Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: c04uXxHGSq0LRJ5xvQqCqMQBQrqHwaWIDx8n+VOEnow=
Subject key identifier: DF:9B:EC:54:C4:CD:1D:53:10:8B:4C:D3:EF:E2:C5:1D:3D:47:37:CD
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 01951134D02F2DD27877C60F3D001CA7B140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0841
Signing time: Mon 17 Feb 2025 00:00:28 +0000
Manifest this update: Mon 17 Feb 2025 00:00:28 +0000
Manifest next update: Tue 18 Feb 2025 00:00:28 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: 9kcxkcY9vb96YXtxkyHy+VWz4qB0Eio6vlwxPlzVJKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:d0:2f:2d:d2:78:77:c6:0f:3d:00:1c:a7:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Feb 17 00:00:28 2025 GMT
Not After : Feb 18 00:00:28 2025 GMT
Subject: CN=df9bec54c4cd1d53108b4cd3efe2c51d3d4737cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:30:7d:dd:b9:bf:12:e1:7f:eb:9c:f0:b9:
bb:0e:52:14:ea:ad:44:41:25:b7:c8:a3:d3:dc:25:
f8:c7:03:b8:d0:b5:fa:8d:49:af:5c:6b:da:f7:4d:
55:14:10:56:99:f7:78:db:41:d0:9f:3b:a1:56:8c:
75:32:81:19:70:16:f2:b1:a1:b4:b4:5a:36:71:44:
7c:16:21:e0:64:46:67:cc:55:1d:70:03:27:38:bd:
8f:af:4e:e7:d3:4b:74:e4:74:8c:b4:d4:e7:e7:26:
13:53:fe:32:3a:3c:b6:f0:a2:c2:0a:37:fd:1e:f1:
a2:30:60:aa:6d:c9:9b:2e:d3:85:9c:78:11:b2:7b:
10:59:3f:44:76:a1:35:38:a7:3a:02:78:4b:67:ba:
8e:f7:b7:56:22:b9:e6:3a:aa:6a:5a:8d:0d:74:f3:
4e:6d:75:b5:f6:95:83:6e:88:6b:1f:cd:ac:03:e9:
fc:e0:f2:fc:c5:3e:4d:14:86:fe:ec:3e:b8:74:c6:
a1:8f:c0:5b:ef:3d:11:e7:ae:ad:fa:74:06:19:0e:
8c:18:fe:04:96:d6:0a:15:d2:a4:61:75:8d:02:c1:
1f:11:53:5a:4a:45:63:c8:ef:b5:1f:fb:49:bc:81:
d2:54:bb:af:90:8f:e8:ee:5c:2e:75:10:c6:2e:4c:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9B:EC:54:C4:CD:1D:53:10:8B:4C:D3:EF:E2:C5:1D:3D:47:37:CD
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:74:1f:4e:dd:92:1e:3f:1b:f9:9b:a7:65:b4:fe:01:3c:a6:
e0:d7:56:b5:d7:34:d5:4e:4f:4e:4e:3e:8a:ef:73:de:ba:f6:
90:e5:a1:4b:b3:60:43:c7:68:6a:d8:75:1b:f8:1f:2d:42:c5:
1d:ef:fd:0d:cd:a8:89:00:e8:b1:17:a2:c4:35:58:08:74:b5:
7c:df:8e:fe:f9:eb:e7:1d:b1:16:91:bb:3e:32:04:fd:a6:4f:
98:9d:2d:fb:5e:e6:a8:0a:b6:07:66:6a:67:26:b9:7f:a8:52:
fc:a5:7c:ec:92:12:ea:84:e6:a5:e7:20:e5:b9:50:13:b5:4b:
0b:a2:b4:ef:48:ae:42:d4:c4:27:fa:f5:42:54:8b:72:c0:02:
62:f8:09:01:6c:32:24:ec:4f:d2:59:eb:26:ba:b8:18:59:50:
41:2f:c8:01:02:f6:3a:f6:70:ad:4f:e8:ed:ba:46:4d:97:32:
af:35:98:58:0a:64:a4:be:ed:bd:dd:b3:20:68:e0:1b:34:70:
d7:81:df:ea:9b:c9:ec:29:e5:b4:72:9e:d8:35:c2:5c:a9:96:
52:e7:70:a6:02:e2:2b:82:1e:73:16:d3:12:63:91:b2:92:6f:
90:66:1d:0f:fe:12:57:d8:01:dc:6b:75:ac:de:54:1b:ec:d9:
84:b3:e9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNNAvLdJ4d8YPPQAcp7FAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MGFjNjdjNTc3NjgzNWRmMDkxOTk4MzEwOTYwZTgzYzIz
ZDlkYzYwHhcNMjUwMjE3MDAwMDI4WhcNMjUwMjE4MDAwMDI4WjAzMTEwLwYDVQQD
EyhkZjliZWM1NGM0Y2QxZDUzMTA4YjRjZDNlZmUyYzUxZDNkNDczN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjwwfd25vxLhf+uc8Lm7DlIU6q1E
QSW3yKPT3CX4xwO40LX6jUmvXGva901VFBBWmfd420HQnzuhVox1MoEZcBbysaG0
tFo2cUR8FiHgZEZnzFUdcAMnOL2Pr07n00t05HSMtNTn5yYTU/4yOjy28KLCCjf9
HvGiMGCqbcmbLtOFnHgRsnsQWT9EdqE1OKc6AnhLZ7qO97dWIrnmOqpqWo0NdPNO
bXW19pWDbohrH82sA+n84PL8xT5NFIb+7D64dMahj8Bb7z0R566t+nQGGQ6MGP4E
ltYKFdKkYXWNAsEfEVNaSkVjyO+1H/tJvIHSVLuvkI/o7lwudRDGLkySgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+b7FTEzR1TEItM0+/ixR09RzfNMB8GA1UdIwQY
MBaAFHUKxnxXdoNd8JGZgxCWDoPCPZ3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQt
MWYwYjAzNTQ0ODEwLzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQtMWYwYjAzNTQ0ODEw
LzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnQfTt2S
Hj8b+ZunZbT+ATym4NdWtdc01U5PTk4+iu9z3rr2kOWhS7NgQ8doath1G/gfLULF
He/9Dc2oiQDosReixDVYCHS1fN+O/vnr5x2xFpG7PjIE/aZPmJ0t+17mqAq2B2Zq
Zya5f6hS/KV87JIS6oTmpecg5blQE7VLC6K070iuQtTEJ/r1QlSLcsACYvgJAWwy
JOxP0lnrJrq4GFlQQS/IAQL2OvZwrU/o7bpGTZcyrzWYWApkpL7tvd2zIGjgGzRw
14Hf6pvJ7CnltHKe2DXCXKmWUudwpgLiK4IecxbTEmORspJvkGYdD/4SV9gB3Gt1
rN5UG+zZhLPp6g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:26 2025 by rpki-client