Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
File: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json)
Hash identifier: +YcEfGYaw+AA/HuVyS1+4NabqyN3dBUdvxrLkoG/gYk=
Subject key identifier: 99:F0:A5:C0:70:D3:26:D9:0D:E3:54:EC:99:50:F7:60:35:8B:AE:0E
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 019653EE972DAE8E3641055327425A43EB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
Manifest number: 0AC4
Signing time: Sun 20 Apr 2025 16:01:07 +0000
Manifest this update: Sun 20 Apr 2025 16:01:07 +0000
Manifest next update: Mon 21 Apr 2025 16:01:07 +0000
Files and hashes: 1: 3P59Feb1jpoB_hwUGftROdmja6Q.roa (hash: vgAncWwhtK3WJUrN8441tfi4l7WNzadgnCcv6cDRfOQ=)
2: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: 2c5Yu2/FbzpIeGvEcvUfh4miGZbMfWjyiiqsoNSHf/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:97:2d:ae:8e:36:41:05:53:27:42:5a:43:eb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Apr 20 16:01:07 2025 GMT
Not After : Apr 21 16:01:07 2025 GMT
Subject: CN=99f0a5c070d326d90de354ec9950f760358bae0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:5c:55:2d:15:3d:e5:3d:23:35:48:c0:9e:
1c:e7:b0:b8:53:e4:c2:ec:a5:82:49:46:df:8a:18:
5e:79:9c:11:7d:f6:5d:77:d0:15:bd:2d:b4:db:6e:
3c:57:35:21:a4:8d:bb:c0:ad:40:c6:1e:24:43:63:
e9:ca:77:62:68:71:d1:4d:6c:72:2f:f6:c5:2b:57:
1a:9f:2e:51:fc:30:aa:bc:00:67:7c:56:a5:86:28:
bb:e3:34:50:d9:ba:66:72:77:ce:b4:71:a2:0a:a2:
0d:34:30:47:ab:f4:e9:0f:4b:a8:5a:ba:65:62:b6:
82:4b:a8:be:d3:67:9f:37:e0:7e:ee:bb:f6:48:42:
ac:40:ae:44:01:25:fb:09:8b:90:3c:a3:45:59:68:
26:12:61:9e:73:8f:d4:31:4a:f4:46:37:ee:a7:e7:
f4:be:6a:a2:22:53:49:e4:3e:3b:2d:d2:b3:a7:e0:
18:ba:56:e2:5a:92:75:32:65:07:8c:b5:3f:69:0f:
25:83:49:6f:5e:3e:df:72:5f:c4:f8:1c:95:a0:a0:
a4:7b:51:0f:0b:df:fc:63:f4:63:d5:65:f5:ec:66:
ea:9a:a1:76:97:12:c6:23:27:1f:a2:38:89:cc:b6:
02:de:4c:2b:3d:b8:44:cc:0b:80:f3:37:c5:b5:cf:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:A5:C0:70:D3:26:D9:0D:E3:54:EC:99:50:F7:60:35:8B:AE:0E
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ea:37:b9:bc:64:3b:6b:ab:58:b1:8b:2c:0c:0c:ba:95:18:
b1:81:0a:f6:85:8e:69:35:83:12:a4:7b:02:3a:ce:6b:45:14:
e6:13:08:9e:98:98:56:eb:fc:4f:0b:a8:ee:cf:8f:53:6b:d5:
df:1f:a4:bc:a8:24:2a:52:14:95:fe:ed:94:5a:da:a4:bc:78:
b7:38:3e:3d:0c:c2:4e:99:85:2e:b5:1e:5c:3c:11:c7:9c:8e:
b6:d6:54:d4:3c:ef:5d:8e:35:9b:59:1b:3f:a9:6c:5d:4f:f4:
28:d5:22:4e:5c:c9:a4:9c:b7:c3:12:69:9d:8c:ba:ec:2b:37:
00:5f:73:7a:55:15:61:28:39:8b:d9:22:8b:1b:5c:ae:1b:a0:
18:1d:a3:08:4f:1c:12:90:2e:db:5e:59:5c:f8:51:2b:87:8b:
ce:18:3f:d6:6b:da:f5:63:90:c8:60:1c:7d:f5:38:8c:d1:37:
e9:29:5d:a7:00:af:9d:8b:b0:82:46:e7:c6:d0:bf:a0:04:0a:
ca:3a:89:79:2b:d5:af:ac:91:fc:51:95:35:68:a7:fd:3d:1b:
93:69:3b:50:72:33:f1:f0:1b:08:d0:b8:b5:92:97:a7:16:23:
ea:2e:98:d9:4c:44:a3:38:90:65:d0:20:00:56:33:ec:19:3c:
cb:5e:7a:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7pctro42QQVTJ0JaQ+uPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MzA5YWEwMTQ4Y2M5MGZjZWQ5OTQzZWIxYTgxOTQ2ZTlh
ZGFlNWUwHhcNMjUwNDIwMTYwMTA3WhcNMjUwNDIxMTYwMTA3WjAzMTEwLwYDVQQD
Eyg5OWYwYTVjMDcwZDMyNmQ5MGRlMzU0ZWM5OTUwZjc2MDM1OGJhZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYRcVS0VPeU9IzVIwJ4c57C4U+TC
7KWCSUbfihheeZwRffZdd9AVvS202248VzUhpI27wK1Axh4kQ2PpyndiaHHRTWxy
L/bFK1cany5R/DCqvABnfFalhii74zRQ2bpmcnfOtHGiCqINNDBHq/TpD0uoWrpl
YraCS6i+02efN+B+7rv2SEKsQK5EASX7CYuQPKNFWWgmEmGec4/UMUr0Rjfup+f0
vmqiIlNJ5D47LdKzp+AYulbiWpJ1MmUHjLU/aQ8lg0lvXj7fcl/E+ByVoKCke1EP
C9/8Y/Rj1WX17GbqmqF2lxLGIycfojiJzLYC3kwrPbhEzAuA8zfFtc/BKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnwpcBw0ybZDeNU7JlQ92A1i64OMB8GA1UdIwQY
MBaAFHQwmqAUjMkPztmUPrGoGUbpra5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODct
N2M3NDBlZjhhYTk1LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODctN2M3NDBlZjhhYTk1
LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuo3ubxk
O2urWLGLLAwMupUYsYEK9oWOaTWDEqR7AjrOa0UU5hMInpiYVuv8Twuo7s+PU2vV
3x+kvKgkKlIUlf7tlFrapLx4tzg+PQzCTpmFLrUeXDwRx5yOttZU1DzvXY41m1kb
P6lsXU/0KNUiTlzJpJy3wxJpnYy67Cs3AF9zelUVYSg5i9kiixtcrhugGB2jCE8c
EpAu215ZXPhRK4eLzhg/1mva9WOQyGAcffU4jNE36SldpwCvnYuwgkbnxtC/oAQK
yjqJeSvVr6yR/FGVNWin/T0bk2k7UHIz8fAbCNC4tZKXpxYj6i6Y2UxEoziQZdAg
AFYz7Bk8y156gg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:24 2025 by rpki-client