Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json)
Hash identifier: JYGieALv53+Bmc33gJTwNNdqGf1OYbaRIt5zRqB1hUU=
Subject key identifier: 32:DB:DA:1D:2D:A4:D1:80:07:3A:BA:68:DF:93:F7:5E:A6:F0:62:28
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 01969DF5F88FEA434FDAB60BEAF26366C147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
Manifest number: 110D
Signing time: Mon 05 May 2025 01:01:04 +0000
Manifest this update: Mon 05 May 2025 01:01:04 +0000
Manifest next update: Tue 06 May 2025 01:01:04 +0000
Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: i3O+DQbphClsfmQutPzz5xCjBeP4WlAugp75Uxh16uI=)
2: f3ZAgsX9I3hAxsDfGccuc4frEIc.roa (hash: 4M3tVBuY11wpuTelZy7jmaALqx1HzWsWmiuVNlUHSTM=)
3: m2ywJd2kQJYTADIv61wmJdARYH0.roa (hash: ZTRMQxv3ksCR8s54WLYLbJtFtPpGkhVtVd7EKUXjlqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:f8:8f:ea:43:4f:da:b6:0b:ea:f2:63:66:c1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: May 5 01:01:04 2025 GMT
Not After : May 6 01:01:04 2025 GMT
Subject: CN=32dbda1d2da4d180073aba68df93f75ea6f06228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:c0:ca:20:c2:18:29:19:ea:c6:be:d3:c6:
85:71:cf:04:06:2d:d7:b9:e3:e5:bc:38:6f:34:40:
2c:7a:64:23:79:60:eb:99:ee:11:1e:1a:1b:d5:77:
0f:6b:f3:c8:31:e5:94:1e:23:a9:a9:b6:18:33:a1:
62:ad:c5:c7:14:b8:f2:9b:de:58:3b:a3:8a:10:f2:
0f:d3:54:f0:3a:28:59:62:ee:a5:9a:fd:6a:cf:d1:
1d:c9:bf:da:8a:67:54:ec:5b:63:bd:34:f7:b7:a8:
f5:30:54:a9:b6:e0:e2:2e:b4:e3:f5:13:50:ec:e9:
13:8d:ca:36:1e:91:fc:5f:5b:74:7f:83:de:7b:91:
97:51:c0:ae:75:68:20:3f:65:28:13:f6:74:57:df:
78:d2:ca:b2:dc:62:8d:23:a0:27:51:49:36:b9:53:
f9:d4:61:87:88:41:d1:13:e3:9e:0a:10:7a:80:41:
41:f3:fe:37:5e:96:0f:06:0f:4e:9b:c6:de:40:a0:
dd:3f:36:c0:bd:76:b3:af:6d:5a:83:6c:5a:a9:4b:
dc:1b:a7:15:30:f2:c1:16:23:39:a2:58:c9:a7:41:
6a:da:1a:1b:21:fe:1b:01:2e:f7:5e:2a:4f:39:5c:
25:fd:6c:e7:dd:8f:24:2d:a6:c9:7f:c0:b1:ee:61:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DB:DA:1D:2D:A4:D1:80:07:3A:BA:68:DF:93:F7:5E:A6:F0:62:28
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:98:2c:7e:2f:00:7a:48:24:77:0f:51:e7:f5:02:9c:d4:0e:
a5:86:70:bd:77:a4:14:84:cb:6b:e8:30:99:82:a4:ea:3b:c8:
93:23:bf:fc:04:26:4a:56:6c:3c:14:13:fb:a1:6d:fb:cc:a6:
69:f9:08:60:09:7a:63:f4:6c:77:bb:d2:b3:45:13:74:16:f5:
d4:82:5c:6d:5e:09:7b:95:2e:7a:44:ba:12:0b:43:01:7c:ec:
2a:12:78:7b:0e:e0:c6:15:d7:26:9c:fd:82:4c:ca:fd:09:06:
7b:6c:7b:57:1f:cf:89:96:fc:14:64:95:f2:1d:dd:70:87:db:
31:31:5e:bc:f6:2d:47:90:f6:34:b0:0b:ba:32:26:57:dc:a6:
3f:f9:9e:48:4f:12:fa:a8:ae:4f:16:ed:74:61:e6:8e:59:05:
dc:b5:8d:19:64:ee:27:4c:d7:bb:7f:c2:0e:95:b0:b3:db:83:
cd:51:eb:f4:c7:22:fb:b0:28:11:2c:23:56:f3:bb:fc:a1:88:
bb:2b:82:e6:55:fb:2b:31:af:e6:9b:f9:34:b7:8a:a2:74:c0:
e4:29:14:1d:bc:82:7a:bf:5c:4a:1d:ae:35:46:ef:6a:13:92:
54:e9:6b:60:82:82:89:8e:3a:2c:f3:dd:54:17:f3:f8:13:7c:
89:bc:62:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9fiP6kNP2rYL6vJjZsFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjVmYzUwOGE3MzczMjU2NzIwYTU0ZDczZmE5MDU3ZDhh
MjFjMTMwHhcNMjUwNTA1MDEwMTA0WhcNMjUwNTA2MDEwMTA0WjAzMTEwLwYDVQQD
EygzMmRiZGExZDJkYTRkMTgwMDczYWJhNjhkZjkzZjc1ZWE2ZjA2MjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHjAyiDCGCkZ6sa+08aFcc8EBi3X
uePlvDhvNEAsemQjeWDrme4RHhob1XcPa/PIMeWUHiOpqbYYM6FircXHFLjym95Y
O6OKEPIP01TwOihZYu6lmv1qz9Edyb/aimdU7FtjvTT3t6j1MFSptuDiLrTj9RNQ
7OkTjco2HpH8X1t0f4Pee5GXUcCudWggP2UoE/Z0V9940sqy3GKNI6AnUUk2uVP5
1GGHiEHRE+OeChB6gEFB8/43XpYPBg9Om8beQKDdPzbAvXazr21ag2xaqUvcG6cV
MPLBFiM5oljJp0Fq2hobIf4bAS73XipPOVwl/Wzn3Y8kLabJf8Cx7mGPEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLb2h0tpNGABzq6aN+T916m8GIoMB8GA1UdIwQY
MBaAFNMl/FCKc3MlZyClTXP6kFfYohwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kYzE3MjQtMzE2NS00N2VmLWE2ZmUt
MWM2YWExZjZiNzBiLzEvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kYzE3MjQtMzE2NS00N2VmLWE2ZmUtMWM2YWExZjZiNzBi
LzEvMHlYOFVJcHpjeVZuSUtWTmNfcVFWOWlpSEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5gsfi8A
ekgkdw9R5/UCnNQOpYZwvXekFITLa+gwmYKk6jvIkyO//AQmSlZsPBQT+6Ft+8ym
afkIYAl6Y/Rsd7vSs0UTdBb11IJcbV4Je5UuekS6EgtDAXzsKhJ4ew7gxhXXJpz9
gkzK/QkGe2x7Vx/PiZb8FGSV8h3dcIfbMTFevPYtR5D2NLALujImV9ymP/meSE8S
+qiuTxbtdGHmjlkF3LWNGWTuJ0zXu3/CDpWws9uDzVHr9Mci+7AoESwjVvO7/KGI
uyuC5lX7KzGv5pv5NLeKonTA5CkUHbyCer9cSh2uNUbvahOSVOlrYIKCiY46LPPd
VBfz+BN8ibxiIw==
-----END CERTIFICATE-----
Generated at Mon May 5 10:46:26 2025 by rpki-client