Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: ljBHSL0NkdKZIH4OXnboxjdXFj8mQvMPgwubWrPCY1c=
Subject key identifier: 71:F7:3C:2D:A2:65:FC:71:E0:62:44:D7:D8:9C:F9:67:AC:87:EE:D1
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 0196BB5B007E25FD5EA6CD47523E5D194888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0994
Signing time: Sat 10 May 2025 18:00:25 +0000
Manifest this update: Sat 10 May 2025 18:00:25 +0000
Manifest next update: Sun 11 May 2025 18:00:25 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: Li5ukEPyXyrdPshjHwPWJGPElmyo0AK7pUCpCnLP04E=)
2: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (hash: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:00:7e:25:fd:5e:a6:cd:47:52:3e:5d:19:48:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: May 10 18:00:25 2025 GMT
Not After : May 11 18:00:25 2025 GMT
Subject: CN=71f73c2da265fc71e06244d7d89cf967ac87eed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:85:8a:6b:3f:5b:31:8d:76:5a:6a:96:b2:
b8:3a:bb:da:0e:78:89:36:09:62:6c:46:f3:c7:f0:
ff:52:35:b5:75:d0:45:bb:d8:ff:e3:93:10:37:dd:
29:86:6a:bf:b5:c2:9d:6a:8b:15:a6:e8:d8:6d:8f:
eb:23:4c:0a:39:58:5b:6c:59:63:0d:1d:1e:86:dc:
87:53:5b:ac:96:24:6d:aa:ae:a1:3a:98:f9:9f:60:
b6:f1:dc:31:61:59:25:f3:84:bb:26:21:f5:18:d5:
3c:77:0f:f2:27:ee:14:14:55:4d:99:0c:47:d9:64:
fa:93:d0:74:b0:8c:dd:2d:5c:bd:a4:1c:1f:00:d4:
95:01:42:eb:4d:9b:14:76:7f:77:54:a8:6d:4f:5e:
9c:fe:65:da:53:e5:b8:ba:bc:e0:e3:7f:c0:2d:c7:
71:9c:ad:8d:e2:b4:88:7b:af:3f:70:08:d7:12:a0:
cc:3c:d5:c6:b2:56:66:46:6e:90:11:8a:be:c4:62:
76:b0:f3:f2:18:7b:22:12:0d:40:df:6f:a9:e8:2e:
49:3a:a3:86:44:12:2f:a6:f3:c4:4b:ec:6f:e3:78:
4a:0f:e3:a2:a3:2b:43:78:c1:da:40:04:c1:54:02:
7f:96:f5:6a:68:58:a3:92:57:70:18:55:14:63:45:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:3C:2D:A2:65:FC:71:E0:62:44:D7:D8:9C:F9:67:AC:87:EE:D1
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:6c:70:9e:4b:74:42:f7:6d:7c:47:6e:ce:18:e7:9c:45:96:
8d:6b:ab:76:2e:6b:28:a2:6c:37:dd:26:ae:1d:ce:26:68:27:
9f:23:a0:91:c1:ac:20:b4:48:7a:59:3f:7d:87:85:6a:a8:cc:
60:5f:df:3e:c8:d3:22:c4:3b:25:53:db:f7:5d:9f:f2:cc:dd:
c8:d0:d8:08:75:8d:69:dc:83:fe:53:e5:5a:8e:3f:24:8d:75:
4a:17:3b:8c:ba:59:c7:5e:f5:3e:91:86:42:51:46:c6:de:ef:
38:48:f4:6a:46:39:13:cb:20:ea:7e:cc:e6:8c:db:20:1c:d5:
be:a8:32:81:3f:d5:72:9a:ea:08:a4:b9:4c:94:63:25:3d:ac:
f8:28:b1:61:b1:0f:6f:1f:81:b2:1c:d3:2d:7f:95:48:f7:16:
d1:1c:fe:95:fc:1e:ff:eb:5a:1c:55:a5:fe:87:c0:3b:7c:da:
4c:a3:40:54:0d:88:5a:a5:13:c3:df:e7:ab:2d:da:8f:17:8d:
47:1a:72:cb:c6:81:1e:b1:96:d2:50:e5:f0:43:a4:e0:3b:af:
b9:be:b4:81:ea:5a:17:7b:36:73:70:b0:1c:98:95:0f:bd:ab:
13:c4:15:3d:6a:40:a6:10:2b:dc:d8:c6:e1:43:de:ed:cc:36:
a1:ca:95:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WwB+Jf1eps1HUj5dGUiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkN2QzYzcyODAyMjIzNTc3ODgwZDM4ZjA0OGM4MTg5MTIy
NjQwM2IwHhcNMjUwNTEwMTgwMDI1WhcNMjUwNTExMTgwMDI1WjAzMTEwLwYDVQQD
Eyg3MWY3M2MyZGEyNjVmYzcxZTA2MjQ0ZDdkODljZjk2N2FjODdlZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8GFims/WzGNdlpqlrK4OrvaDniJ
NglibEbzx/D/UjW1ddBFu9j/45MQN90phmq/tcKdaosVpujYbY/rI0wKOVhbbFlj
DR0ehtyHU1usliRtqq6hOpj5n2C28dwxYVkl84S7JiH1GNU8dw/yJ+4UFFVNmQxH
2WT6k9B0sIzdLVy9pBwfANSVAULrTZsUdn93VKhtT16c/mXaU+W4urzg43/ALcdx
nK2N4rSIe68/cAjXEqDMPNXGslZmRm6QEYq+xGJ2sPPyGHsiEg1A32+p6C5JOqOG
RBIvpvPES+xv43hKD+OioytDeMHaQATBVAJ/lvVqaFijkldwGFUUY0WukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH3PC2iZfxx4GJE19ic+Wesh+7RMB8GA1UdIwQY
MBaAFA19PHKAIiNXeIDTjwSMgYkSJkA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0Mzct
ODY0ZmRiYzc5NzcwLzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0MzctODY0ZmRiYzc5Nzcw
LzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Wxwnkt0
QvdtfEduzhjnnEWWjWurdi5rKKJsN90mrh3OJmgnnyOgkcGsILRIelk/fYeFaqjM
YF/fPsjTIsQ7JVPb912f8szdyNDYCHWNadyD/lPlWo4/JI11Shc7jLpZx171PpGG
QlFGxt7vOEj0akY5E8sg6n7M5ozbIBzVvqgygT/VcprqCKS5TJRjJT2s+CixYbEP
bx+BshzTLX+VSPcW0Rz+lfwe/+taHFWl/ofAO3zaTKNAVA2IWqUTw9/nqy3ajxeN
Rxpyy8aBHrGW0lDl8EOk4Duvub60gepaF3s2c3CwHJiVD72rE8QVPWpAphAr3NjG
4UPe7cw2ocqVCw==
-----END CERTIFICATE-----
Generated at Sat May 10 19:27:27 2025 by rpki-client