Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
File: DoMf1wxr03oqddeg6sAxyS2o4YU.mft (raw, json)
Hash identifier: ZMkwKVxtSf7rHnYFrLUc/LXqYJOrMD5Nzgk4eNx6Yf4=
Subject key identifier: 42:D1:5B:7E:3B:EF:63:69:B0:E0:91:37:00:89:C9:60:8D:89:23:67
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial: 01965CBA79A75856A926DF8DD8876242921B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
Manifest number: 1184
Signing time: Tue 22 Apr 2025 09:00:46 +0000
Manifest this update: Tue 22 Apr 2025 09:00:46 +0000
Manifest next update: Wed 23 Apr 2025 09:00:46 +0000
Files and hashes: 1: AbAz97rI6RXbeaGg0ju1UGvv4xM.roa (hash: 6SJubAUNhK59Bg5EEa587Nx4giyrDXi2DFXXzhtFznQ=)
2: DoMf1wxr03oqddeg6sAxyS2o4YU.crl (hash: +mYnmFpVyO9V/zxe27/zQbhd9cBjjAHuWBSQpEaTnAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:79:a7:58:56:a9:26:df:8d:d8:87:62:42:92:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Validity
Not Before: Apr 22 09:00:46 2025 GMT
Not After : Apr 23 09:00:46 2025 GMT
Subject: CN=42d15b7e3bef6369b0e091370089c9608d892367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:51:f6:a5:c0:21:56:dc:ab:b8:c4:08:11:
b7:69:1d:c7:29:8b:6a:27:19:5d:39:b4:bf:1e:1a:
02:b5:c5:b9:ab:56:04:7d:ac:0a:1a:3c:66:ed:9d:
56:f2:97:df:4e:ed:ef:d6:d3:c3:4f:65:1f:5f:17:
b0:44:ea:12:46:9e:30:aa:42:ac:5c:71:a7:f2:c4:
90:f6:9a:ed:b0:b5:60:98:3e:46:db:0b:42:4c:3b:
e5:58:a6:07:c4:48:4e:f4:bc:11:0d:ef:be:2b:bf:
60:de:20:62:2d:af:d7:b9:9e:64:fb:b6:4c:a8:ea:
03:3a:84:ff:de:5c:e7:86:ec:e9:93:8b:fb:a4:5d:
f8:f7:5e:a5:f6:1c:43:51:26:cb:bf:b8:f7:79:1c:
ed:ec:24:c4:2c:79:3f:91:51:a8:aa:d5:c1:cb:f9:
65:ed:78:ee:c3:2b:65:2f:fd:18:b1:37:da:77:d1:
06:20:fb:19:60:cc:79:5a:e3:3d:ec:9f:14:81:f4:
ab:ec:29:f7:f2:4c:d0:63:77:dc:1e:0f:bb:19:3c:
2a:84:11:a8:e6:c2:3f:42:ef:69:12:52:77:3d:c5:
d0:1a:ba:f0:22:80:3f:13:f2:48:d1:98:4a:df:b4:
36:2d:a3:b2:99:9a:f5:54:c2:e4:38:b2:9a:ea:fd:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D1:5B:7E:3B:EF:63:69:B0:E0:91:37:00:89:C9:60:8D:89:23:67
X509v3 Authority Key Identifier:
keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:92:35:cd:11:d2:34:0f:e0:e6:56:e1:78:96:91:16:4b:f9:
23:c1:72:06:5e:7c:df:3f:b8:8f:2f:a2:31:50:fc:c0:7b:20:
1e:38:f8:d9:b2:cb:69:85:eb:53:aa:6e:50:f6:f7:1a:e1:a5:
