Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: JwsGLc2pZILQcQxANPaKOrMWhj0JocwEt1nlOwZvrxA=
Subject key identifier: D8:30:80:20:53:9E:FE:28:3F:BE:44:F5:8D:C5:9C:C8:59:ED:5F:F9
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 0196A2E574D71FBEDF08982EC5F74BB857ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 1147
Signing time: Tue 06 May 2025 00:01:08 +0000
Manifest this update: Tue 06 May 2025 00:01:08 +0000
Manifest next update: Wed 07 May 2025 00:01:08 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: oMJ33X3VlHfexRZKbpDvdB9MkZ+nL2dWfh7lGj+y/as=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:74:d7:1f:be:df:08:98:2e:c5:f7:4b:b8:57:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: May 6 00:01:08 2025 GMT
Not After : May 7 00:01:08 2025 GMT
Subject: CN=d8308020539efe283fbe44f58dc59cc859ed5ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:09:28:b5:c1:dd:d8:b2:7a:32:b2:b7:18:
69:06:54:eb:0e:f7:74:69:58:a5:a0:c4:ac:f5:1e:
3c:7b:b2:c7:42:b5:b1:b3:d7:48:88:b0:27:e8:7d:
f5:fa:62:12:60:f4:b6:e2:6f:90:d5:46:2c:27:1d:
71:b6:49:aa:87:0e:2f:ab:ea:0f:8e:a2:95:d2:45:
d9:37:84:41:67:f5:c2:1e:ea:a2:e5:5c:12:d2:e9:
90:12:ae:19:bc:3e:59:ca:a3:cd:42:91:a8:26:01:
65:95:2e:12:a1:ac:c1:97:79:15:ff:68:80:03:20:
55:60:b7:c7:8c:c1:9f:85:92:f8:14:0e:86:ec:cc:
97:1c:f4:82:2d:76:5a:9d:af:ea:aa:df:99:8c:cb:
85:7e:5f:5a:50:c7:ba:2e:19:1f:fe:5f:dc:37:b7:
77:8b:af:d8:7c:b6:f9:ef:a3:30:c2:19:fb:f6:e2:
1d:95:e0:f2:6a:42:31:dd:eb:01:63:d8:10:81:c2:
b8:d6:8f:c2:bd:1e:c5:6f:33:01:f3:f1:a2:12:bc:
43:82:05:6b:32:e6:e0:a6:e4:c6:22:99:e2:03:10:
e8:1e:dd:25:5a:45:88:7d:19:00:74:58:b6:86:3c:
f8:53:a0:52:7f:28:a1:0d:0c:ea:47:34:2d:c2:18:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:30:80:20:53:9E:FE:28:3F:BE:44:F5:8D:C5:9C:C8:59:ED:5F:F9
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6c:4a:86:05:43:79:5e:99:75:dc:51:90:3e:71:69:58:25:
af:f3:1c:6f:20:ee:72:04:33:5c:fd:fb:7f:07:26:6c:55:f5:
5f:94:2d:68:69:68:78:c3:fb:76:c4:21:54:25:95:1a:97:5e:
c8:24:de:d4:59:66:c9:76:8c:32:40:8c:4c:97:40:1b:7a:ef:
45:b6:ea:68:88:92:b5:c3:5c:67:4c:be:7d:71:22:a4:df:18:
9f:59:a4:f0:5e:b4:fc:92:29:dc:38:9c:26:1e:ce:2b:d0:f8:
48:e5:0b:fb:21:96:0f:51:1a:58:a6:97:5d:8c:b5:ec:a2:2b:
b8:d6:f0:58:c9:ea:b5:b3:c4:28:84:69:96:2c:53:ad:1d:34:
99:12:f5:f8:3f:93:d5:1e:ca:34:f8:17:d3:f7:f8:40:0e:94:
70:60:43:e2:b2:c3:c7:fb:db:35:21:49:e7:ad:18:92:ba:69:
a3:9d:e3:db:ab:6e:e1:9a:4f:5e:c8:a5:d3:36:2e:82:71:43:
15:9c:55:54:67:91:72:eb:68:7b:df:bb:4a:b5:94:f9:33:cc:
21:ae:e0:41:25:9f:26:3b:3b:a5:68:64:81:fd:4f:7c:e8:86:
cd:e0:d5:b8:02:79:02:e8:b9:ff:d7:3e:d4:60:d7:e2:d3:54:
e6:bb:d0:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZai5XTXH77fCJguxfdLuFftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0
MGQ5OTAwHhcNMjUwNTA2MDAwMTA4WhcNMjUwNTA3MDAwMTA4WjAzMTEwLwYDVQQD
EyhkODMwODAyMDUzOWVmZTI4M2ZiZTQ0ZjU4ZGM1OWNjODU5ZWQ1ZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW4JKLXB3diyejKytxhpBlTrDvd0
aViloMSs9R48e7LHQrWxs9dIiLAn6H31+mISYPS24m+Q1UYsJx1xtkmqhw4vq+oP
jqKV0kXZN4RBZ/XCHuqi5VwS0umQEq4ZvD5ZyqPNQpGoJgFllS4SoazBl3kV/2iA
AyBVYLfHjMGfhZL4FA6G7MyXHPSCLXZana/qqt+ZjMuFfl9aUMe6Lhkf/l/cN7d3
i6/YfLb576Mwwhn79uIdleDyakIx3esBY9gQgcK41o/CvR7FbzMB8/GiErxDggVr
MubgpuTGIpniAxDoHt0lWkWIfRkAdFi2hjz4U6BSfyihDQzqRzQtwhg9uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgwgCBTnv4oP75E9Y3FnMhZ7V/5MB8GA1UdIwQY
MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt
MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm
LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGxKhgVD
eV6ZddxRkD5xaVglr/McbyDucgQzXP37fwcmbFX1X5QtaGloeMP7dsQhVCWVGpde
yCTe1FlmyXaMMkCMTJdAG3rvRbbqaIiStcNcZ0y+fXEipN8Yn1mk8F60/JIp3Dic
Jh7OK9D4SOUL+yGWD1EaWKaXXYy17KIruNbwWMnqtbPEKIRplixTrR00mRL1+D+T
1R7KNPgX0/f4QA6UcGBD4rLDx/vbNSFJ560Ykrppo53j26tu4ZpPXsil0zYugnFD
FZxVVGeRcutoe9+7SrWU+TPMIa7gQSWfJjs7pWhkgf1PfOiGzeDVuAJ5Aui5/9c+
1GDX4tNU5rvQow==
-----END CERTIFICATE-----
Generated at Tue May 6 09:17:58 2025 by rpki-client