Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: bjoNXEzMjgZYgmPoxVpIHTX6yRmfjIY90lPBH574JSA=
Subject key identifier: 39:9D:03:7A:7E:BE:89:BA:4D:16:48:68:65:4D:52:A0:54:25:F7:D6
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01958F2ACF6A83A0F8AD0438E312580B468B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 1017
Signing time: Thu 13 Mar 2025 11:01:42 +0000
Manifest this update: Thu 13 Mar 2025 11:01:42 +0000
Manifest next update: Fri 14 Mar 2025 11:01:42 +0000
Files and hashes: 1: NAckqIZ_cv_U6_Szqr3B6DGq59M.roa (hash: 5rHZMnA6S2Xi93gDSPJjpPOy7VNVc2TB29KreGnvwEQ=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: C486rlgtmsjqrCEY7bbVWVB+YzyPU8yCoBh51sO/wwk=)
3: hPRhT7rkMq9JixnaKQg6MXIa6w0.roa (hash: 47HMse7zHITwF5pv9mb9OCNw4X4BUCmXu1B+299Il/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:cf:6a:83:a0:f8:ad:04:38:e3:12:58:0b:46:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Mar 13 11:01:42 2025 GMT
Not After : Mar 14 11:01:42 2025 GMT
Subject: CN=399d037a7ebe89ba4d164868654d52a05425f7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:42:de:28:ff:c1:6d:84:c9:e2:3b:db:5c:
c6:8f:1f:d0:6d:85:78:ab:88:db:30:93:32:1e:37:
0c:9c:4d:f8:4c:96:7a:02:81:a9:99:c7:0e:4d:2d:
fc:30:c7:af:2c:9e:f8:37:01:0b:80:34:97:94:c3:
ba:94:c6:91:c9:10:e2:0e:66:04:de:8c:6a:55:0f:
a3:36:4f:cf:42:61:d6:2d:a5:d2:5a:cf:30:fa:fc:
e2:3f:45:7c:ed:b0:5f:b7:47:88:90:b8:c9:ba:bd:
c9:eb:d3:ab:47:4f:84:22:65:d4:83:9e:22:a0:4b:
cb:61:f1:a7:b4:42:f9:38:45:1b:d9:01:ff:aa:8b:
e3:fe:a4:21:41:3f:db:66:bd:68:7f:9a:cd:5f:48:
71:89:d6:6f:ca:69:ca:50:7d:14:b3:ad:fe:b2:fa:
f3:43:7d:e0:8d:00:0a:9f:a0:76:59:df:b1:60:3a:
a8:2e:fd:57:4b:7d:cd:31:b4:e1:10:4a:b5:c1:dd:
64:f4:b8:71:2a:85:03:bd:21:c3:f0:4e:5d:62:18:
ae:c4:97:43:a2:7a:86:b6:0a:fb:d6:43:81:a9:f4:
b0:ce:d7:30:cb:52:dd:3a:e2:71:52:f8:5c:1e:71:
15:38:6c:03:bb:78:4e:53:e3:bb:55:7a:72:08:89:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:03:7A:7E:BE:89:BA:4D:16:48:68:65:4D:52:A0:54:25:F7:D6
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3d:ca:8e:cf:a5:30:8e:b6:4c:e5:14:95:93:eb:20:17:e2:
3e:28:a9:e7:ea:1b:5a:d8:58:81:ef:bc:79:0b:2e:81:73:41:
ff:f7:dc:c7:10:e5:e1:b4:5b:1b:48:ff:f5:68:2a:3c:6e:7a:
68:b9:e7:cc:df:72:88:b3:7b:98:33:89:d4:f7:a3:de:a4:c8:
99:5e:5d:7c:53:d1:96:60:df:50:d5:63:37:3b:07:b4:10:1f:
71:04:4e:0b:65:03:0e:53:b6:e1:23:e6:40:23:1b:42:69:82:
77:f6:48:e1:a6:9f:f6:2e:39:0a:ac:59:81:4a:f4:ef:79:b0:
b7:1a:a8:92:e1:43:af:4e:a1:b3:ab:23:fa:c8:99:70:8d:f6:
39:e6:d4:5c:78:57:01:3e:02:60:bc:50:b8:7c:45:a3:ec:2e:
6c:9c:8a:39:b4:d4:0c:98:17:e1:66:d4:ac:0a:59:13:96:b0:
49:b9:cc:13:1b:6f:91:ba:48:2e:90:7c:a1:e9:aa:f5:a9:7c:
46:d9:f0:96:58:b4:e6:32:01:fa:11:fe:02:60:48:e2:e4:34:
28:82:54:74:8b:61:84:c0:d2:77:ba:ed:cc:96:a2:4a:f5:16:
79:cd:b2:95:1c:d5:c2:1c:a2:5c:e9:cb:a1:7c:e2:44:4f:92:
88:5e:30:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPKs9qg6D4rQQ44xJYC0aLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWE5MzEyYWY0YzNkOWNlZTA4MmM5NTQxYTZiNjVhZGE1
NjliM2MwHhcNMjUwMzEzMTEwMTQyWhcNMjUwMzE0MTEwMTQyWjAzMTEwLwYDVQQD
EygzOTlkMDM3YTdlYmU4OWJhNGQxNjQ4Njg2NTRkNTJhMDU0MjVmN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QdC3ij/wW2EyeI721zGjx/QbYV4
q4jbMJMyHjcMnE34TJZ6AoGpmccOTS38MMevLJ74NwELgDSXlMO6lMaRyRDiDmYE
3oxqVQ+jNk/PQmHWLaXSWs8w+vziP0V87bBft0eIkLjJur3J69OrR0+EImXUg54i
oEvLYfGntEL5OEUb2QH/qovj/qQhQT/bZr1of5rNX0hxidZvymnKUH0Us63+svrz
Q33gjQAKn6B2Wd+xYDqoLv1XS33NMbThEEq1wd1k9LhxKoUDvSHD8E5dYhiuxJdD
onqGtgr71kOBqfSwztcwy1LdOuJxUvhcHnEVOGwDu3hOU+O7VXpyCIlO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmdA3p+vom6TRZIaGVNUqBUJffWMB8GA1UdIwQY
MBaAFHSqkxKvTD2c7ggslUGmtlraVps8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUt
OThhMWQ2NWNmZTZmLzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUtOThhMWQ2NWNmZTZm
LzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxD3Kjs+l
MI62TOUUlZPrIBfiPiip5+obWthYge+8eQsugXNB//fcxxDl4bRbG0j/9WgqPG56
aLnnzN9yiLN7mDOJ1Pej3qTImV5dfFPRlmDfUNVjNzsHtBAfcQROC2UDDlO24SPm
QCMbQmmCd/ZI4aaf9i45CqxZgUr073mwtxqokuFDr06hs6sj+siZcI32OebUXHhX
AT4CYLxQuHxFo+wubJyKObTUDJgX4WbUrApZE5awSbnMExtvkbpILpB8oemq9al8
Rtnwlli05jIB+hH+AmBI4uQ0KIJUdIthhMDSd7rtzJaiSvUWec2ylRzVwhyiXOnL
oXziRE+SiF4wZg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:31 2025 by rpki-client