Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: c87UgEIZKS8O3xu8mEeGS0aLG/VB93Bv5Fgvb9Ds8WQ=
Subject key identifier: B0:FB:45:87:87:FB:EF:A5:A9:E2:A3:1E:80:A7:56:E0:F0:9B:92:E9
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 0196C239066D475B815F6984C0C8180D3453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 02:00:39 +0000
Manifest this update: Mon 12 May 2025 02:00:39 +0000
Manifest next update: Tue 13 May 2025 02:00:39 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: GizC9K70t+UmI1Ft5ulPKwZntumhMHf60Yz+9vrKBZE=)
2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:06:6d:47:5b:81:5f:69:84:c0:c8:18:0d:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: May 12 02:00:39 2025 GMT
Not After : May 13 02:00:39 2025 GMT
Subject: CN=b0fb458787fbefa5a9e2a31e80a756e0f09b92e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:d5:64:ba:1e:3f:e8:f2:a5:89:69:4c:03:
b5:b8:b0:3b:c7:cd:69:4d:3b:26:cc:1a:57:18:51:
c7:1c:9f:b3:43:ad:3d:82:f1:b7:18:37:ce:0e:6f:
4c:c6:df:0c:d0:40:07:f3:32:6d:f4:bb:c4:ee:22:
ed:8e:90:7a:83:9a:6e:ab:d1:62:a8:ef:46:23:40:
60:0b:fa:98:a6:da:5c:15:19:0c:92:37:ca:36:1a:
a4:6a:89:da:aa:3e:d9:7e:2f:8a:f3:3d:e3:12:c7:
4e:b6:5d:d3:30:03:b9:6c:65:92:38:e9:bc:f4:09:
b4:1a:d3:7e:e5:c5:7c:76:dc:5c:34:0e:72:52:8a:
1f:ad:35:53:80:18:a0:0d:4a:ef:94:aa:21:eb:cb:
b2:c4:73:eb:a2:a9:44:db:ed:50:68:72:db:ab:e8:
e5:d7:56:94:bd:a7:92:e5:7a:ae:47:e2:87:d8:07:
04:f7:f1:e0:68:ba:72:af:d9:b5:2c:e3:45:27:cf:
0a:7d:b7:9b:ff:fc:7e:31:89:27:50:1e:82:e4:65:
5a:1f:98:0a:6f:05:cd:be:b6:c4:92:3a:80:21:42:
29:fc:7b:13:ee:e1:14:01:25:64:97:c5:f9:5c:58:
12:5e:bd:c1:f9:0a:5c:bc:39:d5:4c:f3:f8:cf:df:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FB:45:87:87:FB:EF:A5:A9:E2:A3:1E:80:A7:56:E0:F0:9B:92:E9
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1f:2e:1d:e5:63:7d:8f:b6:10:6b:8d:24:fb:d7:2c:ad:6e:
c4:85:a8:06:7f:5a:73:f8:a7:95:96:70:91:40:05:8e:88:52:
75:7d:73:cb:dc:94:19:cc:98:20:d9:2d:0f:2d:98:58:3e:e1:
54:d7:be:19:ba:82:ba:e9:19:af:5f:37:05:d6:d3:6d:5d:97:
4c:63:7c:c7:7c:9f:ec:97:d0:fc:94:9a:80:9f:5b:03:03:db:
88:aa:75:94:d5:c3:d7:93:58:cf:04:dc:23:54:b7:ce:e7:1f:
9d:42:11:b8:b2:3a:cd:26:6c:7c:3e:bc:04:80:75:b6:9f:c9:
e4:38:50:b1:da:eb:0e:d5:1c:e9:95:78:37:2e:1f:b7:11:1d:
80:71:ac:2b:7c:c6:4a:73:63:e6:c1:d3:eb:41:04:4c:20:99:
6e:dc:7f:06:f9:d6:05:0d:65:39:61:f0:41:2d:93:ad:1e:16:
1b:b2:e4:39:e1:17:2a:2f:d4:6f:ea:69:e8:4e:bd:91:06:82:
83:44:e8:4f:a1:63:c8:ee:d6:9c:49:98:7f:ec:74:a2:7c:22:
70:d2:18:ab:96:ee:30:e6:ae:a1:7a:92:8e:82:3b:31:90:02:
7a:91:b1:34:ab:2f:d0:d4:54:be:ca:4b:02:48:50:a6:4d:b8:
00:21:aa:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOQZtR1uBX2mEwMgYDTRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0M2M5MjQ3NGZlZDM4M2M5NWZhMmNjZDgzZDYxNGY1N2U1
NjNkODIwHhcNMjUwNTEyMDIwMDM5WhcNMjUwNTEzMDIwMDM5WjAzMTEwLwYDVQQD
EyhiMGZiNDU4Nzg3ZmJlZmE1YTllMmEzMWU4MGE3NTZlMGYwOWI5MmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArprVZLoeP+jypYlpTAO1uLA7x81p
TTsmzBpXGFHHHJ+zQ609gvG3GDfODm9Mxt8M0EAH8zJt9LvE7iLtjpB6g5puq9Fi
qO9GI0BgC/qYptpcFRkMkjfKNhqkaonaqj7Zfi+K8z3jEsdOtl3TMAO5bGWSOOm8
9Am0GtN+5cV8dtxcNA5yUoofrTVTgBigDUrvlKoh68uyxHProqlE2+1QaHLbq+jl
11aUvaeS5XquR+KH2AcE9/HgaLpyr9m1LONFJ88Kfbeb//x+MYknUB6C5GVaH5gK
bwXNvrbEkjqAIUIp/HsT7uEUASVkl8X5XFgSXr3B+QpcvDnVTPP4z98DWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLD7RYeH+++lqeKjHoCnVuDwm5LpMB8GA1UdIwQY
MBaAFNQ8kkdP7Tg8lfoszYPWFPV+Vj2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMt
NmIwNmMxNzZiZDVhLzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMtNmIwNmMxNzZiZDVh
LzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqB8uHeVj
fY+2EGuNJPvXLK1uxIWoBn9ac/inlZZwkUAFjohSdX1zy9yUGcyYINktDy2YWD7h
VNe+GbqCuukZr183BdbTbV2XTGN8x3yf7JfQ/JSagJ9bAwPbiKp1lNXD15NYzwTc
I1S3zucfnUIRuLI6zSZsfD68BIB1tp/J5DhQsdrrDtUc6ZV4Ny4ftxEdgHGsK3zG
SnNj5sHT60EETCCZbtx/BvnWBQ1lOWHwQS2TrR4WG7LkOeEXKi/Ub+pp6E69kQaC
g0ToT6FjyO7WnEmYf+x0onwicNIYq5buMOauoXqSjoI7MZACepGxNKsv0NRUvspL
AkhQpk24ACGqSw==
-----END CERTIFICATE-----
Generated at Mon May 12 08:03:51 2025 by rpki-client