Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
File: dkVpLUvTDPnpidVbrI0I53FEk6s.mft (raw, json)
Hash identifier: uIJOMarlgW9H1jx5pjxJotrPb5rRC8dtyKFMzJc1J2g=
Subject key identifier: 96:DA:BB:8E:E5:6C:7B:2B:4F:1A:CA:AB:06:35:DF:9C:1F:71:3C:83
Authority key identifier: 76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
Certificate issuer: /CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Certificate serial: 0196BBFFCF0ADA5B12E05EED48D497990131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
Manifest number: 1536
Signing time: Sat 10 May 2025 21:00:26 +0000
Manifest this update: Sat 10 May 2025 21:00:26 +0000
Manifest next update: Sun 11 May 2025 21:00:26 +0000
Files and hashes: 1: dkVpLUvTDPnpidVbrI0I53FEk6s.crl (hash: YlDGpDz3Mmu7ruRIVkMa3ZkvcV6Udlvy5DRJDibhEiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:cf:0a:da:5b:12:e0:5e:ed:48:d4:97:99:01:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Validity
Not Before: May 10 21:00:26 2025 GMT
Not After : May 11 21:00:26 2025 GMT
Subject: CN=96dabb8ee56c7b2b4f1acaab0635df9c1f713c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:2b:67:43:39:37:d2:2b:0f:12:5c:e0:aa:
d0:72:58:44:2a:ab:7b:88:a1:d1:3f:48:4a:1b:22:
7e:4c:34:bb:b2:ea:c1:4d:51:0f:a2:ac:0d:ef:68:
70:cc:f4:ba:3a:61:0b:35:71:05:c2:6f:2d:b2:d1:
1d:64:e9:c3:18:c8:93:93:54:b0:12:48:5d:3d:84:
58:43:7d:65:14:53:e5:19:56:10:a0:f6:e3:e7:39:
d6:a4:d9:e5:ea:54:85:65:33:08:3f:96:08:32:c2:
1f:6a:5b:d7:63:ac:09:39:8c:8d:ba:80:0e:f0:52:
81:d7:27:4b:4f:97:27:f9:71:7f:1d:37:94:95:e3:
f1:7e:aa:ec:46:5f:43:3c:00:b4:b6:e9:d7:60:6e:
e3:6a:13:dc:34:95:d7:ec:a0:11:5e:3a:d2:b3:92:
01:64:d0:b6:fe:2e:47:48:01:2c:e9:43:2d:bd:7a:
da:9c:7f:3e:ca:23:62:89:56:2c:1c:40:a4:a3:8d:
d9:63:00:f1:29:e8:97:12:4b:76:9b:e3:3a:a2:46:
1e:ce:ff:a1:12:21:ad:92:35:a2:42:eb:b9:d0:2c:
bc:45:3d:66:0d:1b:0b:33:29:04:d6:2b:f7:9b:35:
73:19:9d:c5:43:97:60:93:38:49:de:b3:13:12:5a:
1b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DA:BB:8E:E5:6C:7B:2B:4F:1A:CA:AB:06:35:DF:9C:1F:71:3C:83
X509v3 Authority Key Identifier:
keyid:76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:73:a9:79:91:cd:fa:e2:22:43:f1:05:bb:37:66:44:92:8d:
ca:a0:a4:ff:02:db:2d:46:90:b1:19:19:46:31:f5:10:87:5c:
4b:ac:6b:f4:b8:d5:ba:af:60:d1:d5:dd:27:ad:d2:49:6b:6b:
