Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File: dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier: 5NAuK3zOpIL6ENVOTR5DPFQRvWcZ5GihYlHluQtJe30=
Subject key identifier: 82:36:76:4F:E2:BC:AB:09:F5:60:96:8B:15:C9:13:5C:9B:C5:B3:1E
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial: 0196AF574CBFDD515A83BEF99911378C039B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number: 0C01
Signing time: Thu 08 May 2025 10:00:56 +0000
Manifest this update: Thu 08 May 2025 10:00:56 +0000
Manifest next update: Fri 09 May 2025 10:00:56 +0000
Files and hashes: 1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: tVSmoGvmELr/C596BAzcC0uy1f2PWoqyt9sW/g8wRoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:57:4c:bf:dd:51:5a:83:be:f9:99:11:37:8c:03:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
Validity
Not Before: May 8 10:00:56 2025 GMT
Not After : May 9 10:00:56 2025 GMT
Subject: CN=8236764fe2bcab09f560968b15c9135c9bc5b31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:16:90:46:5b:37:8c:0e:ac:39:71:e6:a4:
20:9b:ae:41:69:1f:37:2b:87:89:cc:89:4c:38:f4:
ed:6f:9f:6c:d5:54:5c:d2:2a:cd:2b:99:a8:35:9c:
8c:13:cf:24:f9:60:fe:c7:42:9c:5f:21:5f:d7:ca:
51:9a:fa:80:69:20:79:4b:be:0b:1c:8f:b3:98:da:
3a:fe:bf:b9:ae:69:48:8f:5a:6d:69:69:9c:89:9e:
ee:08:fc:ec:d9:ee:ef:2e:80:6f:7d:73:a3:ee:3d:
a6:b6:94:80:a7:be:d8:ad:72:8a:97:20:da:d7:ca:
d8:27:f5:be:32:ec:93:f6:af:be:e9:9d:d2:df:44:
64:4e:39:cf:13:8b:1d:23:0b:b2:f6:4b:1f:f8:95:
d4:f0:dc:f3:dc:4a:59:32:8f:3b:23:05:bc:ce:b6:
6d:a0:9c:f5:88:ee:9a:b4:b3:e8:4d:d6:59:b7:9b:
95:91:d5:84:77:7f:55:d4:39:13:3c:ca:7d:83:43:
7a:02:34:7b:39:9b:99:fd:1c:46:98:98:87:1e:96:
7f:43:fe:ce:61:58:02:ab:eb:aa:61:bb:b2:fc:f0:
76:e4:35:09:32:d1:98:fd:ab:f3:2a:5d:5d:c2:dd:
b1:be:cc:d7:80:f5:b8:7c:29:bd:23:2e:b1:41:99:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:36:76:4F:E2:BC:AB:09:F5:60:96:8B:15:C9:13:5C:9B:C5:B3:1E
X509v3 Authority Key Identifier:
keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ae:4b:fb:75:3c:4a:1c:ec:9a:a4:af:40:7b:01:97:e6:62:
70:07:04:40:7e:63:cc:3c:08:e2:ab:e1:de:1e:81:47:8a:4e:
f8:bb:83:08:83:e1:ce:50:b4:15:54:12:36:9d:f1:71:01:b3:
fa:6b:b5:8b:93:af:11:e4:8c:05:cf:2d:31:ef:4d:a0:c8:83:
9f:1d:a8:7d:d0:16:2d:f6:85:b5:37:8d:11:38:e6:4d:4f:ac:
48:08:d2:39:94:c2:c7:c4:e1:0c:37:7f:19:84:e7:41:83:5e:
4a:f3:11:02:d1:2a:5a:3a:1c:d6:42:43:87:4f:cc:a7:95:5e:
af:02:ee:26:56:1a:27:e8:dc:6d:51:a6:db:3b:58:57:dc:56:
d1:32:29:70:d4:b6:1f:d0:fc:3e:63:9a:91:08:e5:2d:59:d8:
34:e3:f4:8d:a3:20:85:90:09:73:20:78:c5:d0:5f:a5:7e:92:
ec:03:5a:d1:41:6e:15:b5:d0:f8:3c:84:a0:27:24:cd:2c:91:
89:0e:2d:13:a6:00:a3:4e:74:4f:2a:89:9e:17:35:ac:07:a4:
66:61:31:6a:57:05:7f:c9:ee:54:29:d6:ce:14:18:41:3e:28:
c8:21:a2:b6:03:e6:61:67:e3:68:57:41:fe:d2:4d:4b:b6:91:
67:f3:2f:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavV0y/3VFag775mRE3jAObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjMzMjM5YmFhMjEwMzEwNmE2MjYwZGRmZDdlNzhiODA5
NDM1NWMwHhcNMjUwNTA4MTAwMDU2WhcNMjUwNTA5MTAwMDU2WjAzMTEwLwYDVQQD
Eyg4MjM2NzY0ZmUyYmNhYjA5ZjU2MDk2OGIxNWM5MTM1YzliYzViMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonwWkEZbN4wOrDlx5qQgm65BaR83
K4eJzIlMOPTtb59s1VRc0irNK5moNZyME88k+WD+x0KcXyFf18pRmvqAaSB5S74L
HI+zmNo6/r+5rmlIj1ptaWmciZ7uCPzs2e7vLoBvfXOj7j2mtpSAp77YrXKKlyDa
18rYJ/W+MuyT9q++6Z3S30RkTjnPE4sdIwuy9ksf+JXU8Nzz3EpZMo87IwW8zrZt
oJz1iO6atLPoTdZZt5uVkdWEd39V1DkTPMp9g0N6AjR7OZuZ/RxGmJiHHpZ/Q/7O
YVgCq+uqYbuy/PB25DUJMtGY/avzKl1dwt2xvszXgPW4fCm9Iy6xQZnPlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII2dk/ivKsJ9WCWixXJE1ybxbMeMB8GA1UdIwQY
MBaAFHRjMjm6ohAxBqYmDd/X54uAlDVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdNeU9icWlFREVHcGlZTjM5Zm5pNENVTlZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ZjM1ZTgtYWMyZS00ZTE1LWEwYjQt
YjJlYzYxMTdjZTllLzEvZEdNeU9icWlFREVHcGlZTjM5Zm5pNENVTlZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ZjM1ZTgtYWMyZS00ZTE1LWEwYjQtYjJlYzYxMTdjZTll
LzEvZEdNeU9icWlFREVHcGlZTjM5Zm5pNENVTlZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhq5L+3U8
ShzsmqSvQHsBl+ZicAcEQH5jzDwI4qvh3h6BR4pO+LuDCIPhzlC0FVQSNp3xcQGz
+mu1i5OvEeSMBc8tMe9NoMiDnx2ofdAWLfaFtTeNETjmTU+sSAjSOZTCx8ThDDd/
GYTnQYNeSvMRAtEqWjoc1kJDh0/Mp5VerwLuJlYaJ+jcbVGm2ztYV9xW0TIpcNS2
H9D8PmOakQjlLVnYNOP0jaMghZAJcyB4xdBfpX6S7ANa0UFuFbXQ+DyEoCckzSyR
iQ4tE6YAo050TyqJnhc1rAekZmExalcFf8nuVCnWzhQYQT4oyCGitgPmYWfjaFdB
/tJNS7aRZ/Mvew==
-----END CERTIFICATE-----
Generated at Thu May 8 20:02:20 2025 by rpki-client