ae:4d:97:87:59:33:75:2b:a3:49:a2:e2:fc:74:9f:f5:f8:ac:
a2:44:b4:99:b5:4e:07:34:0e:6b:08:a6:3a:1d:2b:f6:ed:fd:
2a:80:91:ce:4b:44:f1:9e:c8:05:3e:c5:8c:b0:59:be:5c:9c:
d4:64:b2:21:ad:a7:78:4f:c1:bb:7d:47:92:a9:96:9f:08:a5:
d5:bd:67:b6:2c:58:0e:9a:8f:f1:d5:00:14:3d:c1:ce:fe:36:
d8:92:72:0d:7e:be:ba:91:9e:ef:78:9a:2a:fe:b2:21:dd:c8:
03:39:5c:71:f8:cb:3d:26:7c:c9:83:0a:33:f7:9c:20:24:9e:
ea:a4:42:91:1d:02:99:4f:97:23:f5:b1:e3:f7:97:48:a1:66:
9a:a8:d2:31:4f:ef:97:8d:a9:b6:c0:31:ea:99:40:78:f0:08:
98:89:9c:98:b3:a5:04:e2:29:05:88:e7:67:56:d4:bc:d3:96:
cb:c3:10:c2:ce:5c:44:74:c8:47:f8:1a:25:65:cf:82:38:24:
b4:d5:0c:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcunmnWFapJt+N2IdiQpIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlODMxZmQ3MGM2YmQzN2EyYTc1ZDdhMGVhYzAzMWM5MmRh
OGUxODUwHhcNMjUwNDIyMDkwMDQ2WhcNMjUwNDIzMDkwMDQ2WjAzMTEwLwYDVQQD
Eyg0MmQxNWI3ZTNiZWY2MzY5YjBlMDkxMzcwMDg5Yzk2MDhkODkyMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTxR9qXAIVbcq7jECBG3aR3HKYtq
JxldObS/HhoCtcW5q1YEfawKGjxm7Z1W8pffTu3v1tPDT2UfXxewROoSRp4wqkKs
XHGn8sSQ9prtsLVgmD5G2wtCTDvlWKYHxEhO9LwRDe++K79g3iBiLa/XuZ5k+7ZM
qOoDOoT/3lznhuzpk4v7pF34916l9hxDUSbLv7j3eRzt7CTELHk/kVGoqtXBy/ll
7XjuwytlL/0YsTfad9EGIPsZYMx5WuM97J8UgfSr7Cn38kzQY3fcHg+7GTwqhBGo
5sI/Qu9pElJ3PcXQGrrwIoA/E/JI0ZhK37Q2LaOymZr1VMLkOLKa6v04tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELRW34772NpsOCRNwCJyWCNiSNnMB8GA1UdIwQY
MBaAFA6DH9cMa9N6KnXXoOrAMcktqOGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG9NZjF3eHIwM29xZGRlZzZzQXh5UzJvNFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85OGE2NjEtNDRmNS00YTA1LWFjYWEt
ZTY3NTgyZjIzMDk3LzEvRG9NZjF3eHIwM29xZGRlZzZzQXh5UzJvNFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85OGE2NjEtNDRmNS00YTA1LWFjYWEtZTY3NTgyZjIzMDk3
LzEvRG9NZjF3eHIwM29xZGRlZzZzQXh5UzJvNFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJI1zRHS
NA/g5lbheJaRFkv5I8FyBl583z+4jy+iMVD8wHsgHjj42bLLaYXrU6puUPb3GuGl
rk2Xh1kzdSujSaLi/HSf9fisokS0mbVOBzQOawimOh0r9u39KoCRzktE8Z7IBT7F
jLBZvlyc1GSyIa2neE/Bu31HkqmWnwil1b1ntixYDpqP8dUAFD3Bzv422JJyDX6+
upGe73iaKv6yId3IAzlccfjLPSZ8yYMKM/ecICSe6qRCkR0CmU+XI/Wx4/eXSKFm
mqjSMU/vl42ptsAx6plAePAImImcmLOlBOIpBYjnZ1bUvNOWy8MQws5cRHTIR/ga
JWXPgjgktNUMoA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:50:41 2025 by rpki-client