Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: XW6daOE2T66bpdZ3rRbl4R8OGZ+8FzVxWgr1hiCL18g=
Subject key identifier: 63:90:DB:5F:33:C9:25:D0:0D:7E:96:3F:EC:89:42:2B:EB:80:C8:D1
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 0196BF6F856352A194655539B4C5B97CD5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 13:01:18 +0000
Manifest this update: Sun 11 May 2025 13:01:18 +0000
Manifest next update: Mon 12 May 2025 13:01:18 +0000
Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: cMvc0nwCYCV3NPh6Qv9PanR+Xyq3EiNhqxrsjTyq27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:85:63:52:a1:94:65:55:39:b4:c5:b9:7c:d5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: May 11 13:01:18 2025 GMT
Not After : May 12 13:01:18 2025 GMT
Subject: CN=6390db5f33c925d00d7e963fec89422beb80c8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:47:aa:69:44:dc:fd:e6:39:88:67:e2:04:
78:0a:ea:2d:94:79:d2:25:b0:39:a5:91:7e:a2:89:
0c:1e:d1:73:1e:4a:38:b1:d5:d9:51:20:71:28:54:
58:6f:64:34:5e:56:09:23:22:b6:4a:7c:a1:96:a6:
8a:22:6c:e8:e9:c0:8d:97:1f:a2:a1:e0:27:fe:38:
3d:52:f3:04:b8:97:09:45:80:14:a2:40:ff:f4:c3:
39:1c:88:59:ea:21:fb:c3:69:7f:58:35:fa:47:fe:
77:09:f3:f1:01:86:81:cc:03:25:77:42:0d:11:86:
6b:d5:85:ad:48:52:f8:24:55:4c:39:4b:09:c9:24:
fb:16:f4:4f:4a:53:46:33:b2:fb:20:1d:d4:74:2a:
7d:cd:e8:80:21:b3:70:45:98:73:94:55:bd:1a:57:
58:c8:21:fe:1d:2b:69:c9:14:9e:aa:82:84:a6:dd:
94:30:ff:b4:30:5b:ef:2f:46:f7:ce:e4:4e:f6:cc:
9e:d8:09:65:76:45:0e:4a:e3:d4:7e:9c:c7:91:7e:
8e:d0:e1:4d:cc:cb:3b:5e:81:b5:2c:ba:a0:1d:ab:
0a:23:2f:1c:bb:94:f5:03:36:59:5d:24:4a:88:4f:
6f:d0:05:2c:be:86:a2:7b:2a:dd:ee:3a:99:97:a9:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:DB:5F:33:C9:25:D0:0D:7E:96:3F:EC:89:42:2B:EB:80:C8:D1
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d2:f1:15:ee:17:87:33:f4:27:5d:a5:64:70:5b:af:64:95:
df:7a:b6:22:d3:2e:37:06:e3:ea:11:4b:23:e7:8b:38:8d:26:
d5:89:1e:7c:62:31:4d:7c:2a:1c:dd:ae:87:1b:6f:f6:66:d6:
2a:1e:18:36:1e:46:43:37:e2:56:f3:db:bb:c0:d2:aa:e7:06:
d4:09:a6:a1:b1:bd:b3:55:7c:02:9d:9f:fe:b3:cd:08:43:26:
85:0b:1b:d9:81:be:2c:6c:3a:35:b4:61:64:64:55:d2:b5:1c:
35:b4:47:55:61:52:36:6d:dc:19:9f:82:24:29:95:bb:9d:89:
0f:80:4c:58:f9:23:cf:ff:18:b1:ff:24:a1:81:cc:4e:d3:bd:
3d:de:47:a4:66:a6:39:44:fc:f3:a1:32:e7:e9:2f:e2:05:62:
45:45:57:2b:b3:35:fb:a3:08:6e:55:fb:d9:ef:e3:e6:fb:af:
36:84:1d:1d:3d:5a:11:5d:b0:5d:32:cf:4e:62:b4:2b:1b:be:
a1:19:97:2e:7f:16:13:dc:d7:77:97:3b:a0:8d:3e:88:e9:a7:
93:c1:be:50:be:52:43:e1:e3:33:0b:d4:b9:dc:df:dc:23:fc:
2e:a8:b9:5e:20:95:89:b6:d6:b7:75:5d:26:78:47:81:fe:f8:
5c:d8:e8:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b4VjUqGUZVU5tMW5fNXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmM2YxMzMyY2ZmMDViMjJhM2E2NmE2ZDRjMzQ4ZmJjMDFk
ZTExNWMwHhcNMjUwNTExMTMwMTE4WhcNMjUwNTEyMTMwMTE4WjAzMTEwLwYDVQQD
Eyg2MzkwZGI1ZjMzYzkyNWQwMGQ3ZTk2M2ZlYzg5NDIyYmViODBjOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0dHqmlE3P3mOYhn4gR4CuotlHnS
JbA5pZF+ookMHtFzHko4sdXZUSBxKFRYb2Q0XlYJIyK2SnyhlqaKImzo6cCNlx+i
oeAn/jg9UvMEuJcJRYAUokD/9MM5HIhZ6iH7w2l/WDX6R/53CfPxAYaBzAMld0IN
EYZr1YWtSFL4JFVMOUsJyST7FvRPSlNGM7L7IB3UdCp9zeiAIbNwRZhzlFW9GldY
yCH+HStpyRSeqoKEpt2UMP+0MFvvL0b3zuRO9sye2AlldkUOSuPUfpzHkX6O0OFN
zMs7XoG1LLqgHasKIy8cu5T1AzZZXSRKiE9v0AUsvoaieyrd7jqZl6mn9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOQ218zySXQDX6WP+yJQivrgMjRMB8GA1UdIwQY
MBaAFA8/EzLP8Fsio6ZqbUw0j7wB3hFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUt
ZGFhZjI5MjExOTQ5LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUtZGFhZjI5MjExOTQ5
LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdLxFe4X
hzP0J12lZHBbr2SV33q2ItMuNwbj6hFLI+eLOI0m1YkefGIxTXwqHN2uhxtv9mbW
Kh4YNh5GQzfiVvPbu8DSqucG1AmmobG9s1V8Ap2f/rPNCEMmhQsb2YG+LGw6NbRh
ZGRV0rUcNbRHVWFSNm3cGZ+CJCmVu52JD4BMWPkjz/8Ysf8koYHMTtO9Pd5HpGam
OUT886Ey5+kv4gViRUVXK7M1+6MIblX72e/j5vuvNoQdHT1aEV2wXTLPTmK0Kxu+
oRmXLn8WE9zXd5c7oI0+iOmnk8G+UL5SQ+HjMwvUudzf3CP8Lqi5XiCVibbWt3Vd
JnhHgf74XNjoCQ==
-----END CERTIFICATE-----
Generated at Sun May 11 15:40:42 2025 by rpki-client