Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: 8TDL0u7GEdJJoBNsE3vkPztOvLPq4VdX5vuAkgRGxjU=
Subject key identifier: 8A:EB:78:68:8C:16:2B:E8:1F:11:41:B2:38:F8:FD:5F:17:22:25:CA
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 0196C6F18FF6BB13880B8ABF22BACBA28531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 031A
Signing time: Tue 13 May 2025 00:00:41 +0000
Manifest this update: Tue 13 May 2025 00:00:41 +0000
Manifest next update: Wed 14 May 2025 00:00:41 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: rCvzfMnZYz7l0e9auGzP2YrRKXNQ8p8ATeIbsxesSTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:8f:f6:bb:13:88:0b:8a:bf:22:ba:cb:a2:85:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: May 13 00:00:41 2025 GMT
Not After : May 14 00:00:41 2025 GMT
Subject: CN=8aeb78688c162be81f1141b238f8fd5f172225ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:e5:08:a8:f8:f1:5b:19:70:58:e6:77:c0:
2b:f5:76:57:94:d5:e9:df:49:80:e7:23:d9:60:31:
ce:db:79:b4:89:5f:25:85:39:93:ba:9b:42:39:48:
57:01:87:5d:d8:ef:30:45:9a:3c:58:f0:cd:2f:c1:
f7:34:d0:d9:be:7c:22:c4:c9:79:c2:0a:f4:33:05:
17:72:48:00:c0:d6:e4:2e:e4:68:99:7b:2b:cd:2f:
9b:f2:a1:fa:31:15:51:24:f9:cb:19:48:8e:29:25:
f3:c9:e3:40:ea:bd:75:03:ee:8c:9e:3b:b6:cc:0f:
d6:3a:02:29:27:15:00:34:5d:27:a6:8e:a3:06:76:
2b:05:06:df:f6:20:18:f3:fd:0b:f2:41:2a:1a:3c:
7b:51:08:5a:46:6d:b9:e2:f0:87:d8:f3:fe:bb:20:
33:bf:b1:1d:7c:a1:09:90:1a:65:54:a0:ac:58:06:
14:56:7b:b4:d5:6d:5c:01:90:b1:f6:ec:ae:26:bb:
b6:3e:35:6c:ad:65:77:9e:e7:f8:66:f2:26:55:1a:
37:21:0b:21:58:d9:cd:bd:5c:50:77:63:20:4f:87:
1b:21:15:3d:ff:3f:ff:bf:7f:8d:ce:ac:7f:ec:a1:
4c:25:35:8d:b5:43:a8:4a:63:a6:03:19:65:4b:13:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EB:78:68:8C:16:2B:E8:1F:11:41:B2:38:F8:FD:5F:17:22:25:CA
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:43:a9:08:39:57:f2:79:cf:cd:82:50:33:ca:e7:fe:d5:a0:
d0:17:1a:9c:e3:69:89:37:f1:06:5d:be:d7:1f:ca:53:fb:ed:
48:64:b9:fe:c9:38:ff:12:69:d2:0b:8f:a1:74:e9:00:be:2c:
cf:82:87:32:68:a6:e1:34:02:5d:d6:a6:a9:87:b4:76:38:73:
1d:96:cb:24:76:92:11:86:59:fc:c0:ff:43:c4:a4:68:08:ff:
24:14:b0:e5:d7:7b:e1:7c:d7:ba:bb:58:bd:93:66:31:38:d3:
2c:13:08:55:58:a3:96:ef:a0:c3:63:b2:b5:10:12:07:81:bc:
42:e4:0d:2e:c9:31:de:a7:56:be:90:4c:f8:cb:58:c8:6b:49:
f8:46:4c:fe:17:7a:89:07:93:ce:32:cd:f8:46:55:32:82:dd:
af:fc:fe:e7:47:e0:19:54:5f:73:bb:f9:cb:18:3e:f1:be:cc:
3f:78:5b:96:07:01:59:20:31:79:90:e3:ea:19:8c:84:f0:b6:
13:5e:26:90:66:7c:a8:0f:ce:6c:f2:c3:13:1a:dd:4e:86:bf:
2f:75:2d:9f:17:84:c4:46:6d:97:e8:fd:4a:58:ef:37:16:eb:
e3:d6:34:c4:65:54:33:57:8b:18:e6:14:e8:7c:e5:fd:02:50:
61:df:6d:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbG8Y/2uxOIC4q/IrrLooUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDk1MWI0M2FiOTcxZmQ5MmViNjNlYzI2YTViMjI2ZWQx
M2M3NTIwHhcNMjUwNTEzMDAwMDQxWhcNMjUwNTE0MDAwMDQxWjAzMTEwLwYDVQQD
Eyg4YWViNzg2ODhjMTYyYmU4MWYxMTQxYjIzOGY4ZmQ1ZjE3MjIyNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMDlCKj48VsZcFjmd8Ar9XZXlNXp
30mA5yPZYDHO23m0iV8lhTmTuptCOUhXAYdd2O8wRZo8WPDNL8H3NNDZvnwixMl5
wgr0MwUXckgAwNbkLuRomXsrzS+b8qH6MRVRJPnLGUiOKSXzyeNA6r11A+6Mnju2
zA/WOgIpJxUANF0npo6jBnYrBQbf9iAY8/0L8kEqGjx7UQhaRm254vCH2PP+uyAz
v7EdfKEJkBplVKCsWAYUVnu01W1cAZCx9uyuJru2PjVsrWV3nuf4ZvImVRo3IQsh
WNnNvVxQd2MgT4cbIRU9/z//v3+Nzqx/7KFMJTWNtUOoSmOmAxllSxMM9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrreGiMFivoHxFBsjj4/V8XIiXKMB8GA1UdIwQY
MBaAFA7ZUbQ6uXH9kutj7CalsibtE8dSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2Qt
ZmUzZGI1MjUzZWIwLzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2QtZmUzZGI1MjUzZWIw
LzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0OpCDlX
8nnPzYJQM8rn/tWg0BcanONpiTfxBl2+1x/KU/vtSGS5/sk4/xJp0guPoXTpAL4s
z4KHMmim4TQCXdamqYe0djhzHZbLJHaSEYZZ/MD/Q8SkaAj/JBSw5dd74XzXurtY
vZNmMTjTLBMIVVijlu+gw2OytRASB4G8QuQNLskx3qdWvpBM+MtYyGtJ+EZM/hd6
iQeTzjLN+EZVMoLdr/z+50fgGVRfc7v5yxg+8b7MP3hblgcBWSAxeZDj6hmMhPC2
E14mkGZ8qA/ObPLDExrdToa/L3UtnxeExEZtl+j9SljvNxbr49Y0xGVUM1eLGOYU
6Hzl/QJQYd9t+Q==
-----END CERTIFICATE-----
Generated at Tue May 13 06:38:37 2025 by rpki-client