Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: dbTeYrMvoMNs6iJpO/s94e7qdrpO7048Q3HMSxWA03s=
Subject key identifier: FF:02:18:42:BE:D0:36:B7:DB:B1:47:F8:C0:16:B5:DB:27:74:6B:3C
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 0196B8915B03C8742481A4A11FE9F882151C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 05:00:55 +0000
Manifest this update: Sat 10 May 2025 05:00:55 +0000
Manifest next update: Sun 11 May 2025 05:00:55 +0000
Files and hashes: 1: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: /AZ0MfjiSP+FCX/ISUNn9WsoTbdBHPIq5lJIHRM5VDc=)
2: meyQlZ2V2fFm7jP19tS1SnwZU8o.roa (hash: Rjzn7WIqlB0uqbC7++KFiY3Pm+Td1rmouk6fxkElj30=)
3: u8p2k1kowabt5V010HcHbUdny4A.roa (hash: +zIIZMzEVP0HgE88S7aeA3JokmowyYpTKNzs1+R3c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:5b:03:c8:74:24:81:a4:a1:1f:e9:f8:82:15:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: May 10 05:00:55 2025 GMT
Not After : May 11 05:00:55 2025 GMT
Subject: CN=ff021842bed036b7dbb147f8c016b5db27746b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:09:55:78:f2:9d:f3:42:a3:bc:b5:fd:bb:
35:84:26:ad:dc:88:e8:b5:7a:45:ee:18:34:90:79:
54:73:36:aa:45:69:6d:e0:89:5f:81:2c:5d:6c:f7:
7b:c0:24:12:cb:7d:db:ca:38:37:da:25:e0:6d:c0:
fa:cb:2f:cb:76:03:cd:13:3e:88:e3:e4:0b:ca:5d:
04:46:ab:d8:32:b2:68:5f:53:21:6a:1f:35:37:b2:
47:79:a1:90:1a:db:7d:03:eb:07:0c:d1:f6:26:6a:
67:07:83:e4:28:20:2c:0f:3a:9b:af:b8:80:5f:ce:
ad:fd:de:c6:49:be:53:8b:d4:d4:5f:bc:97:1f:97:
47:0f:3e:5d:07:31:35:48:3f:77:f5:8d:27:d3:83:
08:f2:d9:db:2e:82:f4:e6:c9:26:c2:cc:cd:be:fd:
ac:81:89:28:1a:36:94:d6:34:9c:b4:24:25:a5:34:
b7:6d:b2:59:88:f9:eb:54:5c:19:97:75:dc:02:9e:
97:d2:0e:6a:68:33:84:17:d7:46:7d:29:d8:9f:71:
34:7b:98:40:b0:f8:83:29:03:ed:cc:8a:b5:47:4b:
cc:53:d5:57:25:ee:1d:2f:6d:d1:00:2f:c7:a0:d2:
88:6a:8a:56:5b:74:e3:da:8b:9a:33:27:c5:d6:7f:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:02:18:42:BE:D0:36:B7:DB:B1:47:F8:C0:16:B5:DB:27:74:6B:3C
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3a:93:ae:e9:39:e1:70:2a:0d:9c:d7:31:95:9b:40:68:f2:
74:43:54:dc:7c:77:00:b3:3e:86:84:6d:4d:94:c4:f8:ce:9c:
72:f0:8b:9b:5e:8a:81:d3:20:23:d5:52:23:6e:ce:59:f6:42:
97:fe:52:5c:1f:e7:65:fc:91:ab:63:bb:2c:7c:cb:33:f1:90:
54:ea:a9:8f:dd:ea:6c:23:16:54:0f:0f:c8:d8:5e:7b:8b:54:
82:20:82:9e:97:28:ee:47:a9:2e:03:a0:9a:e1:d4:7d:0f:f3:
20:c7:89:99:89:2b:42:6a:ab:f6:70:1c:cd:57:62:7c:44:a4:
c8:6a:f1:2c:62:b7:55:66:87:05:93:e4:30:8d:a1:9d:9c:0a:
79:28:8b:28:91:cd:fc:a6:86:bd:c8:20:88:ed:4d:14:b5:df:
41:ba:3d:c7:ff:55:1a:56:8f:89:ca:9e:43:a8:41:29:e4:0c:
98:f4:e0:ab:af:6b:6e:b9:86:dc:c2:18:65:1c:c9:90:cf:ca:
38:95:5f:ce:ee:4d:b3:ff:7c:0e:2d:12:6f:bb:1e:e0:0f:88:
83:bb:89:51:01:32:c6:d4:73:6c:12:d5:56:1e:fd:3c:76:4b:
9f:b1:c8:4a:3b:c8:88:a0:11:92:3c:fb:b4:0d:71:f0:a0:04:
00:e3:c6:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kVsDyHQkgaShH+n4ghUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDNhMGRmMDU5YTUyNTFhNDAwYjVhMWYxMzIxYmEwMGQz
MTIwZDIwHhcNMjUwNTEwMDUwMDU1WhcNMjUwNTExMDUwMDU1WjAzMTEwLwYDVQQD
EyhmZjAyMTg0MmJlZDAzNmI3ZGJiMTQ3ZjhjMDE2YjVkYjI3NzQ2YjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLcJVXjynfNCo7y1/bs1hCat3Ijo
tXpF7hg0kHlUczaqRWlt4IlfgSxdbPd7wCQSy33byjg32iXgbcD6yy/LdgPNEz6I
4+QLyl0ERqvYMrJoX1Mhah81N7JHeaGQGtt9A+sHDNH2JmpnB4PkKCAsDzqbr7iA
X86t/d7GSb5Ti9TUX7yXH5dHDz5dBzE1SD939Y0n04MI8tnbLoL05skmwszNvv2s
gYkoGjaU1jSctCQlpTS3bbJZiPnrVFwZl3XcAp6X0g5qaDOEF9dGfSnYn3E0e5hA
sPiDKQPtzIq1R0vMU9VXJe4dL23RAC/HoNKIaopWW3Tj2ouaMyfF1n/uVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8CGEK+0Da327FH+MAWtdsndGs8MB8GA1UdIwQY
MBaAFA5DoN8FmlJRpAC1ofEyG6ANMSDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMt
MDA0ZmU0MzNjN2M4LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMtMDA0ZmU0MzNjN2M4
LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTqTruk5
4XAqDZzXMZWbQGjydENU3Hx3ALM+hoRtTZTE+M6ccvCLm16KgdMgI9VSI27OWfZC
l/5SXB/nZfyRq2O7LHzLM/GQVOqpj93qbCMWVA8PyNhee4tUgiCCnpco7kepLgOg
muHUfQ/zIMeJmYkrQmqr9nAczVdifESkyGrxLGK3VWaHBZPkMI2hnZwKeSiLKJHN
/KaGvcggiO1NFLXfQbo9x/9VGlaPicqeQ6hBKeQMmPTgq69rbrmG3MIYZRzJkM/K
OJVfzu5Ns/98Di0Sb7se4A+Ig7uJUQEyxtRzbBLVVh79PHZLn7HISjvIiKARkjz7
tA1x8KAEAOPGgA==
-----END CERTIFICATE-----
Generated at Sat May 10 14:44:55 2025 by rpki-client