Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
File: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json)
Hash identifier: PEVGQ0UgMFajtQTS8gRXyF+a4e1cvVBmuqLvhzowif0=
Subject key identifier: D0:35:3C:3D:7D:C2:2F:41:86:F4:CF:AB:19:EC:74:02:C3:84:FD:5C
Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
Certificate issuer: /CN=0ccc36028d005810caba24614bd60731dd495033
Certificate serial: 01969FE3D334E65E5DDE22ECF85A81ED08B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
Manifest number: 96
Signing time: Mon 05 May 2025 10:00:30 +0000
Manifest this update: Mon 05 May 2025 10:00:30 +0000
Manifest next update: Tue 06 May 2025 10:00:30 +0000
Files and hashes: 1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: vwB425e3hz9LvU9oNzF3PtD+xdEVcWnAXrQ5FaG3Ckw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:d3:34:e6:5e:5d:de:22:ec:f8:5a:81:ed:08:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccc36028d005810caba24614bd60731dd495033
Validity
Not Before: May 5 10:00:30 2025 GMT
Not After : May 6 10:00:30 2025 GMT
Subject: CN=d0353c3d7dc22f4186f4cfab19ec7402c384fd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:d2:e3:84:0c:14:83:3b:1d:c0:6b:ad:ea:
04:b3:51:89:d1:3c:b1:d6:55:a7:10:9a:bb:06:bf:
ad:a1:c6:07:88:73:59:80:43:48:30:d3:f4:b8:a0:
c5:d4:2a:80:1c:0c:53:4c:7f:76:08:68:4c:7e:ac:
37:1c:2c:1d:ec:11:0a:e6:50:43:7f:3a:82:d3:1a:
08:50:05:bf:f4:48:bc:45:2b:9f:13:62:9e:3a:d4:
7d:69:a3:ba:77:82:ec:cb:27:21:5a:6a:68:ee:32:
f0:84:90:86:2e:95:7f:63:a3:77:8b:74:e3:33:90:
2f:42:93:15:6b:65:f7:1f:af:3b:1b:3f:a3:18:fd:
47:60:8f:29:38:cd:27:18:c0:69:d9:19:22:a2:17:
7c:44:0f:77:0c:ac:4d:73:55:0b:35:41:2e:45:98:
ed:64:48:62:0a:b7:07:2d:a9:01:3f:8d:3a:9c:cf:
ab:55:fd:92:56:15:56:da:33:58:65:74:52:65:e3:
a8:ae:fc:88:35:ee:67:bc:e8:42:fb:55:75:9f:a2:
02:6f:a8:af:d4:99:3f:e7:c6:e2:41:1a:e0:51:9f:
c6:4b:a5:0b:76:3f:0b:17:27:1d:6e:a5:db:a5:eb:
c7:86:55:ab:d8:f3:e9:76:43:d6:c5:b9:17:d5:ae:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:35:3C:3D:7D:C2:2F:41:86:F4:CF:AB:19:EC:74:02:C3:84:FD:5C
X509v3 Authority Key Identifier:
keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:65:62:7e:6d:83:b0:f8:a9:29:c1:30:33:88:b6:60:8c:1d:
ef:a3:41:cc:a3:51:4b:25:21:36:02:28:94:85:ea:50:3b:2a:
31:25:74:33:00:48:ba:c9:8e:f2:2c:c3:b4:4b:69:4e:0d:6e:
80:a9:74:b3:9f:16:80:db:6a:ff:3d:15:af:0b:3d:ec:ca:bf:
56:24:0a:08:e2:90:68:90:68:aa:81:a5:a5:d5:d3:3a:eb:ad:
18:08:30:af:e0:50:2b:5c:9b:1c:26:01:c8:cd:50:8a:7f:66:
16:a6:c3:03:b6:71:e8:65:1b:76:63:a7:59:25:a3:07:34:5a:
c6:52:98:88:9d:e2:76:09:e9:9d:d5:07:96:9c:c0:0d:a0:9c:
76:64:34:f9:27:b9:64:f1:ee:95:1f:00:da:ab:6b:ba:0c:b4:
52:1a:2f:db:69:b4:78:04:a0:8b:4b:b2:f7:f0:2b:7c:55:1a:
ce:fe:d3:ce:22:4c:cd:b7:27:c9:7b:50:fd:bd:db:d0:c2:20:
1b:99:f3:87:a0:63:6f:af:05:9d:ef:2d:69:a4:b1:c8:e0:7d:
b8:a6:c5:34:24:21:bb:09:40:85:a8:a3:ed:f6:ab:3c:71:e0:
83:48:20:7d:ff:f7:8e:ab:95:f7:e5:e5:6a:3c:b8:be:ed:40:
e9:bd:37:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaf49M05l5d3iLs+FqB7Qi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjY2MzNjAyOGQwMDU4MTBjYWJhMjQ2MTRiZDYwNzMxZGQ0
OTUwMzMwHhcNMjUwNTA1MTAwMDMwWhcNMjUwNTA2MTAwMDMwWjAzMTEwLwYDVQQD
EyhkMDM1M2MzZDdkYzIyZjQxODZmNGNmYWIxOWVjNzQwMmMzODRmZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN3S44QMFIM7HcBrreoEs1GJ0Tyx
1lWnEJq7Br+tocYHiHNZgENIMNP0uKDF1CqAHAxTTH92CGhMfqw3HCwd7BEK5lBD
fzqC0xoIUAW/9Ei8RSufE2KeOtR9aaO6d4LsyychWmpo7jLwhJCGLpV/Y6N3i3Tj
M5AvQpMVa2X3H687Gz+jGP1HYI8pOM0nGMBp2Rkiohd8RA93DKxNc1ULNUEuRZjt
ZEhiCrcHLakBP406nM+rVf2SVhVW2jNYZXRSZeOorvyINe5nvOhC+1V1n6ICb6iv
1Jk/58biQRrgUZ/GS6ULdj8LFycdbqXbpevHhlWr2PPpdkPWxbkX1a6DBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA1PD19wi9BhvTPqxnsdALDhP1cMB8GA1UdIwQY
MBaAFAzMNgKNAFgQyrokYUvWBzHdSVAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUt
ZGNmM2ExYzI1Y2YzLzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUtZGNmM2ExYzI1Y2Yz
LzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGVifm2D
sPipKcEwM4i2YIwd76NBzKNRSyUhNgIolIXqUDsqMSV0MwBIusmO8izDtEtpTg1u
gKl0s58WgNtq/z0Vrws97Mq/ViQKCOKQaJBoqoGlpdXTOuutGAgwr+BQK1ybHCYB
yM1Qin9mFqbDA7Zx6GUbdmOnWSWjBzRaxlKYiJ3idgnpndUHlpzADaCcdmQ0+Se5
ZPHulR8A2qtrugy0Uhov22m0eASgi0uy9/ArfFUazv7TziJMzbcnyXtQ/b3b0MIg
G5nzh6Bjb68Fne8taaSxyOB9uKbFNCQhuwlAhaij7farPHHgg0ggff/3jquV9+Xl
ajy4vu1A6b03Bw==
-----END CERTIFICATE-----
Generated at Mon May 5 16:43:52 2025 by rpki-client