Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: 9PPTCbdenRBzVMdCt4DrAP1OORGxs7mzJOpYfhuHi9c=
Subject key identifier: D7:90:8C:9E:52:02:85:25:D6:31:41:29:02:BB:62:23:0F:CD:B3:60
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 0196312BC35E9BB1EB42A3BD1A8B047E88BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0C47
Signing time: Sun 13 Apr 2025 22:01:13 +0000
Manifest this update: Sun 13 Apr 2025 22:01:13 +0000
Manifest next update: Mon 14 Apr 2025 22:01:13 +0000
Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: pEgSZ+B3IYVBEHz/qxbCJicFV4fSdXf0EgTdEW5D2So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:31:2b:c3:5e:9b:b1:eb:42:a3:bd:1a:8b:04:7e:88:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Apr 13 22:01:13 2025 GMT
Not After : Apr 14 22:01:13 2025 GMT
Subject: CN=d7908c9e52028525d631412902bb62230fcdb360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:2a:03:68:a1:20:1e:2f:be:f9:52:57:b2:
e2:08:3c:70:d8:6c:98:86:8e:50:54:89:df:ff:95:
58:26:81:e0:32:8f:84:96:04:0e:5d:ed:eb:f0:0e:
c6:f3:e8:86:8e:80:b8:89:12:f8:8e:e7:fe:52:af:
07:46:f1:32:2e:e4:36:0b:be:5a:24:b1:bd:3c:5f:
3a:3d:6f:fe:e1:62:c3:6a:a1:19:f5:36:2c:d5:1f:
59:d1:1a:e3:f6:62:81:8d:67:05:8c:39:72:62:72:
67:3d:6b:b6:6a:6f:fb:97:d9:de:a9:0d:71:e9:27:
28:b6:62:95:84:d5:78:31:0c:00:95:07:6c:d2:41:
39:1e:f1:bf:c3:dc:51:5f:6c:51:20:d4:bf:26:13:
1a:52:b5:65:ec:c4:be:6d:b2:3e:67:03:67:c4:46:
6f:f7:9a:7e:56:f1:1d:66:d6:d5:51:6f:ab:25:6e:
19:be:b9:29:ab:6c:d1:29:fc:a0:df:16:88:c8:42:
2b:5a:7b:55:43:68:16:9f:03:80:5a:fc:6d:49:10:
8d:9a:78:59:f3:05:92:4a:fe:09:dd:39:9a:07:8c:
30:12:4e:8a:b6:3e:f4:e2:a8:7b:c4:74:74:57:1f:
cc:25:64:29:2a:58:07:2b:b2:0a:5a:81:dc:0d:e5:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:90:8C:9E:52:02:85:25:D6:31:41:29:02:BB:62:23:0F:CD:B3:60
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:50:8e:72:81:ef:39:bc:bd:21:55:34:e1:82:f5:0f:f0:42:
08:ff:f5:51:f6:90:af:73:45:03:28:99:66:12:59:6e:42:f4:
a9:64:cd:8e:44:2f:85:84:c5:36:80:55:dd:99:65:50:37:e8:
1b:96:0e:f6:2b:4f:11:83:cf:ca:11:d9:eb:59:67:cb:e9:04:
c6:21:9f:b9:14:0d:ce:71:82:cd:5c:28:70:60:9d:bf:57:90:
48:4b:87:af:11:7b:69:73:1a:0d:ce:bf:91:41:0a:8b:0a:57:
eb:c0:7f:6b:ac:a7:98:5a:f1:2f:9a:f0:ba:66:86:f4:c7:a4:
19:88:ca:c1:1b:f0:c1:0a:ef:8f:9a:7b:f7:99:f6:6e:6e:2d:
25:a2:13:0a:fa:e5:07:cd:4c:c0:1a:14:cb:95:d6:db:17:68:
6c:99:7d:7b:db:95:0a:db:a2:9e:f7:3d:51:c6:4b:da:79:c3:
61:43:a9:c3:b6:f5:ee:74:3c:ea:f1:58:d7:16:3b:be:ef:c6:
a4:c3:0c:10:31:ce:8b:74:65:4c:86:09:c4:af:bc:82:60:8b:
2b:63:5c:a9:3e:1a:11:c1:90:09:33:c0:dc:7e:f6:c2:a9:a9:
35:62:ba:6a:ec:74:2b:8c:59:96:0e:e6:80:dc:6e:98:22:0d:
a0:1c:68:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYxK8Nem7HrQqO9GosEfoi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YWEzM2U3ZTFjMjM5NGM2NjNiZTg1ZDczYjllZTM0Yjc2
OTQ5NWYwHhcNMjUwNDEzMjIwMTEzWhcNMjUwNDE0MjIwMTEzWjAzMTEwLwYDVQQD
EyhkNzkwOGM5ZTUyMDI4NTI1ZDYzMTQxMjkwMmJiNjIyMzBmY2RiMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWEqA2ihIB4vvvlSV7LiCDxw2GyY
ho5QVInf/5VYJoHgMo+ElgQOXe3r8A7G8+iGjoC4iRL4juf+Uq8HRvEyLuQ2C75a
JLG9PF86PW/+4WLDaqEZ9TYs1R9Z0Rrj9mKBjWcFjDlyYnJnPWu2am/7l9neqQ1x
6ScotmKVhNV4MQwAlQds0kE5HvG/w9xRX2xRINS/JhMaUrVl7MS+bbI+ZwNnxEZv
95p+VvEdZtbVUW+rJW4Zvrkpq2zRKfyg3xaIyEIrWntVQ2gWnwOAWvxtSRCNmnhZ
8wWSSv4J3TmaB4wwEk6Ktj704qh7xHR0Vx/MJWQpKlgHK7IKWoHcDeXhAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeQjJ5SAoUl1jFBKQK7YiMPzbNgMB8GA1UdIwQY
MBaAFHaqM+fhwjlMZjvoXXO57jS3aUlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYmM5ZTYtNDE5OC00MDY3LTk1OTct
NzRkNGMyYzViNjk0LzEvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wYmM5ZTYtNDE5OC00MDY3LTk1OTctNzRkNGMyYzViNjk0
LzEvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVCOcoHv
Oby9IVU04YL1D/BCCP/1UfaQr3NFAyiZZhJZbkL0qWTNjkQvhYTFNoBV3ZllUDfo
G5YO9itPEYPPyhHZ61lny+kExiGfuRQNznGCzVwocGCdv1eQSEuHrxF7aXMaDc6/
kUEKiwpX68B/a6ynmFrxL5rwumaG9MekGYjKwRvwwQrvj5p795n2bm4tJaITCvrl
B81MwBoUy5XW2xdobJl9e9uVCtuinvc9UcZL2nnDYUOpw7b17nQ86vFY1xY7vu/G
pMMMEDHOi3RlTIYJxK+8gmCLK2NcqT4aEcGQCTPA3H72wqmpNWK6aux0K4xZlg7m
gNxumCINoBxoLQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:08:08 2025 by rpki-client