Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: gQ4GSisqE73T45wPlMmGGXHLBNFWQOW7ips0afikdDo=
Subject key identifier: 0C:E3:84:29:75:7D:8E:E9:BD:28:A2:11:B6:D1:7A:31:C9:7F:69:41
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 019652DB2B0490D7EE5C8749B035A411FA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 11:00:17 +0000
Manifest this update: Sun 20 Apr 2025 11:00:17 +0000
Manifest next update: Mon 21 Apr 2025 11:00:17 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: J4n75X/NzYHCtSlHfz2ZIzFbYdenW9gBJOp4YnaiMwk=)
2: V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa (hash: hUff0lfnMQTwyppmA7CbM6Vyj9Moq1TvnfUvdLLp36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:2b:04:90:d7:ee:5c:87:49:b0:35:a4:11:fa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Apr 20 11:00:17 2025 GMT
Not After : Apr 21 11:00:17 2025 GMT
Subject: CN=0ce38429757d8ee9bd28a211b6d17a31c97f6941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ab:e9:15:e9:a1:a2:45:cd:79:be:d0:59:38:
c9:56:9c:a0:90:85:68:5f:0d:97:79:eb:67:f2:f8:
77:91:2e:07:d9:6c:3e:79:b2:4e:5a:77:be:36:d1:
8a:8c:b3:9d:29:2c:dd:95:6d:bb:19:5a:52:3f:74:
2d:b8:23:45:17:20:57:56:36:9f:9a:cd:53:67:b1:
58:78:80:3c:df:af:6f:7f:78:23:97:44:4c:0c:a3:
46:a9:ce:4e:7f:71:b3:3d:c4:30:01:9a:39:00:8a:
62:1e:47:35:d9:90:b8:e5:3c:0d:9a:09:cb:64:b2:
71:79:dc:05:b1:b7:e4:3a:17:3d:a6:7a:72:12:96:
ac:fd:91:3f:ef:06:d0:28:28:40:82:45:ca:6b:b8:
e1:c0:e4:4f:cf:db:b4:d8:73:ac:60:35:41:1a:ee:
01:6e:c4:7a:4e:a9:b3:06:e4:9c:86:81:29:65:34:
d5:a7:c6:cb:15:b4:90:4a:f1:08:96:11:44:13:02:
38:ce:be:2c:4f:c2:57:d4:2f:77:cd:c1:50:24:d2:
8a:16:a6:63:ce:59:ab:8e:46:28:38:a5:59:f3:65:
42:a9:6e:ef:da:68:bc:09:58:a1:e1:72:59:c2:ac:
25:4c:f6:ed:04:c8:54:15:13:81:bb:e7:08:e7:31:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E3:84:29:75:7D:8E:E9:BD:28:A2:11:B6:D1:7A:31:C9:7F:69:41
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:04:88:2a:f0:75:88:be:15:1c:37:fe:f7:70:ba:c9:54:3d:
37:93:9b:a7:33:11:5d:3e:d7:12:d9:90:ed:cf:22:4d:a7:f4:
6a:cd:c1:67:76:37:b9:cd:cc:66:f2:67:3e:9e:ed:69:df:09:
3d:ac:9d:d5:13:ef:84:da:0f:6d:8e:00:3d:42:10:9a:09:40:
f1:52:fe:56:b7:28:45:d4:82:ba:9c:b1:df:95:80:a4:d5:f9:
af:f4:93:c4:c9:24:46:90:fd:af:17:40:79:0b:0f:df:68:63:
6d:aa:54:dc:48:1c:4d:07:5e:19:95:36:2f:37:ec:bc:7d:db:
dd:fc:47:38:d7:10:17:f2:60:b8:be:50:cd:a5:b4:7b:62:8e:
f2:11:6f:7c:1a:21:fc:b3:9f:96:67:09:e2:b9:d4:10:1e:f7:
6e:69:20:34:9c:bc:ee:76:a2:32:f9:43:b8:23:d5:36:5a:a2:
56:d1:15:49:05:37:1f:4c:17:c8:b1:b3:d0:12:ea:c2:b8:9a:
f6:14:3e:0d:39:28:f4:eb:da:dc:82:6d:71:c5:dc:3e:1a:37:
7f:4d:cb:0d:dc:fe:76:fe:3e:b2:fe:11:7e:74:22:b8:ca:ae:
96:f9:46:5e:53:fa:00:0b:63:02:dd:c6:8b:b0:5b:a7:81:20:
e3:76:d3:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZS2ysEkNfuXIdJsDWkEfouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYzNhZDVmZjY1YjhkY2I0NzYyMjlmMTJkNDU3ZDc3NjFh
MGI5N2MwHhcNMjUwNDIwMTEwMDE3WhcNMjUwNDIxMTEwMDE3WjAzMTEwLwYDVQQD
EygwY2UzODQyOTc1N2Q4ZWU5YmQyOGEyMTFiNmQxN2EzMWM5N2Y2OTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6vpFemhokXNeb7QWTjJVpygkIVo
Xw2Xeetn8vh3kS4H2Ww+ebJOWne+NtGKjLOdKSzdlW27GVpSP3QtuCNFFyBXVjaf
ms1TZ7FYeIA8369vf3gjl0RMDKNGqc5Of3GzPcQwAZo5AIpiHkc12ZC45TwNmgnL
ZLJxedwFsbfkOhc9pnpyEpas/ZE/7wbQKChAgkXKa7jhwORPz9u02HOsYDVBGu4B
bsR6TqmzBuSchoEpZTTVp8bLFbSQSvEIlhFEEwI4zr4sT8JX1C93zcFQJNKKFqZj
zlmrjkYoOKVZ82VCqW7v2mi8CVih4XJZwqwlTPbtBMhUFROBu+cI5zE3MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzjhCl1fY7pvSiiEbbRejHJf2lBMB8GA1UdIwQY
MBaAFA7DrV/2W43LR2Ip8S1FfXdhoLl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzIt
YjhhYWIzMzIzNTI0LzEvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzItYjhhYWIzMzIzNTI0
LzEvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARASIKvB1
iL4VHDf+93C6yVQ9N5ObpzMRXT7XEtmQ7c8iTaf0as3BZ3Y3uc3MZvJnPp7tad8J
Payd1RPvhNoPbY4APUIQmglA8VL+VrcoRdSCupyx35WApNX5r/STxMkkRpD9rxdA
eQsP32hjbapU3EgcTQdeGZU2LzfsvH3b3fxHONcQF/JguL5QzaW0e2KO8hFvfBoh
/LOflmcJ4rnUEB73bmkgNJy87naiMvlDuCPVNlqiVtEVSQU3H0wXyLGz0BLqwria
9hQ+DTko9Ova3IJtccXcPho3f03LDdz+dv4+sv4RfnQiuMqulvlGXlP6AAtjAt3G
i7Bbp4Eg43bTDA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:06:06 2025 by rpki-client