Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: e5sY7SC8xN9BZ90TM57ZAg2pkSliEvO3HoQX5LzBwYA=
Subject key identifier: 54:F9:74:DF:95:1D:74:CE:15:97:9D:D3:72:57:96:51:DD:D2:D7:3C
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 01964B906A7446E35FE48B07662E7C72DBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 06E5
Signing time: Sat 19 Apr 2025 01:01:17 +0000
Manifest this update: Sat 19 Apr 2025 01:01:17 +0000
Manifest next update: Sun 20 Apr 2025 01:01:17 +0000
Files and hashes: 1: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: 9PSEPWehATbPPQnM/ST2WskV2667BdvDZGyC2iJbxE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:6a:74:46:e3:5f:e4:8b:07:66:2e:7c:72:db:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Apr 19 01:01:17 2025 GMT
Not After : Apr 20 01:01:17 2025 GMT
Subject: CN=54f974df951d74ce15979dd372579651ddd2d73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:de:ea:1c:f4:cd:cd:c9:60:17:a7:bb:5e:
ce:d1:2a:ca:fc:01:4d:3f:3c:f9:8a:f6:f9:77:35:
52:40:7d:d2:84:eb:bd:d7:9f:82:8d:b7:a4:e4:19:
aa:2f:a2:b2:7a:eb:c9:76:29:3a:f5:2c:64:18:f7:
ba:84:0d:e4:54:b7:c3:5a:74:77:2a:56:ac:95:34:
b6:9d:1c:e2:35:9a:da:06:c2:14:98:49:a2:c5:6a:
d7:14:c7:d6:9a:53:01:6a:8d:f5:4b:95:15:72:26:
0b:6c:c0:56:12:50:1d:62:cd:29:18:db:8f:44:94:
b6:34:d4:12:bb:f6:7a:4e:a7:75:13:c8:67:6b:a1:
81:d3:af:f5:50:27:6c:8f:06:50:5f:74:d7:36:15:
83:b8:0c:d2:aa:73:35:30:ad:05:e5:ab:4b:74:e1:
16:0d:69:ff:4a:4a:c1:68:03:5a:20:de:f4:39:b7:
6e:d2:6f:87:6a:51:25:2c:16:1a:7f:1a:50:67:11:
b5:f3:0f:d0:17:95:e7:6a:40:ac:19:7a:4d:cc:9a:
a2:b7:73:59:2f:dc:78:ed:82:e4:b0:a1:9b:c4:14:
00:c9:50:3c:88:39:e4:b6:62:22:52:5a:3d:7c:fc:
c6:42:cc:4f:cc:16:05:c0:02:ae:09:bd:2c:a3:5b:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:74:DF:95:1D:74:CE:15:97:9D:D3:72:57:96:51:DD:D2:D7:3C
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:39:88:7b:dc:0d:fd:21:ac:06:7f:ad:bd:3f:5e:03:97:5d:
c3:f1:61:32:21:e8:50:02:51:1b:00:29:9c:42:c2:90:a7:54:
da:56:62:b1:7f:b3:7e:98:74:32:5d:0e:9b:12:74:d7:16:9f:
c3:06:7b:f7:10:c6:b7:51:84:b6:54:aa:32:18:95:73:c6:e2:
16:b2:b5:9a:ee:7d:f5:ab:98:d4:3a:9a:69:ec:fb:df:df:8c:
fb:b5:42:1d:6f:7e:a9:27:c3:15:c1:9b:ae:78:c1:91:ba:ed:
46:18:6b:17:c3:76:df:1a:c8:18:1b:e2:9b:b8:f0:37:c7:11:
36:c2:44:c4:32:bf:79:77:51:13:f6:97:4b:8a:07:6e:8f:52:
ce:40:b9:95:de:fc:fd:8f:df:cc:a1:8d:86:2c:00:e4:83:05:
07:82:fc:60:bd:0b:03:97:cf:a8:bf:e1:f0:68:e4:46:9a:fd:
4b:9e:90:42:3f:c9:96:5e:14:c2:e6:24:68:ec:03:ad:85:74:
f3:b1:20:7a:ce:1a:1a:aa:16:00:08:c6:5c:75:dd:2e:6c:d2:
02:ca:00:fa:1f:02:d9:1c:ac:f1:1f:a1:c9:81:52:9b:14:84:
7f:04:c6:5d:be:5d:f1:41:cd:7e:f8:0a:95:81:02:45:b6:5c:
02:f2:8e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLkGp0RuNf5IsHZi58ctvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODc0YTVmNTI3MzRlMjYwZTdiZmE0ZDQ1MTE0YWRkOTI3
N2UzNTMwHhcNMjUwNDE5MDEwMTE3WhcNMjUwNDIwMDEwMTE3WjAzMTEwLwYDVQQD
Eyg1NGY5NzRkZjk1MWQ3NGNlMTU5NzlkZDM3MjU3OTY1MWRkZDJkNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPre6hz0zc3JYBenu17O0SrK/AFN
Pzz5ivb5dzVSQH3ShOu915+Cjbek5BmqL6KyeuvJdik69SxkGPe6hA3kVLfDWnR3
KlaslTS2nRziNZraBsIUmEmixWrXFMfWmlMBao31S5UVciYLbMBWElAdYs0pGNuP
RJS2NNQSu/Z6Tqd1E8hna6GB06/1UCdsjwZQX3TXNhWDuAzSqnM1MK0F5atLdOEW
DWn/SkrBaANaIN70Obdu0m+HalElLBYafxpQZxG18w/QF5XnakCsGXpNzJqit3NZ
L9x47YLksKGbxBQAyVA8iDnktmIiUlo9fPzGQsxPzBYFwAKuCb0so1sOcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFT5dN+VHXTOFZed03JXllHd0tc8MB8GA1UdIwQY
MBaAFAyHSl9Sc04mDnv6TUURSt2Sd+NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEt
YTBlMzdmMjVhNTE1LzEvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEtYTBlMzdmMjVhNTE1
LzEvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazmIe9wN
/SGsBn+tvT9eA5ddw/FhMiHoUAJRGwApnELCkKdU2lZisX+zfph0Ml0OmxJ01xaf
wwZ79xDGt1GEtlSqMhiVc8biFrK1mu599auY1Dqaaez739+M+7VCHW9+qSfDFcGb
rnjBkbrtRhhrF8N23xrIGBvim7jwN8cRNsJExDK/eXdRE/aXS4oHbo9SzkC5ld78
/Y/fzKGNhiwA5IMFB4L8YL0LA5fPqL/h8GjkRpr9S56QQj/Jll4UwuYkaOwDrYV0
87Eges4aGqoWAAjGXHXdLmzSAsoA+h8C2Rys8R+hyYFSmxSEfwTGXb5d8UHNfvgK
lYECRbZcAvKOew==
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:41:28 2025 by rpki-client