Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: t0iwF3SbOxXqQNNM44cVCIlc5fP6NHHsYqSjgVrt82E=
Subject key identifier: 22:F1:5D:82:79:DC:AB:0D:01:23:F3:09:9D:7F:10:CB:48:81:E4:F8
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 0196CC4EF687E483C53F25E346603D9EE692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 0D17
Signing time: Wed 14 May 2025 01:00:49 +0000
Manifest this update: Wed 14 May 2025 01:00:49 +0000
Manifest next update: Thu 15 May 2025 01:00:49 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: YDGgj+KP6nsxaWEpTo42Q0rbp8rPYP5yk7dnXwA1Lrg=)
2: NWAGhC2XbatfDitWodooC7bbFFI.roa (hash: FWUOW7wQ0G0TGl1V+k/KtSrSZ/FDNVfXj5gqfrNEtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:f6:87:e4:83:c5:3f:25:e3:46:60:3d:9e:e6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: May 14 01:00:49 2025 GMT
Not After : May 15 01:00:49 2025 GMT
Subject: CN=22f15d8279dcab0d0123f3099d7f10cb4881e4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:c5:85:12:58:a0:dc:d8:43:44:a3:a3:84:
68:1f:1d:e3:68:da:6e:2e:98:45:b0:ca:bc:05:29:
47:ee:b4:2a:e7:08:99:eb:0e:cb:fd:b6:b6:75:6f:
9d:82:ad:93:9e:5e:93:5a:cc:7e:f6:78:98:9e:37:
86:e6:0a:27:72:32:7b:ed:55:ed:88:fd:4e:7b:e5:
75:e1:2e:ff:a0:11:85:0b:71:a9:80:4d:73:f9:6e:
2e:21:82:8d:98:ce:a9:c5:13:ec:0d:50:c7:2c:49:
24:4a:fb:a1:a3:c4:01:50:c8:37:1e:3b:f8:15:67:
f1:6a:fa:08:37:4e:56:6a:ac:7b:79:a3:a5:2b:e7:
7c:ea:07:bd:04:4e:fd:b1:4a:70:b6:bd:9f:05:4f:
cc:92:19:d9:5d:a0:5f:ed:45:59:15:36:20:1c:52:
31:bf:b3:4b:86:74:ec:5e:cd:67:e4:09:14:d7:f3:
ad:f9:97:79:72:68:0d:d3:f2:d7:cd:a8:00:6c:78:
d6:66:c1:52:00:e7:b0:3c:5f:33:6b:9c:fb:05:29:
15:4a:8e:3f:be:b1:ba:d1:db:14:e9:b1:ed:5c:52:
2e:a2:4f:ab:98:cd:50:29:bb:e1:23:06:36:1f:94:
67:7c:f8:47:e1:5b:fb:c4:cd:20:dd:76:72:6e:b4:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F1:5D:82:79:DC:AB:0D:01:23:F3:09:9D:7F:10:CB:48:81:E4:F8
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:59:82:9a:67:83:7f:d0:26:6e:a4:c5:ec:c5:2c:9f:61:c0:
39:04:fd:02:aa:c5:8a:e6:58:a3:27:cd:15:2b:04:0c:10:55:
8d:b5:f2:ba:10:83:0d:41:ea:82:a0:9c:34:66:8b:59:36:07:
d4:48:1c:c3:9c:1a:31:4b:93:b9:2d:43:d0:ff:c4:c8:fd:fa:
b4:ca:70:1f:c9:59:ad:ad:83:3e:73:bb:f2:68:ae:ea:4f:20:
d6:08:48:54:d4:36:33:27:71:98:4c:19:63:03:f9:ba:fe:b3:
d5:b1:32:78:46:26:a9:6e:e4:8c:0e:1d:23:66:b9:89:32:a9:
7e:2b:b2:ab:e9:a3:7e:a4:c5:e2:5b:b4:2a:c5:7f:98:05:fe:
58:8e:ee:1e:ae:3a:f0:2e:83:fa:ec:22:ef:8e:21:12:2d:e4:
3e:22:cd:74:e6:62:27:7c:94:20:87:97:73:12:00:b8:00:c0:
22:8b:86:86:23:24:8a:90:52:71:cc:36:15:2f:16:c0:71:43:
60:58:04:11:c1:25:34:c7:5f:d0:b1:92:c6:5d:ea:1e:11:09:
1f:ea:93:87:22:39:0e:eb:ec:77:72:4a:c7:4c:2e:0c:6a:d8:
22:44:f9:d1:2d:29:47:b0:30:e9:67:48:57:01:1d:e5:00:e1:
6a:92:79:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMTvaH5IPFPyXjRmA9nuaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMmY5YjJlOGEzMDUwOGQzOTE5MmFmZDViMzRlZTU2Zjc3
NTk3OWUwHhcNMjUwNTE0MDEwMDQ5WhcNMjUwNTE1MDEwMDQ5WjAzMTEwLwYDVQQD
EygyMmYxNWQ4Mjc5ZGNhYjBkMDEyM2YzMDk5ZDdmMTBjYjQ4ODFlNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3czFhRJYoNzYQ0Sjo4RoHx3jaNpu
LphFsMq8BSlH7rQq5wiZ6w7L/ba2dW+dgq2Tnl6TWsx+9niYnjeG5goncjJ77VXt
iP1Oe+V14S7/oBGFC3GpgE1z+W4uIYKNmM6pxRPsDVDHLEkkSvuho8QBUMg3Hjv4
FWfxavoIN05Waqx7eaOlK+d86ge9BE79sUpwtr2fBU/MkhnZXaBf7UVZFTYgHFIx
v7NLhnTsXs1n5AkU1/Ot+Zd5cmgN0/LXzagAbHjWZsFSAOewPF8za5z7BSkVSo4/
vrG60dsU6bHtXFIuok+rmM1QKbvhIwY2H5RnfPhH4Vv7xM0g3XZybrT4mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLxXYJ53KsNASPzCZ1/EMtIgeT4MB8GA1UdIwQY
MBaAFAwvmy6KMFCNORkq/Vs07lb3dZeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNmNiODItMDM5OS00MzZjLWI5NTIt
OWVkYTU3YzIzZWRmLzEvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zNmNiODItMDM5OS00MzZjLWI5NTItOWVkYTU3YzIzZWRm
LzEvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVmCmmeD
f9AmbqTF7MUsn2HAOQT9AqrFiuZYoyfNFSsEDBBVjbXyuhCDDUHqgqCcNGaLWTYH
1Egcw5waMUuTuS1D0P/EyP36tMpwH8lZra2DPnO78miu6k8g1ghIVNQ2MydxmEwZ
YwP5uv6z1bEyeEYmqW7kjA4dI2a5iTKpfiuyq+mjfqTF4lu0KsV/mAX+WI7uHq46
8C6D+uwi744hEi3kPiLNdOZiJ3yUIIeXcxIAuADAIouGhiMkipBSccw2FS8WwHFD
YFgEEcElNMdf0LGSxl3qHhEJH+qThyI5Duvsd3JKx0wuDGrYIkT50S0pR7Aw6WdI
VwEd5QDhapJ5dw==
-----END CERTIFICATE-----
Generated at Wed May 14 05:49:39 2025 by rpki-client