Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File: dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier: MQlCDx1LkE78v1JdDUd7Jknbcyl6QJTA4kBiBtfdPYM=
Subject key identifier: E6:50:0C:30:2E:76:12:49:5B:B4:F3:C9:78:88:FC:99:D2:37:13:F7
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 0196A01AEB69B4C638BC15CB67ABF95FF3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number: 1000
Signing time: Mon 05 May 2025 11:00:40 +0000
Manifest this update: Mon 05 May 2025 11:00:40 +0000
Manifest next update: Tue 06 May 2025 11:00:40 +0000
Files and hashes: 1: FcY_QKqq9c1xfH6rECvdKY1Kcu8.roa (hash: Ju8mYMjl2LUkVKbzqtiMt1rTH2nwPvl1R7kMAYH3RPc=)
2: IeAOnvbZbd0JxF7ran2IKsJXZmY.roa (hash: a22ZpV1PraD9QyqLIF4t6hPyMcIcLe+GxaE9NUf90hg=)
3: LS7cmX4hkxBo29n9xBMkazlGUQA.roa (hash: LcZigv6OQHpGmVW5BHzHMIZtI+TTJsjlraR4mOoxOrA=)
4: bHETVGvggsNe0a6WvXBELNSVwc4.roa (hash: ghxBEvOC//7xSO8+ytfjs+nd2Bn+dpSbYc1UKClOMyw=)
5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: 7hIOvbmQaa77oePyFFx7JJ0UB8pVd4uQbs7K7KtwnOo=)
6: qJx6x_1Si80i7zgxLEJabwqPPdM.roa (hash: VSNbxo3HViYCFTqzC6xV6bqWlabz9RKcmoeLCtu/aVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:eb:69:b4:c6:38:bc:15:cb:67:ab:f9:5f:f3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: May 5 11:00:40 2025 GMT
Not After : May 6 11:00:40 2025 GMT
Subject: CN=e6500c302e7612495bb4f3c97888fc99d23713f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:08:2d:e8:71:3a:92:a5:44:d8:d4:25:d3:
f6:cd:12:bc:0f:15:34:80:03:a5:17:3d:ac:10:24:
f9:b9:74:c6:60:3c:12:17:68:0c:27:03:59:b1:71:
61:37:f9:4f:3c:bb:1f:6f:7e:b6:47:b8:ac:b1:33:
a9:b8:24:55:31:5c:ac:f4:c6:36:40:62:ce:67:ba:
ca:77:7c:74:18:b2:d5:af:b8:8e:b9:00:84:96:51:
d7:23:70:f5:bb:53:a6:60:0a:9b:1c:84:2b:4a:10:
2e:c4:b1:e0:ba:2f:ad:41:98:7a:3b:4d:4a:1b:11:
38:eb:8f:64:3f:39:a2:6d:62:b1:67:fe:8c:80:ea:
3e:15:d4:c1:9c:33:eb:f9:83:22:3b:d3:61:4e:2e:
34:e1:6e:d6:fc:83:1e:98:f8:c5:cf:b2:cd:6c:26:
f8:ba:9b:f6:74:31:5d:1d:0c:ed:bb:81:b2:b0:9c:
94:3f:78:e4:6b:8a:00:40:67:1c:19:1e:48:82:3d:
7a:d5:11:92:ed:a3:e4:b7:9c:67:76:99:1e:6a:92:
36:4f:64:61:53:12:0d:c3:ba:9b:d2:eb:3d:67:0a:
93:dc:a1:16:fc:fd:8d:ef:30:5b:43:78:e2:fb:bb:
ec:f7:ea:46:67:32:3d:f6:20:fa:87:9d:80:ae:6d:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:50:0C:30:2E:76:12:49:5B:B4:F3:C9:78:88:FC:99:D2:37:13:F7
