Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: 8AcUcEHBt05QwRFlfFVspVaexVERtXguOfSywwFZ9/I=
Subject key identifier: 60:9A:70:2E:45:9D:0E:8A:99:7D:3E:1A:B1:3D:6F:78:60:31:5D:30
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019640302AEB2BDD8A4917791039C2CDD907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 20:00:20 +0000
Manifest this update: Wed 16 Apr 2025 20:00:20 +0000
Manifest next update: Thu 17 Apr 2025 20:00:20 +0000
Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: S8qOp6C9bV8Yk50/ly9xJfZIgl+LqObCQnG2GjC/74I=)
2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:2a:eb:2b:dd:8a:49:17:79:10:39:c2:cd:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Apr 16 20:00:20 2025 GMT
Not After : Apr 17 20:00:20 2025 GMT
Subject: CN=609a702e459d0e8a997d3e1ab13d6f7860315d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:76:28:7a:95:d8:ea:8f:91:a4:f3:9b:c3:
03:fa:23:63:03:2f:34:cd:64:ef:2f:4b:f0:93:b5:
45:8f:84:5d:4d:37:bb:f4:9f:1e:90:c8:56:d1:b6:
82:18:94:e0:88:d6:f1:6b:22:65:17:fc:fc:f0:dc:
16:90:00:d4:3c:2b:58:47:81:6f:da:45:1b:4a:20:
2a:8d:af:f6:6c:18:3d:5e:04:8d:dc:96:49:73:0e:
b5:52:2e:0e:bd:30:b3:fc:a0:17:97:35:dc:60:31:
f9:a9:b4:10:80:b8:47:f5:a1:63:35:08:b9:c6:ec:
4d:4d:62:7e:75:d6:27:46:1a:5a:2e:7f:42:26:93:
84:7d:02:bf:4b:79:35:44:e3:03:be:8a:a2:cc:7b:
8e:8e:3e:9e:90:38:85:37:79:c5:f1:a5:03:09:74:
d1:3a:24:c4:a3:a1:ff:d7:c0:7b:66:99:c3:f1:6c:
8d:a2:0c:15:47:df:cf:02:d7:cc:40:67:8a:9a:f2:
af:b0:c3:55:79:e6:d9:c4:5e:86:6e:06:44:c7:bd:
43:de:aa:28:5e:1e:f5:35:3a:3b:db:8c:18:9d:19:
26:08:e2:d1:99:cc:47:6d:bb:76:9c:dc:1a:1c:9c:
d8:f1:96:66:4a:d1:10:a6:e4:7b:1c:e9:7a:ef:72:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:70:2E:45:9D:0E:8A:99:7D:3E:1A:B1:3D:6F:78:60:31:5D:30
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ab:80:0c:c8:28:9a:49:2d:c2:b7:c8:3d:2f:67:af:3d:b1:
bb:e2:99:19:f4:98:b2:0e:64:ee:f7:1e:9a:60:b0:99:dd:63:
b9:56:ef:0c:6b:9f:7c:19:60:3f:fb:7e:6f:1f:4f:24:4c:2e:
10:d2:9a:a7:49:4b:24:10:81:13:a1:bd:d9:6a:d5:54:b6:56:
c4:07:1e:a2:65:ab:5d:ed:aa:bd:0b:b4:a5:ad:89:ef:54:54:
77:ef:d3:66:ba:0d:8b:cf:95:d3:49:cb:37:85:cf:39:12:a6:
ff:04:12:61:02:8e:54:0d:48:70:05:24:4e:b8:ab:2f:4d:a1:
a1:08:a9:d5:a8:db:a4:21:d4:7e:41:f3:ca:20:7b:86:d7:23:
6b:2f:48:5b:49:51:06:f7:6b:ee:79:d0:97:ad:88:6f:2e:71:
2a:2a:2e:92:72:49:04:36:fb:a3:38:1b:d1:86:40:4c:29:be:
a0:f9:64:b7:2d:75:9a:29:79:c9:99:7b:89:a5:26:99:76:5d:
a1:97:ae:8f:4a:58:72:d7:8f:da:8b:6e:a4:45:45:75:20:8a:
09:19:3a:8c:24:db:73:66:9f:ab:37:f6:86:85:0c:45:3e:39:
b2:29:4c:c0:4b:16:75:dc:1e:02:f4:13:92:f0:d2:f3:61:00:
eb:70:9c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMCrrK92KSRd5EDnCzdkHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1
NTY5MTQwHhcNMjUwNDE2MjAwMDIwWhcNMjUwNDE3MjAwMDIwWjAzMTEwLwYDVQQD
Eyg2MDlhNzAyZTQ1OWQwZThhOTk3ZDNlMWFiMTNkNmY3ODYwMzE1ZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ92KHqV2OqPkaTzm8MD+iNjAy80
zWTvL0vwk7VFj4RdTTe79J8ekMhW0baCGJTgiNbxayJlF/z88NwWkADUPCtYR4Fv
2kUbSiAqja/2bBg9XgSN3JZJcw61Ui4OvTCz/KAXlzXcYDH5qbQQgLhH9aFjNQi5
xuxNTWJ+ddYnRhpaLn9CJpOEfQK/S3k1ROMDvoqizHuOjj6ekDiFN3nF8aUDCXTR
OiTEo6H/18B7ZpnD8WyNogwVR9/PAtfMQGeKmvKvsMNVeebZxF6GbgZEx71D3qoo
Xh71NTo724wYnRkmCOLRmcxHbbt2nNwaHJzY8ZZmStEQpuR7HOl673JZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCacC5FnQ6KmX0+GrE9b3hgMV0wMB8GA1UdIwQY
MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt
MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3
LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABquADMgo
mkktwrfIPS9nrz2xu+KZGfSYsg5k7vcemmCwmd1juVbvDGuffBlgP/t+bx9PJEwu
ENKap0lLJBCBE6G92WrVVLZWxAceomWrXe2qvQu0pa2J71RUd+/TZroNi8+V00nL
N4XPORKm/wQSYQKOVA1IcAUkTrirL02hoQip1ajbpCHUfkHzyiB7htcjay9IW0lR
Bvdr7nnQl62Iby5xKiouknJJBDb7ozgb0YZATCm+oPlkty11mil5yZl7iaUmmXZd
oZeuj0pYcteP2otupEVFdSCKCRk6jCTbc2afqzf2hoUMRT45silMwEsWddweAvQT
kvDS82EA63CcFw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:11:09 2025 by rpki-client