Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: QXpHTC4Rf0SyZJneMjchK2DBY6xeItPhcYvt8RQAIng=
Subject key identifier: 30:B9:CB:B2:AC:0F:01:F5:3A:7B:38:A2:E1:9C:3E:FC:2F:28:29:55
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 0196CE3D19B44CCD78689DDF873B8703A650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 0F37
Signing time: Wed 14 May 2025 10:00:32 +0000
Manifest this update: Wed 14 May 2025 10:00:32 +0000
Manifest next update: Thu 15 May 2025 10:00:32 +0000
Files and hashes: 1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=)
2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: WLImHiCFhdDQfvAyaLCHyaHsN+osSAFlfs135FOLpOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3d:19:b4:4c:cd:78:68:9d:df:87:3b:87:03:a6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: May 14 10:00:32 2025 GMT
Not After : May 15 10:00:32 2025 GMT
Subject: CN=30b9cbb2ac0f01f53a7b38a2e19c3efc2f282955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:a2:ba:57:a8:64:75:b0:63:a0:01:a3:29:
6e:0d:1f:c4:68:cc:c6:c7:d1:97:83:cb:e6:3f:14:
15:b3:1e:7b:8c:a2:df:e8:17:11:c4:16:14:cb:d5:
4f:e6:ef:8f:aa:d1:c4:d9:6b:f7:d9:28:f4:59:7e:
df:38:5d:6c:b3:09:f2:c0:f2:35:ff:ec:05:69:af:
a3:e5:16:11:70:ee:a6:36:8c:3b:9c:0d:ff:4c:f2:
10:b3:a5:4a:a1:b7:c9:7e:19:47:0e:7c:d9:82:7d:
e0:02:11:4f:1c:6f:5c:46:9a:b7:b1:7b:5b:07:fe:
c7:99:2f:8f:04:52:48:ef:e0:52:64:2f:e6:75:d4:
cb:31:f0:2d:8b:8e:87:1f:06:81:8e:1e:89:47:d8:
d5:df:ee:c8:2a:e9:1f:b0:67:2f:51:e4:9c:e5:a6:
94:fc:5a:41:34:dc:dd:04:11:b9:be:87:05:aa:ff:
73:2e:4a:cf:53:3b:e5:0b:a1:01:f9:f2:77:bc:69:
9c:e4:5c:dd:b2:f5:b6:0f:6c:da:9f:7d:07:44:cc:
71:53:f7:db:fc:6a:c8:72:49:02:50:2f:18:6c:ce:
3c:7c:16:74:76:1e:1c:97:bb:52:e6:81:12:19:30:
f6:8d:39:e7:3f:76:af:d1:07:da:e3:fd:b7:0d:80:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B9:CB:B2:AC:0F:01:F5:3A:7B:38:A2:E1:9C:3E:FC:2F:28:29:55
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:16:8f:08:8f:25:77:63:94:06:15:a8:3d:51:9c:dc:e4:c4:
15:5f:4f:b1:65:16:b2:6a:da:12:e9:9c:0b:e7:21:72:bb:25:
c0:11:b2:dc:99:da:d3:89:e2:03:c3:31:94:80:2c:84:00:8c:
38:65:c4:28:ba:b3:2d:34:4f:0b:47:3f:5a:b0:f8:f3:52:86:
69:03:48:12:2b:eb:0f:2b:13:0c:af:c0:55:fd:7e:94:96:1e:
15:1e:ee:c0:d3:e3:04:04:94:3a:86:82:b3:e0:2b:bd:fc:7c:
ea:c6:5f:bf:6e:ca:ca:8c:24:cf:76:da:29:66:18:a4:46:21:
df:d8:f3:12:38:c2:7e:9d:8d:ab:8c:fb:af:27:a3:2e:ba:a7:
da:ec:99:b9:d1:37:71:0d:37:b7:b6:4d:82:40:ff:66:bd:94:
15:be:e3:39:4f:d5:c9:cc:5e:96:f5:1e:ab:82:06:e5:20:91:
d7:cf:c4:ed:f2:27:34:85:dc:ac:b2:15:02:71:4c:3d:33:7b:
85:9f:f7:ee:88:83:72:ab:5b:5a:df:79:25:78:29:ba:0c:6b:
8f:50:8b:8d:69:cb:a8:e0:86:78:02:e2:8e:7d:c2:a9:cb:73:
43:f2:7b:94:15:55:5b:fb:7f:f1:72:bd:48:5e:fd:24:2d:1b:
17:d9:0d:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbOPRm0TM14aJ3fhzuHA6ZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMWYxZjQ1MmVlNjY5OGU5OWRmY2I0ZTNmNWFlZWIzYmMy
NTAzODUwHhcNMjUwNTE0MTAwMDMyWhcNMjUwNTE1MTAwMDMyWjAzMTEwLwYDVQQD
EygzMGI5Y2JiMmFjMGYwMWY1M2E3YjM4YTJlMTljM2VmYzJmMjgyOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM+iuleoZHWwY6ABoyluDR/EaMzG
x9GXg8vmPxQVsx57jKLf6BcRxBYUy9VP5u+PqtHE2Wv32Sj0WX7fOF1sswnywPI1
/+wFaa+j5RYRcO6mNow7nA3/TPIQs6VKobfJfhlHDnzZgn3gAhFPHG9cRpq3sXtb
B/7HmS+PBFJI7+BSZC/mddTLMfAti46HHwaBjh6JR9jV3+7IKukfsGcvUeSc5aaU
/FpBNNzdBBG5vocFqv9zLkrPUzvlC6EB+fJ3vGmc5FzdsvW2D2zan30HRMxxU/fb
/GrIckkCUC8YbM48fBZ0dh4cl7tS5oESGTD2jTnnP3av0Qfa4/23DYAXqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDC5y7KsDwH1Ons4ouGcPvwvKClVMB8GA1UdIwQY
MBaAFA4fH0Uu5mmOmd/LTj9a7rO8JQOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84MGY3NGUtYzlkNS00YWEzLWJhZDct
YjE5ZmJhMDNjMDZmLzEvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC84MGY3NGUtYzlkNS00YWEzLWJhZDctYjE5ZmJhMDNjMDZm
LzEvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBaPCI8l
d2OUBhWoPVGc3OTEFV9PsWUWsmraEumcC+chcrslwBGy3Jna04niA8MxlIAshACM
OGXEKLqzLTRPC0c/WrD481KGaQNIEivrDysTDK/AVf1+lJYeFR7uwNPjBASUOoaC
s+Arvfx86sZfv27Kyowkz3baKWYYpEYh39jzEjjCfp2Nq4z7ryejLrqn2uyZudE3
cQ03t7ZNgkD/Zr2UFb7jOU/VycxelvUeq4IG5SCR18/E7fInNIXcrLIVAnFMPTN7
hZ/37oiDcqtbWt95JXgpugxrj1CLjWnLqOCGeALijn3CqctzQ/J7lBVVW/t/8XK9
SF79JC0bF9kNTw==
-----END CERTIFICATE-----
Generated at Wed May 14 12:13:23 2025 by rpki-client