b2:69:2b:9c:01:99:2c:54:4b:00:4c:4c:ca:95:22:ab:31:93:
8f:30:3c:25:59:0b:ab:e4:17:bf:4e:f1:70:6d:0f:06:26:ad:
c1:02:af:a8:39:30:f4:ef:e4:17:b3:eb:41:22:4e:5c:0d:7e:
a4:38:fa:d4:52:b9:1e:f8:6f:d9:cf:a5:c7:f9:3f:d2:d7:fe:
7a:d0:87:eb:ad:a2:80:4e:37:f0:7c:53:06:e1:b7:a8:0d:98:
5e:cb:d3:5d:c7:22:18:48:de:16:e0:e5:bc:48:19:4a:35:d6:
3f:25:ed:3d:41:97:20:81:94:93:b6:33:ec:c6:04:39:ca:09:
07:a8:12:23:15:e3:45:1e:2d:95:6c:2b:3f:f0:30:cf:a3:52:
38:cb:d8:6d:b3:05:c5:39:ae:14:74:f3:7f:f5:ff:5c:e1:d5:
73:49:72:3d:1b:9d:b7:49:f9:7d:c8:40:af:48:f2:83:ca:dc:
1f:12:ae:e9:26:6d:e7:68:4e:f5:ae:89:66:ba:61:73:d3:a9:
db:df:03:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7/88K2lsS4F7tSNSXmQExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDU2OTJkNGJkMzBjZjllOTg5ZDU1YmFjOGQwOGU3NzE0
NDkzYWIwHhcNMjUwNTEwMjEwMDI2WhcNMjUwNTExMjEwMDI2WjAzMTEwLwYDVQQD
Eyg5NmRhYmI4ZWU1NmM3YjJiNGYxYWNhYWIwNjM1ZGY5YzFmNzEzYzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GArZ0M5N9IrDxJc4KrQclhEKqt7
iKHRP0hKGyJ+TDS7surBTVEPoqwN72hwzPS6OmELNXEFwm8tstEdZOnDGMiTk1Sw
EkhdPYRYQ31lFFPlGVYQoPbj5znWpNnl6lSFZTMIP5YIMsIfalvXY6wJOYyNuoAO
8FKB1ydLT5cn+XF/HTeUlePxfqrsRl9DPAC0tunXYG7jahPcNJXX7KARXjrSs5IB
ZNC2/i5HSAEs6UMtvXranH8+yiNiiVYsHECko43ZYwDxKeiXEkt2m+M6okYezv+h
EiGtkjWiQuu50Cy8RT1mDRsLMykE1iv3mzVzGZ3FQ5dgkzhJ3rMTElobrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbau47lbHsrTxrKqwY135wfcTyDMB8GA1UdIwQY
MBaAFHZFaS1L0wz56YnVW6yNCOdxRJOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtWcExVdlREUG5waWRWYnJJMEk1M0ZFazZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kMDdmMDEtNzdjMC00YTQwLTk1NjMt
ZDZiYjU4MGFmNzg1LzEvZGtWcExVdlREUG5waWRWYnJJMEk1M0ZFazZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kMDdmMDEtNzdjMC00YTQwLTk1NjMtZDZiYjU4MGFmNzg1
LzEvZGtWcExVdlREUG5waWRWYnJJMEk1M0ZFazZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3OpeZHN
+uIiQ/EFuzdmRJKNyqCk/wLbLUaQsRkZRjH1EIdcS6xr9LjVuq9g0dXdJ63SSWtr
smkrnAGZLFRLAExMypUiqzGTjzA8JVkLq+QXv07xcG0PBiatwQKvqDkw9O/kF7Pr
QSJOXA1+pDj61FK5Hvhv2c+lx/k/0tf+etCH662igE438HxTBuG3qA2YXsvTXcci
GEjeFuDlvEgZSjXWPyXtPUGXIIGUk7Yz7MYEOcoJB6gSIxXjRR4tlWwrP/Awz6NS
OMvYbbMFxTmuFHTzf/X/XOHVc0lyPRudt0n5fchAr0jyg8rcHxKu6SZt52hO9a6J
Zrphc9Op298D3Q==
-----END CERTIFICATE-----
Generated at Sun May 11 01:33:00 2025 by rpki-client