Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
File: DjGYqYJ97q-rHSe1U3lPRLkabAY.mft (raw, json)
Hash identifier: x54ppCF2DryY+YnXVGaDdxFntBpwG8WTejMXPkF2CkY=
Subject key identifier: 21:D5:53:89:9D:4A:0C:96:6B:A9:86:9F:EE:0C:70:05:B7:05:98:ED
Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Certificate issuer: /CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Certificate serial: 019653806A8C69E565657F551F6FEE0F5C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 14:00:46 +0000
Manifest this update: Sun 20 Apr 2025 14:00:46 +0000
Manifest next update: Mon 21 Apr 2025 14:00:46 +0000
Files and hashes: 1: DjGYqYJ97q-rHSe1U3lPRLkabAY.crl (hash: QeGJNu0zPebLVdVt4ZB1ADhCGkc8dy5/jUr3VauPDY4=)
2: Q2G86FF3yJmX8igU3QYVD4ZCivo.roa (hash: 6/LUNvPV45MHYpMpmogqr8zL/TAfgvM+oAX3YS1oNRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:6a:8c:69:e5:65:65:7f:55:1f:6f:ee:0f:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Validity
Not Before: Apr 20 14:00:46 2025 GMT
Not After : Apr 21 14:00:46 2025 GMT
Subject: CN=21d553899d4a0c966ba9869fee0c7005b70598ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:b6:45:56:4c:27:65:0b:1e:33:af:13:35:
75:fe:d4:a4:c0:d2:92:8a:b0:e1:79:09:f0:75:0b:
39:f9:a4:9e:ea:1f:55:6a:7b:cc:a1:2c:8e:06:21:
7a:ec:c6:d6:33:ff:b8:51:71:d6:b7:83:7a:24:3a:
f1:1b:e5:7b:99:79:ba:3e:bc:48:0a:c5:93:1f:ee:
fe:3c:ed:f9:0d:ad:e7:44:69:a1:12:6d:6d:d5:e6:
c3:f8:ac:8d:65:fc:46:67:af:f4:8b:a5:f4:3f:e4:
0e:b7:ef:84:06:0a:4a:32:ac:3f:5a:c6:92:7a:f7:
1c:31:18:6b:ac:f3:eb:c0:77:e5:e8:35:10:ca:1d:
6b:bd:0d:d8:fe:06:bb:39:97:d2:5e:a9:32:b1:c5:
3a:db:8b:45:fa:bf:41:eb:5e:01:bc:81:06:f0:97:
bb:df:2a:8c:eb:94:b0:3c:99:85:ed:7b:37:64:bd:
9b:b8:33:b6:48:6b:71:fe:16:3a:7e:e1:9c:bb:45:
4c:2b:f4:ab:10:4f:e4:5c:c0:cf:31:c1:8f:fe:32:
b2:cc:08:63:b2:b9:f9:a2:d6:3d:a5:4f:b1:b3:ff:
fb:5a:4f:5e:e8:0a:88:75:8a:9e:c5:07:22:26:bd:
1c:84:cf:a5:bf:3f:5a:9f:82:b5:a6:7a:d6:c8:a7:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D5:53:89:9D:4A:0C:96:6B:A9:86:9F:EE:0C:70:05:B7:05:98:ED
X509v3 Authority Key Identifier:
keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d6:48:6b:60:89:e8:89:eb:5b:82:e5:85:90:0c:fc:d7:85:
ed:16:4c:1f:3a:63:e1:35:84:11:db:b8:28:63:6f:02:db:71:
02:ea:97:53:9e:9e:c9:df:f9:aa:e2:b5:6f:9c:95:b6:36:48:
08:72:85:b5:a4:36:8c:3c:eb:b3:6e:26:b4:eb:a5:ba:5c:17:
eb:a3:50:ab:22:31:58:62:a4:78:b0:48:6c:a2:ea:f1:eb:88:
2b:5b:07:8d:57:96:8d:8a:a2:7a:ec:92:42:14:76:4f:cb:67:
41:ba:60:2c:9e:f4:9d:12:5b:72:3d:6a:8c:80:82:68:47:43:
c1:d7:92:03:a0:02:f8:c9:d8:bc:00:98:f8:f9:55:a9:12:fa:
a7:a2:2a:28:b0:3a:0c:93:9a:4e:2d:26:a5:a7:13:47:03:05:
0e:ef:bd:0e:3a:dc:91:58:19:18:a7:4f:9b:b8:b7:85:3f:a1:
13:43:3a:23:8b:cd:59:c1:2d:49:92:c4:90:e9:40:0c:62:5f:
e2:98:5b:19:ff:fd:d4:0f:b1:a8:24:35:53:cd:bc:7a:2f:4c:
ce:c7:d7:40:66:bb:88:58:bf:50:ec:db:5f:af:64:88:ca:d4:
1b:ef:5b:bd:0f:fd:22:2a:09:3d:74:cc:ca:d3:05:1c:9f:b9:
06:2d:dc:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTgGqMaeVlZX9VH2/uD1wiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzE5OGE5ODI3ZGVlYWZhYjFkMjdiNTUzNzk0ZjQ0Yjkx
YTZjMDYwHhcNMjUwNDIwMTQwMDQ2WhcNMjUwNDIxMTQwMDQ2WjAzMTEwLwYDVQQD
EygyMWQ1NTM4OTlkNGEwYzk2NmJhOTg2OWZlZTBjNzAwNWI3MDU5OGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh+2RVZMJ2ULHjOvEzV1/tSkwNKS
irDheQnwdQs5+aSe6h9VanvMoSyOBiF67MbWM/+4UXHWt4N6JDrxG+V7mXm6PrxI
CsWTH+7+PO35Da3nRGmhEm1t1ebD+KyNZfxGZ6/0i6X0P+QOt++EBgpKMqw/WsaS
evccMRhrrPPrwHfl6DUQyh1rvQ3Y/ga7OZfSXqkyscU624tF+r9B614BvIEG8Je7
3yqM65SwPJmF7Xs3ZL2buDO2SGtx/hY6fuGcu0VMK/SrEE/kXMDPMcGP/jKyzAhj
srn5otY9pU+xs//7Wk9e6AqIdYqexQciJr0chM+lvz9an4K1pnrWyKcZAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHVU4mdSgyWa6mGn+4McAW3BZjtMB8GA1UdIwQY
MBaAFA4xmKmCfe6vqx0ntVN5T0S5GmwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yZjdiOTEtMTdiZi00YzJhLWE4MWUt
NDE1Mjc5NjFkNDhlLzEvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8yZjdiOTEtMTdiZi00YzJhLWE4MWUtNDE1Mjc5NjFkNDhl
LzEvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwNZIa2CJ
6InrW4LlhZAM/NeF7RZMHzpj4TWEEdu4KGNvAttxAuqXU56eyd/5quK1b5yVtjZI
CHKFtaQ2jDzrs24mtOululwX66NQqyIxWGKkeLBIbKLq8euIK1sHjVeWjYqieuyS
QhR2T8tnQbpgLJ70nRJbcj1qjICCaEdDwdeSA6AC+MnYvACY+PlVqRL6p6IqKLA6
DJOaTi0mpacTRwMFDu+9DjrckVgZGKdPm7i3hT+hE0M6I4vNWcEtSZLEkOlADGJf
4phbGf/91A+xqCQ1U828ei9MzsfXQGa7iFi/UOzbX69kiMrUG+9bvQ/9IioJPXTM
ytMFHJ+5Bi3cHQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:32 2025 by rpki-client