Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: 0/A887+cAOlQDMAlqSjEwFM4Jd8D4bzrryXOAL1F5p8=
Subject key identifier: C9:6E:C3:D1:45:BD:5D:39:89:FB:07:AA:CF:8A:8A:44:3C:C9:2F:CA
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 0196B3D87F00CC071E8FA7B5D499F495F588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 07:00:31 +0000
Manifest this update: Fri 09 May 2025 07:00:31 +0000
Manifest next update: Sat 10 May 2025 07:00:31 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: FAmVV5BdJg4S/WBUE5Qy9UrJL5/rRiGW2siC9TpYcpg=)
2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:7f:00:cc:07:1e:8f:a7:b5:d4:99:f4:95:f5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: May 9 07:00:31 2025 GMT
Not After : May 10 07:00:31 2025 GMT
Subject: CN=c96ec3d145bd5d3989fb07aacf8a8a443cc92fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:1f:01:f0:a1:f1:41:8d:cb:41:e4:fe:3b:
7d:34:8d:63:6a:e9:3d:cb:50:c4:e5:3e:d7:35:b8:
b9:1f:48:8a:71:48:2b:b6:3e:2c:0b:29:e3:1f:d7:
a7:0c:fc:d1:44:88:d5:af:dc:ad:d6:f9:6b:0a:f0:
bb:5d:e6:33:56:e9:f8:c9:98:56:72:37:8b:b5:cf:
d6:49:06:a7:11:18:3e:f6:2b:7f:7a:b4:47:d0:6d:
47:28:ae:05:92:c9:a0:d1:45:25:1c:96:25:2e:34:
c3:32:6f:b0:c1:12:af:bf:5f:e3:2b:7c:3c:90:b1:
05:13:ee:80:64:8a:bf:d0:fb:c9:c2:9c:6a:ae:06:
25:a1:89:e8:7e:c8:20:3d:57:2f:d2:4c:18:48:15:
e1:b4:fd:94:32:0a:c8:28:cb:09:7a:74:da:40:84:
4f:e0:a8:50:9a:77:a5:36:51:90:1c:ef:ab:7e:72:
fd:64:70:ae:98:c2:7e:fc:39:25:7d:d4:20:4d:ce:
70:62:47:29:bd:e1:70:16:70:5d:d1:fe:d3:85:c0:
ff:cc:9a:de:d6:0d:49:57:e9:ca:20:84:ee:14:b8:
9b:90:45:21:85:d8:38:46:b0:ee:49:2b:4a:89:16:
4a:12:29:a7:fa:5e:24:2a:ee:ca:3e:fe:56:f3:32:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:C3:D1:45:BD:5D:39:89:FB:07:AA:CF:8A:8A:44:3C:C9:2F:CA
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b3:06:b4:3c:44:5c:39:41:45:ae:1a:a3:7e:f8:18:fb:b3:
83:c2:f8:ef:17:3d:34:02:13:59:7a:55:4e:7a:08:be:0b:e3:
f0:f6:11:bc:7b:59:82:27:a7:06:0e:ac:0f:b2:b9:2a:51:e9:
f8:83:73:57:b2:6a:b5:1d:6f:1a:52:f2:71:a5:a6:54:c3:b5:
3c:c2:b4:30:bf:88:f9:79:15:f2:17:25:f1:6e:ec:75:dc:aa:
b9:f0:c3:d8:50:53:b8:29:d3:d6:5d:3f:0d:37:46:70:07:40:
79:d2:bf:7a:16:c3:f3:12:27:32:c1:8c:af:87:05:28:45:4a:
e0:e5:c6:3a:01:47:72:4f:d2:30:a1:42:8c:37:1f:cc:b1:56:
c3:e3:9f:e8:5f:70:00:ba:b1:92:21:8a:c4:7d:ba:2f:31:a4:
24:ce:cd:42:45:05:cc:66:bb:1d:1d:27:9c:07:e8:9b:89:4c:
76:b6:28:ce:30:3b:b6:5e:b4:a6:55:b9:03:c8:ab:26:9a:e8:
a1:56:ac:06:dc:6b:ab:f5:10:d4:86:fa:e8:3e:67:e0:a9:d9:
2b:76:0b:55:2b:9e:ff:38:90:31:a6:a7:03:3d:33:4f:9e:af:
0f:0c:3a:1d:41:b4:53:af:52:a0:38:d2:c8:f0:01:4e:e7:d3:
dc:87:d5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2H8AzAcej6e11Jn0lfWIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MTkzYmQ5Zjg0YjRhOWVkNDdhMDNiZGY4OTJkOWU3OThi
NzI3MjcwHhcNMjUwNTA5MDcwMDMxWhcNMjUwNTEwMDcwMDMxWjAzMTEwLwYDVQQD
EyhjOTZlYzNkMTQ1YmQ1ZDM5ODlmYjA3YWFjZjhhOGE0NDNjYzkyZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxAfAfCh8UGNy0Hk/jt9NI1jauk9
y1DE5T7XNbi5H0iKcUgrtj4sCynjH9enDPzRRIjVr9yt1vlrCvC7XeYzVun4yZhW
cjeLtc/WSQanERg+9it/erRH0G1HKK4Fksmg0UUlHJYlLjTDMm+wwRKvv1/jK3w8
kLEFE+6AZIq/0PvJwpxqrgYloYnofsggPVcv0kwYSBXhtP2UMgrIKMsJenTaQIRP
4KhQmnelNlGQHO+rfnL9ZHCumMJ+/DklfdQgTc5wYkcpveFwFnBd0f7ThcD/zJre
1g1JV+nKIITuFLibkEUhhdg4RrDuSStKiRZKEimn+l4kKu7KPv5W8zJioQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMluw9FFvV05ifsHqs+KikQ8yS/KMB8GA1UdIwQY
MBaAFHUZO9n4S0qe1HoDvfiS2eeYtycnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQt
M2I3MTU2OTFkMmU5LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQtM2I3MTU2OTFkMmU5
LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrMGtDxE
XDlBRa4ao374GPuzg8L47xc9NAITWXpVTnoIvgvj8PYRvHtZgienBg6sD7K5KlHp
+INzV7JqtR1vGlLycaWmVMO1PMK0ML+I+XkV8hcl8W7sddyqufDD2FBTuCnT1l0/
DTdGcAdAedK/ehbD8xInMsGMr4cFKEVK4OXGOgFHck/SMKFCjDcfzLFWw+Of6F9w
ALqxkiGKxH26LzGkJM7NQkUFzGa7HR0nnAfom4lMdrYozjA7tl60plW5A8irJpro
oVasBtxrq/UQ1Ib66D5n4KnZK3YLVSue/ziQMaanAz0zT56vDww6HUG0U69SoDjS
yPABTufT3IfVrQ==
-----END CERTIFICATE-----
Generated at Fri May 9 10:04:57 2025 by rpki-client