
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: Nu1eLyTYH1CX2p6tYfQUJybWmK27eUvZwdgrr9RbG+s=
Subject key identifier: 49:DB:32:2D:ED:20:D9:CE:AD:C0:0B:E4:E6:C3:23:BF:A0:93:F0:83
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 01964BFDAC05FC9E48F191618AAA6805F61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 11AD
Signing time: Sat 19 Apr 2025 03:00:37 +0000
Manifest this update: Sat 19 Apr 2025 03:00:37 +0000
Manifest next update: Sun 20 Apr 2025 03:00:37 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: eallo+gtA3keNBIGvWF14BWrpR/5L8vya4D5KtOc7eA=)
2: AyldtAoWafPHTkmACDxst6jxsP8.roa (hash: 5JuPcS4QOkaO/Jt7b79o9DhsMUfsXTNZilUz8aQXzEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:ac:05:fc:9e:48:f1:91:61:8a:aa:68:05:f6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Apr 19 03:00:37 2025 GMT
Not After : Apr 20 03:00:37 2025 GMT
Subject: CN=49db322ded20d9ceadc00be4e6c323bfa093f083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:1a:e2:8e:06:9b:50:16:93:cf:05:95:ec:
94:ae:ba:4d:52:71:46:34:f5:d1:b5:f8:01:9c:50:
53:9e:a8:4f:2d:41:6c:74:89:2c:6e:cd:e6:75:61:
9e:bb:23:a6:25:b9:18:cb:b2:4c:64:69:4a:d8:4c:
20:2d:e3:80:96:08:6e:43:d6:e5:96:8c:69:2b:2b:
d9:7f:76:d1:c5:af:90:b3:06:0c:e9:a8:f5:77:19:
ee:0c:ec:db:78:7a:c4:c1:b0:57:41:b0:33:98:fe:
54:6e:f4:a1:0f:e7:eb:22:c5:e6:fe:6d:9a:0d:a6:
f6:cb:5e:ff:e7:d2:57:ed:c2:f8:a0:bf:c7:cd:81:
5a:58:ed:3b:33:18:eb:e6:b8:f6:fb:57:af:0e:92:
3e:bb:d3:a3:35:d0:80:f8:62:77:9a:2e:52:0f:42:
5d:55:d0:e5:33:ed:c7:b6:cc:f5:aa:41:44:20:7c:
31:cd:7e:30:dc:10:a2:2a:6b:5d:8c:e2:f4:d9:f8:
46:97:5c:de:28:8c:ac:61:22:9b:23:c6:65:5a:69:
0d:08:29:33:fc:ad:e7:c1:77:24:0c:3c:99:8c:e4:
f2:02:dc:33:49:20:9e:ee:5a:cb:b6:ed:af:15:80:
6a:d2:dc:f1:2f:60:29:b5:22:86:75:37:5a:6d:d0:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DB:32:2D:ED:20:D9:CE:AD:C0:0B:E4:E6:C3:23:BF:A0:93:F0:83
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a5:24:34:93:47:b0:55:12:46:8c:d6:7e:74:8a:19:f0:f7:
b5:6c:b3:eb:49:78:48:16:3b:f8:de:a7:55:cd:29:e0:4f:af:
86:5a:ed:4d:e3:ee:bd:a5:8b:ea:99:2f:e7:57:36:bb:42:b9:
90:27:24:4c:03:f0:00:19:5a:43:16:83:be:db:d0:cc:90:56:
d3:cf:a0:11:93:28:b4:be:0b:a5:3e:f2:07:e7:f6:b7:2e:64:
fb:3c:f5:d1:9b:d6:70:06:d9:a3:ec:1e:15:22:11:da:fe:79:
cd:6e:b9:af:d5:69:f3:06:73:5a:e7:c3:1b:ab:0b:ec:26:08:
52:40:eb:ef:1b:81:15:99:f8:95:aa:1c:54:ff:c1:33:43:b0:
7b:e0:08:85:77:5d:fa:6f:96:76:b6:79:f1:b6:a8:25:35:41:
c2:7e:5e:a1:ab:ae:0b:d2:30:c1:90:45:0b:6b:17:72:23:36:
6c:fa:2c:3a:80:e4:e2:72:36:4a:a1:c8:61:90:94:dd:b6:a0:
b9:36:68:59:80:0c:37:88:ff:90:01:f1:05:b9:2d:79:5e:75:
72:8b:61:9d:bf:4c:e8:2c:5e:f2:c3:c5:43:fa:aa:97:62:45:
4b:16:9d:9f:ad:2d:79:d0:74:74:a9:34:9b:b8:7f:35:3c:48:
8c:e7:f2:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/awF/J5I8ZFhiqpoBfYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzE2NTUwMjNiZDE0MTczMWQ1NmZiODQ1M2ZmMDUxNGY3
Mjg4NjUwHhcNMjUwNDE5MDMwMDM3WhcNMjUwNDIwMDMwMDM3WjAzMTEwLwYDVQQD
Eyg0OWRiMzIyZGVkMjBkOWNlYWRjMDBiZTRlNmMzMjNiZmEwOTNmMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCka4o4Gm1AWk88FleyUrrpNUnFG
NPXRtfgBnFBTnqhPLUFsdIksbs3mdWGeuyOmJbkYy7JMZGlK2EwgLeOAlghuQ9bl
loxpKyvZf3bRxa+QswYM6aj1dxnuDOzbeHrEwbBXQbAzmP5UbvShD+frIsXm/m2a
Dab2y17/59JX7cL4oL/HzYFaWO07Mxjr5rj2+1evDpI+u9OjNdCA+GJ3mi5SD0Jd
VdDlM+3Htsz1qkFEIHwxzX4w3BCiKmtdjOL02fhGl1zeKIysYSKbI8ZlWmkNCCkz
/K3nwXckDDyZjOTyAtwzSSCe7lrLtu2vFYBq0tzxL2AptSKGdTdabdBNTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnbMi3tINnOrcAL5ObDI7+gk/CDMB8GA1UdIwQY
MBaAFNAxZVAjvRQXMdVvuEU/8FFPcohlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5Nzkt
ZDhiZDJmNTZiYzhjLzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5NzktZDhiZDJmNTZiYzhj
LzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqUkNJNH
sFUSRozWfnSKGfD3tWyz60l4SBY7+N6nVc0p4E+vhlrtTePuvaWL6pkv51c2u0K5
kCckTAPwABlaQxaDvtvQzJBW08+gEZMotL4LpT7yB+f2ty5k+zz10ZvWcAbZo+we
FSIR2v55zW65r9Vp8wZzWufDG6sL7CYIUkDr7xuBFZn4laocVP/BM0Owe+AIhXdd
+m+WdrZ58baoJTVBwn5eoauuC9IwwZBFC2sXciM2bPosOoDk4nI2SqHIYZCU3bag
uTZoWYAMN4j/kAHxBbkteV51cothnb9M6Cxe8sPFQ/qql2JFSxadn60tedB0dKk0
m7h/NTxIjOfyeg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:09:53 2025 by rpki-client