Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: dIGpEOpd2XEq96kgPhd1KRwpE2scIEfCtgWQ7HHWceM=
Subject key identifier: DE:DF:6D:BD:5A:DE:71:15:A1:22:17:C6:FF:FB:63:43:F4:FF:D2:5A
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 0196A12DB1D64200F85CDF72C3B9121849D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 0FBC
Signing time: Mon 05 May 2025 16:00:48 +0000
Manifest this update: Mon 05 May 2025 16:00:48 +0000
Manifest next update: Tue 06 May 2025 16:00:48 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: Milbz/mao+kPR7yeuizWdzvCFBaTTRbdnUaIsCOz6v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:b1:d6:42:00:f8:5c:df:72:c3:b9:12:18:49:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: May 5 16:00:48 2025 GMT
Not After : May 6 16:00:48 2025 GMT
Subject: CN=dedf6dbd5ade7115a12217c6fffb6343f4ffd25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:84:69:e2:d8:ab:4f:96:82:aa:6e:4b:1b:
7f:eb:fe:46:7b:7b:9f:d7:bc:db:af:09:16:51:78:
9f:21:ea:e2:9d:b9:d2:ba:df:61:ac:94:06:50:63:
3a:4c:af:69:7b:b9:30:55:66:f9:a3:77:e8:90:14:
4f:e5:f9:f9:2b:fb:36:a4:37:bc:27:4c:21:94:25:
37:73:b1:38:d5:64:51:11:12:f5:9c:4b:1b:ba:89:
bd:93:08:0c:14:73:59:ee:9a:f0:42:f1:a0:15:90:
6b:a1:40:40:b3:0a:4c:ec:1e:e8:a5:22:66:d7:7c:
ad:64:8b:93:bf:00:d9:26:e9:36:21:00:c9:a4:ad:
c2:18:c8:df:24:a2:cc:f5:9e:3f:fe:54:fc:72:75:
03:54:8f:e3:4d:7e:fc:ae:9d:56:ff:af:ac:a4:2c:
19:e0:ed:e3:58:24:83:33:9d:0c:4e:b9:c3:0d:68:
1a:95:89:e4:bf:ec:41:52:2d:78:02:8f:82:b6:b2:
a4:f4:2c:45:54:b1:06:14:4f:a3:4b:02:11:e4:88:
29:0e:83:db:01:16:68:8c:b2:28:40:5a:41:49:9b:
c6:d6:4a:8b:3b:6e:71:48:8d:e0:d6:65:1d:e5:8f:
47:3a:b8:c3:48:5e:a0:8c:41:d5:b9:27:74:c6:e5:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DF:6D:BD:5A:DE:71:15:A1:22:17:C6:FF:FB:63:43:F4:FF:D2:5A
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:02:db:e5:12:88:af:a0:c8:48:04:a6:47:7c:e2:9b:f3:
8f:4d:4c:ea:66:70:95:ba:2c:db:c2:b4:f8:ea:45:d5:66:bb:
69:c0:b4:b1:90:bc:dc:6d:8a:f5:b1:80:09:fe:70:91:1d:20:
7d:dc:87:57:4c:46:5e:4a:5f:6f:7d:6d:9f:a1:f8:3d:27:7d:
17:95:71:35:75:85:b5:9b:b8:7c:e6:5a:5b:3b:ff:b7:40:9e:
65:26:9c:b8:73:09:96:82:8a:db:b5:06:c1:ff:1b:22:f7:00:
00:44:b9:5e:29:c8:66:af:71:63:73:2e:06:32:d4:cd:93:57:
77:50:45:6b:2c:f0:33:f0:4a:9f:66:52:a7:fb:4e:72:d8:3d:
27:7f:ac:b4:1c:5d:4b:17:db:b7:6b:f3:32:a2:91:19:62:bb:
99:f6:94:9f:d2:40:8b:a4:75:91:12:85:e8:eb:04:39:1e:c7:
1d:c9:8b:0f:bb:11:83:cb:0d:d5:23:7b:0c:b9:2d:39:a0:59:
5b:99:63:ec:ba:ce:dd:49:14:9b:c4:89:29:4c:23:64:5d:86:
70:0c:b3:98:65:85:52:d7:25:f4:8e:12:39:b8:4a:b8:6c:8c:
61:73:df:28:49:ec:18:50:ba:06:0e:83:41:70:1a:48:2b:53:
38:73:0b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahLbHWQgD4XN9yw7kSGEnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx
ODE3ZmEwHhcNMjUwNTA1MTYwMDQ4WhcNMjUwNTA2MTYwMDQ4WjAzMTEwLwYDVQQD
EyhkZWRmNmRiZDVhZGU3MTE1YTEyMjE3YzZmZmZiNjM0M2Y0ZmZkMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLKEaeLYq0+WgqpuSxt/6/5Ge3uf
17zbrwkWUXifIerinbnSut9hrJQGUGM6TK9pe7kwVWb5o3fokBRP5fn5K/s2pDe8
J0whlCU3c7E41WRRERL1nEsbuom9kwgMFHNZ7prwQvGgFZBroUBAswpM7B7opSJm
13ytZIuTvwDZJuk2IQDJpK3CGMjfJKLM9Z4//lT8cnUDVI/jTX78rp1W/6+spCwZ
4O3jWCSDM50MTrnDDWgalYnkv+xBUi14Ao+CtrKk9CxFVLEGFE+jSwIR5IgpDoPb
ARZojLIoQFpBSZvG1kqLO25xSI3g1mUd5Y9HOrjDSF6gjEHVuSd0xuXLkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7fbb1a3nEVoSIXxv/7Y0P0/9JaMB8GA1UdIwQY
MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt
YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5
LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVYC2+US
iK+gyEgEpkd84pvzj01M6mZwlbos28K0+OpF1Wa7acC0sZC83G2K9bGACf5wkR0g
fdyHV0xGXkpfb31tn6H4PSd9F5VxNXWFtZu4fOZaWzv/t0CeZSacuHMJloKK27UG
wf8bIvcAAES5XinIZq9xY3MuBjLUzZNXd1BFayzwM/BKn2ZSp/tOctg9J3+stBxd
Sxfbt2vzMqKRGWK7mfaUn9JAi6R1kRKF6OsEOR7HHcmLD7sRg8sN1SN7DLktOaBZ
W5lj7LrO3UkUm8SJKUwjZF2GcAyzmGWFUtcl9I4SObhKuGyMYXPfKEnsGFC6Bg6D
QXAaSCtTOHMLFg==
-----END CERTIFICATE-----
Generated at Mon May 5 17:37:35 2025 by rpki-client