Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: qX6V2oIaOq0i7nc5VhNl2MI2rIYTXzSwtNamdM3180I=
Subject key identifier: 65:61:4A:8E:D2:7A:33:2C:35:5A:F9:16:4D:1B:E8:EC:12:18:5E:F0
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 0196C79683218A07C975536C063EB76F02B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0924
Signing time: Tue 13 May 2025 03:00:52 +0000
Manifest this update: Tue 13 May 2025 03:00:52 +0000
Manifest next update: Wed 14 May 2025 03:00:52 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: kI5f4sFA9XninDiqfdQSsk/3oNElInhA6K8MwOZwuQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:83:21:8a:07:c9:75:53:6c:06:3e:b7:6f:02:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: May 13 03:00:52 2025 GMT
Not After : May 14 03:00:52 2025 GMT
Subject: CN=65614a8ed27a332c355af9164d1be8ec12185ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:f3:b1:b2:01:54:92:f0:82:ae:99:67:1e:
c9:ad:7a:87:70:e2:a0:3c:da:0f:d3:1f:d8:8b:39:
49:cb:7a:e4:5d:01:f3:a8:7a:1c:8e:21:3f:0e:c1:
d5:58:1b:af:67:71:56:d8:a3:8e:22:c8:1f:83:92:
11:03:4e:9d:06:08:6f:3b:d6:70:e5:68:1e:7d:4f:
e1:9a:f6:77:7f:da:c2:8a:a5:9e:22:b3:87:91:86:
3f:8a:97:0e:8a:9f:a1:f9:55:51:87:c2:f6:0b:11:
f0:0c:89:17:52:9a:de:c3:96:88:94:af:11:8c:1f:
5a:41:f0:c3:fb:57:59:d1:fe:d8:05:56:22:9e:7e:
10:17:6d:a0:4f:a6:d0:3d:19:12:48:91:0a:5b:b3:
b7:b5:02:10:a3:d4:00:a3:af:d6:17:9e:67:e0:79:
a9:7a:fb:4b:28:d3:c9:ff:7e:3a:11:c0:8b:a4:76:
cc:3a:27:dc:c3:8b:55:be:4c:ed:01:14:cd:f8:c4:
a7:ef:7f:13:04:de:61:65:c8:30:14:18:5d:e2:aa:
dd:d1:91:86:05:e3:05:1f:67:ee:72:69:35:f3:f9:
f3:70:cf:d4:75:de:4a:58:60:ec:3b:21:5b:43:1f:
94:b4:25:bf:58:8f:45:95:e1:81:51:94:b2:86:22:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:61:4A:8E:D2:7A:33:2C:35:5A:F9:16:4D:1B:E8:EC:12:18:5E:F0
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:04:39:59:95:c6:0f:c3:97:87:78:22:a1:f1:6e:79:cd:c1:
a4:33:a0:41:da:58:fe:07:ad:14:34:8f:24:72:33:2a:90:b6:
ea:c0:9d:c3:6d:35:2b:39:ff:02:05:d5:ea:6b:9c:9e:52:6b:
71:75:dc:b0:c3:7b:6c:75:e4:82:42:c6:a7:f2:bf:f4:5a:34:
ec:47:7b:f5:6c:dc:15:31:d6:04:40:0c:38:66:f6:2a:00:ab:
c7:65:3f:82:2c:f0:65:a6:3e:18:da:3d:b1:c1:e9:b0:46:1a:
d4:34:bf:dd:a2:f6:5f:01:b9:73:9d:aa:2d:b5:a1:33:18:52:
3c:04:b2:bd:2f:93:65:04:9b:7d:af:50:d8:cf:9b:af:96:c0:
48:a5:6e:63:fd:5c:88:7a:59:09:b4:d7:75:6e:52:ec:5e:2a:
e4:bf:77:1b:c3:50:05:7d:87:d4:5d:d8:8c:fe:28:e4:21:88:
ad:6a:2a:f2:8e:2c:ec:fe:0b:ac:2f:5e:2f:39:35:a6:36:88:
c1:a5:df:aa:c9:4e:56:fa:09:45:db:41:02:ec:f5:a4:5f:45:
c2:ad:be:6b:23:0f:45:9a:7a:71:56:ae:4f:2c:07:92:b3:b4:
41:25:a6:66:92:e5:51:95:08:ab:f8:5c:22:c7:06:21:59:e7:
d3:1c:03:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHloMhigfJdVNsBj63bwKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MGFjNjdjNTc3NjgzNWRmMDkxOTk4MzEwOTYwZTgzYzIz
ZDlkYzYwHhcNMjUwNTEzMDMwMDUyWhcNMjUwNTE0MDMwMDUyWjAzMTEwLwYDVQQD
Eyg2NTYxNGE4ZWQyN2EzMzJjMzU1YWY5MTY0ZDFiZThlYzEyMTg1ZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1DzsbIBVJLwgq6ZZx7JrXqHcOKg
PNoP0x/YizlJy3rkXQHzqHocjiE/DsHVWBuvZ3FW2KOOIsgfg5IRA06dBghvO9Zw
5WgefU/hmvZ3f9rCiqWeIrOHkYY/ipcOip+h+VVRh8L2CxHwDIkXUprew5aIlK8R
jB9aQfDD+1dZ0f7YBVYinn4QF22gT6bQPRkSSJEKW7O3tQIQo9QAo6/WF55n4Hmp
evtLKNPJ/346EcCLpHbMOifcw4tVvkztARTN+MSn738TBN5hZcgwFBhd4qrd0ZGG
BeMFH2fucmk18/nzcM/Udd5KWGDsOyFbQx+UtCW/WI9FleGBUZSyhiKOLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVhSo7SejMsNVr5Fk0b6OwSGF7wMB8GA1UdIwQY
MBaAFHUKxnxXdoNd8JGZgxCWDoPCPZ3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQt
MWYwYjAzNTQ0ODEwLzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQtMWYwYjAzNTQ0ODEw
LzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQQ5WZXG
D8OXh3giofFuec3BpDOgQdpY/getFDSPJHIzKpC26sCdw201Kzn/AgXV6mucnlJr
cXXcsMN7bHXkgkLGp/K/9Fo07Ed79WzcFTHWBEAMOGb2KgCrx2U/gizwZaY+GNo9
scHpsEYa1DS/3aL2XwG5c52qLbWhMxhSPASyvS+TZQSbfa9Q2M+br5bASKVuY/1c
iHpZCbTXdW5S7F4q5L93G8NQBX2H1F3YjP4o5CGIrWoq8o4s7P4LrC9eLzk1pjaI
waXfqslOVvoJRdtBAuz1pF9Fwq2+ayMPRZp6cVauTywHkrO0QSWmZpLlUZUIq/hc
IscGIVnn0xwDfA==
-----END CERTIFICATE-----
Generated at Tue May 13 05:42:24 2025 by rpki-client