Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: 2UMJEi/REFmQCcEuvS7o0+II5B2kHqQg9N2oce+n/VI=
Subject key identifier: 0A:4C:43:D5:4D:A8:98:ED:8B:61:C6:3E:D9:63:D0:FF:49:81:C2:46
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 0196BBC8E85AEB87E0CC338E1B7FF774DB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0BC9
Signing time: Sat 10 May 2025 20:00:28 +0000
Manifest this update: Sat 10 May 2025 20:00:28 +0000
Manifest next update: Sun 11 May 2025 20:00:28 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: JgNzZFkL9BFQu45ReyovRlON0Bt31x6togxsFrrk3wA=)
2: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (hash: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:e8:5a:eb:87:e0:cc:33:8e:1b:7f:f7:74:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: May 10 20:00:28 2025 GMT
Not After : May 11 20:00:28 2025 GMT
Subject: CN=0a4c43d54da898ed8b61c63ed963d0ff4981c246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:aa:eb:01:4d:27:55:30:17:f3:4e:80:bd:
ad:51:65:85:8f:68:4d:3c:05:11:da:8a:bf:a4:4d:
59:e5:84:49:45:73:3f:5a:c6:77:b1:b6:96:4f:78:
8a:48:e4:3f:01:bb:fc:9b:1c:ee:dc:a3:13:9b:e1:
b3:ca:10:2a:fb:f1:f3:12:bf:32:38:8f:0f:3b:c5:
06:2c:ab:82:fb:f3:b9:72:6e:fb:24:5e:90:bd:09:
7d:24:3c:a1:6f:6b:28:32:e2:6e:cf:bd:e4:28:03:
9f:c3:cf:0d:ee:cb:02:46:81:d7:9e:12:22:9e:ba:
b0:e3:bd:d1:cf:de:a4:42:2e:fb:71:67:eb:82:a3:
30:3e:bc:3d:17:c9:87:37:3f:cf:7a:20:5d:40:99:
42:fd:cd:6d:8a:99:78:f7:bb:40:20:87:e2:c2:cc:
5d:0f:86:ea:ab:57:ed:39:db:42:26:82:84:fc:9d:
68:53:5f:f7:23:e7:a0:6a:f4:58:f4:e6:07:a8:e4:
c8:22:b7:5d:29:60:df:78:97:6a:d1:c7:56:9e:98:
e2:71:21:d0:71:77:b0:6c:78:50:dd:90:10:f3:5d:
57:40:49:5b:af:70:02:72:e3:be:ad:59:7a:b5:3d:
f0:c1:cc:5e:62:dd:6e:f8:62:92:8a:9c:e2:24:e3:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4C:43:D5:4D:A8:98:ED:8B:61:C6:3E:D9:63:D0:FF:49:81:C2:46
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:59:78:f2:ca:f9:e8:18:0b:81:07:63:e5:c1:a0:f7:9b:41:
2b:c9:3f:9b:e1:15:09:0a:10:42:c8:12:47:30:03:5f:8a:df:
64:b3:2c:8a:2e:83:30:17:76:0f:59:39:1f:f0:97:a3:d7:dd:
e6:1b:7d:b5:6e:44:fb:85:b5:d2:9b:e6:1e:08:ea:fe:b5:ea:
c5:7f:7d:62:57:d4:c5:73:c6:1c:5a:ff:3c:1f:a7:1a:13:93:
7a:a1:a1:5c:07:57:06:1d:23:e5:aa:ff:6a:75:bf:83:b5:3a:
70:ea:2e:cf:1d:f1:98:dc:42:06:17:a1:0c:15:03:d5:f5:60:
70:5d:b2:76:ed:0d:57:9b:ba:fc:99:2e:4a:53:9c:3a:3f:53:
5f:2b:a2:ca:c1:81:d8:bf:97:dc:13:fa:ef:a2:9a:c1:4b:e4:
e3:80:dc:a2:70:8c:3f:7d:28:67:df:fd:16:53:b2:5a:07:a9:
0a:3c:a9:dd:b3:7f:5f:05:d8:9d:fd:0b:41:2d:1b:25:25:4f:
76:2b:c8:11:dc:e0:bc:af:0f:1f:83:95:de:0c:57:69:cb:48:
2d:b7:f1:de:74:06:ee:ef:f8:7e:1a:03:d7:4c:be:24:60:e0:
f3:5f:4d:b2:b4:20:c2:b1:25:ba:fb:03:37:a5:7f:28:1a:ec:
e9:54:51:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7yOha64fgzDOOG3/3dNuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODMyYzEwMTQ0ZTRkN2Y2YTY0MmM2MGRjZWFlMTQzNmZj
OTljYTEwHhcNMjUwNTEwMjAwMDI4WhcNMjUwNTExMjAwMDI4WjAzMTEwLwYDVQQD
EygwYTRjNDNkNTRkYTg5OGVkOGI2MWM2M2VkOTYzZDBmZjQ5ODFjMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HOq6wFNJ1UwF/NOgL2tUWWFj2hN
PAUR2oq/pE1Z5YRJRXM/WsZ3sbaWT3iKSOQ/Abv8mxzu3KMTm+GzyhAq+/HzEr8y
OI8PO8UGLKuC+/O5cm77JF6QvQl9JDyhb2soMuJuz73kKAOfw88N7ssCRoHXnhIi
nrqw473Rz96kQi77cWfrgqMwPrw9F8mHNz/PeiBdQJlC/c1tipl497tAIIfiwsxd
D4bqq1ftOdtCJoKE/J1oU1/3I+egavRY9OYHqOTIIrddKWDfeJdq0cdWnpjicSHQ
cXewbHhQ3ZAQ811XQElbr3ACcuO+rVl6tT3wwcxeYt1u+GKSipziJOMvnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApMQ9VNqJjti2HGPtlj0P9JgcJGMB8GA1UdIwQY
MBaAFA+DLBAUTk1/amQsYNzq4UNvyZyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzkt
Y2M2OGUzN2QyNDVmLzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzktY2M2OGUzN2QyNDVm
LzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1l48sr5
6BgLgQdj5cGg95tBK8k/m+EVCQoQQsgSRzADX4rfZLMsii6DMBd2D1k5H/CXo9fd
5ht9tW5E+4W10pvmHgjq/rXqxX99YlfUxXPGHFr/PB+nGhOTeqGhXAdXBh0j5ar/
anW/g7U6cOouzx3xmNxCBhehDBUD1fVgcF2ydu0NV5u6/JkuSlOcOj9TXyuiysGB
2L+X3BP676KawUvk44DconCMP30oZ9/9FlOyWgepCjyp3bN/XwXYnf0LQS0bJSVP
divIEdzgvK8PH4OV3gxXactILbfx3nQG7u/4fhoD10y+JGDg819NsrQgwrEluvsD
N6V/KBrs6VRR8g==
-----END CERTIFICATE-----
Generated at Sun May 11 01:13:32 2025 by rpki-client