Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: MIeI+T/Zpl4Q87dhd210CfRJ5kfaTT8Xsb7DuwJb+JM=
Subject key identifier: DA:1D:40:CC:7D:E5:D4:7D:F3:34:D3:4D:42:F4:97:CE:1F:6F:C9:4D
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 019648FC6A923B6C88AC88CD20E0EDE50E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 14F4
Signing time: Fri 18 Apr 2025 13:00:23 +0000
Manifest this update: Fri 18 Apr 2025 13:00:23 +0000
Manifest next update: Sat 19 Apr 2025 13:00:23 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: yfjr+jD6IhAfhQ9HP3SnIty/laBnnmmWRLANkvdpQCA=)
2: v4JI5sgw_p3rivCunMet_POOF2w.roa (hash: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:6a:92:3b:6c:88:ac:88:cd:20:e0:ed:e5:0e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Apr 18 13:00:23 2025 GMT
Not After : Apr 19 13:00:23 2025 GMT
Subject: CN=da1d40cc7de5d47df334d34d42f497ce1f6fc94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fd:dd:80:36:91:34:c9:f0:d5:80:0c:b5:8a:
a8:73:05:35:68:27:10:c9:9b:7a:e8:bc:31:1d:67:
4f:4e:00:b4:58:78:a9:fa:3a:b8:72:f1:f8:21:d7:
7d:e4:4b:b0:88:83:0a:fc:83:01:32:0b:59:45:2c:
93:d4:e7:31:8d:0a:22:4c:a3:a4:af:70:b1:a5:9c:
2c:50:d8:c9:c7:c6:ed:92:64:d6:53:e1:44:33:2f:
bc:53:84:72:12:42:38:24:43:a5:45:d1:d7:b8:8d:
80:ac:9b:1d:df:a0:6f:e0:41:ad:98:15:50:87:a3:
e6:c7:46:fa:9f:3a:d1:84:27:37:d0:db:0a:f1:63:
7d:d0:b0:a3:94:10:84:0a:5b:5f:ff:94:3e:84:5e:
04:8a:92:3e:fc:1f:fe:47:2a:80:b7:9b:a5:fe:15:
5d:71:cf:4d:4d:d2:a7:6a:9e:58:50:60:f2:b9:8d:
e9:4f:55:48:8d:54:7b:11:dd:de:27:a8:88:c2:89:
11:51:8b:6e:43:c4:e5:72:43:51:e7:ed:9e:9c:60:
91:81:61:b3:33:f9:7c:b9:95:13:b8:b4:7b:54:ef:
d4:07:63:31:28:71:84:08:13:0a:0e:3e:97:59:b2:
2c:e9:42:db:aa:3f:3f:26:1d:2f:df:7a:e9:06:01:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1D:40:CC:7D:E5:D4:7D:F3:34:D3:4D:42:F4:97:CE:1F:6F:C9:4D
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:30:75:0e:43:6b:d4:78:5d:cf:5c:39:ff:bf:dc:61:63:e5:
2a:16:d8:86:4d:39:67:e7:97:cb:e9:2a:f5:5f:6f:35:12:c9:
6f:8f:55:92:d4:1b:6b:18:b7:59:f6:7a:8c:36:32:56:c6:4c:
dc:bb:8a:f0:79:f7:1d:75:9c:e9:d1:af:da:22:67:f3:95:0a:
d9:c5:b0:f4:97:1e:bd:24:39:64:72:9b:92:32:d3:ea:e3:d1:
30:13:59:fc:af:df:0c:3b:9d:55:87:47:85:2b:b8:9e:22:85:
45:7e:8f:ab:a0:43:4a:d5:20:0d:fe:9f:d8:05:bc:d3:35:e6:
dd:cc:db:e3:92:7b:ba:15:ca:ce:37:b6:29:66:4c:6f:45:62:
f4:df:f7:92:41:1c:9d:7a:f0:5a:4e:23:24:e7:9b:05:73:29:
bd:0f:01:c4:6e:63:38:03:b8:f8:c2:8b:5c:e2:5c:8f:ff:f8:
d5:99:fa:41:af:50:b1:6f:72:aa:b8:a2:b4:03:ac:8b:44:ad:
3c:b3:91:fe:89:ee:f6:f4:5e:aa:20:52:66:ed:0b:f5:c1:7a:
91:bb:b3:eb:e8:20:15:e4:58:d4:f6:b8:8e:dc:a9:aa:ed:38:
90:1c:02:3e:60:d1:b3:b7:33:f8:9c:22:0a:1b:4f:ec:2f:c7:
0e:55:13:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZI/GqSO2yIrIjNIODt5Q43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMWQ1YjlkODhiNTc5ZDBkZGY3YzIxY2IzZDM4N2Q2MWVh
NTE2YzEwHhcNMjUwNDE4MTMwMDIzWhcNMjUwNDE5MTMwMDIzWjAzMTEwLwYDVQQD
EyhkYTFkNDBjYzdkZTVkNDdkZjMzNGQzNGQ0MmY0OTdjZTFmNmZjOTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/3dgDaRNMnw1YAMtYqocwU1aCcQ
yZt66LwxHWdPTgC0WHip+jq4cvH4Idd95EuwiIMK/IMBMgtZRSyT1OcxjQoiTKOk
r3CxpZwsUNjJx8btkmTWU+FEMy+8U4RyEkI4JEOlRdHXuI2ArJsd36Bv4EGtmBVQ
h6Pmx0b6nzrRhCc30NsK8WN90LCjlBCECltf/5Q+hF4EipI+/B/+RyqAt5ul/hVd
cc9NTdKnap5YUGDyuY3pT1VIjVR7Ed3eJ6iIwokRUYtuQ8TlckNR5+2enGCRgWGz
M/l8uZUTuLR7VO/UB2MxKHGECBMKDj6XWbIs6ULbqj8/Jh0v33rpBgFECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNodQMx95dR98zTTTUL0l84fb8lNMB8GA1UdIwQY
MBaAFA8dW52ItXnQ3ffCHLPTh9YepRbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MDk5NzUtNGU4Ni00NDc4LWI4MWUt
NzJkZjZmZWRkNzQ4LzEvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85MDk5NzUtNGU4Ni00NDc4LWI4MWUtNzJkZjZmZWRkNzQ4
LzEvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjB1DkNr
1Hhdz1w5/7/cYWPlKhbYhk05Z+eXy+kq9V9vNRLJb49VktQbaxi3WfZ6jDYyVsZM
3LuK8Hn3HXWc6dGv2iJn85UK2cWw9JcevSQ5ZHKbkjLT6uPRMBNZ/K/fDDudVYdH
hSu4niKFRX6Pq6BDStUgDf6f2AW80zXm3czb45J7uhXKzje2KWZMb0Vi9N/3kkEc
nXrwWk4jJOebBXMpvQ8BxG5jOAO4+MKLXOJcj//41Zn6Qa9QsW9yqriitAOsi0St
PLOR/onu9vReqiBSZu0L9cF6kbuz6+ggFeRY1Pa4jtypqu04kBwCPmDRs7cz+Jwi
ChtP7C/HDlUT1A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:44 2025 by rpki-client