Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: 695MOGn7kMdVwuHmOftMO+voed1epWeeywXYlcnAlsU=
Subject key identifier: 63:07:86:0F:28:DF:4E:1F:22:82:B9:B2:17:30:37:73:62:24:1F:E3
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 01964A0F074F11E199C453C7A3BAE4FE54AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 18:00:20 +0000
Manifest this update: Fri 18 Apr 2025 18:00:20 +0000
Manifest next update: Sat 19 Apr 2025 18:00:20 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: WUreiLArYIxFL1fETikfaM2hudGkhqioqmgsLkQqWEw=)
2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:07:4f:11:e1:99:c4:53:c7:a3:ba:e4:fe:54:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Apr 18 18:00:20 2025 GMT
Not After : Apr 19 18:00:20 2025 GMT
Subject: CN=6307860f28df4e1f2282b9b21730377362241fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:86:eb:ab:4e:86:96:7c:a9:3a:53:37:e4:
97:80:b7:97:c4:5c:8c:38:d4:f7:23:7b:b7:0f:c7:
d3:50:e1:fb:18:33:43:be:4d:56:81:9a:92:28:17:
2f:c8:38:9c:30:f9:ac:6e:f7:ae:20:15:e0:1b:9c:
45:58:6b:ea:dd:89:91:d1:49:67:f3:cb:ae:be:77:
17:20:a2:72:1a:91:ec:e0:4b:dd:4a:93:37:c8:18:
95:57:1b:14:ae:ad:ed:7f:7f:79:69:6b:72:c7:90:
54:f1:fa:df:68:46:f3:70:c3:fd:ca:41:69:70:6f:
4c:a5:80:51:e9:95:7b:cf:bc:d5:02:de:1c:29:1c:
52:bf:50:51:2a:ce:58:7b:a1:76:d3:55:14:0b:1e:
e5:8e:66:64:fa:95:2c:f8:8b:93:30:98:62:18:47:
ef:5c:e9:d0:d4:b2:bb:0f:0c:68:cd:66:b6:46:3f:
ca:bf:8c:70:90:72:4a:53:4d:02:52:ba:bc:b5:61:
a4:6f:35:43:a3:81:47:7c:a5:d6:cf:e1:15:12:8d:
56:02:fe:e1:b3:a1:8d:3a:2c:4e:85:a1:6d:41:e8:
21:5d:72:08:0b:5f:94:30:fb:01:02:40:7c:5c:fe:
f2:8f:59:9d:53:c2:1e:0f:66:57:ff:06:72:32:0d:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:07:86:0F:28:DF:4E:1F:22:82:B9:B2:17:30:37:73:62:24:1F:E3
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c3:69:78:68:d5:ce:e5:e3:50:14:43:57:67:44:ad:44:c0:
e4:22:eb:8b:12:12:f7:c5:df:b4:6a:3e:35:c4:3d:5e:35:d3:
08:5f:91:25:57:a1:47:ad:36:99:ac:a0:5f:f4:3d:02:b6:45:
60:f7:dc:d3:2c:06:8a:3f:0d:5d:dd:07:17:59:17:82:4c:f1:
23:d9:5b:c6:92:7c:b7:4e:77:76:2a:b6:ce:51:02:97:74:c5:
b2:f8:61:ea:df:3b:19:59:2b:87:6b:71:31:41:3a:a0:ca:68:
11:eb:19:52:f2:c4:22:57:72:53:6a:ef:dd:65:1d:40:01:8c:
49:a5:9e:86:a8:0d:ea:d1:dd:35:0b:9b:16:cb:05:bc:29:3c:
7e:d6:5c:d6:68:21:c1:4d:57:7d:b9:f8:12:f0:e3:ae:78:e9:
09:61:00:5f:7d:e2:84:db:d8:b7:0b:ed:76:20:bf:ba:97:07:
69:60:09:56:58:cf:a8:c5:c3:ec:04:f3:49:f1:28:c6:7c:d4:
99:6a:30:d1:e0:54:10:35:5e:f4:0e:8b:e7:e8:10:49:dd:ae:
b0:cc:ac:5e:14:45:51:de:90:85:4c:8c:a4:70:2b:81:aa:d0:
5d:1c:12:38:33:ee:bd:f8:44:0f:4c:e8:de:87:f8:e2:7c:bd:
e8:af:13:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKDwdPEeGZxFPHo7rk/lSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3
Nzc3YTkwHhcNMjUwNDE4MTgwMDIwWhcNMjUwNDE5MTgwMDIwWjAzMTEwLwYDVQQD
Eyg2MzA3ODYwZjI4ZGY0ZTFmMjI4MmI5YjIxNzMwMzc3MzYyMjQxZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XKG66tOhpZ8qTpTN+SXgLeXxFyM
ONT3I3u3D8fTUOH7GDNDvk1WgZqSKBcvyDicMPmsbveuIBXgG5xFWGvq3YmR0Uln
88uuvncXIKJyGpHs4EvdSpM3yBiVVxsUrq3tf395aWtyx5BU8frfaEbzcMP9ykFp
cG9MpYBR6ZV7z7zVAt4cKRxSv1BRKs5Ye6F201UUCx7ljmZk+pUs+IuTMJhiGEfv
XOnQ1LK7DwxozWa2Rj/Kv4xwkHJKU00CUrq8tWGkbzVDo4FHfKXWz+EVEo1WAv7h
s6GNOixOhaFtQeghXXIIC1+UMPsBAkB8XP7yj1mdU8IeD2ZX/wZyMg3jNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMHhg8o304fIoK5shcwN3NiJB/jMB8GA1UdIwQY
MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt
M2VmNTk0ZTZjNjk2LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2
LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMNpeGjV
zuXjUBRDV2dErUTA5CLrixIS98XftGo+NcQ9XjXTCF+RJVehR602maygX/Q9ArZF
YPfc0ywGij8NXd0HF1kXgkzxI9lbxpJ8t053diq2zlECl3TFsvhh6t87GVkrh2tx
MUE6oMpoEesZUvLEIldyU2rv3WUdQAGMSaWehqgN6tHdNQubFssFvCk8ftZc1mgh
wU1Xfbn4EvDjrnjpCWEAX33ihNvYtwvtdiC/upcHaWAJVljPqMXD7ATzSfEoxnzU
mWow0eBUEDVe9A6L5+gQSd2usMysXhRFUd6QhUyMpHArgarQXRwSODPuvfhED0zo
3of44ny96K8TuA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:14:45 2025 by rpki-client