Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
File: DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json)
Hash identifier: aCsErIfLaKJ+pFL+G22pPDrnP0JK/JODF7FZ0uTRids=
Subject key identifier: B5:E9:C4:F7:1F:85:9E:C4:CF:E1:E6:18:E7:17:56:D1:D3:76:84:1C
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial: 0196A0F714A103A7051F7786FD09656DD138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
Manifest number: 060E
Signing time: Mon 05 May 2025 15:01:09 +0000
Manifest this update: Mon 05 May 2025 15:01:09 +0000
Manifest next update: Tue 06 May 2025 15:01:09 +0000
Files and hashes: 1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: LTzC+9GnR/OaNTRfkVlP81i2s77t83n3iPRPrEsrkqU=)
2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f7:14:a1:03:a7:05:1f:77:86:fd:09:65:6d:d1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Validity
Not Before: May 5 15:01:09 2025 GMT
Not After : May 6 15:01:09 2025 GMT
Subject: CN=b5e9c4f71f859ec4cfe1e618e71756d1d376841c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:eb:19:76:0b:42:15:ac:4b:38:8a:05:30:
58:4c:14:36:1a:c5:cd:d5:57:53:0e:26:eb:9e:fd:
4c:4c:97:8e:9a:d2:1e:74:7a:1f:b6:15:08:4d:89:
d5:5a:b7:85:93:71:ac:05:9f:a8:21:98:b0:b8:4d:
6c:e9:4c:59:7e:71:6a:77:63:be:4c:61:5e:01:a6:
68:23:cc:3c:6e:b6:04:3d:c3:0f:cb:14:cb:6e:0d:
5c:2f:0d:c0:67:29:17:15:6a:29:b2:2b:50:ad:7a:
06:13:9c:12:24:5d:e9:3c:c1:e8:e2:ba:f5:6e:df:
9d:25:73:47:2b:04:65:96:db:f6:a6:1c:1f:cb:e0:
f7:cf:cb:ca:ff:b3:12:34:44:a7:9b:e0:6d:51:4c:
e4:7d:7c:95:81:66:50:a9:91:65:7c:99:85:19:29:
1b:f9:35:dc:ec:31:1f:79:11:df:ab:39:78:03:2b:
38:f6:c7:fa:38:24:5b:68:d3:2b:a1:d6:a5:a1:d2:
af:9c:09:64:b7:fb:ea:b4:48:ca:1c:c4:4e:bc:66:
9b:22:f8:31:29:80:2b:00:95:05:69:d4:c9:5a:e4:
72:f7:64:85:a8:70:84:4a:37:0e:20:c0:95:69:04:
75:6f:94:3e:d6:44:a4:bf:81:2f:21:6c:37:98:9d:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E9:C4:F7:1F:85:9E:C4:CF:E1:E6:18:E7:17:56:D1:D3:76:84:1C
X509v3 Authority Key Identifier:
keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bd:66:6a:f9:a9:ff:23:09:0c:c9:e2:59:48:d7:76:a3:d3:
de:8f:5d:9b:2d:4e:b9:7c:64:d2:08:d8:5d:51:d7:ce:b7:94:
2a:2a:12:45:0f:36:ba:ff:b4:41:c4:d7:a1:78:89:02:a5:a3:
1a:8d:20:1d:f4:c5:f0:bd:66:32:1b:18:fa:16:50:fc:70:7f:
96:49:4f:f8:58:81:68:cc:6f:02:2a:33:2d:7a:fa:5d:db:71:
a9:6e:ad:81:f5:da:fb:4f:c5:ed:2c:e4:8e:69:52:50:e1:dc:
11:49:27:f8:5c:c9:21:0a:2f:74:5b:bf:0c:a0:32:ff:f7:e4:
52:8e:c0:da:7c:a4:ba:65:53:6a:74:6d:7a:97:92:93:26:61:
c0:98:b4:24:a6:e9:0f:fc:5e:6f:55:d9:9d:73:c2:c1:a7:a6:
6f:8a:e4:8b:cb:f7:d6:77:4c:e2:13:2e:86:32:a1:3f:a7:de:
2a:5b:c4:be:9c:62:73:d1:c6:0c:ee:ba:db:13:81:d4:25:db:
50:18:01:93:4f:e0:b4:ea:42:41:8a:9d:fe:b6:09:ed:21:be:
cc:84:d1:c0:c7:54:b2:ee:f5:5b:6d:36:37:34:a7:74:80:d1:
f5:e3:c8:00:eb:c1:21:89:96:e1:11:e3:5d:94:53:41:c4:ae:
d9:48:43:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZag9xShA6cFH3eG/QllbdE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzIxNzIyNjFjOTUwOWU1NzM1MjEzN2JhMDE5MmE4NDg2
YjZmZGQwHhcNMjUwNTA1MTUwMTA5WhcNMjUwNTA2MTUwMTA5WjAzMTEwLwYDVQQD
EyhiNWU5YzRmNzFmODU5ZWM0Y2ZlMWU2MThlNzE3NTZkMWQzNzY4NDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CPrGXYLQhWsSziKBTBYTBQ2GsXN
1VdTDibrnv1MTJeOmtIedHofthUITYnVWreFk3GsBZ+oIZiwuE1s6UxZfnFqd2O+
TGFeAaZoI8w8brYEPcMPyxTLbg1cLw3AZykXFWopsitQrXoGE5wSJF3pPMHo4rr1
bt+dJXNHKwRlltv2phwfy+D3z8vK/7MSNESnm+BtUUzkfXyVgWZQqZFlfJmFGSkb
+TXc7DEfeRHfqzl4Ays49sf6OCRbaNMrodalodKvnAlkt/vqtEjKHMROvGabIvgx
KYArAJUFadTJWuRy92SFqHCESjcOIMCVaQR1b5Q+1kSkv4EvIWw3mJ1i7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXpxPcfhZ7Ez+HmGOcXVtHTdoQcMB8GA1UdIwQY
MBaAFA0yFyJhyVCeVzUhN7oBkqhIa2/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81OGU4ZjgtMWIyNy00MWE0LTkyYWIt
ZmU4NDg0ZjcwNzlkLzEvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi81OGU4ZjgtMWIyNy00MWE0LTkyYWItZmU4NDg0ZjcwNzlk
LzEvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr1mavmp
/yMJDMniWUjXdqPT3o9dmy1OuXxk0gjYXVHXzreUKioSRQ82uv+0QcTXoXiJAqWj
Go0gHfTF8L1mMhsY+hZQ/HB/lklP+FiBaMxvAiozLXr6XdtxqW6tgfXa+0/F7Szk
jmlSUOHcEUkn+FzJIQovdFu/DKAy//fkUo7A2nykumVTanRtepeSkyZhwJi0JKbp
D/xeb1XZnXPCwaemb4rki8v31ndM4hMuhjKhP6feKlvEvpxic9HGDO662xOB1CXb
UBgBk0/gtOpCQYqd/rYJ7SG+zITRwMdUsu71W202NzSndIDR9ePIAOvBIYmW4RHj
XZRTQcSu2UhDEg==
-----END CERTIFICATE-----
Generated at Mon May 5 23:46:53 2025 by rpki-client