Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: FglL332t/B9YLPbWdnUskMy6NFAfD+n5OMDWWR74qNY=
Subject key identifier: DA:F1:AC:3B:29:62:73:6F:15:29:F5:92:EF:27:2C:50:80:2E:EB:45
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 019645C53B9748AE3DD27626CF063064FB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 04C9
Signing time: Thu 17 Apr 2025 22:01:15 +0000
Manifest this update: Thu 17 Apr 2025 22:01:15 +0000
Manifest next update: Fri 18 Apr 2025 22:01:15 +0000
Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: fpxfmMK6pIdGvvFfpI9m+K0DIGrZx07vn3wpe7eRftI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:3b:97:48:ae:3d:d2:76:26:cf:06:30:64:fb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Apr 17 22:01:15 2025 GMT
Not After : Apr 18 22:01:15 2025 GMT
Subject: CN=daf1ac3b2962736f1529f592ef272c50802eeb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:06:bc:c9:47:02:34:25:52:b6:ec:bf:bd:
b2:9c:fd:70:e1:b2:21:4d:34:9a:81:ae:89:22:82:
03:18:ff:88:0c:6a:eb:91:0c:10:a9:4b:f1:4b:03:
1f:8c:89:c8:b6:2a:3c:82:f7:9a:d8:d7:56:eb:83:
c8:9b:81:11:d8:47:aa:ff:46:f7:b6:58:cf:5d:cc:
15:00:36:a5:91:a1:de:d2:e1:94:e1:76:3b:e5:ef:
51:31:b0:19:4a:c0:57:a3:22:75:a1:61:2a:e2:ab:
0b:0e:33:89:f2:28:f0:04:78:c4:80:9f:60:1b:1a:
e4:c7:87:14:7e:23:61:be:30:73:95:3f:e5:9f:65:
4c:9b:2a:a3:20:25:26:d1:23:d6:c9:fe:a6:37:83:
b8:cf:0a:c2:dc:0a:f4:92:1d:d4:48:30:04:27:9c:
6d:ca:fa:20:26:45:a6:80:3b:78:11:63:dc:02:78:
73:36:dd:36:89:56:9c:77:89:96:35:84:3d:05:5f:
e0:16:3f:ea:b5:b3:49:89:f7:55:5f:16:f4:5b:86:
27:3d:b5:1f:92:2a:74:a3:0d:1c:31:73:bb:6e:22:
10:72:fc:d3:f7:4a:7f:b8:38:21:05:f5:28:66:9c:
f3:dc:b9:72:6a:8e:4a:10:36:b5:74:3c:cf:f5:4b:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F1:AC:3B:29:62:73:6F:15:29:F5:92:EF:27:2C:50:80:2E:EB:45
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:06:59:62:b1:f9:e2:52:03:5c:24:ce:b7:68:95:f8:88:e4:
a5:f1:a8:10:37:71:61:d8:ca:20:76:56:6c:aa:0c:d2:2d:85:
90:29:69:35:d1:79:0a:33:62:cc:84:d3:70:48:5e:da:07:7c:
fa:3f:f4:b2:b6:ec:83:4f:1d:f4:a2:28:a9:01:ee:74:cd:1b:
43:d3:17:2e:69:af:2c:f5:32:cc:74:34:4c:b7:8d:d3:fd:28:
38:e8:fe:bc:cc:04:52:4e:e0:77:97:2f:3f:ac:b0:09:79:15:
b9:8b:37:5b:24:f1:9a:a1:ff:df:dc:e7:96:ed:30:af:ba:b1:
62:aa:5f:fd:21:40:b0:3d:e9:12:4c:a7:2d:aa:e8:db:a3:e4:
cb:0a:d5:d3:f5:31:06:af:f2:ab:16:9f:4f:0f:c5:13:4c:89:
07:54:23:0b:3f:46:e8:59:b5:6a:a6:b5:68:d8:a1:53:cc:c2:
5e:3e:d1:7f:20:e4:ef:2b:8b:25:63:1a:a4:86:af:aa:9b:fe:
07:d6:de:07:f9:9f:07:ac:3e:a4:36:0f:17:77:34:41:46:bb:
8d:0b:ba:66:fc:35:ae:fc:3c:9c:69:c1:59:63:04:5d:3a:d9:
de:3e:fa:34:ec:3d:93:9b:4c:a7:9f:b6:92:69:11:81:62:8d:
f0:ca:e4:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFxTuXSK490nYmzwYwZPs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjliNGYxYTA5MGFjMDdiZTE3NjJkZWMzMzhlNmEwZmUz
NWQ5N2UwHhcNMjUwNDE3MjIwMTE1WhcNMjUwNDE4MjIwMTE1WjAzMTEwLwYDVQQD
EyhkYWYxYWMzYjI5NjI3MzZmMTUyOWY1OTJlZjI3MmM1MDgwMmVlYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1QGvMlHAjQlUrbsv72ynP1w4bIh
TTSaga6JIoIDGP+IDGrrkQwQqUvxSwMfjInItio8gvea2NdW64PIm4ER2Eeq/0b3
tljPXcwVADalkaHe0uGU4XY75e9RMbAZSsBXoyJ1oWEq4qsLDjOJ8ijwBHjEgJ9g
Gxrkx4cUfiNhvjBzlT/ln2VMmyqjICUm0SPWyf6mN4O4zwrC3Ar0kh3USDAEJ5xt
yvogJkWmgDt4EWPcAnhzNt02iVacd4mWNYQ9BV/gFj/qtbNJifdVXxb0W4YnPbUf
kip0ow0cMXO7biIQcvzT90p/uDghBfUoZpzz3Llyao5KEDa1dDzP9UsLIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrxrDspYnNvFSn1ku8nLFCALutFMB8GA1UdIwQY
MBaAFHYptPGgkKwHvhdi3sM45qD+Ndl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQt
NWYxNzViNWFlMDM4LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQtNWYxNzViNWFlMDM4
LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQZZYrH5
4lIDXCTOt2iV+IjkpfGoEDdxYdjKIHZWbKoM0i2FkClpNdF5CjNizITTcEhe2gd8
+j/0srbsg08d9KIoqQHudM0bQ9MXLmmvLPUyzHQ0TLeN0/0oOOj+vMwEUk7gd5cv
P6ywCXkVuYs3WyTxmqH/39znlu0wr7qxYqpf/SFAsD3pEkynLaro26PkywrV0/Ux
Bq/yqxafTw/FE0yJB1QjCz9G6Fm1aqa1aNihU8zCXj7RfyDk7yuLJWMapIavqpv+
B9beB/mfB6w+pDYPF3c0QUa7jQu6Zvw1rvw8nGnBWWMEXTrZ3j76NOw9k5tMp5+2
kmkRgWKN8Mrk/g==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:55:38 2025 by rpki-client