Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: jOo9jOjqUMoNp6WHwmmvFUatbAPBCDpk+j4PQ13GTAM=
Subject key identifier: 83:F0:24:8E:12:69:7E:85:7F:80:0F:5F:F2:21:76:E6:74:7A:05:4F
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019650480E66296AA25D6837A571AE3071CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 0E00
Signing time: Sat 19 Apr 2025 23:00:21 +0000
Manifest this update: Sat 19 Apr 2025 23:00:21 +0000
Manifest next update: Sun 20 Apr 2025 23:00:21 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: ac81IAgd2rj7Yh8Q540qWtXZkdfH9SDekM66HNP/fjk=)
2: C6Si8_4OvkA_L0SzhzDXIdZD70Q.roa (hash: MXDhlA4OqmmtXJ3YGQ8YOTAMBcB/6855qXcMYCrv39s=)
3: VehV-DaGpdPd27h7BeCPuf7XgGU.roa (hash: sAalVTrnmg6yf8SFv/nnSyHMnXSPLWE6BdkaiXIz7ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:0e:66:29:6a:a2:5d:68:37:a5:71:ae:30:71:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Apr 19 23:00:21 2025 GMT
Not After : Apr 20 23:00:21 2025 GMT
Subject: CN=83f0248e12697e857f800f5ff22176e6747a054f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:6b:34:63:4b:91:01:e2:95:9f:75:83:d3:
e7:d3:70:f6:d2:71:21:2b:d2:3c:af:af:70:3d:d7:
9a:2d:ec:f5:4f:9f:11:c5:78:5b:60:42:09:64:4c:
ad:11:c8:03:e8:4a:02:d9:69:67:a3:fd:69:95:25:
a6:b3:2a:bb:bf:97:4d:1a:05:3d:04:89:eb:b8:60:
ac:fc:94:ef:37:95:e7:fe:87:95:d9:f3:93:a7:b5:
e6:2f:5d:47:c3:94:c3:27:a5:50:5b:d2:3f:80:fa:
a2:b9:f7:7b:a6:bf:41:bf:1b:5d:cb:67:01:ff:5a:
ad:1b:d8:b0:da:e8:c6:86:3b:b4:73:bf:d1:dc:d7:
ab:d0:55:dc:49:4d:68:f6:9a:47:36:de:34:06:82:
5e:b7:76:62:39:da:e1:a6:ac:59:15:b5:bb:7e:6e:
13:29:b5:fc:81:6d:4f:0a:57:e4:02:55:31:36:6f:
0d:73:c0:de:f3:a8:b9:bd:d3:b6:19:e8:b6:8a:2c:
a9:25:51:2a:2c:d6:9c:63:23:fd:fa:66:e8:b5:b6:
60:ba:6b:b1:46:d4:92:7f:3d:50:b1:6d:16:c3:4a:
c5:aa:3d:62:91:79:a0:7f:44:a0:59:c2:e5:86:71:
83:26:ec:ba:9b:93:bd:d7:c5:e2:94:7b:a6:3a:c2:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F0:24:8E:12:69:7E:85:7F:80:0F:5F:F2:21:76:E6:74:7A:05:4F
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:45:8f:a0:94:be:b3:76:ae:d4:2d:d6:e6:78:98:72:75:11:
bf:48:74:95:16:d6:d8:bc:23:d7:b1:a4:d4:58:fc:4a:75:de:
8c:0a:70:e0:72:b1:76:ce:26:1b:01:0a:a7:18:04:9b:95:4e:
66:c7:0f:a1:64:55:93:ee:5d:36:2f:26:ee:7a:cc:a9:fe:e1:
b5:a4:11:30:78:c8:51:c0:06:b3:3a:e6:e1:6c:02:65:0b:42:
69:2f:bb:eb:fa:43:26:a3:42:97:6d:1f:e4:ea:67:65:07:fb:
5d:82:b1:21:f1:fc:88:ff:67:58:af:e5:0f:35:b7:45:81:5b:
87:29:c6:5d:b5:1f:ae:ab:7e:9e:a1:5e:7d:1c:6a:7b:54:ce:
2e:11:1c:2f:ba:e3:ae:59:7c:7e:83:94:c4:47:e9:ea:5f:d6:
8d:a4:15:28:b5:f4:e6:b6:2f:19:2a:9c:54:85:5f:9b:73:1e:
e4:18:af:4b:e5:d4:75:6b:8b:fa:b6:68:02:2f:52:7d:09:df:
e8:53:4d:ce:da:71:0d:ca:18:f3:a0:e3:74:fa:69:85:2e:5b:
bd:92:97:64:e5:b5:d3:f1:4e:b8:c6:ef:1e:fe:8e:9f:96:98:
a2:3d:84:16:4b:c5:cf:6b:b9:36:c7:3a:e3:73:03:84:5b:ff:
f5:82:ce:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQSA5mKWqiXWg3pXGuMHHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYzI2MDM0MzdlZjc0MTE3ZmExMjI3MmVjNDJjMjUyN2Rh
ODAwYzcwHhcNMjUwNDE5MjMwMDIxWhcNMjUwNDIwMjMwMDIxWjAzMTEwLwYDVQQD
Eyg4M2YwMjQ4ZTEyNjk3ZTg1N2Y4MDBmNWZmMjIxNzZlNjc0N2EwNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv41rNGNLkQHilZ91g9Pn03D20nEh
K9I8r69wPdeaLez1T58RxXhbYEIJZEytEcgD6EoC2Wlno/1plSWmsyq7v5dNGgU9
BInruGCs/JTvN5Xn/oeV2fOTp7XmL11Hw5TDJ6VQW9I/gPqiufd7pr9Bvxtdy2cB
/1qtG9iw2ujGhju0c7/R3Ner0FXcSU1o9ppHNt40BoJet3ZiOdrhpqxZFbW7fm4T
KbX8gW1PClfkAlUxNm8Nc8De86i5vdO2Gei2iiypJVEqLNacYyP9+mbotbZgumux
RtSSfz1QsW0Ww0rFqj1ikXmgf0SgWcLlhnGDJuy6m5O918XilHumOsIlNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPwJI4SaX6Ff4APX/IhduZ0egVPMB8GA1UdIwQY
MBaAFN/CYDQ373QRf6EicuxCwlJ9qADHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUt
YzgzMDA3MzI3NDQ5LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUtYzgzMDA3MzI3NDQ5
LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0WPoJS+
s3au1C3W5niYcnURv0h0lRbW2Lwj17Gk1Fj8SnXejApw4HKxds4mGwEKpxgEm5VO
ZscPoWRVk+5dNi8m7nrMqf7htaQRMHjIUcAGszrm4WwCZQtCaS+76/pDJqNCl20f
5OpnZQf7XYKxIfH8iP9nWK/lDzW3RYFbhynGXbUfrqt+nqFefRxqe1TOLhEcL7rj
rll8foOUxEfp6l/WjaQVKLX05rYvGSqcVIVfm3Me5BivS+XUdWuL+rZoAi9SfQnf
6FNNztpxDcoY86DjdPpphS5bvZKXZOW10/FOuMbvHv6On5aYoj2EFkvFz2u5Nsc6
43MDhFv/9YLOyQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:31:40 2025 by rpki-client