Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: WrNXdS0I0cPrUb5+qiY78gLpoBM8BNodfd9M3KVXI/o=
Subject key identifier: 1F:72:87:D2:53:F3:14:9D:E8:BA:BC:4E:4D:41:EE:3C:CC:50:15:79
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 019749310120D8F39520E1871D64D1DD3470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 07:00:37 +0000
Manifest this update: Sat 07 Jun 2025 07:00:37 +0000
Manifest next update: Sun 08 Jun 2025 07:00:37 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: fL0ccDcROkE7G6TknL20BQoQQgneQ+8Eq72Sa9iuAi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:01:20:d8:f3:95:20:e1:87:1d:64:d1:dd:34:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: Jun 7 07:00:37 2025 GMT
Not After : Jun 8 07:00:37 2025 GMT
Subject: CN=1f7287d253f3149de8babc4e4d41ee3ccc501579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:63:d9:3c:80:50:e1:90:ec:c2:d5:3c:f7:
77:6e:72:4a:57:ed:b2:25:59:ae:5f:26:66:3b:5e:
47:4d:44:43:b9:3c:dd:63:b4:36:13:98:9c:d8:9b:
a8:60:c1:e8:34:fc:65:a4:d8:2b:cf:46:94:d4:80:
77:36:66:eb:ad:9d:0b:21:5a:2b:1c:6c:1f:73:4e:
43:30:ae:23:e0:b3:c2:7a:10:9f:f9:5a:f3:ff:96:
ac:fc:12:11:85:fa:8e:bf:68:37:65:ab:7e:cf:5b:
ae:08:d7:a4:29:93:90:42:aa:76:a2:5c:e4:0e:16:
52:fa:fa:86:e3:08:3f:af:cb:00:4f:2f:19:01:4c:
e7:8a:14:b4:df:80:73:37:49:ae:dd:2e:b5:da:ba:
c3:90:a3:4e:eb:23:65:43:1b:36:ad:9e:de:96:91:
93:a4:31:34:44:fd:66:2b:c6:9c:60:a7:9f:20:3c:
1e:f8:f4:c9:6c:34:59:26:43:0c:73:f4:98:e4:83:
8f:d7:e4:93:ec:9e:bc:b5:ea:31:dc:c0:7d:71:42:
5b:48:80:ac:9e:37:66:56:ae:9d:03:9c:58:c8:92:
48:ee:11:aa:f5:b3:12:15:5e:35:89:c7:f7:df:12:
d3:95:54:93:92:bd:01:12:14:28:73:ca:0f:bc:95:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:72:87:D2:53:F3:14:9D:E8:BA:BC:4E:4D:41:EE:3C:CC:50:15:79
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:16:5a:4d:4f:b6:02:63:2c:bb:e5:90:57:2c:14:c5:31:28:
64:b3:4c:1d:2f:6f:e6:f3:15:7a:d7:ee:4f:8c:1d:46:d0:e3:
aa:6a:17:63:e3:08:cf:9c:f0:1b:67:c4:8d:90:ff:4a:ae:58:
89:16:59:ea:ee:d7:7b:80:8a:fd:c9:76:ff:04:6d:7d:59:b3:
58:e3:fd:a5:aa:d1:30:b2:b0:f3:47:7f:57:b3:a6:67:18:cd:
e3:71:30:d7:aa:44:08:e0:5b:77:5f:2c:50:6b:f2:ef:3d:40:
bc:fa:e6:86:21:f7:eb:f8:4b:e8:a6:72:d2:08:aa:ef:f1:28:
df:78:b7:91:40:23:78:1f:65:7a:fa:6d:3c:e3:78:df:0f:df:
e5:f1:c7:74:38:da:a5:c0:45:c4:48:0b:5d:26:3f:47:87:b9:
8e:57:51:1d:98:4b:c1:74:d0:e5:e7:73:a7:89:bc:8a:48:fb:
9b:3a:09:c5:e1:3d:51:33:53:00:0b:71:58:b6:31:30:8c:98:
1b:77:f3:2a:3b:b0:62:6e:7c:db:77:7b:de:d3:10:e3:05:47:
0e:8a:b6:53:f0:b1:d0:8e:29:7a:e2:e1:ec:08:f7:a2:43:c6:
2f:d3:f5:c2:f3:65:ce:4c:2a:b0:e0:c6:6f:72:be:9f:5f:41:
a1:28:36:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMQEg2POVIOGHHWTR3TRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzg3MWRiNTA5OGJmODM4ZmZlYTk5YTAyZjY3OTM2OGIz
ZTFhYjIwHhcNMjUwNjA3MDcwMDM3WhcNMjUwNjA4MDcwMDM3WjAzMTEwLwYDVQQD
EygxZjcyODdkMjUzZjMxNDlkZThiYWJjNGU0ZDQxZWUzY2NjNTAxNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8tj2TyAUOGQ7MLVPPd3bnJKV+2y
JVmuXyZmO15HTURDuTzdY7Q2E5ic2JuoYMHoNPxlpNgrz0aU1IB3NmbrrZ0LIVor
HGwfc05DMK4j4LPCehCf+Vrz/5as/BIRhfqOv2g3Zat+z1uuCNekKZOQQqp2olzk
DhZS+vqG4wg/r8sATy8ZAUznihS034BzN0mu3S612rrDkKNO6yNlQxs2rZ7elpGT
pDE0RP1mK8acYKefIDwe+PTJbDRZJkMMc/SY5IOP1+ST7J68teox3MB9cUJbSICs
njdmVq6dA5xYyJJI7hGq9bMSFV41icf33xLTlVSTkr0BEhQoc8oPvJWWWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9yh9JT8xSd6Lq8Tk1B7jzMUBV5MB8GA1UdIwQY
MBaAFA3IcdtQmL+Dj/6pmgL2eTaLPhqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80YTEyMzgtY2I2NC00YTQ2LWFmOTUt
NjViZTQ0ZDBkYmQ0LzEvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS80YTEyMzgtY2I2NC00YTQ2LWFmOTUtNjViZTQ0ZDBkYmQ0
LzEvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhZaTU+2
AmMsu+WQVywUxTEoZLNMHS9v5vMVetfuT4wdRtDjqmoXY+MIz5zwG2fEjZD/Sq5Y
iRZZ6u7Xe4CK/cl2/wRtfVmzWOP9parRMLKw80d/V7OmZxjN43Ew16pECOBbd18s
UGvy7z1AvPrmhiH36/hL6KZy0giq7/Eo33i3kUAjeB9levptPON43w/f5fHHdDja
pcBFxEgLXSY/R4e5jldRHZhLwXTQ5edzp4m8ikj7mzoJxeE9UTNTAAtxWLYxMIyY
G3fzKjuwYm5823d73tMQ4wVHDoq2U/Cx0I4peuLh7Aj3okPGL9P1wvNlzkwqsODG
b3K+n19BoSg2UQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:23 2025 by rpki-client