Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: EOW9IlWRHubSZMk7Gb56DupsOediOEj9fujKMzBKWa4=
Subject key identifier: 0E:E5:60:5D:43:85:A7:10:39:17:B8:37:D9:83:11:BF:A6:41:C8:95
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 0196C42701149F1F00CABE6166DBDB89738C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 11:00:12 +0000
Manifest this update: Mon 12 May 2025 11:00:12 +0000
Manifest next update: Tue 13 May 2025 11:00:12 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: 1J7RvpO4NQhHHf2DrCTbjHYLLKG+Sy5j5aKY+N/8E6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:01:14:9f:1f:00:ca:be:61:66:db:db:89:73:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: May 12 11:00:12 2025 GMT
Not After : May 13 11:00:12 2025 GMT
Subject: CN=0ee5605d4385a7103917b837d98311bfa641c895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:35:3e:c3:9a:c0:8a:6d:37:2f:93:9f:87:
32:d1:b1:c9:0c:72:78:22:e6:ec:d9:99:52:11:7c:
ad:09:5b:87:70:14:17:2e:6b:4a:fc:ad:f1:62:80:
a0:3c:c5:0f:d2:75:82:cf:53:a7:93:60:c0:27:d8:
d6:fd:fa:e8:cf:f7:d9:2e:fb:3a:c1:9d:5d:2a:64:
d9:d0:cf:18:d3:c3:65:9d:79:51:b4:5d:67:c0:37:
70:ea:76:5a:cf:38:79:5b:31:a0:07:3e:26:25:b2:
68:93:22:7a:3b:8e:f1:01:d6:b7:c6:3a:38:7c:85:
0b:f1:a3:67:3e:b3:3a:53:fc:40:59:fd:c1:4d:3f:
0a:e0:e6:0e:c6:34:a8:a3:3e:24:2b:06:e0:17:c2:
08:83:9b:d0:66:b1:53:fd:de:15:79:03:91:68:f3:
14:df:15:a5:d0:67:21:a5:8a:c8:11:33:03:d0:01:
ba:8c:95:8c:a3:db:14:6c:ec:a4:a3:0b:82:f9:72:
1c:e8:06:7d:aa:0a:72:2b:23:13:6e:d0:1f:57:76:
a9:82:68:7b:fc:ad:ce:f6:4b:53:79:8b:37:91:33:
e3:d0:18:81:e3:9a:2e:83:3b:86:86:9e:1a:91:11:
d4:aa:9c:a3:cb:be:af:e4:c8:25:d7:03:9f:e8:61:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E5:60:5D:43:85:A7:10:39:17:B8:37:D9:83:11:BF:A6:41:C8:95
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1d:36:0d:99:85:04:7d:70:0c:b6:93:b1:e7:ef:17:ba:26:
73:58:bc:fc:a2:f3:78:53:75:77:2e:99:c6:18:1c:a2:b7:01:
90:fc:36:34:30:2a:86:39:f5:60:90:1a:79:5d:33:5f:68:87:
c5:8b:10:07:f4:fb:c0:61:90:0a:bc:02:c1:ac:59:71:57:78:
e3:52:8f:5c:d8:94:9b:d8:a1:ca:fe:5b:d9:13:d8:fc:49:79:
8a:4a:83:73:58:02:5d:f8:27:4a:aa:49:19:fd:14:d9:d1:cd:
cb:49:f9:9a:dd:13:1d:3d:4e:5f:f4:c6:43:ba:24:61:88:89:
2d:1c:e6:65:5d:0b:b9:58:c4:2d:d7:53:1f:76:60:50:a7:1d:
e4:d9:a4:3a:7a:76:88:a9:e2:54:5b:ef:8c:a9:74:e3:d0:36:
f9:28:ee:39:a8:91:ef:72:3d:ea:b9:be:cf:e7:5d:5c:9e:7b:
f0:65:57:a3:c2:e5:53:ac:7e:d1:f0:82:cf:3d:b5:5b:e8:8a:
ea:45:e8:52:70:f2:d1:0a:76:48:69:00:d5:e0:1c:d9:33:a5:
9e:74:e5:f1:da:ff:29:dc:ab:4a:ec:d9:02:60:3f:70:a6:15:
f9:3e:9b:7c:c2:15:6c:e3:5e:56:cc:3a:ca:a1:e9:6c:b7:28:
7c:38:cc:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJwEUnx8Ayr5hZtvbiXOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2JjOGNlYWIxZTc5M2EyMTAzOWNkMGIxZTU0NzJjNzI2
NDFmNjgwHhcNMjUwNTEyMTEwMDEyWhcNMjUwNTEzMTEwMDEyWjAzMTEwLwYDVQQD
EygwZWU1NjA1ZDQzODVhNzEwMzkxN2I4MzdkOTgzMTFiZmE2NDFjODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/81PsOawIptNy+Tn4cy0bHJDHJ4
Iubs2ZlSEXytCVuHcBQXLmtK/K3xYoCgPMUP0nWCz1Onk2DAJ9jW/froz/fZLvs6
wZ1dKmTZ0M8Y08NlnXlRtF1nwDdw6nZazzh5WzGgBz4mJbJokyJ6O47xAda3xjo4
fIUL8aNnPrM6U/xAWf3BTT8K4OYOxjSooz4kKwbgF8IIg5vQZrFT/d4VeQORaPMU
3xWl0GchpYrIETMD0AG6jJWMo9sUbOykowuC+XIc6AZ9qgpyKyMTbtAfV3apgmh7
/K3O9ktTeYs3kTPj0BiB45ougzuGhp4akRHUqpyjy76v5Mgl1wOf6GEzWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7lYF1DhacQORe4N9mDEb+mQciVMB8GA1UdIwQY
MBaAFAw7yM6rHnk6IQOc0LHlRyxyZB9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQt
ZjhiYWM0ZmI4ZjhhLzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQtZjhiYWM0ZmI4Zjhh
LzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACx02DZmF
BH1wDLaTsefvF7omc1i8/KLzeFN1dy6ZxhgcorcBkPw2NDAqhjn1YJAaeV0zX2iH
xYsQB/T7wGGQCrwCwaxZcVd441KPXNiUm9ihyv5b2RPY/El5ikqDc1gCXfgnSqpJ
Gf0U2dHNy0n5mt0THT1OX/TGQ7okYYiJLRzmZV0LuVjELddTH3ZgUKcd5NmkOnp2
iKniVFvvjKl049A2+SjuOaiR73I96rm+z+ddXJ578GVXo8LlU6x+0fCCzz21W+iK
6kXoUnDy0Qp2SGkA1eAc2TOlnnTl8dr/KdyrSuzZAmA/cKYV+T6bfMIVbONeVsw6
yqHpbLcofDjMfA==
-----END CERTIFICATE-----
Generated at Mon May 12 20:40:48 2025 by rpki-client