9b:65:d4:11:48:aa:c4:9f:6b:68:67:26:d7:19:5c:
fb:d9:c5:db:b5:0c:95:69:44:c3:47:0c:f4:87:ca:4c:ba:6c:
bc:e9:24:01:9b:d3:7c:af:98:fd:75:fd:96:ea:08:39:d8:db:
12:e6:c0:5e:15:05:b8:e4:10:28:72:a1:33:c2:2b:cb:c2:d4:
e7:9a:74:be:69:55:59:ae:ac:6d:b7:9b:36:80:b3:ba:46:98:
64:f8:16:c9:a8:34:26:49:ec:68:8d:9e:8b:bb:ce:dd:20:8d:
e7:02:2b:0c:e2:cd:b1:ec:75:49:35:33:09:a0:a5:57:bc:eb:
65:3e:8e:44:93:de:45:95:c0:c0:07:b9:24:42:2c:9f:e7:e4:
29:f3:03:b8:b1:ab:ee:94:18:26:d6:dc:bc:6f:7c:d9:c3:23:
54:81:09:04:fe:c0:d0:34:d3:cf:b6:3f:59:0b:b2:e4:a7:41:
2b:fc:28:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJXGxKmpyJQH3Zi7c+u3P3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjliNGYxYTA5MGFjMDdiZTE3NjJkZWMzMzhlNmEwZmUz
NWQ5N2UwHhcNMjUwNTAxMDEwMDU3WhcNMjUwNTAyMDEwMDU3WjAzMTEwLwYDVQQD
EyhjMTk5NWEwMTRhYTYzNDhlMDAyYWI0ZWJlZDU1NWUxODczYjQ2YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53YVbU4vDJjjxK8dKRD03b9J+Fm2
c9vErsOAHSuV7KHOH1gwo6Mrha7uoddglxMo6rAEVILcXnz0MfxQNnOWUfMkuMAl
74+8oHO9L4qcvyEeXX2FvRh4XLLdJJMsGazhmXfL2VEVpU58MdghRoXh30tbCdPK
LbbpokGIrJENsN+9X1HG4B3kgvg51/VhyWxIMBQ35pLMG6OWHD88o8iB2u/26N0f
dK5iq3nh1dsxo0CGU/AQdN70PE4D9a5hMreoLZUtxwCjqEBqPEzAly8MxVFAFp4U
fl7K2Jv1Jt+0Um9gS8fyggfC1wH0Y0XQ0AQvo30wEllOKPkbnyU1qjzIaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGZWgFKpjSOACq06+1VXhhztGwBMB8GA1UdIwQY
MBaAFHYptPGgkKwHvhdi3sM45qD+Ndl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQt
NWYxNzViNWFlMDM4LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQtNWYxNzViNWFlMDM4
LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhP42c6rd
ocAURuKnsPZQTuYcfLVKFwVAgCZEckfh8YXQITqhWylmfbn/bJKJaQFboC1Qm41o
8sSoyYDQ2Fhk2yCRBz71mSK1vj2xm2XUEUiqxJ9raGcm1xlc+9nF27UMlWlEw0cM
9IfKTLpsvOkkAZvTfK+Y/XX9luoIOdjbEubAXhUFuOQQKHKhM8Iry8LU55p0vmlV
Wa6sbbebNoCzukaYZPgWyag0JknsaI2ei7vO3SCN5wIrDOLNsex1STUzCaClV7zr
ZT6ORJPeRZXAwAe5JEIsn+fkKfMDuLGr7pQYJtbcvG982cMjVIEJBP7A0DTTz7Y/
WQuy5KdBK/woOA==
-----END CERTIFICATE-----
Generated at Thu May 1 11:10:44 2025 by rpki-client