Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier: iflUgwjJXnD90eq1m/NoZtXMv4flK8hl5byCmwKfiSU=
Subject key identifier: 4B:52:A9:F2:48:22:E1:41:59:E1:F2:B3:09:B9:78:A9:A6:51:98:AD
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 019652364674859D11152A1F38B087D25563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 08:00:10 +0000
Manifest this update: Sun 20 Apr 2025 08:00:10 +0000
Manifest next update: Mon 21 Apr 2025 08:00:10 +0000
Files and hashes: 1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: BKyH3V20VlAre8deN+9Q0uFJkLIwt0O1TuRyjV7JeSA=)
2: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (hash: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:46:74:85:9d:11:15:2a:1f:38:b0:87:d2:55:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Apr 20 08:00:10 2025 GMT
Not After : Apr 21 08:00:10 2025 GMT
Subject: CN=4b52a9f24822e14159e1f2b309b978a9a65198ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:f6:64:ff:27:75:00:8e:d7:ae:b2:75:69:
91:6a:dc:e1:03:9e:94:f7:ba:88:0b:f2:69:a8:bb:
70:67:5e:28:c9:b5:6b:20:b6:f6:01:ea:b7:d7:d1:
04:99:58:55:48:8a:dc:af:3a:5a:3d:2d:5a:88:c8:
4e:c9:09:fa:99:d8:2d:4f:dd:7d:60:13:43:f2:88:
72:ed:19:7e:46:78:37:3e:7c:b7:10:5e:cc:51:94:
bc:ee:9e:fe:23:37:a3:ee:d0:e9:a6:ab:14:40:c2:
d2:ec:35:6b:a9:76:18:f1:37:d4:e6:38:e3:c8:47:
8a:8c:61:c3:8b:42:a7:80:a0:54:39:b5:26:3d:04:
7c:af:53:bf:80:65:29:98:28:33:bd:c1:48:03:98:
72:d6:ab:e2:7d:d5:a9:32:f3:a7:98:77:68:6f:26:
7e:a6:28:20:62:22:90:51:a1:c1:25:6a:e2:6e:dc:
2e:7f:ce:2c:ec:6c:c1:2f:29:89:65:6a:5e:c3:39:
f6:7e:a5:d4:67:d7:63:ad:ca:13:6d:dc:97:2f:34:
7b:07:a1:0d:4b:c3:8c:c6:ec:87:b8:d7:d4:10:60:
e0:36:a9:ec:b3:43:d1:a5:74:96:25:ff:aa:51:dd:
f7:ff:07:56:0c:92:f8:48:68:92:72:3d:8b:0b:f4:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:52:A9:F2:48:22:E1:41:59:E1:F2:B3:09:B9:78:A9:A6:51:98:AD
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:67:6b:aa:6f:25:52:bf:ec:97:d8:4e:59:d2:c8:6f:e8:2a:
7b:7b:2d:24:0a:1c:58:bd:89:85:d1:1a:4e:bb:48:39:72:34:
4c:88:e2:64:a8:b8:f9:61:0c:c4:d2:92:c1:d1:40:61:e3:7b:
1f:88:06:a9:b7:87:44:15:c9:3e:7c:c6:e0:47:50:a5:38:82:
bd:9e:43:e4:56:42:11:7e:65:3d:79:e0:24:bf:a3:38:d1:45:
68:f4:81:3e:5b:8f:67:71:da:8e:0a:c0:e9:37:fc:cb:af:a6:
96:f4:7c:7e:c6:bf:d7:40:29:13:fe:2b:2e:a4:8f:98:9f:bc:
a5:63:37:c9:b9:f0:6b:30:c5:13:f1:b7:73:6f:28:b4:03:0a:
d4:46:40:9d:61:b1:30:0c:2c:59:4c:1e:e2:ad:a7:00:a9:9e:
d6:30:78:70:4e:67:b9:7b:60:87:6b:dd:2e:7b:21:67:b3:c6:
61:e6:8a:3e:f9:aa:3a:ea:95:2b:3a:b2:0b:91:d8:c9:4c:71:
82:94:65:1a:82:e2:24:49:b0:7d:8e:f1:6c:f9:02:d4:d6:6e:
74:fa:77:18:8f:25:2a:77:a4:93:59:d7:98:3f:3e:94:80:cc:
b8:83:7a:c5:81:59:f7:36:95:05:87:70:cd:44:2f:4e:6e:9f:
a8:50:a6:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNkZ0hZ0RFSofOLCH0lVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZGQxMDg3NWU5ZTRjOWU3ZTg3ZTcwMWJiNTE2YWE2ZTFi
OTUyYjAwHhcNMjUwNDIwMDgwMDEwWhcNMjUwNDIxMDgwMDEwWjAzMTEwLwYDVQQD
Eyg0YjUyYTlmMjQ4MjJlMTQxNTllMWYyYjMwOWI5NzhhOWE2NTE5OGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh/2ZP8ndQCO166ydWmRatzhA56U
97qIC/JpqLtwZ14oybVrILb2Aeq319EEmVhVSIrcrzpaPS1aiMhOyQn6mdgtT919
YBND8ohy7Rl+Rng3Pny3EF7MUZS87p7+Izej7tDppqsUQMLS7DVrqXYY8TfU5jjj
yEeKjGHDi0KngKBUObUmPQR8r1O/gGUpmCgzvcFIA5hy1qvifdWpMvOnmHdobyZ+
piggYiKQUaHBJWribtwuf84s7GzBLymJZWpewzn2fqXUZ9djrcoTbdyXLzR7B6EN
S8OMxuyHuNfUEGDgNqnss0PRpXSWJf+qUd33/wdWDJL4SGiScj2LC/SUcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtSqfJIIuFBWeHyswm5eKmmUZitMB8GA1UdIwQY
MBaAFA3dEIdenkyefofnAbtRaqbhuVKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWIt
OTgzYzcxZmY3MDUzLzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWItOTgzYzcxZmY3MDUz
LzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2drqm8l
Ur/sl9hOWdLIb+gqe3stJAocWL2JhdEaTrtIOXI0TIjiZKi4+WEMxNKSwdFAYeN7
H4gGqbeHRBXJPnzG4EdQpTiCvZ5D5FZCEX5lPXngJL+jONFFaPSBPluPZ3HajgrA
6Tf8y6+mlvR8fsa/10ApE/4rLqSPmJ+8pWM3ybnwazDFE/G3c28otAMK1EZAnWGx
MAwsWUwe4q2nAKme1jB4cE5nuXtgh2vdLnshZ7PGYeaKPvmqOuqVKzqyC5HYyUxx
gpRlGoLiJEmwfY7xbPkC1NZudPp3GI8lKnekk1nXmD8+lIDMuIN6xYFZ9zaVBYdw
zUQvTm6fqFCmGg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:05 2025 by rpki-client