Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: 2eJ0jYKawb0779w49WpHxBw2iO8+SKHsd+m1mm9eMvQ=
Subject key identifier: E9:B3:9E:38:31:25:CF:5B:5D:F3:7F:67:0C:8E:9D:B2:E3:FA:8F:63
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 0196D8F7D14E1FF0C19E5C8DD821C55AB399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 0235
Signing time: Fri 16 May 2025 12:00:41 +0000
Manifest this update: Fri 16 May 2025 12:00:41 +0000
Manifest next update: Sat 17 May 2025 12:00:41 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: 9BbTrIsUSLlcnvdxIVpNfSXlReuwgzhs1V2UQX9WKO0=)
2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:f7:d1:4e:1f:f0:c1:9e:5c:8d:d8:21:c5:5a:b3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: May 16 12:00:41 2025 GMT
Not After : May 17 12:00:41 2025 GMT
Subject: CN=e9b39e383125cf5b5df37f670c8e9db2e3fa8f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:38:a5:b7:66:33:ae:71:53:26:a0:8a:a3:
d1:6d:43:7f:78:6e:9e:23:40:f6:e4:d3:c7:3d:3a:
44:65:1c:b0:95:b1:f5:ea:c1:78:b8:e3:57:4e:82:
79:92:6e:ce:86:af:fb:16:6b:ef:4c:d5:b3:f4:1c:
f8:b1:4a:fd:2f:99:f5:19:47:bd:89:8b:5b:5c:bc:
b5:ed:00:99:e7:e0:8b:37:a7:77:62:23:74:11:31:
5d:8c:49:1e:8d:a0:5b:36:03:f8:be:89:36:41:68:
d3:ad:a0:7c:80:0d:c9:0d:c1:3a:e4:e6:2a:0f:bc:
5e:a1:cd:16:6e:ff:83:8b:08:17:55:59:1d:ff:25:
07:52:af:93:0f:ad:29:ff:aa:0e:d4:ed:9c:32:11:
6c:a5:1d:55:1b:99:63:d2:76:0f:ef:bb:97:e8:31:
6d:db:9b:a8:80:10:97:69:9f:16:24:82:ea:70:a4:
7c:d6:9f:9f:78:ee:0d:d5:e9:b1:db:46:af:ad:3c:
c4:22:35:b2:a1:a6:12:05:14:83:d2:09:7b:88:42:
93:66:56:cb:c6:4b:ef:d5:2b:9c:20:a9:cc:ae:4a:
89:22:9e:1a:a6:4b:d0:b3:48:3e:e0:f9:ec:e5:fc:
49:bf:51:eb:84:b2:83:cd:63:30:2f:69:78:b4:15:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B3:9E:38:31:25:CF:5B:5D:F3:7F:67:0C:8E:9D:B2:E3:FA:8F:63
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:47:ac:57:7b:03:1f:b9:d4:74:ab:ae:ac:c7:8a:ca:4b:ff:
a5:b6:4d:69:7b:d8:bc:e6:ae:d6:79:fb:52:e8:59:c2:f7:96:
5f:b6:98:c4:cb:3c:07:d2:41:53:6c:f5:f8:6d:56:cc:22:bd:
2a:dd:b8:93:67:ee:b2:ae:70:15:95:8f:ca:e9:3a:e9:3b:95:
7e:d3:49:0b:b0:95:e2:9c:af:e0:8b:18:ac:40:49:10:a3:36:
ce:3e:d4:34:1f:aa:bf:94:40:d5:c9:00:63:4d:fd:5a:ce:77:
bd:e5:36:39:25:12:2d:6e:93:a9:05:92:2d:eb:0a:42:6d:dd:
28:35:f3:e7:3f:bf:6f:07:8a:ae:08:d2:5e:ab:14:1f:08:6a:
95:86:63:2f:b9:1a:8c:d3:83:7e:2b:42:94:a3:44:99:49:e3:
8b:20:34:02:00:2c:1e:f5:ff:cd:1b:03:79:e9:af:9e:f3:7b:
e0:7f:8f:37:59:91:b8:15:b7:cd:14:ff:47:d3:3f:dc:36:c7:
a8:5a:bb:35:6c:3c:bc:24:df:08:6d:c6:bb:c8:63:4e:3b:c7:
1a:97:87:3a:30:e5:f1:2f:68:88:d4:6f:e2:21:ef:c5:56:7a:
6c:e9:94:04:b4:10:65:48:60:c7:1e:15:2c:b1:e7:79:c5:de:
eb:af:a8:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbY99FOH/DBnlyN2CHFWrOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj
ZDI2NGMwHhcNMjUwNTE2MTIwMDQxWhcNMjUwNTE3MTIwMDQxWjAzMTEwLwYDVQQD
EyhlOWIzOWUzODMxMjVjZjViNWRmMzdmNjcwYzhlOWRiMmUzZmE4ZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4E4pbdmM65xUyagiqPRbUN/eG6e
I0D25NPHPTpEZRywlbH16sF4uONXToJ5km7Ohq/7FmvvTNWz9Bz4sUr9L5n1GUe9
iYtbXLy17QCZ5+CLN6d3YiN0ETFdjEkejaBbNgP4vok2QWjTraB8gA3JDcE65OYq
D7xeoc0Wbv+DiwgXVVkd/yUHUq+TD60p/6oO1O2cMhFspR1VG5lj0nYP77uX6DFt
25uogBCXaZ8WJILqcKR81p+feO4N1emx20avrTzEIjWyoaYSBRSD0gl7iEKTZlbL
xkvv1SucIKnMrkqJIp4apkvQs0g+4Pns5fxJv1HrhLKDzWMwL2l4tBVgDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmznjgxJc9bXfN/ZwyOnbLj+o9jMB8GA1UdIwQY
MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt
YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh
LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0esV3sD
H7nUdKuurMeKykv/pbZNaXvYvOau1nn7UuhZwveWX7aYxMs8B9JBU2z1+G1WzCK9
Kt24k2fusq5wFZWPyuk66TuVftNJC7CV4pyv4IsYrEBJEKM2zj7UNB+qv5RA1ckA
Y039Ws53veU2OSUSLW6TqQWSLesKQm3dKDXz5z+/bweKrgjSXqsUHwhqlYZjL7ka
jNODfitClKNEmUnjiyA0AgAsHvX/zRsDeemvnvN74H+PN1mRuBW3zRT/R9M/3DbH
qFq7NWw8vCTfCG3Gu8hjTjvHGpeHOjDl8S9oiNRv4iHvxVZ6bOmUBLQQZUhgxx4V
LLHnecXe66+ogg==
-----END CERTIFICATE-----
Generated at Fri May 16 19:42:57 2025 by rpki-client