Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: j3e0aKZvcE6H6L2ShSfJBg+1eBaAxCH+80lrBkMKyF0=
Subject key identifier: 95:34:C8:64:CB:4B:E4:6F:2E:B2:7D:B2:6C:95:1D:F8:2C:F4:64:7E
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 019657939E4E87FA4AEED764C079F2ADA359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 09:00:14 +0000
Manifest this update: Mon 21 Apr 2025 09:00:14 +0000
Manifest next update: Tue 22 Apr 2025 09:00:14 +0000
Files and hashes: 1: 1-y3mku53CxfcZTDAjLzjGLNjKug.roa (hash: tkrqALFJZS9oKOrZg8mNnpPdOdg26RzEKwv9Z2r59k4=)
2: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: ymNOpMKrgNQuP2xAwLEbUJf1MWaGcN49hs4Lfx8Ql9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:9e:4e:87:fa:4a:ee:d7:64:c0:79:f2:ad:a3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Apr 21 09:00:14 2025 GMT
Not After : Apr 22 09:00:14 2025 GMT
Subject: CN=9534c864cb4be46f2eb27db26c951df82cf4647e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:dd:03:61:30:69:e9:60:09:14:d2:97:0f:
94:bb:15:ef:83:6a:91:f7:45:7e:eb:0d:0d:a6:c2:
65:3d:0f:a9:0b:ee:17:c9:71:ac:10:a9:e6:1f:64:
cc:62:d1:eb:ee:c6:d4:56:11:35:97:ab:ff:d5:45:
0a:90:11:50:6c:ca:62:94:27:28:d4:26:f7:31:81:
f2:55:c4:07:24:64:c3:89:0f:8f:ed:23:d8:f9:4e:
40:a8:27:10:83:f5:4e:09:67:c2:a3:08:ba:c2:b4:
1a:88:e0:7d:05:d2:4f:52:56:12:a5:c7:38:01:a7:
27:39:d1:be:02:bc:19:64:ae:9b:9a:8d:da:c4:42:
54:d4:7f:c8:b3:f1:d9:68:37:4d:a1:39:60:65:ff:
f2:52:5f:70:fd:7e:34:0f:04:1d:6b:07:01:1b:fb:
dc:d8:4e:a3:59:e2:ad:b0:33:b2:f8:df:fe:d1:33:
70:ff:1a:5c:c4:d7:ea:16:03:f0:5b:85:88:24:e3:
8b:5d:05:12:00:88:9c:cd:25:09:fa:95:99:82:9b:
3d:ef:56:5b:ae:d6:77:32:02:40:a6:04:53:42:6c:
e8:da:25:a3:fc:36:32:ad:c3:e4:37:7e:57:5e:6e:
f8:00:16:17:bf:ef:af:05:bd:cf:06:25:b6:d3:56:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:C8:64:CB:4B:E4:6F:2E:B2:7D:B2:6C:95:1D:F8:2C:F4:64:7E
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e1:3a:97:7a:c8:c7:1b:6f:be:97:cc:81:17:e3:2e:ad:ac:
4a:10:ab:b1:a3:32:9a:8e:05:64:75:cc:79:71:d8:8c:46:83:
bb:0c:1f:28:0a:bb:72:17:bf:7d:a0:d4:1b:fa:b5:e3:28:91:
56:68:f7:28:ca:9e:c9:40:c8:b0:b4:69:ad:b6:85:9d:a6:3a:
b3:8e:07:0f:61:55:b4:eb:02:15:f1:52:7a:3e:94:b7:8d:40:
ec:e0:ed:8b:e1:a9:30:98:6d:9e:45:f3:d5:b7:aa:8a:4c:42:
fe:f5:5e:91:9e:6d:1f:b9:22:77:69:a0:c7:15:8e:79:83:0e:
ac:4f:d3:2f:78:2a:72:bd:38:a7:39:bd:85:c5:e6:e5:28:fc:
de:94:1c:e8:d0:96:ff:f1:4c:40:21:14:08:2c:ad:c1:08:68:
6f:b3:0c:1d:b6:16:e1:d0:51:ed:7a:97:7e:cb:d9:1d:63:76:
f9:7b:35:78:13:b5:c0:aa:9d:4d:71:5e:fa:fe:4e:46:d4:19:
61:ef:75:fc:06:b9:ca:e5:00:96:83:b3:da:5e:2f:e0:8c:de:
be:51:cf:a1:16:8b:a5:1f:ad:0e:1f:02:a4:64:6d:39:3c:76:
06:50:95:d3:ba:a8:e8:d4:a5:6a:32:db:92:20:8f:21:5d:1c:
17:14:72:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXk55Oh/pK7tdkwHnyraNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzNlMzJhYzBjNmZhNzM1YTZjN2JlMTQ0Y2ZhM2ZjMjk3
YzBiOTgwHhcNMjUwNDIxMDkwMDE0WhcNMjUwNDIyMDkwMDE0WjAzMTEwLwYDVQQD
Eyg5NTM0Yzg2NGNiNGJlNDZmMmViMjdkYjI2Yzk1MWRmODJjZjQ2NDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGrdA2EwaelgCRTSlw+UuxXvg2qR
90V+6w0NpsJlPQ+pC+4XyXGsEKnmH2TMYtHr7sbUVhE1l6v/1UUKkBFQbMpilCco
1Cb3MYHyVcQHJGTDiQ+P7SPY+U5AqCcQg/VOCWfCowi6wrQaiOB9BdJPUlYSpcc4
AacnOdG+ArwZZK6bmo3axEJU1H/Is/HZaDdNoTlgZf/yUl9w/X40DwQdawcBG/vc
2E6jWeKtsDOy+N/+0TNw/xpcxNfqFgPwW4WIJOOLXQUSAIiczSUJ+pWZgps971Zb
rtZ3MgJApgRTQmzo2iWj/DYyrcPkN35XXm74ABYXv++vBb3PBiW201axOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJU0yGTLS+RvLrJ9smyVHfgs9GR+MB8GA1UdIwQY
MBaAFKQz4yrAxvpzWmx74UTPo/wpfAuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQt
YjgxMmJkNTk0NzM5LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQtYjgxMmJkNTk0NzM5
LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeE6l3rI
xxtvvpfMgRfjLq2sShCrsaMymo4FZHXMeXHYjEaDuwwfKAq7che/faDUG/q14yiR
Vmj3KMqeyUDIsLRprbaFnaY6s44HD2FVtOsCFfFSej6Ut41A7ODti+GpMJhtnkXz
1beqikxC/vVekZ5tH7kid2mgxxWOeYMOrE/TL3gqcr04pzm9hcXm5Sj83pQc6NCW
//FMQCEUCCytwQhob7MMHbYW4dBR7XqXfsvZHWN2+Xs1eBO1wKqdTXFe+v5ORtQZ
Ye91/Aa5yuUAloOz2l4v4IzevlHPoRaLpR+tDh8CpGRtOTx2BlCV07qo6NSlajLb
kiCPIV0cFxRyWw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:15 2025 by rpki-client