Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: DP6nK4L1dWb7o6sJzztursnHTzQ8kvzomNetbYBJwQk=
Subject key identifier: 4C:4A:26:6E:51:73:94:30:6B:22:3E:78:CE:E9:B4:F3:CC:25:98:95
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 0196C1CB14B5C8836732EA87B943267BAC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: DD
Signing time: Mon 12 May 2025 00:00:33 +0000
Manifest this update: Mon 12 May 2025 00:00:33 +0000
Manifest next update: Tue 13 May 2025 00:00:33 +0000
Files and hashes: 1: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: ZBoV9K69VcovbB/OtfGzdQ3+EHhBdegeKC6J4MaPjWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:14:b5:c8:83:67:32:ea:87:b9:43:26:7b:ac:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: May 12 00:00:33 2025 GMT
Not After : May 13 00:00:33 2025 GMT
Subject: CN=4c4a266e517394306b223e78cee9b4f3cc259895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:fb:2c:df:64:cc:ab:34:0c:e7:2e:29:c5:
74:0d:55:4c:e6:82:24:52:b9:f4:da:19:e2:d5:c0:
00:2c:8d:92:37:f2:ca:c4:01:2f:7a:71:01:fb:53:
b9:1e:1c:96:42:e2:62:ae:ff:5b:16:34:19:87:b9:
eb:bd:20:d3:50:24:44:cc:8e:5b:d1:fb:94:cc:62:
3f:c2:6d:91:39:b9:45:8b:c3:1c:f7:0a:d3:56:a4:
7a:80:36:c4:10:0c:d4:f4:03:bf:19:9c:4d:93:09:
4f:b4:d8:e4:ea:b8:63:1c:cc:aa:c0:10:0a:f3:9b:
9d:a4:dc:1e:3d:2e:ed:f2:64:84:99:63:0e:8d:43:
b1:df:fb:79:4d:81:37:c2:23:28:41:d6:3a:e6:92:
ee:76:d3:65:b3:4b:8c:35:cb:e8:66:72:75:a6:6d:
fb:97:32:6e:87:5f:84:7f:9f:87:fa:93:24:df:d9:
a6:1c:db:9f:91:8f:18:9a:53:61:b7:7f:76:52:28:
ac:45:fb:eb:50:4d:6a:f2:0a:82:8d:96:7b:bf:bb:
60:bd:6f:de:e8:31:a4:7d:07:94:00:6d:50:08:b1:
5b:98:d0:40:2c:8c:ca:a1:74:ca:95:33:ab:16:3e:
52:8d:39:fa:5b:b7:bb:cd:ae:bf:a3:fc:68:44:31:
e6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:26:6E:51:73:94:30:6B:22:3E:78:CE:E9:B4:F3:CC:25:98:95
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c0:14:85:35:36:6f:87:e8:34:82:91:58:9c:bd:d2:37:8d:
8b:7e:59:92:0c:97:cb:0c:97:81:fb:a4:24:b5:c0:d5:a5:10:
78:bf:3a:71:91:8b:fb:db:09:f4:8c:d2:e6:48:fd:1a:72:c9:
29:00:bd:19:77:c9:3a:65:14:ea:d9:36:46:0f:40:9f:86:3a:
06:84:7e:71:62:41:1d:42:d2:2b:7f:ac:89:9c:d1:2e:d8:2b:
78:d1:fd:aa:a7:af:ce:16:b7:7a:cc:70:ce:38:08:a8:5e:be:
31:b4:ba:fb:f6:80:45:9b:4e:7a:39:5d:87:35:4c:52:2e:65:
ea:a0:01:07:05:cd:12:3e:98:c3:54:4b:dd:c7:6a:a0:03:5d:
e0:0c:9d:55:68:e9:d7:23:c0:1c:cb:f3:82:e8:25:50:e2:98:
b0:98:e4:64:27:b3:7e:9d:84:17:20:a0:e7:72:bd:25:e7:7e:
55:0b:6f:4a:81:5f:a1:94:a7:e0:8c:2d:48:99:0e:54:b7:f4:
e8:7b:c9:f6:16:b5:66:23:3a:be:38:0e:30:ee:0a:fe:ee:eb:
44:c0:7b:cd:93:53:f5:ca:78:5f:f0:b2:53:1a:7c:e9:a4:a5:
bb:15:5b:21:3a:2c:aa:38:c1:25:36:a1:e2:cc:27:6a:e4:5b:
91:dd:ae:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByxS1yINnMuqHuUMme6yLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNTM1MmQ5NDQxYjY1YzIwMTZlZDhlYjdlMmYyMzU5NTQ0
MzRmNWQwHhcNMjUwNTEyMDAwMDMzWhcNMjUwNTEzMDAwMDMzWjAzMTEwLwYDVQQD
Eyg0YzRhMjY2ZTUxNzM5NDMwNmIyMjNlNzhjZWU5YjRmM2NjMjU5ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLP7LN9kzKs0DOcuKcV0DVVM5oIk
Urn02hni1cAALI2SN/LKxAEvenEB+1O5HhyWQuJirv9bFjQZh7nrvSDTUCREzI5b
0fuUzGI/wm2ROblFi8Mc9wrTVqR6gDbEEAzU9AO/GZxNkwlPtNjk6rhjHMyqwBAK
85udpNwePS7t8mSEmWMOjUOx3/t5TYE3wiMoQdY65pLudtNls0uMNcvoZnJ1pm37
lzJuh1+Ef5+H+pMk39mmHNufkY8YmlNht392UiisRfvrUE1q8gqCjZZ7v7tgvW/e
6DGkfQeUAG1QCLFbmNBALIzKoXTKlTOrFj5SjTn6W7e7za6/o/xoRDHmhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExKJm5Rc5QwayI+eM7ptPPMJZiVMB8GA1UdIwQY
MBaAFA5TUtlEG2XCAW7Y634vI1lUQ09dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGxOUzJVUWJaY0lCYnRqcmZpOGpXVlJEVDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xZjU2ODEtYjEwNS00ZmYxLTliZjQt
YWRjNTZkNDNlMGM0LzEvRGxOUzJVUWJaY0lCYnRqcmZpOGpXVlJEVDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xZjU2ODEtYjEwNS00ZmYxLTliZjQtYWRjNTZkNDNlMGM0
LzEvRGxOUzJVUWJaY0lCYnRqcmZpOGpXVlJEVDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsAUhTU2
b4foNIKRWJy90jeNi35ZkgyXywyXgfukJLXA1aUQeL86cZGL+9sJ9IzS5kj9GnLJ
KQC9GXfJOmUU6tk2Rg9An4Y6BoR+cWJBHULSK3+siZzRLtgreNH9qqevzha3esxw
zjgIqF6+MbS6+/aARZtOejldhzVMUi5l6qABBwXNEj6Yw1RL3cdqoANd4AydVWjp
1yPAHMvzguglUOKYsJjkZCezfp2EFyCg53K9Jed+VQtvSoFfoZSn4IwtSJkOVLf0
6HvJ9ha1ZiM6vjgOMO4K/u7rRMB7zZNT9cp4X/CyUxp86aSluxVbITosqjjBJTah
4swnauRbkd2uLA==
-----END CERTIFICATE-----
Generated at Mon May 12 05:41:32 2025 by rpki-client