Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: KP/CG9+3y+zBZg9LIQFI3VAfY9QIhLnOpPBoLd+2dEQ=
Subject key identifier: 74:1C:80:02:99:45:79:A2:AA:CF:F3:4D:97:CD:3B:6B:D8:1E:47:4D
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 01969E9AC7D278420283B46E9173D162EFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0A2F
Signing time: Mon 05 May 2025 04:01:05 +0000
Manifest this update: Mon 05 May 2025 04:01:05 +0000
Manifest next update: Tue 06 May 2025 04:01:05 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: BfkedD4B7Ba0b0OBm1hBkGvehkvvQJO6O4pQDQhaTdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:c7:d2:78:42:02:83:b4:6e:91:73:d1:62:ef:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: May 5 04:01:05 2025 GMT
Not After : May 6 04:01:05 2025 GMT
Subject: CN=741c8002994579a2aacff34d97cd3b6bd81e474d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:f9:66:4e:65:55:9c:22:4f:6c:3c:a6:5f:
ad:98:1a:90:35:9b:ea:42:d4:f9:a3:60:c4:9e:ab:
ce:c3:17:11:f0:40:f0:84:55:90:e3:76:ab:83:75:
2f:1f:81:d4:84:cb:4d:e6:62:d2:90:dd:ba:9d:cc:
97:0e:2a:11:33:35:95:4e:42:b7:e5:e5:9b:8a:3e:
80:56:e2:ac:28:ce:85:de:9d:b2:1e:06:9a:10:e0:
c8:07:ca:60:06:2b:80:3a:45:8b:77:f3:f9:cb:5f:
18:31:15:40:9d:fc:82:6e:31:cf:f2:57:b9:c9:c6:
0d:d3:24:f1:f6:5e:73:a0:17:11:f7:b6:49:86:fd:
14:68:5b:35:86:b5:98:48:3e:b3:52:62:57:6b:e3:
5f:b6:50:dc:a9:2d:de:59:1e:cc:9a:7d:5c:fe:60:
c5:15:af:59:6c:bb:a0:7f:20:b6:a0:77:25:db:46:
33:b6:63:e7:1a:70:d1:cd:fb:a9:c3:37:87:bf:8d:
b3:f1:44:cb:1a:69:3b:98:41:9f:5a:2d:2a:1a:10:
24:57:fb:bb:a5:12:42:02:f4:f6:68:f3:2c:2f:cb:
de:68:83:d1:22:2f:7b:6f:45:bf:ac:d8:32:8a:72:
12:38:60:52:8e:66:80:6f:86:5d:40:f8:cd:9e:68:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1C:80:02:99:45:79:A2:AA:CF:F3:4D:97:CD:3B:6B:D8:1E:47:4D
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e4:8c:b2:f1:e0:25:39:ca:82:f6:11:79:32:76:6e:b6:08:
de:d1:92:ab:be:3d:c4:48:1c:91:a2:a9:09:77:8a:8f:f4:59:
d7:b7:cc:07:93:43:89:48:b7:11:f8:f7:56:e3:ec:a3:06:49:
60:1c:3b:19:8f:0b:3a:80:f0:81:fb:83:bc:64:1b:9b:12:84:
e3:9a:1d:b9:bb:db:9c:fb:f9:6d:5b:f0:60:9a:d1:0f:8a:af:
1d:ab:fe:af:03:67:ec:db:26:49:07:b1:26:99:45:b4:84:bf:
5b:ad:db:48:0c:91:40:86:12:32:49:42:96:ed:b3:85:c5:40:
88:a2:72:7a:e5:01:2f:fe:7c:ef:74:0a:57:4a:c0:3d:82:7c:
61:85:a5:4b:19:fd:39:37:89:77:15:f6:e1:87:eb:02:f3:31:
02:da:4c:42:b3:5d:5f:a8:03:5a:66:b2:c3:a6:17:6b:43:ba:
53:90:e2:d1:67:cf:67:d1:d3:1b:8f:db:bf:2b:1d:8e:a3:7e:
d4:35:b3:0b:15:db:4a:04:f4:a2:84:e5:50:05:bf:e2:51:9c:
ed:c7:47:28:a3:30:d4:e8:35:c6:17:49:0f:05:55:42:48:fd:
05:3a:35:d4:82:11:a8:54:9f:3b:ad:2b:09:e6:6e:87:fe:fa:
1c:d8:a8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemsfSeEICg7RukXPRYu/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNDljNDlhNzVjZjZlMjQ4YzliNTFjNzA1NGRiMmY4ZDlk
Y2VkY2IwHhcNMjUwNTA1MDQwMTA1WhcNMjUwNTA2MDQwMTA1WjAzMTEwLwYDVQQD
Eyg3NDFjODAwMjk5NDU3OWEyYWFjZmYzNGQ5N2NkM2I2YmQ4MWU0NzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywj5Zk5lVZwiT2w8pl+tmBqQNZvq
QtT5o2DEnqvOwxcR8EDwhFWQ43arg3UvH4HUhMtN5mLSkN26ncyXDioRMzWVTkK3
5eWbij6AVuKsKM6F3p2yHgaaEODIB8pgBiuAOkWLd/P5y18YMRVAnfyCbjHP8le5
ycYN0yTx9l5zoBcR97ZJhv0UaFs1hrWYSD6zUmJXa+NftlDcqS3eWR7Mmn1c/mDF
Fa9ZbLugfyC2oHcl20YztmPnGnDRzfupwzeHv42z8UTLGmk7mEGfWi0qGhAkV/u7
pRJCAvT2aPMsL8veaIPRIi97b0W/rNgyinISOGBSjmaAb4ZdQPjNnmi4yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQcgAKZRXmiqs/zTZfNO2vYHkdNMB8GA1UdIwQY
MBaAFA9JxJp1z24kjJtRxwVNsvjZ3O3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZWExNjEtY2I1Yy00ZTQxLWI4MzYt
ZDgwMDc3ZTEyYjVkLzEvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZWExNjEtY2I1Yy00ZTQxLWI4MzYtZDgwMDc3ZTEyYjVk
LzEvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduSMsvHg
JTnKgvYReTJ2brYI3tGSq749xEgckaKpCXeKj/RZ17fMB5NDiUi3Efj3VuPsowZJ
YBw7GY8LOoDwgfuDvGQbmxKE45odubvbnPv5bVvwYJrRD4qvHav+rwNn7NsmSQex
JplFtIS/W63bSAyRQIYSMklClu2zhcVAiKJyeuUBL/5873QKV0rAPYJ8YYWlSxn9
OTeJdxX24YfrAvMxAtpMQrNdX6gDWmayw6YXa0O6U5Di0WfPZ9HTG4/bvysdjqN+
1DWzCxXbSgT0ooTlUAW/4lGc7cdHKKMw1Og1xhdJDwVVQkj9BTo11IIRqFSfO60r
CeZuh/76HNioYg==
-----END CERTIFICATE-----
Generated at Mon May 5 09:06:00 2025 by rpki-client