Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: eb7zhGtbBS5LQbUWoJ7j526D6gNAr8RfiKMHaW4NpRs=
Subject key identifier: 20:4A:77:B6:C3:A5:FF:3D:1B:2C:2C:2E:94:59:04:68:70:2D:3A:36
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 0196C2391559DF2EB123A33CD7A140EEFC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 0D9E
Signing time: Mon 12 May 2025 02:00:43 +0000
Manifest this update: Mon 12 May 2025 02:00:43 +0000
Manifest next update: Tue 13 May 2025 02:00:43 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: tHpBPiIzX3BePax2rj1eA0D68KpY//bEx9uVa+0xlbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:15:59:df:2e:b1:23:a3:3c:d7:a1:40:ee:fc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: May 12 02:00:43 2025 GMT
Not After : May 13 02:00:43 2025 GMT
Subject: CN=204a77b6c3a5ff3d1b2c2c2e94590468702d3a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:28:40:55:b9:c1:b1:1d:da:90:fe:ed:cb:
f4:bb:8d:f4:0d:37:0c:4a:a4:b7:53:7b:b6:cf:1d:
da:35:3f:a5:dd:a3:88:d5:af:d4:d8:3b:a5:82:c0:
47:7a:c3:0b:1d:7b:d6:a6:05:c0:6f:29:b7:dc:7e:
ce:36:d0:2b:4e:ae:05:ab:b1:55:a9:99:9d:17:61:
eb:1f:e2:29:90:16:e4:8d:8e:09:80:57:38:bb:dc:
72:4e:3f:99:32:4e:f2:74:65:85:70:37:db:0b:6b:
4e:cc:28:21:79:80:90:28:30:67:b1:94:4f:62:55:
51:2c:e5:ed:26:12:f6:a0:f2:08:3e:1a:f8:43:7e:
80:a7:7a:4f:ed:a2:2e:20:a8:30:b5:41:5b:3e:a3:
dd:b9:56:0c:cb:d7:e8:d0:8c:77:9d:de:eb:33:17:
b6:3b:8e:09:97:a5:03:9b:11:c0:7e:64:22:06:ee:
16:0f:62:32:e3:10:54:d7:df:f7:6e:e6:83:91:4e:
09:6d:90:a1:f9:cc:0a:56:1f:fa:f0:4d:56:6c:c1:
7b:80:31:5e:e8:49:62:87:d1:4f:44:5f:9a:2d:18:
e1:be:a2:96:45:b7:30:4f:62:65:31:41:59:5a:c7:
a4:b7:54:26:59:89:7b:23:5e:a7:ec:9b:80:9c:6f:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4A:77:B6:C3:A5:FF:3D:1B:2C:2C:2E:94:59:04:68:70:2D:3A:36
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a2:91:64:41:26:b7:bf:aa:00:59:26:ac:f7:e5:1c:f6:cb:
2e:28:5d:c4:a2:38:6a:45:ce:8c:24:42:e3:0d:8a:18:63:6e:
79:f2:7b:7f:d0:7d:3b:e5:5a:6a:e8:c3:8b:82:dd:7a:33:fd:
cb:be:54:c2:df:c1:56:d9:aa:18:ab:ce:e2:0d:22:f3:ba:5e:
fa:b0:2b:e6:f7:54:87:81:e4:d4:cd:6c:8b:ee:20:b0:d3:6b:
50:32:58:91:ce:7d:16:94:10:3a:fe:28:fc:ad:50:a8:bc:7d:
5e:65:eb:99:5b:6f:e3:32:3b:39:f8:bc:f4:9b:6f:0d:57:9d:
13:46:17:cc:1c:9b:23:0b:64:63:65:b2:9e:12:f0:61:d2:27:
fc:09:5f:56:c6:b6:aa:03:33:75:82:b7:9e:67:70:7f:d3:b1:
13:19:da:f2:e8:44:62:fe:bd:5d:6a:d5:3a:a1:81:2f:09:8a:
73:78:66:6b:95:34:db:6d:66:b4:6d:6a:b3:cc:89:ed:de:06:
15:87:86:19:88:95:7e:b2:4d:ff:f9:a3:3b:05:73:fb:a8:45:
6e:85:1a:98:f1:8c:e3:4c:4f:e2:94:3e:5c:54:42:72:3f:5a:
93:c6:8a:c2:8d:6e:77:d8:62:b9:de:bc:55:49:d0:40:24:ec:
5d:e0:5a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCORVZ3y6xI6M816FA7vyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTFkZmQ0NTY4MzQyODljMWZkMDNhMGZlZjFiNTJhNWVm
ZDFkOTEwHhcNMjUwNTEyMDIwMDQzWhcNMjUwNTEzMDIwMDQzWjAzMTEwLwYDVQQD
EygyMDRhNzdiNmMzYTVmZjNkMWIyYzJjMmU5NDU5MDQ2ODcwMmQzYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslcoQFW5wbEd2pD+7cv0u430DTcM
SqS3U3u2zx3aNT+l3aOI1a/U2DulgsBHesMLHXvWpgXAbym33H7ONtArTq4Fq7FV
qZmdF2HrH+IpkBbkjY4JgFc4u9xyTj+ZMk7ydGWFcDfbC2tOzCgheYCQKDBnsZRP
YlVRLOXtJhL2oPIIPhr4Q36Ap3pP7aIuIKgwtUFbPqPduVYMy9fo0Ix3nd7rMxe2
O44Jl6UDmxHAfmQiBu4WD2Iy4xBU19/3buaDkU4JbZCh+cwKVh/68E1WbMF7gDFe
6Elih9FPRF+aLRjhvqKWRbcwT2JlMUFZWsekt1QmWYl7I16n7JuAnG9KrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBKd7bDpf89GywsLpRZBGhwLTo2MB8GA1UdIwQY
MBaAFA2R39RWg0KJwf0DoP7xtSpe/R2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDct
OGJjY2UzMDNiOTE5LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDctOGJjY2UzMDNiOTE5
LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaKRZEEm
t7+qAFkmrPflHPbLLihdxKI4akXOjCRC4w2KGGNuefJ7f9B9O+VaaujDi4LdejP9
y75Uwt/BVtmqGKvO4g0i87pe+rAr5vdUh4Hk1M1si+4gsNNrUDJYkc59FpQQOv4o
/K1QqLx9XmXrmVtv4zI7Ofi89JtvDVedE0YXzBybIwtkY2WynhLwYdIn/AlfVsa2
qgMzdYK3nmdwf9OxExna8uhEYv69XWrVOqGBLwmKc3hma5U0221mtG1qs8yJ7d4G
FYeGGYiVfrJN//mjOwVz+6hFboUamPGM40xP4pQ+XFRCcj9ak8aKwo1ud9hiud68
VUnQQCTsXeBaMQ==
-----END CERTIFICATE-----
Generated at Mon May 12 12:53:20 2025 by rpki-client