Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File: DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier: SAp12JJC++okDhyFroEjh4ZxwWbq6vPUZoWnIr8vi1Y=
Subject key identifier: 67:17:A4:09:DA:31:BE:6B:A0:C6:B6:67:B9:53:6A:00:04:ED:2D:C8
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 0196BB5B1653B0ACFFE7A1982D3470DA0467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 18:00:30 +0000
Manifest this update: Sat 10 May 2025 18:00:30 +0000
Manifest next update: Sun 11 May 2025 18:00:30 +0000
Files and hashes: 1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=)
2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: bWsK5n+TR+zW4DFHQTF7R/9bTGA40ZM8Kw38W+VxLSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:16:53:b0:ac:ff:e7:a1:98:2d:34:70:da:04:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: May 10 18:00:30 2025 GMT
Not After : May 11 18:00:30 2025 GMT
Subject: CN=6717a409da31be6ba0c6b667b9536a0004ed2dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a0:20:8d:7c:6e:f1:c4:38:e2:17:73:61:6a:
57:9f:39:34:69:9b:22:6c:92:52:fb:b0:92:f8:26:
96:ca:8b:53:59:78:67:b8:6f:f3:73:3f:29:5a:d4:
5f:25:f8:94:b5:c1:9b:1c:ff:b3:62:84:2f:dd:01:
1b:38:7e:0b:01:e2:5f:55:c0:fa:ad:88:af:c3:a3:
03:03:3d:e8:dc:ec:6d:a0:ee:20:fe:d9:78:21:2f:
71:c4:12:a7:47:ea:57:d0:02:27:aa:fa:1d:79:40:
b3:45:1d:cb:35:32:5e:84:9f:77:80:b2:4b:df:b7:
dc:d0:41:11:fb:1b:47:f2:e8:dd:0d:f0:87:bd:20:
dc:88:47:c1:3d:02:ff:69:98:b3:be:b6:c1:98:c6:
7e:bc:8a:92:23:6f:61:9b:c3:04:2c:0e:80:81:a3:
98:b1:9e:e3:ff:0e:55:5c:24:17:eb:09:a9:b3:6f:
10:11:6f:3e:11:3c:f7:90:85:36:53:77:3c:3c:7d:
e9:16:71:85:cb:2b:e4:e9:a3:7c:39:4f:5a:b5:12:
42:49:bc:30:91:e9:0d:be:94:a5:6f:93:f2:eb:d6:
20:28:42:e0:b4:30:a9:4e:df:89:fc:e3:38:14:08:
3e:d4:0f:b3:04:dd:e1:3d:06:91:ff:78:1c:89:b8:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:17:A4:09:DA:31:BE:6B:A0:C6:B6:67:B9:53:6A:00:04:ED:2D:C8
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:de:0d:59:ac:ca:d2:f5:e4:0c:61:b2:43:0c:a9:8d:cf:5d:
a1:42:2e:83:d1:16:1a:df:18:bd:b9:f5:5c:3d:49:af:e6:56:
eb:e1:58:75:60:21:8c:56:47:36:27:39:6a:9d:fd:41:7f:38:
47:e5:c7:e5:5d:17:0a:5c:f0:98:21:8d:cc:a0:37:4d:ad:c3:
be:86:34:0a:bc:07:f4:e8:71:c7:9b:10:f9:db:fa:b9:68:5b:
8e:4f:52:d4:ad:06:df:74:7b:f0:ff:16:74:4e:4a:47:98:19:
fa:2b:ee:dc:17:a3:f7:ad:bf:ad:6c:8c:d0:83:2c:30:89:8a:
3c:c5:02:0c:48:72:d1:22:e8:91:2e:9b:f8:02:1c:1b:2e:6d:
67:a7:0a:43:c0:27:9c:27:d4:73:c3:bb:b8:e6:2f:62:7d:7e:
ef:3e:95:d9:2c:75:fb:36:51:92:3f:69:9b:52:38:09:f4:56:
37:63:40:cb:20:21:56:84:e6:3a:19:5d:4e:d9:e7:06:11:8c:
29:e7:d1:88:11:c7:8b:7b:30:3e:2c:cf:97:5f:17:2b:20:a0:
ea:bb:5a:0b:4c:5e:0c:94:6d:05:04:fc:90:7d:4b:db:80:a8:
c0:bc:2d:c5:13:01:c5:54:d8:ac:00:cc:b1:53:44:e5:04:28:
f9:b3:c0:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WxZTsKz/56GYLTRw2gRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2ExZDViZGQ1MDM0NGZmNWVmODg0YTY2MGU4MmViYTgz
YmMwZGIwHhcNMjUwNTEwMTgwMDMwWhcNMjUwNTExMTgwMDMwWjAzMTEwLwYDVQQD
Eyg2NzE3YTQwOWRhMzFiZTZiYTBjNmI2NjdiOTUzNmEwMDA0ZWQyZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KAgjXxu8cQ44hdzYWpXnzk0aZsi
bJJS+7CS+CaWyotTWXhnuG/zcz8pWtRfJfiUtcGbHP+zYoQv3QEbOH4LAeJfVcD6
rYivw6MDAz3o3OxtoO4g/tl4IS9xxBKnR+pX0AInqvodeUCzRR3LNTJehJ93gLJL
37fc0EER+xtH8ujdDfCHvSDciEfBPQL/aZizvrbBmMZ+vIqSI29hm8MELA6AgaOY
sZ7j/w5VXCQX6wmps28QEW8+ETz3kIU2U3c8PH3pFnGFyyvk6aN8OU9atRJCSbww
kekNvpSlb5Py69YgKELgtDCpTt+J/OM4FAg+1A+zBN3hPQaR/3gcibhOfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcXpAnaMb5roMa2Z7lTagAE7S3IMB8GA1UdIwQY
MBaAFA7KHVvdUDRP9e+ISmYOguuoO8DbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZTdmY2ItMDc1NS00YzFlLWFjNzct
N2M3ZjAwYTk1M2UxLzEvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZTdmY2ItMDc1NS00YzFlLWFjNzctN2M3ZjAwYTk1M2Ux
LzEvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZN4NWazK
0vXkDGGyQwypjc9doUIug9EWGt8Yvbn1XD1Jr+ZW6+FYdWAhjFZHNic5ap39QX84
R+XH5V0XClzwmCGNzKA3Ta3DvoY0CrwH9Ohxx5sQ+dv6uWhbjk9S1K0G33R78P8W
dE5KR5gZ+ivu3Bej962/rWyM0IMsMImKPMUCDEhy0SLokS6b+AIcGy5tZ6cKQ8An
nCfUc8O7uOYvYn1+7z6V2Sx1+zZRkj9pm1I4CfRWN2NAyyAhVoTmOhldTtnnBhGM
KefRiBHHi3swPizPl18XKyCg6rtaC0xeDJRtBQT8kH1L24CowLwtxRMBxVTYrADM
sVNE5QQo+bPAkA==
-----END CERTIFICATE-----
Generated at Sun May 11 04:10:42 2025 by rpki-client