Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: iXOJupxmuXDj8pp9+DrAeIYXsWQgJonrphqrfWdZ6ec=
Subject key identifier: 42:BF:BF:46:4B:C4:E9:AC:25:D4:1A:96:5F:62:A9:02:98:5B:1E:2A
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 0196458DDC1E0E468B57DD95CE407E03FA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 0E02
Signing time: Thu 17 Apr 2025 21:00:46 +0000
Manifest this update: Thu 17 Apr 2025 21:00:46 +0000
Manifest next update: Fri 18 Apr 2025 21:00:46 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: LVj5RAlyWtkJFMMRA8vKEfNQDRF7Pj6Vcu5ji9vy1oM=)
2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:dc:1e:0e:46:8b:57:dd:95:ce:40:7e:03:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Apr 17 21:00:46 2025 GMT
Not After : Apr 18 21:00:46 2025 GMT
Subject: CN=42bfbf464bc4e9ac25d41a965f62a902985b1e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:7a:63:cb:70:7a:52:ee:83:c5:9d:6a:c5:
70:3e:aa:14:76:90:7d:26:06:d4:8e:ab:b5:e9:8c:
4f:46:a6:7f:83:ff:38:b5:10:cd:69:36:d8:26:55:
7c:16:e6:7b:67:c0:a0:90:a6:27:ee:b8:59:02:85:
dc:f8:f6:b3:0e:45:7d:90:3b:cc:84:b0:3a:ee:7f:
02:ae:25:04:bf:e2:ed:ea:1b:b7:33:9f:0c:02:a3:
d1:80:ff:1c:97:55:ef:26:13:cb:28:e9:a5:2c:42:
1d:4a:34:ef:bd:b6:ee:56:d3:07:a0:b1:9f:8c:e7:
92:b8:e9:a3:fd:ff:1f:01:de:13:24:e8:8a:f5:cb:
a8:fc:ff:b1:a9:da:0e:94:6c:1e:74:0b:20:3b:c8:
87:0b:f2:6e:a6:7d:10:37:aa:58:53:f3:66:75:a7:
0f:42:03:a7:2e:ae:de:f3:e4:e1:3e:87:57:5c:0f:
45:73:3b:3c:1b:b4:81:d3:ea:e9:92:ba:73:35:23:
41:be:22:85:62:bd:7c:a2:d2:20:af:02:b2:5f:ee:
6c:8f:c7:19:d3:6b:b0:73:3d:03:68:07:9b:e8:4f:
32:95:05:c6:ae:2f:cf:5f:10:88:f9:b3:23:0c:14:
ed:b4:1a:c2:49:c4:dd:6c:97:89:04:61:95:2c:92:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BF:BF:46:4B:C4:E9:AC:25:D4:1A:96:5F:62:A9:02:98:5B:1E:2A
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e4:ca:1a:07:fc:9f:a7:76:12:a1:92:c5:7e:70:53:75:65:
68:de:db:4b:8e:da:34:2a:00:39:9d:2a:5f:c4:c0:5e:5f:ce:
c7:83:64:79:72:2c:a0:89:32:83:aa:1c:91:cc:d0:b3:10:a6:
c0:94:dd:a9:05:a0:00:88:f4:09:8f:1b:71:cb:20:35:ab:9c:
b2:a2:e7:3a:4b:82:68:76:02:bc:22:57:7b:ba:26:f4:18:f9:
9c:af:c3:7c:a0:6f:8a:b9:67:ab:91:f9:5c:6a:cd:51:b5:8f:
b1:47:97:1f:09:b1:9f:de:da:48:75:97:3d:ad:bf:45:30:20:
8e:03:d5:4a:26:a5:68:73:c9:c0:df:3f:0d:d2:c5:6b:ca:47:
df:2f:43:0c:d8:52:96:5d:69:ff:e2:6f:b2:3e:e5:66:d7:57:
6e:08:ef:7d:5d:78:02:8b:3d:15:f9:f2:4f:9a:53:2d:9e:0d:
58:34:67:69:b3:d4:54:58:59:c3:dd:b4:1a:71:4f:2d:66:01:
ae:0d:aa:be:fb:87:82:df:30:6a:a2:da:64:72:09:a6:fb:a7:
56:82:64:82:82:92:7f:ac:18:f6:f0:5f:9f:3c:d2:29:41:67:
8b:0d:8f:62:0e:69:03:ef:99:48:58:6a:0d:d6:a8:2c:2a:bd:
3a:ec:38:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFjdweDkaLV92VzkB+A/olMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDI3ZmVhM2JhYTNlZjY4MGU4ZjdhMDdhNWYxOTRhYzQ5
ODkyYTUwHhcNMjUwNDE3MjEwMDQ2WhcNMjUwNDE4MjEwMDQ2WjAzMTEwLwYDVQQD
Eyg0MmJmYmY0NjRiYzRlOWFjMjVkNDFhOTY1ZjYyYTkwMjk4NWIxZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeR6Y8twelLug8WdasVwPqoUdpB9
JgbUjqu16YxPRqZ/g/84tRDNaTbYJlV8FuZ7Z8CgkKYn7rhZAoXc+PazDkV9kDvM
hLA67n8CriUEv+Lt6hu3M58MAqPRgP8cl1XvJhPLKOmlLEIdSjTvvbbuVtMHoLGf
jOeSuOmj/f8fAd4TJOiK9cuo/P+xqdoOlGwedAsgO8iHC/Jupn0QN6pYU/NmdacP
QgOnLq7e8+ThPodXXA9Fczs8G7SB0+rpkrpzNSNBviKFYr18otIgrwKyX+5sj8cZ
02uwcz0DaAeb6E8ylQXGri/PXxCI+bMjDBTttBrCScTdbJeJBGGVLJKlcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK/v0ZLxOmsJdQall9iqQKYWx4qMB8GA1UdIwQY
MBaAFAzSf+o7qj72gOj3oHpfGUrEmJKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYt
YTYwZjEzMTk4ZDVkLzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYtYTYwZjEzMTk4ZDVk
LzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuTKGgf8
n6d2EqGSxX5wU3VlaN7bS47aNCoAOZ0qX8TAXl/Ox4NkeXIsoIkyg6ockczQsxCm
wJTdqQWgAIj0CY8bccsgNaucsqLnOkuCaHYCvCJXe7om9Bj5nK/DfKBvirlnq5H5
XGrNUbWPsUeXHwmxn97aSHWXPa2/RTAgjgPVSialaHPJwN8/DdLFa8pH3y9DDNhS
ll1p/+Jvsj7lZtdXbgjvfV14Aos9FfnyT5pTLZ4NWDRnabPUVFhZw920GnFPLWYB
rg2qvvuHgt8waqLaZHIJpvunVoJkgoKSf6wY9vBfnzzSKUFniw2PYg5pA++ZSFhq
DdaoLCq9Ouw4bQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:34 2025 by rpki-client