Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: GVLPznnjStRGkgoSnwl9ocKP2CCKQjjwtVcq3iKYECI=
Subject key identifier: B8:C0:13:63:43:04:3E:A5:8E:39:23:2D:77:A1:38:9C:BC:CE:BE:4C
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 0196BBC8A786CE4D1740DB80D9AC05B739C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 1537
Signing time: Sat 10 May 2025 20:00:11 +0000
Manifest this update: Sat 10 May 2025 20:00:11 +0000
Manifest next update: Sun 11 May 2025 20:00:11 +0000
Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
2: 5PEhmSsylF5Cqau7beHA-5hPtJA.roa (hash: qg7bbX5JQ150gt7VxDeJGfpKO/e8RwLdHWGQ9Drrzh4=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: /b6KSmE9p/w5fxjBnos+KF/ueSKx+2qbGLT58UPxH24=)
4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
5: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
6: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
7: bEQstBMsIq-USPnqf3A5IqnOEVs.roa (hash: dlwl7Y9SvRWuBlEJJDLRBkmdTgGXUzcp/rFQfnHi1fE=)
8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:a7:86:ce:4d:17:40:db:80:d9:ac:05:b7:39:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: May 10 20:00:11 2025 GMT
Not After : May 11 20:00:11 2025 GMT
Subject: CN=b8c0136343043ea58e39232d77a1389cbccebe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:69:f9:58:20:9c:dc:5d:14:a4:d7:71:0f:
03:20:6f:48:ca:b1:d4:87:d7:59:d2:3f:f2:b8:32:
e0:79:e3:ea:90:4e:f9:da:cd:47:54:1b:46:5f:ce:
f3:d3:51:00:59:03:de:f0:96:d5:80:3d:a0:2c:d2:
08:5b:9a:84:33:5e:83:7e:38:1d:5e:2e:44:25:47:
c3:53:83:c1:1c:ba:82:a1:79:70:d8:a6:57:07:fc:
72:03:bf:10:90:7d:95:2d:df:1d:f5:53:ec:f0:65:
c7:ca:21:32:74:3b:3a:5b:53:5b:22:33:9d:1e:55:
72:f8:f8:1a:1f:28:e1:20:a7:4f:b7:4f:21:b1:e9:
fa:6a:74:11:93:8b:2f:cc:c6:50:87:28:b2:b5:69:
40:63:22:30:6d:d5:85:f2:c4:72:e0:c5:7b:26:4a:
49:1d:e0:ae:7a:08:69:55:2d:1d:1f:8a:48:85:4c:
5d:57:06:2d:cf:82:73:f7:23:43:58:84:c4:64:aa:
23:74:85:2b:69:bb:58:02:43:83:f8:42:45:22:93:
13:fb:50:f5:95:bf:4d:1d:2f:67:9e:10:52:95:d8:
88:00:67:ff:8b:b1:24:2a:cd:8c:0b:6f:16:98:0f:
e2:77:56:51:f4:81:17:05:20:cf:af:7c:e7:a7:67:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C0:13:63:43:04:3E:A5:8E:39:23:2D:77:A1:38:9C:BC:CE:BE:4C
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:64:ba:dc:be:ae:e9:42:e9:f2:b2:16:c7:55:c3:df:c8:8f:
99:2d:7a:f5:58:f0:c9:02:e9:f7:f9:ce:a7:d0:30:64:98:3b:
9e:a7:9b:b8:10:94:88:a3:7d:cc:25:ec:d1:5a:48:81:73:a1:
2e:51:38:33:35:61:b1:d9:44:aa:cd:1a:97:02:d3:8c:64:25:
e9:f8:86:a0:0b:34:73:b8:60:9a:04:09:7c:f0:75:d4:cb:89:
d9:43:fa:45:48:92:77:62:94:71:74:80:b5:98:e5:17:c1:24:
f1:36:25:3c:8a:81:ba:8e:2e:13:e1:77:8c:ee:af:4a:08:95:
5d:45:38:c6:e4:f4:fb:a6:20:ce:ad:c5:33:2e:46:31:c2:26:
15:96:fc:6e:eb:ef:5e:be:cc:a5:31:fd:84:d2:db:68:c2:2f:
e4:66:58:f2:64:dc:32:6b:25:2b:b8:12:ff:4a:34:be:79:35:
af:d9:26:75:69:96:e4:8c:ff:4e:11:c3:d9:af:d8:50:29:f2:
bf:da:24:fc:68:44:b2:6a:4d:4d:83:20:6f:ce:b9:5d:51:c7:
50:be:af:15:c3:b0:fd:09:bd:bf:c0:74:9a:5e:eb:80:f1:11:
8b:f0:72:93:8e:8a:a0:32:cb:c4:f6:4e:1e:f7:d4:5d:43:27:
f0:ae:77:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7yKeGzk0XQNuA2awFtznEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjUwNTEwMjAwMDExWhcNMjUwNTExMjAwMDExWjAzMTEwLwYDVQQD
EyhiOGMwMTM2MzQzMDQzZWE1OGUzOTIzMmQ3N2ExMzg5Y2JjY2ViZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVdp+VggnNxdFKTXcQ8DIG9IyrHU
h9dZ0j/yuDLgeePqkE752s1HVBtGX87z01EAWQPe8JbVgD2gLNIIW5qEM16Dfjgd
Xi5EJUfDU4PBHLqCoXlw2KZXB/xyA78QkH2VLd8d9VPs8GXHyiEydDs6W1NbIjOd
HlVy+PgaHyjhIKdPt08hsen6anQRk4svzMZQhyiytWlAYyIwbdWF8sRy4MV7JkpJ
HeCueghpVS0dH4pIhUxdVwYtz4Jz9yNDWITEZKojdIUrabtYAkOD+EJFIpMT+1D1
lb9NHS9nnhBSldiIAGf/i7EkKs2MC28WmA/id1ZR9IEXBSDPr3znp2e+HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjAE2NDBD6ljjkjLXehOJy8zr5MMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmS63L6u
6ULp8rIWx1XD38iPmS169VjwyQLp9/nOp9AwZJg7nqebuBCUiKN9zCXs0VpIgXOh
LlE4MzVhsdlEqs0alwLTjGQl6fiGoAs0c7hgmgQJfPB11MuJ2UP6RUiSd2KUcXSA
tZjlF8Ek8TYlPIqBuo4uE+F3jO6vSgiVXUU4xuT0+6Ygzq3FMy5GMcImFZb8buvv
Xr7MpTH9hNLbaMIv5GZY8mTcMmslK7gS/0o0vnk1r9kmdWmW5Iz/ThHD2a/YUCny
v9ok/GhEsmpNTYMgb865XVHHUL6vFcOw/Qm9v8B0ml7rgPERi/Byk46KoDLLxPZO
HvfUXUMn8K53LQ==
-----END CERTIFICATE-----
Generated at Sun May 11 04:32:24 2025 by rpki-client