Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier: +QBG9UIaH8dCKTjzB1uVD4W33lf6rccxwzmPlMW8x4s=
Subject key identifier: 10:09:40:E1:D5:CD:AC:C5:27:B9:C1:B7:AA:EE:78:49:11:71:A3:78
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial: 019659B949CD86E8A4CE419A80625F6F23A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number: 0F8F
Signing time: Mon 21 Apr 2025 19:00:37 +0000
Manifest this update: Mon 21 Apr 2025 19:00:37 +0000
Manifest next update: Tue 22 Apr 2025 19:00:37 +0000
Files and hashes: 1: 2bqsQsJql_hwoFMeZ0nmgZGmbEw.roa (hash: e5rzAihzL4LX4PAPTH0rwfwcZpBTQn6I0oUQG0cd6f8=)
2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: XDcmOIWuF+RUNPxlJtpRIVnx1XW0DoDVtvEyzhbv+NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:49:cd:86:e8:a4:ce:41:9a:80:62:5f:6f:23:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Validity
Not Before: Apr 21 19:00:37 2025 GMT
Not After : Apr 22 19:00:37 2025 GMT
Subject: CN=100940e1d5cdacc527b9c1b7aaee78491171a378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:86:31:ed:b3:d5:e5:58:4f:2d:fd:3d:f6:
ca:73:f6:12:08:0e:01:ab:b9:71:96:65:39:33:d4:
e2:8e:38:55:04:64:18:5e:64:f4:91:65:11:91:eb:
4e:55:20:6f:bd:14:20:61:49:18:66:35:d6:22:fd:
cc:6e:6b:c7:d7:4d:a2:e2:a5:45:ae:86:80:d0:b6:
0d:6a:be:72:75:b0:49:1f:cc:ec:dc:a0:4a:44:8e:
5f:ac:50:8b:73:ae:e3:ca:f2:3c:74:04:f3:f3:47:
c9:b3:06:d6:27:84:ce:a6:a1:7d:b9:bc:95:66:ed:
c0:1b:ea:e9:89:a0:f5:6f:9e:6a:8b:ce:ef:26:d8:
10:49:6a:17:7f:c6:b2:1e:a4:32:53:ea:11:be:83:
28:b8:f9:98:11:88:bb:6d:7b:f9:79:2d:1d:9a:eb:
67:55:b4:16:93:7e:34:37:a5:f9:57:d9:9c:62:fa:
13:96:aa:7a:04:1b:35:71:d3:d8:c9:1b:fc:74:26:
f7:0e:d3:37:a3:11:53:09:66:3e:6c:b9:0f:18:97:
ad:f1:28:26:2b:03:8b:88:b1:e8:91:fe:0a:e0:de:
70:44:19:ca:8f:0b:1f:1f:84:60:ee:58:4b:e9:34:
c5:c2:1d:8c:28:bd:2b:ce:ee:1d:2e:30:a6:39:ba:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:09:40:E1:D5:CD:AC:C5:27:B9:C1:B7:AA:EE:78:49:11:71:A3:78
X509v3 Authority Key Identifier:
keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:82:13:13:76:c9:bc:19:d1:eb:6c:af:4e:5d:80:1a:e5:97:
a9:69:d9:b6:66:15:8d:ae:aa:8b:06:8e:95:c7:95:8d:27:37:
b0:72:37:95:6f:db:e0:3f:73:e9:01:bb:26:b0:01:df:76:5f:
f0:56:c5:cf:3c:32:65:b1:9c:c2:b5:fb:d6:ba:33:0d:33:e0:
f0:f6:04:51:bb:6f:b6:05:19:05:3a:29:f4:59:f0:0d:cf:db:
50:20:8c:32:69:b2:5f:64:e9:f3:2b:57:a3:87:90:d8:0d:69:
28:22:ed:fc:af:98:d9:85:f0:2d:5b:af:e1:d2:48:62:54:6c:
77:e5:f8:a5:e7:e8:5d:7e:96:d4:55:ff:00:57:8a:a8:7e:51:
f6:9b:61:d7:e3:59:85:f3:37:c3:eb:83:8d:2c:19:7d:4c:14:
51:06:f5:8e:5e:d9:f0:87:ba:b8:fe:de:50:77:9f:0e:50:20:
80:1e:54:4f:af:5e:84:af:c3:bf:68:ef:f7:43:b0:44:5b:e2:
70:6a:b0:14:e8:8f:38:47:2b:e2:af:9b:dd:87:fa:77:6c:50:
1e:1b:0b:6f:f1:a3:48:e7:2b:a3:3a:d4:23:eb:63:e6:66:0a:
ff:87:ed:86:8e:ce:93:aa:21:a3:61:ee:df:65:9a:5e:f6:2e:
61:f3:9c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZuUnNhuikzkGagGJfbyOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Yzg4YjFjNDFmYmViNWRhYmVmNzQzYzU3YWNkZmZjNGZh
NzQ2OTkwHhcNMjUwNDIxMTkwMDM3WhcNMjUwNDIyMTkwMDM3WjAzMTEwLwYDVQQD
EygxMDA5NDBlMWQ1Y2RhY2M1MjdiOWMxYjdhYWVlNzg0OTExNzFhMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHSGMe2z1eVYTy39PfbKc/YSCA4B
q7lxlmU5M9TijjhVBGQYXmT0kWURketOVSBvvRQgYUkYZjXWIv3MbmvH102i4qVF
roaA0LYNar5ydbBJH8zs3KBKRI5frFCLc67jyvI8dATz80fJswbWJ4TOpqF9ubyV
Zu3AG+rpiaD1b55qi87vJtgQSWoXf8ayHqQyU+oRvoMouPmYEYi7bXv5eS0dmutn
VbQWk340N6X5V9mcYvoTlqp6BBs1cdPYyRv8dCb3DtM3oxFTCWY+bLkPGJet8Sgm
KwOLiLHokf4K4N5wRBnKjwsfH4Rg7lhL6TTFwh2MKL0rzu4dLjCmObp57wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAJQOHVzazFJ7nBt6rueEkRcaN4MB8GA1UdIwQY
MBaAFHXIixxB++tdq+90PFes3/xPp0aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYTIxNjQtMTY1Ni00NGNiLTkyOTQt
MGIxZGVjMzc1NTU0LzEvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yYTIxNjQtMTY1Ni00NGNiLTkyOTQtMGIxZGVjMzc1NTU0
LzEvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYITE3bJ
vBnR62yvTl2AGuWXqWnZtmYVja6qiwaOlceVjSc3sHI3lW/b4D9z6QG7JrAB33Zf
8FbFzzwyZbGcwrX71rozDTPg8PYEUbtvtgUZBTop9FnwDc/bUCCMMmmyX2Tp8ytX
o4eQ2A1pKCLt/K+Y2YXwLVuv4dJIYlRsd+X4pefoXX6W1FX/AFeKqH5R9pth1+NZ
hfM3w+uDjSwZfUwUUQb1jl7Z8Ie6uP7eUHefDlAggB5UT69ehK/Dv2jv90OwRFvi
cGqwFOiPOEcr4q+b3Yf6d2xQHhsLb/GjSOcrozrUI+tj5mYK/4ftho7Ok6oho2Hu
32WaXvYuYfOchA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:30 2025 by rpki-client