Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: /7z35WBkODN69yaWohxoYzk1EDPYJx2C2aYOaycU9fI=
Subject key identifier: D7:C2:7F:65:AF:FB:F9:9D:6A:5D:6D:B7:F1:5A:A0:70:3E:1B:11:0E
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 0196CA294D8CB007BED4CAB2A39B7AF5D9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0B36
Signing time: Tue 13 May 2025 15:00:26 +0000
Manifest this update: Tue 13 May 2025 15:00:26 +0000
Manifest next update: Wed 14 May 2025 15:00:26 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: 4t2BbzCIb2URNF/5SsZXlbdiWSXJ2gjP3XeBMUrbtYo=)
2: kzypufx1A54QL9RnefA55meWSPM.roa (hash: cK+sc1FxI2UgckK1YuVxFsSFuYcOk8chhmHAVw1PhQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:4d:8c:b0:07:be:d4:ca:b2:a3:9b:7a:f5:d9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: May 13 15:00:26 2025 GMT
Not After : May 14 15:00:26 2025 GMT
Subject: CN=d7c27f65affbf99d6a5d6db7f15aa0703e1b110e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:38:5d:8c:9b:bb:36:86:df:20:94:38:59:
2e:57:b7:61:1b:ae:01:9e:f5:48:e7:01:bb:2d:bd:
10:98:36:c9:ba:2e:bc:72:6b:00:a3:1c:61:0b:2e:
5c:02:c1:d5:41:65:04:61:03:fd:72:72:ab:c0:39:
f2:19:01:34:4e:35:2b:3c:55:1d:63:91:e7:5e:e4:
55:38:ff:09:30:1a:ff:62:c9:a2:4b:c6:e3:28:26:
71:b4:05:48:8b:51:3d:28:66:cc:75:85:a9:df:88:
e6:c7:99:5e:be:3c:9a:93:fa:bf:d0:6f:b9:d8:4a:
48:e4:d7:ba:2e:68:0c:45:89:c2:c7:f6:4d:4c:b0:
fd:97:b5:9e:9b:7b:bf:07:db:3b:52:54:bc:e2:81:
8d:15:43:5a:26:9d:85:8a:c0:76:bc:b8:35:d1:73:
b3:f8:85:c3:7a:fa:a8:5e:1f:94:4f:7b:99:21:31:
38:29:5f:e1:63:b2:7b:a6:b9:0c:eb:7a:1e:3e:86:
0d:24:d2:33:4d:7d:57:d0:da:4c:ba:e5:df:79:c6:
59:53:59:a0:3d:e8:c2:3a:99:8e:90:6d:be:16:d6:
0c:d3:8b:76:7e:77:dd:ff:5c:9a:67:c1:be:7c:94:
99:a6:2e:cc:a3:23:19:23:2b:b3:cb:37:54:dc:75:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:7F:65:AF:FB:F9:9D:6A:5D:6D:B7:F1:5A:A0:70:3E:1B:11:0E
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bb:a4:31:6b:29:fa:1d:1d:95:fb:ba:98:d3:18:54:65:06:
38:22:be:91:ff:b3:8f:c1:53:ce:c5:9c:22:aa:c8:c3:19:6d:
e2:a1:a7:09:06:b7:0f:f1:9e:74:ef:9c:46:c1:06:6f:ff:d0:
94:57:ef:5f:6d:38:73:1e:42:1c:68:ba:59:60:97:58:15:f8:
68:5b:93:9b:92:83:c0:5f:56:a1:8e:c9:12:9f:e2:31:ce:36:
14:43:6b:1e:64:e9:4c:1e:8e:17:d0:ff:22:11:78:91:98:e3:
25:62:b0:ad:d4:ec:75:24:c8:e7:12:49:78:3c:75:d1:ee:d0:
a4:36:07:e5:fd:55:16:84:70:69:20:d3:b0:54:7d:c7:08:07:
52:8b:56:52:fb:a8:19:22:33:42:22:87:cd:07:43:cc:ed:df:
10:35:06:0a:f8:88:14:86:70:09:37:8f:25:63:43:45:cf:42:
e4:bb:38:49:54:b8:96:a6:c6:c9:3a:ba:56:3b:e8:c9:ff:dc:
04:26:e2:cc:11:56:ce:0e:c1:55:a4:ae:ae:73:5c:fb:1b:15:
e4:e9:0c:c5:3d:fa:98:7a:8e:9d:d0:c8:d9:61:03:a3:f0:08:
b1:1d:5b:28:e3:c9:4c:8b:d8:3b:0c:69:f3:1b:85:8c:db:bc:
62:fd:1c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKKU2MsAe+1Mqyo5t69dnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZmQxY2FkMTIxOTAyNzU1MDg5ZTNjYTgwYmE2ZDdjY2M0
YjliNzEwHhcNMjUwNTEzMTUwMDI2WhcNMjUwNTE0MTUwMDI2WjAzMTEwLwYDVQQD
EyhkN2MyN2Y2NWFmZmJmOTlkNmE1ZDZkYjdmMTVhYTA3MDNlMWIxMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv284XYybuzaG3yCUOFkuV7dhG64B
nvVI5wG7Lb0QmDbJui68cmsAoxxhCy5cAsHVQWUEYQP9cnKrwDnyGQE0TjUrPFUd
Y5HnXuRVOP8JMBr/YsmiS8bjKCZxtAVIi1E9KGbMdYWp34jmx5levjyak/q/0G+5
2EpI5Ne6LmgMRYnCx/ZNTLD9l7Wem3u/B9s7UlS84oGNFUNaJp2FisB2vLg10XOz
+IXDevqoXh+UT3uZITE4KV/hY7J7prkM63oePoYNJNIzTX1X0NpMuuXfecZZU1mg
PejCOpmOkG2+FtYM04t2fnfd/1yaZ8G+fJSZpi7MoyMZIyuzyzdU3HV4GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfCf2Wv+/mdal1tt/FaoHA+GxEOMB8GA1UdIwQY
MBaAFA79HK0SGQJ1UInjyoC6bXzMS5txMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUt
M2FmNGE5NDYzYjc3LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUtM2FmNGE5NDYzYjc3
LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLukMWsp
+h0dlfu6mNMYVGUGOCK+kf+zj8FTzsWcIqrIwxlt4qGnCQa3D/GedO+cRsEGb//Q
lFfvX204cx5CHGi6WWCXWBX4aFuTm5KDwF9WoY7JEp/iMc42FENrHmTpTB6OF9D/
IhF4kZjjJWKwrdTsdSTI5xJJeDx10e7QpDYH5f1VFoRwaSDTsFR9xwgHUotWUvuo
GSIzQiKHzQdDzO3fEDUGCviIFIZwCTePJWNDRc9C5Ls4SVS4lqbGyTq6Vjvoyf/c
BCbizBFWzg7BVaSurnNc+xsV5OkMxT36mHqOndDI2WEDo/AIsR1bKOPJTIvYOwxp
8xuFjNu8Yv0cdA==
-----END CERTIFICATE-----
Generated at Wed May 14 00:20:21 2025 by rpki-client