Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: aZsmFq7HzGMLTfR4/s56x94IAl4d11uDpOGmE4lsn5U=
Subject key identifier: DA:86:FB:B4:58:EB:C1:A9:27:3E:18:E9:E2:30:71:5A:A8:54:DA:E0
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 0196B71081917D933CDEC23233C6EF1CE749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 11CD
Signing time: Fri 09 May 2025 22:00:34 +0000
Manifest this update: Fri 09 May 2025 22:00:34 +0000
Manifest next update: Sat 10 May 2025 22:00:34 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: xI2tl7tCIlVsUy8+oPVVuea8HMxGMFpJXJ8tpPDNRfE=)
2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:81:91:7d:93:3c:de:c2:32:33:c6:ef:1c:e7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: May 9 22:00:34 2025 GMT
Not After : May 10 22:00:34 2025 GMT
Subject: CN=da86fbb458ebc1a9273e18e9e230715aa854dae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:2d:cb:a9:ce:2a:91:b1:d7:22:f1:44:58:
69:e1:e8:1d:23:50:e0:ba:05:98:57:f5:32:13:91:
20:71:b1:dc:1b:ed:bf:cd:04:4c:56:67:4f:3e:2a:
a9:f7:43:b2:b5:80:a5:54:ab:ea:25:24:88:3b:20:
b4:e3:be:7a:e0:15:35:60:d4:71:59:2d:b1:8c:0f:
71:e2:68:f0:24:3d:01:24:1d:90:9d:a9:82:39:ed:
13:44:f9:3a:92:7b:ae:b5:86:29:5d:9a:83:5d:e2:
00:b8:78:8c:97:b1:7e:b0:58:f9:7f:7e:87:6e:d2:
38:77:31:b1:2c:00:bf:21:20:a0:19:80:c8:33:be:
7d:a2:42:c6:5e:75:ac:1b:84:65:40:fd:1a:e5:cf:
06:e3:8f:56:45:28:be:01:e2:e4:02:0d:84:d1:30:
a4:18:2c:da:cd:b6:8a:07:98:55:5e:29:d2:35:dd:
0a:0f:83:fe:a2:de:cc:1c:b1:c6:5f:05:3d:24:78:
1a:45:33:dd:f7:ad:43:83:e5:bc:fd:52:57:df:c5:
aa:41:73:4f:fb:99:76:0b:a3:7d:55:a3:84:d1:9f:
a6:39:73:d7:52:17:59:32:3f:9a:99:e3:e0:8a:94:
16:8d:88:59:bf:15:58:2e:8d:8d:ce:b5:9f:71:c6:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:FB:B4:58:EB:C1:A9:27:3E:18:E9:E2:30:71:5A:A8:54:DA:E0
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:40:82:cf:c0:51:99:1d:06:ec:a9:94:a6:dd:2c:36:2c:
f5:49:4d:89:00:b7:4f:f3:27:b6:f4:b8:ea:d1:e8:f7:2e:b1:
83:41:37:a8:7b:5f:57:54:8f:01:7d:0e:87:02:24:05:29:17:
66:b8:70:32:c8:d4:58:24:80:0f:fc:6f:8d:10:af:19:dd:b6:
09:eb:fd:f5:7c:3d:2b:57:c6:72:94:75:08:23:5c:15:b9:82:
ae:89:7b:89:31:61:74:2b:da:1d:aa:5f:6c:16:87:05:c3:35:
80:65:79:f2:db:73:42:8e:87:08:d0:c4:d2:d1:ac:77:45:43:
e9:aa:f2:7c:b8:b8:d4:a8:3c:c5:88:68:c7:ff:db:fb:2a:d6:
58:cb:87:b5:cb:8b:79:78:4c:da:bb:51:06:ff:c4:78:b3:d2:
e6:76:8a:be:1c:4b:4e:fc:a2:c2:b2:c2:ff:1f:13:77:13:5c:
1d:5a:e9:2a:48:2b:ce:2c:97:b4:5a:97:e2:34:30:ef:ca:39:
82:02:20:fc:69:4c:a3:58:40:14:f1:4f:c6:d8:92:13:00:e2:
99:3d:c5:4d:dc:22:a4:70:6c:40:43:df:b7:23:11:51:9d:cf:
5c:5e:6b:f2:7d:81:94:57:1d:49:46:3e:3c:61:90:42:b3:56:
3e:8a:29:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3EIGRfZM83sIyM8bvHOdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzhjMzM4YjEyOGY4M2FkZWMyZjY5ZDkzYzMyYzUzNTNj
YTAzOTgwHhcNMjUwNTA5MjIwMDM0WhcNMjUwNTEwMjIwMDM0WjAzMTEwLwYDVQQD
EyhkYTg2ZmJiNDU4ZWJjMWE5MjczZTE4ZTllMjMwNzE1YWE4NTRkYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yoty6nOKpGx1yLxRFhp4egdI1Dg
ugWYV/UyE5EgcbHcG+2/zQRMVmdPPiqp90OytYClVKvqJSSIOyC047564BU1YNRx
WS2xjA9x4mjwJD0BJB2QnamCOe0TRPk6knuutYYpXZqDXeIAuHiMl7F+sFj5f36H
btI4dzGxLAC/ISCgGYDIM759okLGXnWsG4RlQP0a5c8G449WRSi+AeLkAg2E0TCk
GCzazbaKB5hVXinSNd0KD4P+ot7MHLHGXwU9JHgaRTPd961Dg+W8/VJX38WqQXNP
+5l2C6N9VaOE0Z+mOXPXUhdZMj+amePgipQWjYhZvxVYLo2NzrWfccZn6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqG+7RY68GpJz4Y6eIwcVqoVNrgMB8GA1UdIwQY
MBaAFNA4wzixKPg63sL2nZPDLFNTygOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85MjVmOTEtMzBjNS00YTZiLWExNDkt
OWJmOGIxZWYyZTk2LzEvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85MjVmOTEtMzBjNS00YTZiLWExNDktOWJmOGIxZWYyZTk2
LzEvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWxAgs/A
UZkdBuyplKbdLDYs9UlNiQC3T/MntvS46tHo9y6xg0E3qHtfV1SPAX0OhwIkBSkX
ZrhwMsjUWCSAD/xvjRCvGd22Cev99Xw9K1fGcpR1CCNcFbmCrol7iTFhdCvaHapf
bBaHBcM1gGV58ttzQo6HCNDE0tGsd0VD6aryfLi41Kg8xYhox//b+yrWWMuHtcuL
eXhM2rtRBv/EeLPS5naKvhxLTvyiwrLC/x8TdxNcHVrpKkgrziyXtFqX4jQw78o5
ggIg/GlMo1hAFPFPxtiSEwDimT3FTdwipHBsQEPftyMRUZ3PXF5r8n2BlFcdSUY+
PGGQQrNWPoopSQ==
-----END CERTIFICATE-----
Generated at Sat May 10 08:37:31 2025 by rpki-client