Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier: TZ0ufLyGhJcLb/VZul/T9RK3nfd/aEFLm3HkokEAUw8=
Subject key identifier: 86:66:79:E8:48:7D:2B:33:9A:43:FA:9F:78:1C:74:F1:49:C8:2F:A7
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 0196BE930FFD7E39438FA59B61157E29B033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number: 125C
Signing time: Sun 11 May 2025 09:00:31 +0000
Manifest this update: Sun 11 May 2025 09:00:31 +0000
Manifest next update: Mon 12 May 2025 09:00:31 +0000
Files and hashes: 1: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: mue/+I81qgCrN9HVwhyCBrErsBKWuf/YOiTgnDcoS30=)
2: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (hash: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:0f:fd:7e:39:43:8f:a5:9b:61:15:7e:29:b0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: May 11 09:00:31 2025 GMT
Not After : May 12 09:00:31 2025 GMT
Subject: CN=866679e8487d2b339a43fa9f781c74f149c82fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:f4:35:9d:7e:49:40:35:3e:22:ba:ee:50:
f3:47:ab:16:49:5d:9f:71:fd:89:3f:0a:25:fe:06:
63:09:59:93:3c:7d:a2:05:46:e5:09:90:ee:81:25:
9a:57:e9:2b:ff:61:12:62:a2:d4:93:83:c0:c2:e2:
5a:47:c1:b6:a0:ea:7f:7e:cc:e3:8c:1f:82:cf:91:
d4:68:fc:7f:4e:7f:7f:c2:6a:36:82:d5:b5:bc:c3:
4f:7b:b0:b4:8b:47:44:28:9c:42:04:bf:83:80:d1:
1b:db:90:55:62:29:5e:07:11:1f:70:92:82:ca:a7:
e9:df:91:1d:9d:0f:60:59:33:18:d0:14:b0:a6:ca:
9d:55:d5:83:1a:76:54:fc:ff:1d:44:b8:49:19:60:
7e:ce:b9:a0:4e:bf:47:db:eb:ca:6e:ce:81:0b:3f:
d3:bf:8f:94:3a:99:0e:bb:fd:91:b6:97:37:e7:76:
b8:7e:5e:07:f3:ea:4e:98:51:9f:df:ea:1d:fe:57:
5c:3e:76:7a:f1:8d:7b:86:27:64:9a:54:b6:54:cc:
fc:88:47:2d:3e:de:b9:3f:78:e1:aa:95:37:75:67:
0c:66:b1:e9:4b:53:f4:ff:db:74:ca:99:b9:8c:b9:
55:24:f7:c3:e9:63:07:17:00:d5:ed:07:ea:32:ac:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:79:E8:48:7D:2B:33:9A:43:FA:9F:78:1C:74:F1:49:C8:2F:A7
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b9:d8:b5:60:b2:60:4a:30:d3:2f:03:c3:72:97:c9:2f:1e:
12:9c:89:f6:aa:db:03:11:80:64:00:53:47:57:f2:0f:84:44:
26:2d:ae:e6:65:a3:4a:7d:90:5b:01:40:9d:31:d1:71:05:40:
63:b6:39:ea:00:fd:ad:76:41:eb:22:10:5a:69:5b:a1:91:57:
ce:36:ce:1c:6b:da:9a:e4:65:7f:a2:f9:51:ea:28:de:20:ce:
ed:cc:65:4b:8c:28:34:89:5e:51:cb:90:8f:0d:d5:bf:0e:8a:
66:ad:d7:6d:a5:df:23:7d:5a:1f:57:bf:c7:ab:da:3d:c2:0f:
f5:f7:a1:ee:7b:93:19:39:ac:42:a6:1c:6e:fe:ec:d8:5b:05:
aa:f8:93:ce:88:d1:d4:96:e2:99:11:04:12:ed:1a:56:64:3b:
d1:34:be:79:24:7d:99:64:22:ce:50:9c:42:c8:e7:02:4b:12:
43:67:a9:b8:24:c6:06:1f:95:89:3a:17:10:33:bd:4d:72:f0:
71:c5:cd:cd:27:6a:2e:2a:c8:0d:97:75:48:9b:e2:64:53:15:
ea:87:ea:3a:86:bd:4e:ff:00:bb:e9:fd:b5:bc:e7:fb:02:84:
04:b3:1a:cd:ee:06:61:15:cc:36:ad:33:a9:50:77:fb:1c:e6:
ac:7c:67:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+kw/9fjlDj6WbYRV+KbAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNzE2MWU2MjJmNjNjMGRiODU2OGQ4Y2I0YzRkN2MwZDk4
MDgzNDYwHhcNMjUwNTExMDkwMDMxWhcNMjUwNTEyMDkwMDMxWjAzMTEwLwYDVQQD
Eyg4NjY2NzllODQ4N2QyYjMzOWE0M2ZhOWY3ODFjNzRmMTQ5YzgyZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBX0NZ1+SUA1PiK67lDzR6sWSV2f
cf2JPwol/gZjCVmTPH2iBUblCZDugSWaV+kr/2ESYqLUk4PAwuJaR8G2oOp/fszj
jB+Cz5HUaPx/Tn9/wmo2gtW1vMNPe7C0i0dEKJxCBL+DgNEb25BVYileBxEfcJKC
yqfp35EdnQ9gWTMY0BSwpsqdVdWDGnZU/P8dRLhJGWB+zrmgTr9H2+vKbs6BCz/T
v4+UOpkOu/2Rtpc353a4fl4H8+pOmFGf3+od/ldcPnZ68Y17hidkmlS2VMz8iEct
Pt65P3jhqpU3dWcMZrHpS1P0/9t0ypm5jLlVJPfD6WMHFwDV7QfqMqwSWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZmeehIfSszmkP6n3gcdPFJyC+nMB8GA1UdIwQY
MBaAFAxxYeYi9jwNuFaNjLTE18DZgINGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAt
YjE1ZTNmMDllMDFiLzEvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAtYjE1ZTNmMDllMDFi
LzEvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObnYtWCy
YEow0y8Dw3KXyS8eEpyJ9qrbAxGAZABTR1fyD4REJi2u5mWjSn2QWwFAnTHRcQVA
Y7Y56gD9rXZB6yIQWmlboZFXzjbOHGvamuRlf6L5Ueoo3iDO7cxlS4woNIleUcuQ
jw3Vvw6KZq3XbaXfI31aH1e/x6vaPcIP9feh7nuTGTmsQqYcbv7s2FsFqviTzojR
1JbimREEEu0aVmQ70TS+eSR9mWQizlCcQsjnAksSQ2epuCTGBh+ViToXEDO9TXLw
ccXNzSdqLirIDZd1SJviZFMV6ofqOoa9Tv8Au+n9tbzn+wKEBLMaze4GYRXMNq0z
qVB3+xzmrHxnqA==
-----END CERTIFICATE-----
Generated at Sun May 11 17:22:51 2025 by rpki-client