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c7:30:18:40:35:a7:9d:9e:14:5c:e6:a4:93:78:95:20:a3:
75:31:47:ef:bf:02:70:31:4a:38:10:6d:5a:26:c8:47:d9:a5:
06:8a:82:52:24:4e:b5:66:1c:5e:4f:dc:27:72:03:95:df:c6:
57:1f:cf:a8:7f:cd:7f:db:f0:7d:e1:38:c9:51:2a:0b:24:8a:
ab:80:8b:e3:d5:ba:bf:55:59:04:f2:a1:9d:76:26:d0:1f:a4:
90:87:10:33:b1:60:7f:7d:2e:4c:81:de:42:d0:d7:b1:92:a9:
d2:e0:e5:11:f4:21:64:07:85:46:8b:9d:2e:d6:55:b2:eb:8a:
54:32:82:99:cf:2f:c5:7e:09:43:94:09:9c:fb:ec:24:ac:b7:
8a:2f:5e:f2:a0:46:29:fc:6c:37:c4:ce:90:0e:4d:c4:5b:8c:
a0:50:36:6e:da:70:3f:17:1f:0c:f4:f6:fe:5d:32:05:b4:88:
47:c7:3f:3c:7d:59:b3:4e:f9:2d:9d:8a:82:9a:d9:fc:00:c0:
bb:ae:80:d8:6a:ea:42:34:fd:0f:ca:13:97:85:70:ce:58:28:
49:9c:de:9d:00:cb:8d:03:9c:90:09:64:74:5f:f6:6d:27:ad:
1f:5a:b1:df:2a:e6:3f:eb:1c:a6:c5:af:d9:89:07:04:14:d6:
47:f7:48:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGutptMY4vBXLZ6v5X/PFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk
ZDIxMmIwHhcNMjUwNTA1MTEwMDQwWhcNMjUwNTA2MTEwMDQwWjAzMTEwLwYDVQQD
EyhlNjUwMGMzMDJlNzYxMjQ5NWJiNGYzYzk3ODg4ZmM5OWQyMzcxM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm4ILehxOpKlRNjUJdP2zRK8DxU0
gAOlFz2sECT5uXTGYDwSF2gMJwNZsXFhN/lPPLsfb362R7issTOpuCRVMVys9MY2
QGLOZ7rKd3x0GLLVr7iOuQCEllHXI3D1u1OmYAqbHIQrShAuxLHgui+tQZh6O01K
GxE4649kPzmibWKxZ/6MgOo+FdTBnDPr+YMiO9NhTi404W7W/IMemPjFz7LNbCb4
upv2dDFdHQztu4GysJyUP3jka4oAQGccGR5Igj161RGS7aPkt5xndpkeapI2T2Rh
UxINw7qb0us9ZwqT3KEW/P2N7zBbQ3ji+7vs9+pGZzI99iD6h52Arm1D3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZQDDAudhJJW7TzyXiI/JnSNxP3MB8GA1UdIwQY
MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt
YmMxNTIyNzg5ZDNiLzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi
LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMcwGEA1
p52eFFzmpJN4lSCjdTFH778CcDFKOBBtWibIR9mlBoqCUiROtWYcXk/cJ3IDld/G
Vx/PqH/Nf9vwfeE4yVEqCySKq4CL49W6v1VZBPKhnXYm0B+kkIcQM7Fgf30uTIHe
QtDXsZKp0uDlEfQhZAeFRoudLtZVsuuKVDKCmc8vxX4JQ5QJnPvsJKy3ii9e8qBG
KfxsN8TOkA5NxFuMoFA2btpwPxcfDPT2/l0yBbSIR8c/PH1Zs075LZ2KgprZ/ADA
u66A2GrqQjT9D8oTl4VwzlgoSZzenQDLjQOckAlkdF/2bSetH1qx3yrmP+scpsWv
2YkHBBTWR/dIdw==
-----END CERTIFICATE-----
Generated at Mon May 5 20:54:50 2025 by rpki-client