Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: Xwg7KCsC6CM4Jy1LPg38FpVAtwK5uFfsoqjIFo7JzBE=
Subject key identifier: 85:AC:46:1C:66:4D:8E:87:51:3F:8D:77:48:D0:C4:3B:E4:E4:9A:AB
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 0196C23975E20582F7B6A82FDB34EA31A126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 0351
Signing time: Mon 12 May 2025 02:01:07 +0000
Manifest this update: Mon 12 May 2025 02:01:07 +0000
Manifest next update: Tue 13 May 2025 02:01:07 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: e+8XkdAg9o2XzseW7FNgyxPpb7kiFyW8PEUjh3e+FaU=)
2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:75:e2:05:82:f7:b6:a8:2f:db:34:ea:31:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: May 12 02:01:07 2025 GMT
Not After : May 13 02:01:07 2025 GMT
Subject: CN=85ac461c664d8e87513f8d7748d0c43be4e49aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:31:0a:1b:43:e9:9a:81:67:a0:31:75:3e:
a6:8d:2b:89:62:46:33:1f:d7:f2:0d:fe:7f:3a:b6:
74:ec:2f:c3:70:96:d3:95:bd:ba:42:ed:32:2f:94:
40:63:3f:a1:88:67:c5:46:c9:c2:72:8c:cf:d2:35:
a0:07:9f:46:93:fc:e3:68:33:d5:98:cc:b9:46:47:
5d:9b:ee:5a:18:2c:c7:cd:1f:c3:38:5a:30:41:1e:
b7:b0:7e:b3:5a:97:58:0f:fe:0f:d1:90:8d:68:89:
32:35:fa:ac:05:50:96:93:5c:c8:f3:5c:7b:f8:38:
34:21:e9:ab:42:6a:0f:fe:99:9b:4f:4c:f5:9b:fb:
d3:a8:4f:d0:70:14:06:1d:f2:2f:34:8a:32:af:8b:
a9:d3:7b:de:c8:ba:2c:bf:de:ce:7c:d3:88:10:8e:
82:f6:79:29:a6:0f:98:1f:3e:20:15:e9:f3:66:8e:
c3:18:92:aa:dd:66:a5:2c:f9:9e:91:99:84:b9:44:
bc:0d:94:db:01:72:2f:d7:71:d3:5a:20:e4:c6:dc:
07:8b:b1:9e:a7:bb:67:d4:ba:72:5a:c9:c5:6f:86:
fa:52:50:61:96:14:dc:17:e6:0e:a7:f4:a8:f7:55:
9c:1e:e8:ec:56:8c:f0:9d:66:c6:83:2c:49:5b:14:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AC:46:1C:66:4D:8E:87:51:3F:8D:77:48:D0:C4:3B:E4:E4:9A:AB
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1b:be:bd:8a:47:9b:1b:e8:49:ca:f3:8d:bf:3e:18:8e:1b:
13:a8:7a:5a:88:08:70:76:23:77:fc:1d:e3:7f:26:f0:3d:42:
43:b3:59:14:cc:36:46:86:fb:28:a3:59:1a:c7:d4:51:19:b8:
35:21:83:01:a1:da:e4:ff:5e:c8:b5:c5:a3:f1:6a:01:7f:0e:
56:10:ce:65:23:2e:f7:d2:11:a7:e1:d3:95:85:1b:5d:de:d4:
23:07:07:e5:4c:d2:da:39:da:1a:dc:8b:0f:35:2a:36:d1:81:
af:0e:ad:3a:08:41:94:ff:d4:11:b1:04:76:ef:ab:7d:b8:cf:
33:70:e1:56:e3:48:06:73:e0:7f:83:c3:a4:a5:cf:88:16:38:
31:30:0d:d1:1d:6f:d9:4a:cf:44:f6:6d:95:38:d9:da:47:52:
b6:f3:0f:20:49:32:04:d1:8d:ac:82:7d:9b:9a:9c:5f:a4:19:
bd:3d:c3:16:38:f8:2a:ae:9e:b3:ec:d6:10:3d:0f:9a:81:c8:
81:4c:58:91:42:5e:8e:ac:c2:31:d5:58:87:06:f4:31:2b:b0:
f2:da:98:e8:d9:7b:b7:84:a3:0c:19:82:cd:2a:db:bb:6a:08:
f5:08:68:62:2d:70:db:bf:de:dd:ab:b9:5a:dd:20:6b:ca:48:
d0:03:fc:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOXXiBYL3tqgv2zTqMaEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjI4M2U2ZTZhZjk5MTQyMjc0MzcxMWY3YTcyMzEzNzY4
MGU2OWUwHhcNMjUwNTEyMDIwMTA3WhcNMjUwNTEzMDIwMTA3WjAzMTEwLwYDVQQD
Eyg4NWFjNDYxYzY2NGQ4ZTg3NTEzZjhkNzc0OGQwYzQzYmU0ZTQ5YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEAxChtD6ZqBZ6AxdT6mjSuJYkYz
H9fyDf5/OrZ07C/DcJbTlb26Qu0yL5RAYz+hiGfFRsnCcozP0jWgB59Gk/zjaDPV
mMy5Rkddm+5aGCzHzR/DOFowQR63sH6zWpdYD/4P0ZCNaIkyNfqsBVCWk1zI81x7
+Dg0IemrQmoP/pmbT0z1m/vTqE/QcBQGHfIvNIoyr4up03veyLosv97OfNOIEI6C
9nkppg+YHz4gFenzZo7DGJKq3WalLPmekZmEuUS8DZTbAXIv13HTWiDkxtwHi7Ge
p7tn1LpyWsnFb4b6UlBhlhTcF+YOp/So91WcHujsVozwnWbGgyxJWxRbIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWsRhxmTY6HUT+Nd0jQxDvk5JqrMB8GA1UdIwQY
MBaAFA4ig+bmr5kUInQ3EfenIxN2gOaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTct
ZTBhZGFiN2YxMTEyLzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTctZTBhZGFiN2YxMTEy
LzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRu+vYpH
mxvoScrzjb8+GI4bE6h6WogIcHYjd/wd438m8D1CQ7NZFMw2Rob7KKNZGsfUURm4
NSGDAaHa5P9eyLXFo/FqAX8OVhDOZSMu99IRp+HTlYUbXd7UIwcH5UzS2jnaGtyL
DzUqNtGBrw6tOghBlP/UEbEEdu+rfbjPM3DhVuNIBnPgf4PDpKXPiBY4MTAN0R1v
2UrPRPZtlTjZ2kdStvMPIEkyBNGNrIJ9m5qcX6QZvT3DFjj4Kq6es+zWED0PmoHI
gUxYkUJejqzCMdVYhwb0MSuw8tqY6Nl7t4SjDBmCzSrbu2oI9QhoYi1w27/e3au5
Wt0ga8pI0AP8Dw==
-----END CERTIFICATE-----
Generated at Mon May 12 08:39:53 2025 by rpki-client