Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier: 6qJRziDK6c3O8qN2+Nw3NLYR8zmD5EuKw4+FD69WqQQ=
Subject key identifier: A9:50:12:5A:6A:AB:2D:9B:35:AF:92:3E:5D:F4:50:72:1E:D2:8F:2D
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial: 01964EC7B99A82C9D42DF735898EEF8B3E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number: 0EF6
Signing time: Sat 19 Apr 2025 16:00:34 +0000
Manifest this update: Sat 19 Apr 2025 16:00:34 +0000
Manifest next update: Sun 20 Apr 2025 16:00:34 +0000
Files and hashes: 1: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (hash: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=)
2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: 6QTAapPYLaiyq9yR2I4OsjQ0qqWL5l1Hb+Dr7wt7rvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:b9:9a:82:c9:d4:2d:f7:35:89:8e:ef:8b:3e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Validity
Not Before: Apr 19 16:00:34 2025 GMT
Not After : Apr 20 16:00:34 2025 GMT
Subject: CN=a950125a6aab2d9b35af923e5df450721ed28f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:45:1f:78:e4:4b:05:4c:c6:4b:62:ad:d7:
e3:33:f3:9c:bc:2a:4b:cb:c9:fd:6b:36:06:8f:8a:
70:eb:41:8d:b8:a2:92:ca:90:ff:9c:9f:b6:8c:4b:
a9:63:80:34:dc:04:79:eb:5a:e4:2a:ab:6f:fa:63:
f0:38:48:7f:87:cf:22:c1:6a:ba:00:9a:4d:64:0e:
9c:23:ec:32:94:bd:e5:40:ab:a6:95:4b:cd:ca:6f:
f4:fa:b9:91:5a:30:a1:db:7d:2d:0e:83:d0:83:75:
e5:94:23:fa:57:eb:ed:f6:dd:b3:69:c5:f4:d0:0e:
22:36:9b:b0:97:ff:b6:33:04:53:49:b8:53:c2:bd:
43:d2:63:ab:39:d3:68:6e:91:51:88:07:90:94:8d:
95:61:99:c0:3d:f1:ab:62:3e:4c:ae:d7:38:91:91:
a8:77:ea:57:59:42:0e:d1:66:4a:c1:bc:50:8b:9c:
f0:23:d7:8c:79:0f:85:0b:a3:c3:c7:24:3e:00:56:
c5:74:58:52:d6:97:78:cb:5a:bd:59:8e:f4:86:a6:
d8:c7:86:21:77:b3:a2:8c:29:3f:1a:99:fc:9b:94:
39:e3:bc:39:d1:b2:3f:f9:b6:a9:94:ba:30:3e:bf:
03:63:1c:c1:33:f3:5d:3e:27:b0:34:18:2f:fa:d4:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:50:12:5A:6A:AB:2D:9B:35:AF:92:3E:5D:F4:50:72:1E:D2:8F:2D
X509v3 Authority Key Identifier:
keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f4:66:22:41:88:99:00:a9:a8:7a:37:3e:42:61:c7:de:a5:
01:47:9a:a5:51:49:21:59:df:10:15:e9:3a:98:9a:91:07:b1:
03:81:34:a8:42:ae:08:17:33:55:e2:da:1f:59:62:90:fb:d2:
84:a1:5a:d4:ba:ba:c0:61:a2:55:e9:6d:cd:cb:3f:d1:da:f2:
7b:9d:68:d2:a0:f2:65:5b:c8:a7:57:5a:39:8c:bc:de:a2:fe:
d3:37:16:1a:fa:91:2d:63:e8:5a:a7:ca:a2:04:f5:e6:5b:d4:
02:27:b7:95:b8:ec:b2:b3:4e:a6:d2:08:7b:63:20:31:99:55:
c0:86:c2:cb:a4:4c:bb:e9:54:53:35:c5:c6:0c:51:ee:6d:de:
57:28:9e:82:5a:47:5b:88:55:94:a1:e0:7c:24:7b:2f:4c:fa:
b9:e9:a4:2e:e8:d1:5c:16:e3:57:6e:6c:ce:c2:a0:38:69:cf:
02:0d:14:ae:3a:b2:b7:b2:d4:a7:52:d2:c9:04:ff:26:74:18:
0d:24:42:36:0c:e7:21:4f:93:81:4f:1b:ab:50:d5:b4:00:58:
86:48:58:88:16:79:cc:0d:86:a7:e9:77:94:46:a4:dc:05:4f:
60:8e:d5:fb:74:95:77:8a:bf:c1:f6:d4:d5:33:aa:0b:b8:88:
ac:4e:56:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOx7magsnULfc1iY7viz5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzA5NDIyMDNhYTJmOGQzOTBhOGRhZTUwYjg1YTk4NDUw
NGZkOWMwHhcNMjUwNDE5MTYwMDM0WhcNMjUwNDIwMTYwMDM0WjAzMTEwLwYDVQQD
EyhhOTUwMTI1YTZhYWIyZDliMzVhZjkyM2U1ZGY0NTA3MjFlZDI4ZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntVFH3jkSwVMxktirdfjM/OcvCpL
y8n9azYGj4pw60GNuKKSypD/nJ+2jEupY4A03AR561rkKqtv+mPwOEh/h88iwWq6
AJpNZA6cI+wylL3lQKumlUvNym/0+rmRWjCh230tDoPQg3XllCP6V+vt9t2zacX0
0A4iNpuwl/+2MwRTSbhTwr1D0mOrOdNobpFRiAeQlI2VYZnAPfGrYj5Mrtc4kZGo
d+pXWUIO0WZKwbxQi5zwI9eMeQ+FC6PDxyQ+AFbFdFhS1pd4y1q9WY70hqbYx4Yh
d7OijCk/Gpn8m5Q547w50bI/+baplLowPr8DYxzBM/NdPiewNBgv+tRzzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlQElpqqy2bNa+SPl30UHIe0o8tMB8GA1UdIwQY
MBaAFKQwlCIDqi+NOQqNrlC4WphFBP2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGIt
MWJmMGY3YjRkZjMwLzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGItMWJmMGY3YjRkZjMw
LzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPRmIkGI
mQCpqHo3PkJhx96lAUeapVFJIVnfEBXpOpiakQexA4E0qEKuCBczVeLaH1likPvS
hKFa1Lq6wGGiVeltzcs/0drye51o0qDyZVvIp1daOYy83qL+0zcWGvqRLWPoWqfK
ogT15lvUAie3lbjssrNOptIIe2MgMZlVwIbCy6RMu+lUUzXFxgxR7m3eVyieglpH
W4hVlKHgfCR7L0z6uemkLujRXBbjV25szsKgOGnPAg0Urjqyt7LUp1LSyQT/JnQY
DSRCNgznIU+TgU8bq1DVtABYhkhYiBZ5zA2Gp+l3lEak3AVPYI7V+3SVd4q/wfbU
1TOqC7iIrE5WuA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:06 2025 by rpki-client