Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier: nOe7BljodRHX6q7TGMmkUUGkdO2BiYAnMjvASsoD23A=
Subject key identifier: 80:8E:6F:A7:4B:FA:9A:BC:1E:CD:16:46:42:8B:73:97:CA:31:23:B9
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 01965B035AFA41FBE5F6668D625BBE551BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number: 0484
Signing time: Tue 22 Apr 2025 01:01:08 +0000
Manifest this update: Tue 22 Apr 2025 01:01:08 +0000
Manifest next update: Wed 23 Apr 2025 01:01:08 +0000
Files and hashes: 1: 5qU9a0oGWmmroynSN69UsFF4Lyw.roa (hash: ck+/DYuUP9vUcXqAS40voGKy/13DDBxa+VF1/FTp/II=)
2: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: Ofd/DsmlcsOS/L5di8t2K8m1r60L4w9xyI/ZtipnQUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:5a:fa:41:fb:e5:f6:66:8d:62:5b:be:55:1b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: Apr 22 01:01:08 2025 GMT
Not After : Apr 23 01:01:08 2025 GMT
Subject: CN=808e6fa74bfa9abc1ecd1646428b7397ca3123b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:06:3a:47:3d:c2:9d:80:26:04:23:07:d6:
6b:b0:51:7d:60:46:f7:7c:f5:d6:24:d9:03:da:9b:
60:df:ad:21:2b:ed:fe:4f:f0:48:0b:2d:a8:ec:39:
f4:47:37:a3:19:44:a7:0b:71:47:ee:d4:bd:b4:ea:
ef:44:60:85:0b:a0:ad:c0:8c:48:d6:4b:df:dc:59:
93:ff:89:2d:d7:98:54:d1:b5:75:b9:4c:25:71:f3:
73:b2:7f:08:ff:e6:43:ed:ba:63:c8:a1:04:98:1a:
e5:d7:e1:e4:84:7d:ad:e1:b2:13:6d:a3:5b:5e:51:
21:f0:8d:43:99:72:86:bb:f6:54:93:06:b9:d3:bf:
92:a9:42:8f:b0:9e:c0:7f:a3:ff:19:48:d0:d2:c6:
ef:0f:bf:5b:ee:23:31:03:90:42:39:15:1f:9d:e3:
e7:41:c2:11:64:45:e7:dd:fd:e3:08:c0:fc:63:b9:
05:97:4d:9b:fc:10:b3:f3:99:05:5e:c6:b0:5a:95:
90:a6:5b:33:ae:04:af:1f:ea:d7:14:ad:80:e9:b1:
fd:30:2d:e5:6b:cc:fc:b4:eb:e6:6d:19:4c:5b:2d:
3d:6a:d7:b3:1e:d7:2b:83:2c:8a:20:01:2a:a3:f4:
70:51:a7:7c:1c:64:0c:ff:a0:3c:1f:d4:67:f7:5b:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:6F:A7:4B:FA:9A:BC:1E:CD:16:46:42:8B:73:97:CA:31:23:B9
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5f:6f:48:c5:62:86:86:01:58:50:1f:15:5c:ad:47:15:d3:
6a:9f:ca:fd:ca:45:cf:b9:d1:4e:9b:df:69:f7:68:86:0a:ac:
48:fc:d0:91:4c:68:58:77:df:48:bc:8e:23:ff:7b:d8:46:93:
42:6b:0f:75:48:05:c0:46:f5:80:f0:47:76:72:ae:a8:7d:f8:
2f:ab:27:b4:88:9f:7b:b9:7a:d9:9b:65:03:8c:44:cb:de:aa:
18:2f:a6:0d:44:b1:d9:65:7c:bb:b3:e9:b0:5c:33:f3:9d:1a:
63:3f:5b:ef:0b:93:15:03:a5:e8:75:db:4a:0d:d0:15:a4:3f:
29:eb:73:83:c3:08:4a:7e:27:2d:c5:18:d7:7f:bd:c3:87:9a:
36:d2:b2:48:67:63:a1:5b:1e:1f:22:ba:91:78:d8:7b:2b:14:
73:1f:d1:fe:cf:75:45:cf:bd:c5:ff:52:ba:1f:cd:bf:3c:95:
05:76:fe:ab:fc:1e:fd:03:6a:5f:33:d8:43:d2:c9:ce:85:c5:
cb:7d:33:72:a8:18:8e:81:81:da:c2:62:38:02:ce:c2:f0:21:
0e:1b:08:96:cc:35:f7:ac:84:db:bc:4c:4e:a2:8a:f9:02:e3:
9d:fd:32:5f:bb:b6:e6:2b:bd:f3:c8:d3:50:7e:a5:4a:97:54:
0d:99:b0:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbA1r6Qfvl9maNYlu+VRvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMWRkNTM5NTI1YTM5ZDg0NzAxNGU4ZmVhM2M2NDFkOTcz
Y2M4NjYwHhcNMjUwNDIyMDEwMTA4WhcNMjUwNDIzMDEwMTA4WjAzMTEwLwYDVQQD
Eyg4MDhlNmZhNzRiZmE5YWJjMWVjZDE2NDY0MjhiNzM5N2NhMzEyM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cUGOkc9wp2AJgQjB9ZrsFF9YEb3
fPXWJNkD2ptg360hK+3+T/BICy2o7Dn0RzejGUSnC3FH7tS9tOrvRGCFC6CtwIxI
1kvf3FmT/4kt15hU0bV1uUwlcfNzsn8I/+ZD7bpjyKEEmBrl1+HkhH2t4bITbaNb
XlEh8I1DmXKGu/ZUkwa507+SqUKPsJ7Af6P/GUjQ0sbvD79b7iMxA5BCORUfnePn
QcIRZEXn3f3jCMD8Y7kFl02b/BCz85kFXsawWpWQplszrgSvH+rXFK2A6bH9MC3l
a8z8tOvmbRlMWy09atezHtcrgyyKIAEqo/RwUad8HGQM/6A8H9Rn91v/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICOb6dL+pq8Hs0WRkKLc5fKMSO5MB8GA1UdIwQY
MBaAFA4d1TlSWjnYRwFOj+o8ZB2XPMhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NTBiMjktNDBkNi00ZGEzLTkwYjAt
OTI5ODkzMDgxODY2LzEvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80NTBiMjktNDBkNi00ZGEzLTkwYjAtOTI5ODkzMDgxODY2
LzEvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuV9vSMVi
hoYBWFAfFVytRxXTap/K/cpFz7nRTpvfafdohgqsSPzQkUxoWHffSLyOI/972EaT
QmsPdUgFwEb1gPBHdnKuqH34L6sntIife7l62ZtlA4xEy96qGC+mDUSx2WV8u7Pp
sFwz850aYz9b7wuTFQOl6HXbSg3QFaQ/Ketzg8MISn4nLcUY13+9w4eaNtKySGdj
oVseHyK6kXjYeysUcx/R/s91Rc+9xf9Suh/NvzyVBXb+q/we/QNqXzPYQ9LJzoXF
y30zcqgYjoGB2sJiOALOwvAhDhsIlsw196yE27xMTqKK+QLjnf0yX7u25iu988jT
UH6lSpdUDZmwow==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:45:38 2025 by rpki-client