Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: 5oSOCN+7n6Pj4V0hgrngwQHV9jCIC1TgFQmmafUNAfg=
Subject key identifier: 0C:85:8A:05:F4:36:DD:F3:2D:27:0C:33:BD:C1:3B:28:0F:22:48:86
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 0196561362DA51AF9FE777ADE2A3249B7F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 02:00:33 +0000
Manifest this update: Mon 21 Apr 2025 02:00:33 +0000
Manifest next update: Tue 22 Apr 2025 02:00:33 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: f9mGAVHQ3w1fH3ayfTawuZwongZMtteoQjcUodILi8o=)
2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:62:da:51:af:9f:e7:77:ad:e2:a3:24:9b:7f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Apr 21 02:00:33 2025 GMT
Not After : Apr 22 02:00:33 2025 GMT
Subject: CN=0c858a05f436ddf32d270c33bdc13b280f224886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:7b:14:bc:78:2a:90:8f:f8:49:84:8c:98:
1f:74:43:05:aa:fb:47:25:5f:35:1d:af:9d:16:85:
0b:15:d6:a5:13:09:4d:d7:d6:64:82:14:0b:f2:60:
e3:d1:3a:4a:2d:0b:29:5f:62:91:b9:b2:83:f4:e7:
22:a3:81:c8:2d:12:d6:cf:28:af:15:91:79:f8:a4:
9a:60:73:4c:2d:5c:2a:e8:2a:7e:6a:2e:f9:db:92:
18:b2:e9:16:af:69:84:da:cf:26:c7:fa:4f:15:81:
de:22:2d:f9:0b:22:3a:7d:12:03:c6:38:ff:33:f6:
7e:3c:68:5b:9b:81:65:36:e6:ee:3a:41:06:8e:32:
8e:6b:ac:8f:4b:e7:56:52:46:15:10:b3:c7:a0:83:
74:76:63:78:55:ee:3f:a2:87:c7:03:61:73:9d:2c:
de:77:06:1d:41:12:e1:43:70:46:54:9e:89:8a:b8:
80:e9:ef:1d:71:48:d4:8c:95:e1:c9:e8:38:35:97:
a1:7f:e4:fc:53:6d:36:7b:f6:77:cc:71:1c:4f:7f:
ba:2c:6c:6a:d7:35:9b:4d:ed:56:ab:99:af:7c:04:
76:15:8f:0b:e5:1c:61:f5:47:01:14:b2:6a:1c:b4:
0d:16:aa:5a:24:d6:50:db:13:ff:43:d5:78:00:bb:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:85:8A:05:F4:36:DD:F3:2D:27:0C:33:BD:C1:3B:28:0F:22:48:86
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:03:07:ee:d1:96:6b:30:a2:89:6c:fa:02:b0:2d:89:89:2e:
6c:7c:b2:c8:57:ad:4c:03:12:9d:78:1d:4a:a3:58:33:32:cb:
69:e0:ac:72:95:e1:d6:36:f5:3c:7f:a1:5f:cb:db:54:84:35:
3d:d0:d5:f2:92:ff:6c:50:9f:08:8f:f3:75:66:f8:6b:e3:51:
50:f8:91:39:95:30:14:2f:11:b7:71:3b:2a:3d:9f:26:c8:75:
72:51:30:11:6b:f4:8b:85:cb:49:a3:42:1c:9a:53:72:5b:a0:
22:85:0b:84:90:78:d6:8b:f1:b4:4d:07:e1:7c:26:06:69:8a:
ac:66:72:af:5f:eb:f3:d7:cc:09:8b:05:49:87:54:d6:02:76:
ed:86:4f:9a:f5:12:ba:b2:85:b1:40:6e:5b:69:12:74:6b:80:
e7:45:e5:1b:76:66:9f:af:d6:68:d0:37:c3:2b:92:73:58:cf:
eb:67:a9:ad:e9:34:43:e3:94:55:14:de:03:29:68:fa:0d:54:
3b:42:91:6d:c0:e8:ae:e8:60:d3:b5:75:ff:0a:71:c3:ee:6c:
e9:49:7e:ed:fc:01:c9:82:98:cb:e2:99:39:62:31:0b:d0:80:
af:0e:b6:62:84:64:72:39:05:2e:c9:61:ad:c0:d8:ba:b8:3b:
06:9e:e2:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE2LaUa+f53et4qMkm38JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzIwNjE0MDU5NTY5OTNjYzYzYTYwZGIwZjk2MzUyNWQz
NTc3MzEwHhcNMjUwNDIxMDIwMDMzWhcNMjUwNDIyMDIwMDMzWjAzMTEwLwYDVQQD
EygwYzg1OGEwNWY0MzZkZGYzMmQyNzBjMzNiZGMxM2IyODBmMjI0ODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxp7FLx4KpCP+EmEjJgfdEMFqvtH
JV81Ha+dFoULFdalEwlN19ZkghQL8mDj0TpKLQspX2KRubKD9Ocio4HILRLWzyiv
FZF5+KSaYHNMLVwq6Cp+ai7525IYsukWr2mE2s8mx/pPFYHeIi35CyI6fRIDxjj/
M/Z+PGhbm4FlNubuOkEGjjKOa6yPS+dWUkYVELPHoIN0dmN4Ve4/oofHA2FznSze
dwYdQRLhQ3BGVJ6JiriA6e8dcUjUjJXhyeg4NZehf+T8U202e/Z3zHEcT3+6LGxq
1zWbTe1Wq5mvfAR2FY8L5Rxh9UcBFLJqHLQNFqpaJNZQ2xP/Q9V4ALvOWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyFigX0Nt3zLScMM73BOygPIkiGMB8GA1UdIwQY
MBaAFA3CBhQFlWmTzGOmDbD5Y1JdNXcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgt
MjM0OGJhNmZiNGMzLzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgtMjM0OGJhNmZiNGMz
LzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQMH7tGW
azCiiWz6ArAtiYkubHyyyFetTAMSnXgdSqNYMzLLaeCscpXh1jb1PH+hX8vbVIQ1
PdDV8pL/bFCfCI/zdWb4a+NRUPiROZUwFC8Rt3E7Kj2fJsh1clEwEWv0i4XLSaNC
HJpTclugIoULhJB41ovxtE0H4XwmBmmKrGZyr1/r89fMCYsFSYdU1gJ27YZPmvUS
urKFsUBuW2kSdGuA50XlG3Zmn6/WaNA3wyuSc1jP62eprek0Q+OUVRTeAylo+g1U
O0KRbcDoruhg07V1/wpxw+5s6Ul+7fwByYKYy+KZOWIxC9CArw62YoRkcjkFLslh
rcDYurg7Bp7iUQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:25 2025 by rpki-client