Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: ARoPefzMvAen0dwRbHKF1YXx/cmgKxLqcAfdD/7qAug=
Subject key identifier: 65:0F:FF:D1:FD:BC:71:6D:AB:2A:49:5C:3F:8B:48:66:2A:62:CD:2D
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 0196AA30CCA7CDFD37F0C5ECD680120EACD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0B2A
Signing time: Wed 07 May 2025 10:00:46 +0000
Manifest this update: Wed 07 May 2025 10:00:46 +0000
Manifest next update: Thu 08 May 2025 10:00:46 +0000
Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: 8OGnryxggtpnshyNuzwtMNQJPZ5Nehiibn9L6tEizZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:cc:a7:cd:fd:37:f0:c5:ec:d6:80:12:0e:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: May 7 10:00:46 2025 GMT
Not After : May 8 10:00:46 2025 GMT
Subject: CN=650fffd1fdbc716dab2a495c3f8b48662a62cd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:9a:02:3e:94:a6:67:97:1c:e0:97:ab:de:
2d:f7:5c:f2:b7:72:fe:9f:fa:6a:73:c7:cd:d8:41:
7c:3a:1a:43:c8:66:eb:c8:29:cd:26:fc:67:65:a6:
71:9d:4b:ed:18:3b:22:dd:10:03:9c:cf:a3:57:7f:
7c:e3:6e:85:db:83:cd:1f:e8:03:c0:43:32:d0:e2:
07:3f:8f:ba:26:f9:23:1c:f8:92:57:49:33:9e:9a:
db:4e:b0:93:f0:e0:56:b3:10:38:9e:fd:02:9e:55:
c3:e3:f4:7f:9d:7a:88:26:9e:8b:b3:d2:bd:eb:2a:
76:a9:02:cd:d8:3f:b2:e3:1a:56:23:1a:3b:71:91:
93:00:2d:03:09:c3:8b:3b:ee:b2:2e:96:bc:70:67:
0f:ff:c4:29:67:c1:6a:dd:41:9a:5c:95:fd:a2:22:
9b:c0:06:66:3f:2d:39:1c:86:b4:dd:2a:ff:c6:3f:
fb:99:9d:c9:36:f4:02:27:34:5a:07:ae:c7:30:15:
b0:53:3d:6e:26:e1:32:73:39:0f:a7:15:e5:7e:86:
cb:07:b6:82:c5:c7:4d:1a:d4:a4:b0:19:67:38:0e:
43:5e:e8:b5:e4:84:d9:a5:fa:04:94:cd:38:25:55:
f6:1d:86:e6:9e:61:fc:1c:02:25:79:18:ff:b5:8b:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0F:FF:D1:FD:BC:71:6D:AB:2A:49:5C:3F:8B:48:66:2A:62:CD:2D
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4c:fc:4a:cf:87:c5:3a:6a:67:83:53:a0:37:2e:49:4f:fe:
e6:d9:69:3b:8d:da:2c:63:24:64:93:e4:d1:91:fa:7e:be:91:
a9:e0:1e:6b:92:5d:e5:c0:b1:e0:f2:b5:4c:56:cb:78:17:c9:
4a:aa:df:d5:48:9d:c2:d6:e9:ac:d5:3d:b9:72:74:00:5c:4d:
14:23:18:5b:48:94:ba:d9:d0:44:4c:2b:d0:24:dc:9f:4f:0a:
47:dd:0f:f4:79:17:73:49:90:28:26:a2:2e:98:fd:67:cb:1a:
d7:36:b3:40:13:96:dc:c9:8c:c5:07:1d:51:ff:98:a8:ef:13:
ea:e3:b4:d0:f5:0b:02:df:3b:b3:42:bd:19:83:56:d3:c0:8c:
16:af:70:59:e8:f2:0f:5b:8e:cc:5b:ea:a3:bc:d9:c7:cb:11:
42:3d:f4:a7:4f:e6:98:19:24:ec:00:69:2b:62:54:2f:79:ba:
63:6b:7f:19:02:48:04:fe:b4:b2:96:65:f1:b7:1c:64:3c:61:
7c:5b:d5:f0:30:e3:a1:88:74:ef:98:c5:bf:bf:31:5e:e0:0c:
31:64:71:dd:b7:1f:5b:ea:26:ec:72:2f:d7:8d:18:83:50:49:
73:f9:bc:6c:ee:97:f8:22:8d:ee:23:d9:f0:c4:a3:b4:e3:30:
89:29:fb:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqMMynzf038MXs1oASDqzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NWI2YzNjOWFiZGVkYjk2ZWIxZWYzZjdmN2ZhNzAwNTc1
MjJjN2YwHhcNMjUwNTA3MTAwMDQ2WhcNMjUwNTA4MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg2NTBmZmZkMWZkYmM3MTZkYWIyYTQ5NWMzZjhiNDg2NjJhNjJjZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdaaAj6UpmeXHOCXq94t91zyt3L+
n/pqc8fN2EF8OhpDyGbryCnNJvxnZaZxnUvtGDsi3RADnM+jV398426F24PNH+gD
wEMy0OIHP4+6JvkjHPiSV0kznprbTrCT8OBWsxA4nv0CnlXD4/R/nXqIJp6Ls9K9
6yp2qQLN2D+y4xpWIxo7cZGTAC0DCcOLO+6yLpa8cGcP/8QpZ8Fq3UGaXJX9oiKb
wAZmPy05HIa03Sr/xj/7mZ3JNvQCJzRaB67HMBWwUz1uJuEyczkPpxXlfobLB7aC
xcdNGtSksBlnOA5DXui15ITZpfoElM04JVX2HYbmnmH8HAIleRj/tYtBIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUP/9H9vHFtqypJXD+LSGYqYs0tMB8GA1UdIwQY
MBaAFHRbbDyave25brHvP39/pwBXUix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWIt
ZjcwZDVlZjg3NWMzLzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWItZjcwZDVlZjg3NWMz
LzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0z8Ss+H
xTpqZ4NToDcuSU/+5tlpO43aLGMkZJPk0ZH6fr6RqeAea5Jd5cCx4PK1TFbLeBfJ
Sqrf1UidwtbprNU9uXJ0AFxNFCMYW0iUutnQREwr0CTcn08KR90P9HkXc0mQKCai
Lpj9Z8sa1zazQBOW3MmMxQcdUf+YqO8T6uO00PULAt87s0K9GYNW08CMFq9wWejy
D1uOzFvqo7zZx8sRQj30p0/mmBkk7ABpK2JUL3m6Y2t/GQJIBP60spZl8bccZDxh
fFvV8DDjoYh075jFv78xXuAMMWRx3bcfW+om7HIv140Yg1BJc/m8bO6X+CKN7iPZ
8MSjtOMwiSn7Qw==
-----END CERTIFICATE-----
Generated at Wed May 7 14:47:40 2025 by rpki-client