Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: +AtHFlr0PkobUJC23P213EDXiKRZeSPilmXhGRJ3lcc=
Subject key identifier: 16:BF:AF:25:39:AD:39:92:83:0D:94:16:AC:12:85:2A:28:26:F9:D1
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 0196BF37D79906A982024D4909B95DB7998B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 1426
Signing time: Sun 11 May 2025 12:00:29 +0000
Manifest this update: Sun 11 May 2025 12:00:29 +0000
Manifest next update: Mon 12 May 2025 12:00:29 +0000
Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: XiRb4hZg+ltemaOYu++Yavw8fPJx3Iqj8lbLfDFGMkQ=)
2: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (hash: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=)
3: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (hash: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:d7:99:06:a9:82:02:4d:49:09:b9:5d:b7:99:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: May 11 12:00:29 2025 GMT
Not After : May 12 12:00:29 2025 GMT
Subject: CN=16bfaf2539ad3992830d9416ac12852a2826f9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:f8:7c:68:d2:b1:9e:56:4d:ab:3a:39:fd:
41:49:46:d3:c9:eb:a7:f5:af:ba:54:83:c3:49:e3:
2a:5c:14:2f:6a:fb:fb:b7:d4:ca:e5:9a:fc:5a:34:
d2:14:6b:0a:38:69:c3:06:14:16:f1:07:e2:97:a0:
b9:c4:73:a7:b8:6c:ee:f2:ce:b0:c0:43:ff:ab:8b:
7f:13:0f:31:e2:6e:82:fa:64:04:4b:4e:fd:3a:92:
75:c8:29:06:a8:23:f1:1a:0b:36:54:1d:73:64:54:
86:9c:b4:91:ff:2c:62:19:20:93:33:ea:7e:d0:cf:
45:27:71:c1:fd:46:1d:a0:e6:e5:64:1a:84:f8:36:
8c:e7:02:12:05:36:d6:99:3f:78:66:0b:71:d4:52:
fb:17:61:b7:0a:f8:81:dd:e5:df:a6:cf:3c:05:91:
9e:2a:9a:9d:3d:e9:a7:e1:cd:5c:86:ce:4b:2e:c2:
57:d3:a0:eb:68:b5:68:67:57:c9:c9:77:53:83:05:
25:65:4d:a7:67:f3:86:18:25:ab:2d:10:80:60:e6:
50:07:1f:75:27:65:b3:ee:21:33:c8:d8:7f:e6:ef:
3b:38:ff:cc:b1:65:83:ec:3b:e6:93:62:0a:89:63:
0e:bc:e1:72:c6:8a:df:67:fa:d2:76:7e:89:00:7d:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BF:AF:25:39:AD:39:92:83:0D:94:16:AC:12:85:2A:28:26:F9:D1
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:ac:22:e2:8d:26:32:5d:8b:83:86:49:5e:0d:17:c5:b5:
94:14:55:0c:48:c4:f8:7e:42:6a:9d:15:e8:e6:4f:7e:2b:16:
c7:7e:a4:46:84:58:3b:47:46:1a:9c:3b:1e:bb:f3:a8:80:3e:
0b:4b:d0:aa:f0:9e:fc:e1:9f:4b:c9:ef:9c:1d:fd:25:a8:a4:
56:4e:ad:ff:10:ad:cb:bc:1f:3a:ca:2b:49:b0:9c:4f:f6:86:
a8:df:bb:f6:c0:dd:cb:cf:79:a0:ee:64:d8:3b:f3:ef:83:0d:
13:03:cf:86:31:20:76:a2:3f:a1:dc:16:9e:5b:d1:f8:a3:be:
76:e9:c3:4b:24:ef:f0:df:f1:b2:fe:9f:ee:fa:04:97:cc:c4:
a2:f2:8b:2b:a1:d1:f0:dc:1d:5d:3f:24:ff:f9:20:21:12:cf:
a0:3f:a7:b4:e8:51:7d:c9:81:ee:64:07:33:69:95:56:ca:5b:
e3:b9:5c:61:e3:0f:51:13:3f:ce:46:c2:5c:2a:60:03:12:12:
f6:81:f0:17:b2:63:5c:80:e5:82:28:fa:c5:81:0f:2d:89:a2:
54:4d:56:d7:6e:9c:a2:39:04:61:e3:7e:51:92:9e:d1:6c:46:
24:7d:23:c3:17:33:18:f6:5d:41:54:d8:d1:09:c3:2a:6f:63:
c7:51:44:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/N9eZBqmCAk1JCbldt5mLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm
MDRmNjEwHhcNMjUwNTExMTIwMDI5WhcNMjUwNTEyMTIwMDI5WjAzMTEwLwYDVQQD
EygxNmJmYWYyNTM5YWQzOTkyODMwZDk0MTZhYzEyODUyYTI4MjZmOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAref4fGjSsZ5WTas6Of1BSUbTyeun
9a+6VIPDSeMqXBQvavv7t9TK5Zr8WjTSFGsKOGnDBhQW8Qfil6C5xHOnuGzu8s6w
wEP/q4t/Ew8x4m6C+mQES079OpJ1yCkGqCPxGgs2VB1zZFSGnLSR/yxiGSCTM+p+
0M9FJ3HB/UYdoOblZBqE+DaM5wISBTbWmT94Zgtx1FL7F2G3CviB3eXfps88BZGe
KpqdPemn4c1chs5LLsJX06DraLVoZ1fJyXdTgwUlZU2nZ/OGGCWrLRCAYOZQBx91
J2Wz7iEzyNh/5u87OP/MsWWD7Dvmk2IKiWMOvOFyxorfZ/rSdn6JAH2YWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa/ryU5rTmSgw2UFqwShSooJvnRMB8GA1UdIwQY
MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt
MTcxZDlmMmNjZTNkLzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk
LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuysIuKN
JjJdi4OGSV4NF8W1lBRVDEjE+H5Cap0V6OZPfisWx36kRoRYO0dGGpw7HrvzqIA+
C0vQqvCe/OGfS8nvnB39JaikVk6t/xCty7wfOsorSbCcT/aGqN+79sDdy895oO5k
2Dvz74MNEwPPhjEgdqI/odwWnlvR+KO+dunDSyTv8N/xsv6f7voEl8zEovKLK6HR
8NwdXT8k//kgIRLPoD+ntOhRfcmB7mQHM2mVVspb47lcYeMPURM/zkbCXCpgAxIS
9oHwF7JjXIDlgij6xYEPLYmiVE1W126cojkEYeN+UZKe0WxGJH0jwxczGPZdQVTY
0QnDKm9jx1FEHg==
-----END CERTIFICATE-----
Generated at Sun May 11 15:41:32 2025 by rpki-client