Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier: wD22dMxuUE8+Y2jL0LWzFwS4HEHM1iM0YjUwMIAWaMc=
Subject key identifier: 20:D4:9D:00:E7:71:57:45:EC:DE:F4:A8:B5:CB:98:B6:98:FD:7F:23
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial: 0194C350D9CEE4AF6A670BFB7F65F709DC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number: 9B
Signing time: Sat 01 Feb 2025 21:00:43 +0000
Manifest this update: Sat 01 Feb 2025 21:00:43 +0000
Manifest next update: Sun 02 Feb 2025 21:00:43 +0000
Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: Kf47emtriX6eLWAsF3wujfxaz/XUhAYuioZOBRHTsaY=)
2: nHio7uNF-gJsASyGNozixn0XJIM.roa (hash: jcd5sjivp19XVsrsVA1XbLT4Ewz4dljsdil0kUZsn2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:d9:ce:e4:af:6a:67:0b:fb:7f:65:f7:09:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Validity
Not Before: Feb 1 21:00:43 2025 GMT
Not After : Feb 2 21:00:43 2025 GMT
Subject: CN=20d49d00e7715745ecdef4a8b5cb98b698fd7f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:c5:31:98:91:7f:69:fe:21:18:a9:29:24:
1c:25:54:d6:d9:89:b3:e0:d5:b1:c0:dc:d0:f4:c1:
89:6c:b3:1a:97:66:c1:bc:64:a2:1b:83:58:8b:96:
7d:df:46:66:2e:ce:27:c0:3c:57:64:2d:b3:36:6c:
99:99:39:b9:c8:53:e6:27:e4:63:a3:f4:b4:a3:8a:
b0:9f:33:38:0f:19:6c:ab:20:1b:e4:8b:c2:ba:2e:
0d:66:43:db:06:02:70:76:b9:ce:00:f2:22:76:0a:
90:91:e0:dd:e7:ac:78:d0:c4:f6:8e:fd:c7:ab:aa:
d6:b1:29:07:79:31:59:7c:a6:db:e6:b9:a8:45:fd:
a0:07:00:17:76:73:eb:8f:16:c3:36:65:e8:59:68:
e3:1a:38:22:ed:59:ca:9a:b7:fd:e9:eb:03:9d:68:
15:c9:85:8d:f3:ed:d7:5d:86:81:90:78:0a:ce:bd:
c1:a0:ad:84:ab:37:1f:56:f1:8f:4b:36:ca:aa:4f:
7f:c1:1d:b6:85:2c:a4:57:9a:27:3f:86:0a:f9:c6:
f3:03:af:eb:01:18:6a:07:ba:a5:5b:71:8e:79:d8:
94:a7:76:5d:37:ed:e1:00:d1:ab:ba:85:0d:20:db:
9f:dd:49:af:23:a9:6e:e8:7d:e7:5f:20:9d:05:13:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:9D:00:E7:71:57:45:EC:DE:F4:A8:B5:CB:98:B6:98:FD:7F:23
X509v3 Authority Key Identifier:
keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5c:27:6d:34:20:14:b5:bf:46:74:65:64:5e:32:54:c7:f2:
f2:0e:86:98:15:13:1a:7c:a5:97:07:f4:4a:b8:04:49:37:f8:
7b:68:46:91:34:a7:79:58:be:ff:4f:16:5e:8a:e7:8e:74:4a:
c0:c4:39:ce:6f:d7:76:24:6c:8f:47:1c:2a:c2:4d:43:75:2c:
c3:d8:b5:85:12:c1:47:ca:66:23:90:fe:fa:68:49:50:bf:9f:
02:88:05:ec:d0:3e:c1:e8:9c:aa:b6:05:23:29:2c:dc:43:43:
48:27:44:bc:2b:54:65:71:e8:48:93:5f:13:9f:98:64:8d:ca:
e8:eb:0c:13:0e:79:5a:ef:15:56:85:7b:8b:3c:ab:c9:81:5d:
e0:20:f3:7f:70:66:a4:a7:0a:1c:0a:b2:71:ce:3c:98:01:63:
04:fa:71:e2:c8:f3:18:2b:14:f2:7d:43:51:24:f9:f5:b9:7b:
01:5c:fb:4e:29:20:7a:53:b7:cf:83:eb:bb:71:06:5b:6f:1d:
8d:d6:fb:cb:dd:27:44:5e:9a:a1:15:6e:69:50:ee:60:ad:8e:
62:ac:06:5a:bb:74:2f:7c:95:f9:d5:71:cc:ba:a9:ec:03:60:
00:ac:2c:5f:58:ce:bb:36:91:84:c1:2c:ff:ff:f0:66:81:60:
d0:71:22:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDUNnO5K9qZwv7f2X3CdyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MTYyNGRkZGM1YzAyNzljN2Y4YzlmZjEyODhhNGQzMDQ0
YzA4NDcwHhcNMjUwMjAxMjEwMDQzWhcNMjUwMjAyMjEwMDQzWjAzMTEwLwYDVQQD
EygyMGQ0OWQwMGU3NzE1NzQ1ZWNkZWY0YThiNWNiOThiNjk4ZmQ3ZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGnFMZiRf2n+IRipKSQcJVTW2Ymz
4NWxwNzQ9MGJbLMal2bBvGSiG4NYi5Z930ZmLs4nwDxXZC2zNmyZmTm5yFPmJ+Rj
o/S0o4qwnzM4DxlsqyAb5IvCui4NZkPbBgJwdrnOAPIidgqQkeDd56x40MT2jv3H
q6rWsSkHeTFZfKbb5rmoRf2gBwAXdnPrjxbDNmXoWWjjGjgi7VnKmrf96esDnWgV
yYWN8+3XXYaBkHgKzr3BoK2EqzcfVvGPSzbKqk9/wR22hSykV5onP4YK+cbzA6/r
ARhqB7qlW3GOediUp3ZdN+3hANGruoUNINuf3UmvI6lu6H3nXyCdBROguQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDUnQDncVdF7N70qLXLmLaY/X8jMB8GA1UdIwQY
MBaAFHYWJN3cXAJ5x/jJ/xKIpNMETAhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEt
MTNlODgwMTYyOGY1LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEtMTNlODgwMTYyOGY1
LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1wnbTQg
FLW/RnRlZF4yVMfy8g6GmBUTGnyllwf0SrgESTf4e2hGkTSneVi+/08WXornjnRK
wMQ5zm/XdiRsj0ccKsJNQ3Usw9i1hRLBR8pmI5D++mhJUL+fAogF7NA+weicqrYF
Iyks3ENDSCdEvCtUZXHoSJNfE5+YZI3K6OsMEw55Wu8VVoV7izyryYFd4CDzf3Bm
pKcKHAqycc48mAFjBPpx4sjzGCsU8n1DUST59bl7AVz7TikgelO3z4Pru3EGW28d
jdb7y90nRF6aoRVuaVDuYK2OYqwGWrt0L3yV+dVxzLqp7ANgAKwsX1jOuzaRhMEs
///wZoFg0HEiag==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:56 2025 by rpki-client