Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File: DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier: vpp6VLlgGofqCH/WrEl6KPB1mxqHKx5m/uMykeZMKLY=
Subject key identifier: D5:EB:EE:29:F0:45:9E:DE:E2:A6:62:3A:8B:C2:5E:1D:CB:33:48:C0
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 0196C202542D2ED83890F0DAF9D29EB45641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 01:00:54 +0000
Manifest this update: Mon 12 May 2025 01:00:54 +0000
Manifest next update: Tue 13 May 2025 01:00:54 +0000
Files and hashes: 1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: 8mE05vY3GZtkoDliWdrB3urB4dcyd3xMdEwipwNsVdY=)
2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=)
3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:54:2d:2e:d8:38:90:f0:da:f9:d2:9e:b4:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: May 12 01:00:54 2025 GMT
Not After : May 13 01:00:54 2025 GMT
Subject: CN=d5ebee29f0459edee2a6623a8bc25e1dcb3348c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:04:1e:00:13:2f:c2:9c:da:8b:03:68:de:
d8:fd:97:48:0d:45:75:27:79:47:78:41:d0:a5:e2:
f6:be:ca:13:5a:8d:62:f3:18:6c:78:19:28:66:4c:
d6:69:0b:b6:40:5c:34:df:71:15:63:9a:a3:13:8a:
9a:b9:2d:75:a1:e0:df:d8:82:5c:73:61:0b:0b:97:
21:39:9d:a6:65:d6:53:29:87:1c:6d:76:e8:c9:a0:
8a:fe:27:d8:50:07:0b:ce:96:5b:87:35:e6:c9:25:
52:d3:3a:97:93:7b:72:92:5a:73:ee:5c:70:5e:1c:
ec:a4:60:a2:c3:92:0f:dc:0b:7f:aa:ef:78:24:8c:
90:d4:2a:fc:4e:42:16:eb:f0:5a:3f:09:61:c3:5b:
11:53:1e:0e:39:25:40:65:79:b9:23:48:83:be:9e:
67:fb:99:d7:c8:76:fd:56:cc:af:38:65:e8:99:8c:
60:79:83:10:2c:ca:cb:87:1a:2b:11:78:44:fb:e5:
33:de:2e:9d:e5:f9:ee:0c:61:d0:44:91:c9:1a:dc:
ad:a9:0d:2d:e6:41:87:bf:21:ab:68:f2:c0:a0:30:
19:3c:78:37:1a:48:8f:1b:08:73:33:aa:95:5e:56:
34:0b:42:76:6b:47:1e:32:40:85:18:24:3f:da:05:
e3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:EE:29:F0:45:9E:DE:E2:A6:62:3A:8B:C2:5E:1D:CB:33:48:C0
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d7:6e:1c:cc:cc:aa:7c:37:6b:62:36:67:63:2a:f8:c7:ed:
e6:48:1d:80:ed:97:b8:77:e4:d2:a4:3b:7a:98:ca:5f:a2:6c:
a6:f4:9a:7b:05:51:90:b3:b4:30:f9:0c:8a:65:06:82:6a:89:
db:c4:2e:40:91:04:d6:24:dd:2f:36:0b:8d:23:2d:13:a6:28:
66:e6:51:3f:d8:a5:39:66:94:99:6d:00:67:9f:35:23:08:50:
c8:49:3f:87:2f:0f:b3:a6:c0:a6:a1:a4:f5:e3:00:60:89:ce:
4c:b6:3a:e2:80:80:40:b5:1d:88:e2:be:90:b9:5f:39:83:8d:
c4:52:f0:20:b9:71:2e:0e:a9:19:01:cc:9e:db:47:f6:b5:95:
a9:3e:07:57:cd:9a:db:9b:ae:31:57:7d:04:fc:d1:50:f1:4e:
e4:26:78:dc:9a:1f:e7:d7:c8:c0:62:4d:46:3c:2b:cf:dd:09:
a0:b0:4e:89:34:f1:ea:d2:d7:6d:93:ce:8e:6e:15:c2:ab:c2:
3a:7c:0a:8d:46:dc:0d:fe:26:54:d4:6f:95:65:a2:53:29:5a:
0e:cb:f0:7e:2e:76:4f:2e:2d:73:09:28:0f:cd:36:c2:7f:c0:
81:60:75:5a:0f:5d:15:6d:a8:ab:92:8f:79:3b:a7:5e:52:a9:
af:a0:7f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAlQtLtg4kPDa+dKetFZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYjVkM2U4ZGRjZjUyNGMyMGMzMjM4N2VkMzEwM2Q0Y2Jm
MmE1NmEwHhcNMjUwNTEyMDEwMDU0WhcNMjUwNTEzMDEwMDU0WjAzMTEwLwYDVQQD
EyhkNWViZWUyOWYwNDU5ZWRlZTJhNjYyM2E4YmMyNWUxZGNiMzM0OGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvkEHgATL8Kc2osDaN7Y/ZdIDUV1
J3lHeEHQpeL2vsoTWo1i8xhseBkoZkzWaQu2QFw033EVY5qjE4qauS11oeDf2IJc
c2ELC5chOZ2mZdZTKYccbXboyaCK/ifYUAcLzpZbhzXmySVS0zqXk3tyklpz7lxw
XhzspGCiw5IP3At/qu94JIyQ1Cr8TkIW6/BaPwlhw1sRUx4OOSVAZXm5I0iDvp5n
+5nXyHb9VsyvOGXomYxgeYMQLMrLhxorEXhE++Uz3i6d5fnuDGHQRJHJGtytqQ0t
5kGHvyGraPLAoDAZPHg3GkiPGwhzM6qVXlY0C0J2a0ceMkCFGCQ/2gXjFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXr7inwRZ7e4qZiOovCXh3LM0jAMB8GA1UdIwQY
MBaAFAy10+jdz1JMIMMjh+0xA9TL8qVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTIt
NjNjZDNjODYxZDhlLzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTItNjNjZDNjODYxZDhl
LzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptduHMzM
qnw3a2I2Z2Mq+Mft5kgdgO2XuHfk0qQ7epjKX6JspvSaewVRkLO0MPkMimUGgmqJ
28QuQJEE1iTdLzYLjSMtE6YoZuZRP9ilOWaUmW0AZ581IwhQyEk/hy8Ps6bApqGk
9eMAYInOTLY64oCAQLUdiOK+kLlfOYONxFLwILlxLg6pGQHMnttH9rWVqT4HV82a
25uuMVd9BPzRUPFO5CZ43Jof59fIwGJNRjwrz90JoLBOiTTx6tLXbZPOjm4VwqvC
OnwKjUbcDf4mVNRvlWWiUylaDsvwfi52Ty4tcwkoD802wn/AgWB1Wg9dFW2oq5KP
eTunXlKpr6B/BA==
-----END CERTIFICATE-----
Generated at Mon May 12 08:23:11 2025 by rpki-client