Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: E98Crl94o7RgmQ5h1VfmqXbwMqhGs17JyJg0FktqCgs=
Subject key identifier: 45:12:D8:E5:35:30:D1:4B:19:27:9C:76:55:E4:B8:A4:87:A4:A4:38
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 01958F61326F2EB5827E80CF2A524A672F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 1499
Signing time: Thu 13 Mar 2025 12:01:06 +0000
Manifest this update: Thu 13 Mar 2025 12:01:06 +0000
Manifest next update: Fri 14 Mar 2025 12:01:06 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: NZxxZAKX5cZ5so2j6k7+CjVvtHM5R1dQhNWZot6pmLU=)
2: y_bNAAFyln0l2OAbHxvZF5RByIA.roa (hash: V4mHpVmDU1it/2lH0Vz4ctCIXcFfTQBDa792VzELUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:32:6f:2e:b5:82:7e:80:cf:2a:52:4a:67:2f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Mar 13 12:01:06 2025 GMT
Not After : Mar 14 12:01:06 2025 GMT
Subject: CN=4512d8e53530d14b19279c7655e4b8a487a4a438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:5a:59:44:1b:74:b5:fd:bb:a3:04:92:bc:
c9:0f:42:4c:a8:90:19:58:e3:a5:b6:10:6b:58:cb:
73:8b:d9:6b:27:25:aa:eb:f7:c4:a4:a6:02:d1:c8:
e0:51:c3:99:9f:99:b3:6a:7e:5a:19:ac:3f:17:ab:
f7:22:04:eb:b5:95:fc:a3:52:c1:ff:4a:7c:1f:86:
b4:74:66:84:df:97:95:0a:1b:2e:a1:ce:dc:40:ec:
1b:f9:7d:4a:82:32:82:c0:ae:74:ed:80:71:19:c9:
4a:12:0c:5f:7d:f2:ac:5b:a0:ae:74:1f:4e:30:5b:
76:41:b8:4a:00:ca:a7:ca:83:03:11:bd:b9:6a:37:
8e:af:ef:23:8e:dc:f2:89:0b:b1:0a:6a:3b:f2:8f:
4e:ef:57:17:9b:ec:3e:45:66:d6:dd:51:d7:8e:fb:
0c:31:39:ab:f0:65:85:b4:7b:4a:9b:64:f4:67:4b:
b6:6e:3a:d4:9a:7d:97:88:e7:f8:ab:1d:6c:b0:fa:
c2:d3:87:53:31:ff:a7:b8:82:a1:84:67:d6:c0:1b:
5b:2c:6a:4f:46:bf:f5:8a:a8:ac:a0:05:47:e3:b1:
ea:ed:ea:94:83:89:a7:ca:09:00:0d:c0:7c:9c:2b:
ee:38:8d:e0:59:7a:9f:a6:98:2d:71:25:be:be:dd:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:12:D8:E5:35:30:D1:4B:19:27:9C:76:55:E4:B8:A4:87:A4:A4:38
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d5:fa:13:f0:86:54:a2:a0:9d:03:55:5c:f4:cf:92:a5:1a:
b1:70:82:07:41:23:7a:89:f6:f9:8b:5c:cc:4a:f0:92:29:5f:
28:7c:52:6c:fc:20:a0:17:2a:e4:da:02:44:ce:fb:b4:53:64:
c4:2a:d9:39:e5:c0:6c:09:c0:b3:31:2d:e2:bd:4f:70:fe:f9:
90:68:69:36:61:ad:65:12:7b:a3:e6:32:d8:fa:22:b5:cc:6a:
a3:ac:d0:ca:0b:d1:b3:af:21:a9:8f:fc:74:5f:f8:4b:db:7c:
58:01:bc:2a:18:b4:33:9c:5a:c6:25:84:21:69:6e:9e:3a:fc:
5a:bb:66:ed:53:8e:7b:30:37:86:5d:86:b8:c6:ba:f5:bb:a6:
36:8a:fb:17:f4:80:5d:6a:62:7e:30:99:98:3e:01:8d:60:74:
6f:06:c6:82:ed:f7:a0:8e:5d:63:d2:fd:1f:d7:29:9d:d1:5f:
f9:d0:d2:2b:54:94:17:0e:ab:ba:75:e3:dd:95:97:f6:61:ee:
a1:c5:32:35:78:29:4e:b2:ff:4a:5d:01:b0:78:13:25:da:1c:
b4:b3:07:b4:27:34:ee:56:26:c5:39:9a:ab:26:6c:bd:a1:56:
b8:97:cc:e2:38:48:56:cb:a7:f3:75:f2:25:c5:12:96:c4:85:
ed:c2:1b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPYTJvLrWCfoDPKlJKZy81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYzgxMjg0OTFkYjEzMmNjZmNkODJhZGU3MDBkZWIzMDZi
MjE2MWEwHhcNMjUwMzEzMTIwMTA2WhcNMjUwMzE0MTIwMTA2WjAzMTEwLwYDVQQD
Eyg0NTEyZDhlNTM1MzBkMTRiMTkyNzljNzY1NWU0YjhhNDg3YTRhNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ndaWUQbdLX9u6MEkrzJD0JMqJAZ
WOOlthBrWMtzi9lrJyWq6/fEpKYC0cjgUcOZn5mzan5aGaw/F6v3IgTrtZX8o1LB
/0p8H4a0dGaE35eVChsuoc7cQOwb+X1KgjKCwK507YBxGclKEgxfffKsW6CudB9O
MFt2QbhKAMqnyoMDEb25ajeOr+8jjtzyiQuxCmo78o9O71cXm+w+RWbW3VHXjvsM
MTmr8GWFtHtKm2T0Z0u2bjrUmn2XiOf4qx1ssPrC04dTMf+nuIKhhGfWwBtbLGpP
Rr/1iqisoAVH47Hq7eqUg4mnygkADcB8nCvuOI3gWXqfppgtcSW+vt0NaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUS2OU1MNFLGSecdlXkuKSHpKQ4MB8GA1UdIwQY
MBaAFAzIEoSR2xMsz82CrecA3rMGshYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAt
ZDU5MTA4YjU3MjE0LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAtZDU5MTA4YjU3MjE0
LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNX6E/CG
VKKgnQNVXPTPkqUasXCCB0Ejeon2+YtczErwkilfKHxSbPwgoBcq5NoCRM77tFNk
xCrZOeXAbAnAszEt4r1PcP75kGhpNmGtZRJ7o+Yy2Poitcxqo6zQygvRs68hqY/8
dF/4S9t8WAG8Khi0M5xaxiWEIWlunjr8Wrtm7VOOezA3hl2GuMa69bumNor7F/SA
XWpifjCZmD4BjWB0bwbGgu33oI5dY9L9H9cpndFf+dDSK1SUFw6runXj3ZWX9mHu
ocUyNXgpTrL/Sl0BsHgTJdoctLMHtCc07lYmxTmaqyZsvaFWuJfM4jhIVsun83Xy
JcUSlsSF7cIbhA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:31 2025 by rpki-client