Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier: IKca2X9p6SYWGKk2wN1z0NBktRiF5ECX308qnfy4Yok=
Subject key identifier: DA:80:B2:8A:51:CE:9B:67:38:2A:23:49:89:BF:8F:51:10:46:53:67
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial: 019652DB5F9C57197BAA4EA2A8B0AC1AE346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number: 10F9
Signing time: Sun 20 Apr 2025 11:00:30 +0000
Manifest this update: Sun 20 Apr 2025 11:00:30 +0000
Manifest next update: Mon 21 Apr 2025 11:00:30 +0000
Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: oNCdhDTC/cy5q9aEIR/X2crMxQF45Ua18zcR4EUbDHg=)
2: n_c4PLsmjJy0yCliC8En4sc8wCw.roa (hash: cMBCvEWECFAcwZYZaTXi+y0wWCPFximX6N1nRpp3vNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:5f:9c:57:19:7b:aa:4e:a2:a8:b0:ac:1a:e3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Validity
Not Before: Apr 20 11:00:30 2025 GMT
Not After : Apr 21 11:00:30 2025 GMT
Subject: CN=da80b28a51ce9b67382a234989bf8f5110465367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:bf:e2:dd:b3:28:af:48:9a:14:0d:90:92:
5f:1f:12:e9:f6:4e:e3:cd:17:7a:d7:0d:fa:16:e7:
dd:49:00:50:cc:f7:46:7a:56:44:6e:50:9e:0e:43:
23:2d:f9:e2:41:28:07:c2:b9:95:a4:b5:af:39:40:
09:9b:13:ea:60:ef:9a:4e:8c:fc:5f:2d:7f:1c:22:
8b:8d:26:95:74:dc:31:2a:16:9f:01:9a:f4:d0:2d:
59:59:a2:8f:0f:7a:57:07:47:74:48:43:61:1b:9f:
e2:f3:ee:04:67:e8:6c:aa:42:8a:62:0c:d4:17:87:
18:6d:c3:cc:ba:a0:e3:75:b5:42:0f:3c:90:a1:c3:
35:50:de:7f:ad:d5:b4:fe:85:ba:c1:54:c9:b8:14:
b5:d6:7f:72:d3:dd:b5:3f:0a:18:8f:28:8e:cb:19:
fa:a1:fc:78:cf:fe:19:bb:ec:b5:28:be:0d:cf:a7:
5d:db:8d:33:23:ff:83:6c:83:c2:b8:d4:cb:a3:47:
fd:18:cc:d2:f3:d1:94:28:43:98:bc:48:ab:37:c3:
ea:11:a2:da:f1:73:d2:24:db:ae:0e:73:eb:a0:d4:
52:db:3e:d3:51:9f:4a:00:6e:50:aa:5f:09:d5:24:
1c:20:57:c3:4b:48:0c:6a:1c:e6:b4:26:b0:30:1b:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:80:B2:8A:51:CE:9B:67:38:2A:23:49:89:BF:8F:51:10:46:53:67
X509v3 Authority Key Identifier:
keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:20:96:25:5a:91:89:62:51:0c:d7:46:1a:3a:d8:7b:10:15:
ee:b3:d7:14:cb:8c:19:13:e4:4a:8f:1c:52:53:3a:cf:9e:63:
30:80:9d:df:c0:c9:e7:e5:89:21:1f:2a:74:8c:a6:34:0a:10:
87:12:bf:f0:8e:17:fd:8d:bb:77:8e:0e:ad:ce:4d:9e:bd:2f:
01:b2:04:95:a1:5c:58:5e:66:34:2f:6b:97:85:28:ad:32:e3:
11:bb:47:38:e2:86:0f:7a:b1:3a:f4:91:2a:f2:86:96:45:75:
6b:ce:a8:89:e0:cf:ba:77:09:b9:61:b7:5f:5e:c2:8d:2d:68:
66:92:af:89:9d:db:e8:04:a3:cd:52:9b:05:ef:48:05:8c:48:
eb:68:ce:be:2c:da:56:64:25:58:a0:1b:fd:69:a1:de:70:c0:
8e:26:52:9b:fa:31:6e:75:19:ba:99:9a:6c:2c:01:1b:51:cc:
ba:79:81:a3:4c:2d:67:4d:fb:c7:97:53:7a:22:dd:75:59:74:
da:34:c2:75:36:cd:f2:2a:11:83:58:bb:de:83:4f:33:dd:78:
d7:2b:c8:92:d0:4f:dd:85:eb:c1:c5:09:8e:50:be:08:60:8d:
bd:fe:05:2a:1f:10:68:d6:d2:34:a0:38:59:6d:55:00:e9:ef:
d0:da:f3:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZS21+cVxl7qk6iqLCsGuNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTRmOWUwYTdhOWVhZWVhY2JjNWIxMDMxMDIzNWI3ZmQw
ZWVkMDMwHhcNMjUwNDIwMTEwMDMwWhcNMjUwNDIxMTEwMDMwWjAzMTEwLwYDVQQD
EyhkYTgwYjI4YTUxY2U5YjY3MzgyYTIzNDk4OWJmOGY1MTEwNDY1MzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2+/4t2zKK9ImhQNkJJfHxLp9k7j
zRd61w36FufdSQBQzPdGelZEblCeDkMjLfniQSgHwrmVpLWvOUAJmxPqYO+aToz8
Xy1/HCKLjSaVdNwxKhafAZr00C1ZWaKPD3pXB0d0SENhG5/i8+4EZ+hsqkKKYgzU
F4cYbcPMuqDjdbVCDzyQocM1UN5/rdW0/oW6wVTJuBS11n9y0921PwoYjyiOyxn6
ofx4z/4Zu+y1KL4Nz6dd240zI/+DbIPCuNTLo0f9GMzS89GUKEOYvEirN8PqEaLa
8XPSJNuuDnProNRS2z7TUZ9KAG5Qql8J1SQcIFfDS0gMahzmtCawMBv96wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqAsopRzptnOCojSYm/j1EQRlNnMB8GA1UdIwQY
MBaAFA9U+eCnqerurLxbEDECNbf9Du0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUt
ZWYyNmMzNDRlZjAxLzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUtZWYyNmMzNDRlZjAx
LzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSCWJVqR
iWJRDNdGGjrYexAV7rPXFMuMGRPkSo8cUlM6z55jMICd38DJ5+WJIR8qdIymNAoQ
hxK/8I4X/Y27d44Orc5Nnr0vAbIElaFcWF5mNC9rl4UorTLjEbtHOOKGD3qxOvSR
KvKGlkV1a86oieDPuncJuWG3X17CjS1oZpKviZ3b6ASjzVKbBe9IBYxI62jOviza
VmQlWKAb/Wmh3nDAjiZSm/oxbnUZupmabCwBG1HMunmBo0wtZ037x5dTeiLddVl0
2jTCdTbN8ioRg1i73oNPM9141yvIktBP3YXrwcUJjlC+CGCNvf4FKh8QaNbSNKA4
WW1VAOnv0NrziA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:41 2025 by rpki-client