Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: ND92HvA1pTItG/YFKYBa9xDeU8MuWJonOmomSuMd/QY=
Subject key identifier: C4:A0:D8:6C:96:43:92:69:D3:63:F1:AF:82:9A:7C:1B:66:C7:5F:4C
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 01964DEC7D8F7F17CA5A935509695F702855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 12:01:05 +0000
Manifest this update: Sat 19 Apr 2025 12:01:05 +0000
Manifest next update: Sun 20 Apr 2025 12:01:05 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: 9HSjuc/4HQGSQLtUorvSpj/WmHOflIRlz84F0DCao+c=)
2: JKIB76zKkkKrBoUXjR0hAQtGTdM.roa (hash: ykn0vkdS9mLj16yNgBoFWQshZXTgOTHfF/eRZDldNCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:7d:8f:7f:17:ca:5a:93:55:09:69:5f:70:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Apr 19 12:01:05 2025 GMT
Not After : Apr 20 12:01:05 2025 GMT
Subject: CN=c4a0d86c96439269d363f1af829a7c1b66c75f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:1c:d2:a2:1e:4b:cd:56:26:49:34:93:7b:
7c:4b:ff:45:69:75:88:0f:5b:f8:a9:f4:e7:e4:1b:
21:35:46:b0:18:7a:4f:d8:26:17:6a:72:9a:73:13:
dd:22:a4:27:7e:3d:dc:c4:7d:fb:24:5a:cb:f5:71:
7f:fe:ea:20:c1:9d:ab:c3:bf:5c:85:9a:af:16:fc:
2e:d9:58:40:74:03:5c:b2:66:33:2d:79:48:94:f9:
19:25:09:4a:5a:26:83:b2:44:67:94:e1:83:74:30:
ee:69:5c:ec:21:88:49:a8:00:0d:03:9e:84:61:8a:
fb:34:e1:fe:1c:94:e8:7d:29:30:d4:85:d2:f7:a1:
d3:87:2d:e9:cf:b5:de:af:e4:7a:ae:dd:21:41:c2:
ff:91:2b:68:f6:b2:e4:dd:2e:25:5a:5f:ef:04:55:
6d:21:0e:00:7b:07:0c:0f:c8:96:ec:ef:76:6d:5c:
88:ad:f6:4c:d7:37:00:95:0e:34:08:58:df:d8:18:
08:31:f9:51:70:af:32:6e:b3:97:8b:9f:c1:87:cc:
55:57:65:c6:89:b0:4e:d1:77:5e:15:58:c8:a6:4c:
d6:83:54:6a:1f:db:ca:06:72:0d:92:1b:f5:c4:fd:
40:21:17:cd:34:b7:fb:40:da:c1:4b:6c:50:b2:1c:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A0:D8:6C:96:43:92:69:D3:63:F1:AF:82:9A:7C:1B:66:C7:5F:4C
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:df:73:ab:93:9b:c4:ae:3c:eb:a6:f9:f6:aa:c5:e6:fb:72:
b0:99:da:44:3d:e8:f2:a7:37:e2:dd:e4:18:b2:9c:1c:97:f5:
ad:6e:2d:5c:5d:94:c0:ce:ad:3b:3c:d7:8c:39:e1:81:c2:6e:
b7:dd:21:80:7e:e5:f0:37:61:40:b6:0e:2d:f2:56:56:f5:23:
eb:d1:d5:31:7f:ab:59:ea:c7:07:26:f0:ed:86:b1:3d:06:2b:
cc:82:69:4c:bf:f4:0d:b5:7d:08:f8:e0:64:35:9c:8b:22:49:
21:df:44:ac:07:2f:dd:cb:de:09:e8:cf:e6:5b:0d:f7:08:8b:
57:ee:cc:5e:b9:ff:cc:b2:9f:5b:62:61:a6:8e:48:6b:44:a1:
73:b4:79:9f:15:44:be:04:60:d3:87:39:8c:09:3b:16:d5:e1:
ba:5d:a7:1e:0d:da:66:87:3b:85:0b:7a:1e:2c:55:aa:8f:08:
2e:9c:e8:22:62:bc:24:20:b0:1c:1a:42:79:96:b9:ec:a3:d3:
81:da:55:17:e8:3d:dd:5c:1b:f5:1c:f9:ca:32:a2:0b:18:54:
4e:56:25:4a:8e:6c:41:4b:02:7d:26:3f:4c:e6:80:f1:df:fd:
d1:a7:52:a3:8a:03:02:0a:6a:bc:a8:b9:81:76:0a:a6:ae:b3:
f3:ef:cd:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN7H2PfxfKWpNVCWlfcChVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjZlNjMzMDY3YzA2NmFlOWJlZjFkMzc3MWNjMzAwZTRi
NGQxYTcwHhcNMjUwNDE5MTIwMTA1WhcNMjUwNDIwMTIwMTA1WjAzMTEwLwYDVQQD
EyhjNGEwZDg2Yzk2NDM5MjY5ZDM2M2YxYWY4MjlhN2MxYjY2Yzc1ZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w4c0qIeS81WJkk0k3t8S/9FaXWI
D1v4qfTn5BshNUawGHpP2CYXanKacxPdIqQnfj3cxH37JFrL9XF//uogwZ2rw79c
hZqvFvwu2VhAdANcsmYzLXlIlPkZJQlKWiaDskRnlOGDdDDuaVzsIYhJqAANA56E
YYr7NOH+HJTofSkw1IXS96HThy3pz7Xer+R6rt0hQcL/kSto9rLk3S4lWl/vBFVt
IQ4AewcMD8iW7O92bVyIrfZM1zcAlQ40CFjf2BgIMflRcK8ybrOXi5/Bh8xVV2XG
ibBO0XdeFVjIpkzWg1RqH9vKBnINkhv1xP1AIRfNNLf7QNrBS2xQshxO6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSg2GyWQ5Jp02Pxr4KafBtmx19MMB8GA1UdIwQY
MBaAFA325jMGfAZq6b7x03ccwwDktNGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTct
OGQxYzlkMTE5MmIwLzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTctOGQxYzlkMTE5MmIw
LzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJd9zq5Ob
xK4866b59qrF5vtysJnaRD3o8qc34t3kGLKcHJf1rW4tXF2UwM6tOzzXjDnhgcJu
t90hgH7l8DdhQLYOLfJWVvUj69HVMX+rWerHBybw7YaxPQYrzIJpTL/0DbV9CPjg
ZDWciyJJId9ErAcv3cveCejP5lsN9wiLV+7MXrn/zLKfW2Jhpo5Ia0Shc7R5nxVE
vgRg04c5jAk7FtXhul2nHg3aZoc7hQt6HixVqo8ILpzoImK8JCCwHBpCeZa57KPT
gdpVF+g93Vwb9Rz5yjKiCxhUTlYlSo5sQUsCfSY/TOaA8d/90adSo4oDAgpqvKi5
gXYKpq6z8+/NJA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:57 2025 by rpki-client