Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier: RentOZCWN4hbgcCQargmxkXdF0lHLn67Kvp6oLHmpjk=
Subject key identifier: 0C:A6:15:82:AC:FC:E6:CC:AE:E9:7B:21:94:57:97:11:FC:BA:59:62
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 0196BF378E2CBE371E6D9C530E33DE2995D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number: 0C40
Signing time: Sun 11 May 2025 12:00:11 +0000
Manifest this update: Sun 11 May 2025 12:00:11 +0000
Manifest next update: Mon 12 May 2025 12:00:11 +0000
Files and hashes: 1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: Sz9TSrJXpIGlJ697qX0/TqhQCpLXhyR8/VqzjZbCHm0=)
2: Ts2grdh3WhIBgvviR4SebdJHIVA.roa (hash: gCLhNsBpATqkGaeD3Tm7dpZpLjmibJqVgNt4Igote+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:8e:2c:be:37:1e:6d:9c:53:0e:33:de:29:95:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: May 11 12:00:11 2025 GMT
Not After : May 12 12:00:11 2025 GMT
Subject: CN=0ca61582acfce6ccaee97b2194579711fcba5962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:59:32:f7:33:5b:49:01:66:cd:1e:b2:d2:
c0:95:0a:53:14:de:1d:10:00:4f:b4:5d:7e:6d:e0:
78:0e:24:65:43:a9:e2:bc:e8:8a:ad:e6:55:c3:f7:
5c:ca:b8:69:ab:3f:f4:53:38:22:88:21:5b:fa:bb:
12:6f:5c:61:60:b6:80:30:67:ef:5a:70:37:b8:07:
30:ee:e1:be:f3:94:22:2b:65:0e:e2:24:b1:eb:12:
42:5b:db:5b:37:f2:63:83:09:f0:6a:a6:26:05:2f:
14:74:0a:51:c9:0d:52:94:a8:39:55:81:33:48:a6:
cc:ac:a3:87:98:d8:c5:c0:8d:07:e9:7a:db:56:83:
ed:06:65:b1:88:5f:6f:f4:b4:a7:90:94:1e:8d:ed:
e8:45:69:73:07:84:6d:d7:64:fe:ab:b4:13:25:4e:
0f:70:be:4f:f6:5c:32:4a:86:ef:15:67:df:ee:8d:
ba:4f:c4:b6:f8:17:e1:8f:d4:88:74:bb:42:3d:e7:
88:19:a9:80:66:6c:6c:37:c0:14:3c:23:de:fe:a5:
45:3c:86:f0:e7:4f:88:be:7b:74:27:8e:3f:6d:6f:
c8:de:b2:89:34:cb:68:b8:40:19:50:aa:04:b1:e6:
05:b8:c2:b9:97:61:a7:2c:db:f7:49:e1:a9:ff:ad:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A6:15:82:AC:FC:E6:CC:AE:E9:7B:21:94:57:97:11:FC:BA:59:62
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d8:8a:43:52:32:ea:e5:3f:ae:10:5e:16:c7:13:b6:56:9e:
19:a9:8b:64:31:6f:c6:b3:d8:d5:05:a4:87:de:b4:55:13:f8:
0e:eb:2a:e5:67:15:dc:c1:d6:ec:75:2a:43:21:5f:6c:78:c7:
dc:c1:1a:28:b8:19:89:35:66:34:31:80:0e:9b:c0:82:48:a8:
f6:cb:9f:7c:61:b2:9d:cb:83:2e:4f:10:2d:fa:f0:a9:6f:69:
c5:03:2a:e0:8c:5c:20:13:52:90:81:4d:43:aa:a9:cc:36:60:
eb:b6:86:32:1f:88:83:ca:5e:35:21:73:43:34:55:a9:cf:2a:
40:19:dd:9a:7e:a8:ed:a8:21:42:b9:74:11:b8:aa:4f:4d:6d:
30:17:ba:ec:e0:bb:b3:ee:7f:89:12:5b:3a:e3:be:6c:23:4f:
ec:20:30:23:b9:94:eb:bd:a9:30:4b:7d:9f:56:71:69:80:bd:
2a:63:b4:b3:7a:6f:11:d5:1a:7a:59:86:69:83:c1:90:c6:ea:
7b:f7:bf:58:b9:11:7e:7c:96:ce:7d:1c:d2:b2:09:3f:40:f6:
38:ad:1d:5c:52:f2:70:a9:0b:10:9f:41:a3:13:d0:5c:62:20:
23:54:68:30:27:88:2d:ac:88:6c:ec:d0:7c:55:ad:69:20:71:
09:f7:27:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/N44svjcebZxTDjPeKZXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTEwOTQ0NzA0ZDcyM2M4ZGQ5Y2U3MzBjYWJmOTZmZTI2
YmFiMjUwHhcNMjUwNTExMTIwMDExWhcNMjUwNTEyMTIwMDExWjAzMTEwLwYDVQQD
EygwY2E2MTU4MmFjZmNlNmNjYWVlOTdiMjE5NDU3OTcxMWZjYmE1OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGFZMvczW0kBZs0estLAlQpTFN4d
EABPtF1+beB4DiRlQ6nivOiKreZVw/dcyrhpqz/0UzgiiCFb+rsSb1xhYLaAMGfv
WnA3uAcw7uG+85QiK2UO4iSx6xJCW9tbN/JjgwnwaqYmBS8UdApRyQ1SlKg5VYEz
SKbMrKOHmNjFwI0H6XrbVoPtBmWxiF9v9LSnkJQeje3oRWlzB4Rt12T+q7QTJU4P
cL5P9lwySobvFWff7o26T8S2+Bfhj9SIdLtCPeeIGamAZmxsN8AUPCPe/qVFPIbw
50+Ivnt0J44/bW/I3rKJNMtouEAZUKoEseYFuMK5l2GnLNv3SeGp/62jPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAymFYKs/ObMrul7IZRXlxH8ulliMB8GA1UdIwQY
MBaAFNChCURwTXI8jdnOcwyr+W/ia6slMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUt
OGEwZjA0NTA1NjQ3LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUtOGEwZjA0NTA1NjQ3
LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANiKQ1Iy
6uU/rhBeFscTtlaeGamLZDFvxrPY1QWkh960VRP4Dusq5WcV3MHW7HUqQyFfbHjH
3MEaKLgZiTVmNDGADpvAgkio9suffGGyncuDLk8QLfrwqW9pxQMq4IxcIBNSkIFN
Q6qpzDZg67aGMh+Ig8peNSFzQzRVqc8qQBndmn6o7aghQrl0EbiqT01tMBe67OC7
s+5/iRJbOuO+bCNP7CAwI7mU672pMEt9n1ZxaYC9KmO0s3pvEdUaelmGaYPBkMbq
e/e/WLkRfnyWzn0c0rIJP0D2OK0dXFLycKkLEJ9BoxPQXGIgI1RoMCeILayIbOzQ
fFWtaSBxCfcnPA==
-----END CERTIFICATE-----
Generated at Sun May 11 19:58:36 2025 by rpki-client