Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: iUJa/UOfsL0bss6hrM5I7ISGnr6lZ/a5eo4ti5TlUG4=
Subject key identifier: 42:12:E2:4E:17:B3:5F:D8:54:72:FE:78:D7:45:EE:C6:5F:78:53:9A
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 0196BB91C4E9670C0B145B7CA3BC178229A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: EF
Signing time: Sat 10 May 2025 19:00:14 +0000
Manifest this update: Sat 10 May 2025 19:00:14 +0000
Manifest next update: Sun 11 May 2025 19:00:14 +0000
Files and hashes: 1: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: ObL/opWx5dkUd69WQ+LhjU2sT92BBnZwnFVyqaWrQws=)
2: cZNRC54iklgNWYm4bOxRUrThNWU.roa (hash: 7TUW8rEcRA76OYIr9WRYyb0EVyDB9PyjFL1/RYt7YQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:c4:e9:67:0c:0b:14:5b:7c:a3:bc:17:82:29:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: May 10 19:00:14 2025 GMT
Not After : May 11 19:00:14 2025 GMT
Subject: CN=4212e24e17b35fd85472fe78d745eec65f78539a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:96:fc:b1:d0:85:77:bd:86:70:3e:f0:8b:
2b:d0:3a:62:d1:82:2f:4a:fb:8d:46:c3:88:f3:f9:
33:2e:85:ed:2e:d8:18:fd:06:8e:32:83:35:e9:50:
88:cd:25:70:c8:e3:ef:b1:3e:9c:8f:dd:1c:d5:f1:
94:c1:39:2d:72:49:d6:11:f2:41:8d:30:3a:8d:32:
2b:7e:0b:ed:b2:20:fc:18:61:77:72:30:ff:5a:94:
1c:01:be:58:f7:20:5a:12:f1:ec:d7:f1:78:d2:26:
f5:e9:8b:1d:0c:0e:fd:b5:a2:3a:a5:26:66:5a:59:
30:b1:ea:02:e9:cd:cd:64:ea:c9:ee:25:b2:3c:5e:
ca:37:a2:9f:cf:56:b8:8d:dd:f5:42:91:e9:ed:8f:
f2:03:65:c5:89:e5:cd:88:2d:30:00:98:24:c9:c0:
d4:48:fe:31:f4:51:54:23:7d:a4:79:2a:5c:59:d4:
1f:02:a1:97:fd:09:9d:92:a0:a7:ae:d3:68:4c:72:
dc:0a:72:67:2a:67:f7:c7:1a:85:10:29:16:73:3d:
a9:ed:51:e1:0e:03:da:33:62:cd:a8:3c:01:f7:79:
3e:2e:f5:fe:9e:9b:0f:34:1c:5c:d7:2b:68:8f:8a:
92:d8:0d:3b:78:cb:6e:5d:84:72:31:a8:ce:15:d3:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:12:E2:4E:17:B3:5F:D8:54:72:FE:78:D7:45:EE:C6:5F:78:53:9A
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:58:61:d5:a5:31:52:3a:28:8e:9b:79:05:9d:0d:a1:13:94:
aa:ed:8d:ac:9d:c3:cf:1c:f7:a8:a1:ca:b8:1c:11:fe:ca:20:
9a:c4:65:d9:6f:19:7a:45:b2:c2:1f:41:ec:9e:fd:9b:7d:36:
88:5c:a3:12:72:3c:96:8e:8d:47:b4:b4:a9:20:ea:cc:53:1b:
df:ce:2a:45:49:a2:f4:b2:1b:8a:31:ed:62:a4:8d:dc:05:81:
55:76:2e:36:5a:75:16:d5:bc:83:82:97:ab:eb:9c:ae:41:24:
00:50:48:8a:5d:ab:96:0b:b4:7d:83:6f:e5:a1:f8:09:a4:26:
8a:be:b5:69:3d:be:68:04:ff:60:82:5a:13:49:68:a6:94:e5:
b7:3b:7a:a6:20:a4:dc:82:2c:a3:46:aa:49:c9:a7:c5:1f:a7:
47:aa:84:c4:e7:8e:59:27:79:6e:99:bc:84:ff:01:d7:8f:c5:
db:fd:ca:8c:e2:b9:cd:c2:04:18:a3:39:75:2d:11:dc:58:66:
33:28:c2:99:a9:2c:aa:3a:46:5c:45:90:9d:6a:93:36:4e:99:
90:d1:5a:24:5e:83:91:fa:79:2c:1c:e1:59:b5:72:c5:44:3f:
90:bf:25:51:66:3b:82:5b:9e:14:92:ee:8b:97:55:67:3a:3a:
50:b7:74:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kcTpZwwLFFt8o7wXgimnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2NiNjFhYjRmNDNmMDdlMzc4MzMwN2RkMzM4NGY5ZGNj
MWMzMWEwHhcNMjUwNTEwMTkwMDE0WhcNMjUwNTExMTkwMDE0WjAzMTEwLwYDVQQD
Eyg0MjEyZTI0ZTE3YjM1ZmQ4NTQ3MmZlNzhkNzQ1ZWVjNjVmNzg1MzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqSW/LHQhXe9hnA+8Isr0Dpi0YIv
SvuNRsOI8/kzLoXtLtgY/QaOMoM16VCIzSVwyOPvsT6cj90c1fGUwTktcknWEfJB
jTA6jTIrfgvtsiD8GGF3cjD/WpQcAb5Y9yBaEvHs1/F40ib16YsdDA79taI6pSZm
WlkwseoC6c3NZOrJ7iWyPF7KN6Kfz1a4jd31QpHp7Y/yA2XFieXNiC0wAJgkycDU
SP4x9FFUI32keSpcWdQfAqGX/QmdkqCnrtNoTHLcCnJnKmf3xxqFECkWcz2p7VHh
DgPaM2LNqDwB93k+LvX+npsPNBxc1ytoj4qS2A07eMtuXYRyMajOFdO/0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIS4k4Xs1/YVHL+eNdF7sZfeFOaMB8GA1UdIwQY
MBaAFAw8thq09D8H43gzB90zhPncwcMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEt
MmM2NjRjZTA4MDc3LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEtMmM2NjRjZTA4MDc3
LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVhh1aUx
Ujoojpt5BZ0NoROUqu2NrJ3Dzxz3qKHKuBwR/sogmsRl2W8ZekWywh9B7J79m302
iFyjEnI8lo6NR7S0qSDqzFMb384qRUmi9LIbijHtYqSN3AWBVXYuNlp1FtW8g4KX
q+ucrkEkAFBIil2rlgu0fYNv5aH4CaQmir61aT2+aAT/YIJaE0loppTltzt6piCk
3IIso0aqScmnxR+nR6qExOeOWSd5bpm8hP8B14/F2/3KjOK5zcIEGKM5dS0R3Fhm
MyjCmaksqjpGXEWQnWqTNk6ZkNFaJF6Dkfp5LBzhWbVyxUQ/kL8lUWY7glueFJLu
i5dVZzo6ULd0uQ==
-----END CERTIFICATE-----
Generated at Sun May 11 00:35:50 2025 by rpki-client