Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier: E/WcRjjLP/vdHXiLtyLt5liCWDW3JMFFjL/Dd9Hop1s=
Subject key identifier: 64:E8:91:2A:FA:75:51:6F:14:FB:4E:26:69:8B:8F:E8:0D:00:0B:7F
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial: 0196816B5D43B2BCFD04EFD085BDEC1AE68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 12:00:19 +0000
Manifest this update: Tue 29 Apr 2025 12:00:19 +0000
Manifest next update: Wed 30 Apr 2025 12:00:19 +0000
Files and hashes: 1: 0Z-KgCbnH-7-i6HmUta6xwTJGFc.roa (hash: CQhB99jgLnCeUfjuKP+rQh+nxxrjqKEU/QGxy6HMLAc=)
2: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: 6f0GCer2z8NW1WfzbD7iGSxxGY1F6lL/tLrb9rs325M=)
3: pMy1pTrd23eCt39FBZmq2eLeAhA.roa (hash: FaNCxf0uGl+BaBHf7OMmzdVmqskH8yLJ+ARyPe7Vb64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:5d:43:b2:bc:fd:04:ef:d0:85:bd:ec:1a:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Validity
Not Before: Apr 29 12:00:19 2025 GMT
Not After : Apr 30 12:00:19 2025 GMT
Subject: CN=64e8912afa75516f14fb4e26698b8fe80d000b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:52:57:7c:d8:c3:e9:32:9d:01:49:38:f1:
6f:c8:80:4a:fa:94:db:ed:46:cb:66:f8:5c:36:b1:
25:9e:61:a1:e6:84:e2:86:f7:6c:5a:8b:4f:5f:83:
f2:af:f0:08:1c:a9:22:61:d1:71:eb:4e:bb:dd:b6:
fb:5b:17:a4:f3:2a:49:37:7b:23:13:71:92:43:db:
fe:11:9b:36:8e:a0:14:7b:80:1a:0a:0c:0f:25:80:
d0:fc:1e:5b:98:46:c9:be:1e:c8:ae:1b:27:2f:4b:
66:7b:60:5b:50:d4:25:70:d5:f5:9c:88:1e:f0:4c:
81:e3:22:84:2e:de:cc:fc:2f:e2:97:f2:e5:75:a5:
21:1f:16:db:1a:a1:ec:98:fb:9f:14:08:da:c0:56:
99:88:a5:f8:4c:ea:b2:40:a5:ca:03:41:f7:50:4b:
a0:0c:d3:71:5f:c9:1f:a7:6a:ca:73:37:b8:58:fd:
a7:f3:c8:c6:29:01:ba:4b:81:7c:eb:8b:1e:5d:03:
81:5d:04:91:5d:bc:58:37:b3:eb:82:7b:b9:f8:56:
9f:e9:99:32:e4:d8:f9:cb:6b:e3:ee:71:95:0f:5c:
d6:9a:f1:c1:7e:da:51:3a:a4:44:eb:72:e3:79:9c:
61:25:8f:12:e7:18:bd:89:3a:c9:fa:0a:ff:0b:68:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E8:91:2A:FA:75:51:6F:14:FB:4E:26:69:8B:8F:E8:0D:00:0B:7F
X509v3 Authority Key Identifier:
keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:01:14:39:69:d3:1f:2d:8b:57:c6:25:06:4b:39:1c:ce:88:
45:40:e0:f8:b4:da:4a:db:39:e9:23:a5:c8:7e:11:ea:4e:de:
91:16:8e:3c:30:a8:f6:52:37:64:45:aa:29:86:ce:73:7a:2d:
70:a8:0f:e6:fc:00:54:07:f0:69:e2:cf:dc:24:f4:7f:1b:5b:
18:79:0e:f3:75:ae:c8:92:c3:e7:6f:a8:b0:5c:33:e8:99:27:
86:23:28:ef:3a:a5:6f:db:c2:70:f3:02:14:1f:28:22:67:49:
f6:4c:f9:d4:42:33:99:2e:21:d8:0f:74:2f:c4:de:2e:9e:99:
39:9b:bc:9e:67:84:16:22:3d:ba:64:a1:29:dc:f7:99:ec:e7:
9b:74:73:36:85:e9:af:47:42:23:df:00:44:f0:d9:c1:3b:ec:
c9:c3:4d:9f:f5:a2:93:4c:f4:67:b2:7c:cd:a4:d5:41:fb:3d:
f4:a6:0b:d7:db:8a:72:6a:64:6f:67:fe:4a:c1:b2:4a:c2:be:
1a:61:9f:d9:5a:67:a8:fb:82:0a:40:d0:82:a9:d2:26:40:29:
ee:d9:71:29:d0:39:e6:6e:73:29:f1:c4:81:2c:9f:2e:84:c7:
ea:94:5d:98:5d:68:2e:b5:37:23:fd:96:52:68:2d:a0:1a:64:
61:c8:f6:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBa11Dsrz9BO/Qhb3sGuaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYjUxMGQ3YzkxNWE0YmU2ZGY2YjE2ZmY1ODJmZDJkNmFk
MjM2MDUwHhcNMjUwNDI5MTIwMDE5WhcNMjUwNDMwMTIwMDE5WjAzMTEwLwYDVQQD
Eyg2NGU4OTEyYWZhNzU1MTZmMTRmYjRlMjY2OThiOGZlODBkMDAwYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnatSV3zYw+kynQFJOPFvyIBK+pTb
7UbLZvhcNrElnmGh5oTihvdsWotPX4Pyr/AIHKkiYdFx60673bb7Wxek8ypJN3sj
E3GSQ9v+EZs2jqAUe4AaCgwPJYDQ/B5bmEbJvh7IrhsnL0tme2BbUNQlcNX1nIge
8EyB4yKELt7M/C/il/LldaUhHxbbGqHsmPufFAjawFaZiKX4TOqyQKXKA0H3UEug
DNNxX8kfp2rKcze4WP2n88jGKQG6S4F864seXQOBXQSRXbxYN7Prgnu5+Faf6Zky
5Nj5y2vj7nGVD1zWmvHBftpROqRE63LjeZxhJY8S5xi9iTrJ+gr/C2h8YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTokSr6dVFvFPtOJmmLj+gNAAt/MB8GA1UdIwQY
MBaAFA61ENfJFaS+bfaxb/WC/S1q0jYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMt
ZDYzOGEzYmU4OGNhLzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMtZDYzOGEzYmU4OGNh
LzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAEUOWnT
Hy2LV8YlBks5HM6IRUDg+LTaSts56SOlyH4R6k7ekRaOPDCo9lI3ZEWqKYbOc3ot
cKgP5vwAVAfwaeLP3CT0fxtbGHkO83WuyJLD52+osFwz6JknhiMo7zqlb9vCcPMC
FB8oImdJ9kz51EIzmS4h2A90L8TeLp6ZOZu8nmeEFiI9umShKdz3meznm3RzNoXp
r0dCI98ARPDZwTvsycNNn/Wik0z0Z7J8zaTVQfs99KYL19uKcmpkb2f+SsGySsK+
GmGf2VpnqPuCCkDQgqnSJkAp7tlxKdA55m5zKfHEgSyfLoTH6pRdmF1oLrU3I/2W
UmgtoBpkYcj2DQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:33 2025 by rpki-client