Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: UUepYdNZLQVOZRuZaGDnfXVORu2ZPEUSGk6VPdUQk5E=
Subject key identifier: 87:E4:B8:86:6D:78:3A:32:FE:7D:E1:E8:90:0C:D5:3F:2D:18:86:EF
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 01961056DBF92F764686DE7FB8CA2A5355EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0558
Signing time: Mon 07 Apr 2025 13:00:49 +0000
Manifest this update: Mon 07 Apr 2025 13:00:49 +0000
Manifest next update: Tue 08 Apr 2025 13:00:49 +0000
Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: pO+PV0NseIFAYoHndeGhBCzoi/YLJPeg2Gme6qP5Mjs=)
2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:56:db:f9:2f:76:46:86:de:7f:b8:ca:2a:53:55:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Apr 7 13:00:49 2025 GMT
Not After : Apr 8 13:00:49 2025 GMT
Subject: CN=87e4b8866d783a32fe7de1e8900cd53f2d1886ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:0e:61:bf:9c:58:00:7b:34:35:b0:14:63:
7a:cf:30:07:0d:66:d5:e2:a9:9e:07:c3:09:a2:ae:
6d:a0:20:b3:20:be:0e:89:c5:09:02:c4:85:ce:5b:
ec:8e:64:8e:12:a3:a7:5c:b2:b7:34:d9:57:2d:01:
a8:6e:a0:5f:1e:e5:a1:dd:e3:b0:c0:bb:e9:99:62:
ff:b2:64:5d:c4:9b:0d:dd:70:13:88:65:a6:3e:df:
42:bb:e0:21:f3:62:4e:d0:57:c6:14:d2:13:81:10:
f2:c2:7e:ea:a6:48:5d:d2:5a:87:da:a0:57:23:36:
2d:1a:a8:3b:da:af:ea:7f:2c:d1:1c:16:a0:38:d0:
23:97:5b:f0:21:38:6d:81:6c:84:28:5c:0c:a6:f0:
af:d1:88:2b:c8:d4:6f:ea:2b:df:a0:a7:00:14:94:
7b:a9:43:82:4f:e0:78:15:36:38:d4:cd:f3:c4:0f:
aa:26:b9:87:ab:54:c4:b2:bd:60:a5:86:7c:36:46:
44:54:58:4d:20:90:5c:5a:59:1c:37:a3:bc:70:de:
a9:a3:37:ca:9d:90:0c:28:7c:bf:4f:2a:55:ab:e9:
e3:a0:19:3e:6c:ba:d4:93:42:57:51:a7:06:ad:a4:
e6:99:59:fe:43:02:15:11:c1:10:a3:4c:d9:18:f4:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E4:B8:86:6D:78:3A:32:FE:7D:E1:E8:90:0C:D5:3F:2D:18:86:EF
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:48:fa:6c:a3:8d:8c:79:37:8e:b5:6b:0f:5d:95:22:86:81:
27:1a:30:d0:4e:6a:cd:9d:86:5e:de:2f:3c:c8:bd:18:57:c8:
26:23:8a:5f:8a:6f:b9:28:2c:78:18:fb:3b:00:05:5b:ae:6c:
02:34:13:cc:cd:9c:5a:3b:34:d4:10:fa:1c:ec:32:8a:fb:a7:
c1:60:c7:fe:66:a6:ea:1c:d2:41:d4:0f:da:a7:91:05:3a:03:
02:49:d8:66:5d:13:1e:bf:4e:b9:8f:fa:e9:5a:b2:ab:66:a5:
14:f6:ad:54:b0:51:7d:67:54:d6:8f:c7:81:b2:cd:8e:20:e8:
09:9a:41:57:a5:4a:7c:d2:15:d0:cb:b9:12:c8:9d:83:be:8f:
50:c7:3d:23:72:c7:8d:7a:e1:35:2b:f3:a5:2b:53:49:b0:aa:
f4:f4:57:e8:e0:e9:4f:8d:ca:cd:2b:59:38:fe:98:24:73:99:
f2:93:e2:f0:cf:5f:02:6f:dc:de:d6:fd:3f:66:30:ed:e8:95:
f5:73:f1:1b:2d:1c:9c:65:f9:e0:5b:7b:62:89:4e:df:68:ef:
96:ac:98:57:59:35:49:19:66:4f:c2:0f:43:f1:02:6e:9c:6b:
6c:26:9f:5b:a9:31:08:fc:33:15:b6:f9:e0:48:62:26:6e:c2:
ee:11:48:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQVtv5L3ZGht5/uMoqU1XvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGJlNDc0YzE1NWZjMTM4NDdiODU5NTAxYTU1M2NmZmMz
YWM0YjIwHhcNMjUwNDA3MTMwMDQ5WhcNMjUwNDA4MTMwMDQ5WjAzMTEwLwYDVQQD
Eyg4N2U0Yjg4NjZkNzgzYTMyZmU3ZGUxZTg5MDBjZDUzZjJkMTg4NmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbEOYb+cWAB7NDWwFGN6zzAHDWbV
4qmeB8MJoq5toCCzIL4OicUJAsSFzlvsjmSOEqOnXLK3NNlXLQGobqBfHuWh3eOw
wLvpmWL/smRdxJsN3XATiGWmPt9Cu+Ah82JO0FfGFNITgRDywn7qpkhd0lqH2qBX
IzYtGqg72q/qfyzRHBagONAjl1vwIThtgWyEKFwMpvCv0YgryNRv6ivfoKcAFJR7
qUOCT+B4FTY41M3zxA+qJrmHq1TEsr1gpYZ8NkZEVFhNIJBcWlkcN6O8cN6pozfK
nZAMKHy/TypVq+njoBk+bLrUk0JXUacGraTmmVn+QwIVEcEQo0zZGPQPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfkuIZteDoy/n3h6JAM1T8tGIbvMB8GA1UdIwQY
MBaAFA2L5HTBVfwThHuFlQGlU8/8OsSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDct
NDg2MWQ0M2UyNGVmLzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDctNDg2MWQ0M2UyNGVm
LzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0j6bKON
jHk3jrVrD12VIoaBJxow0E5qzZ2GXt4vPMi9GFfIJiOKX4pvuSgseBj7OwAFW65s
AjQTzM2cWjs01BD6HOwyivunwWDH/mam6hzSQdQP2qeRBToDAknYZl0THr9OuY/6
6Vqyq2alFPatVLBRfWdU1o/HgbLNjiDoCZpBV6VKfNIV0Mu5Esidg76PUMc9I3LH
jXrhNSvzpStTSbCq9PRX6ODpT43KzStZOP6YJHOZ8pPi8M9fAm/c3tb9P2Yw7eiV
9XPxGy0cnGX54Ft7YolO32jvlqyYV1k1SRlmT8IPQ/ECbpxrbCafW6kxCPwzFbb5
4EhiJm7C7hFIXw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:31 2025 by rpki-client