Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: +D9ubYW2qiABlAwx6LcaMoWZBnrWnk7FiOretRtDaZs=
Subject key identifier: C5:16:B4:BA:84:4D:E3:97:22:F5:BF:E0:C5:B0:44:40:AC:7C:C5:F1
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 019511A28197C47010A7A84BAB33411BFD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 02:00:17 +0000
Manifest this update: Mon 17 Feb 2025 02:00:17 +0000
Manifest next update: Tue 18 Feb 2025 02:00:17 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: RqCVBwL8BdWN6XC4NlYuo24sYCMl3wV4P+qMKNb7Jl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:81:97:c4:70:10:a7:a8:4b:ab:33:41:1b:fd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Feb 17 02:00:17 2025 GMT
Not After : Feb 18 02:00:17 2025 GMT
Subject: CN=c516b4ba844de39722f5bfe0c5b04440ac7cc5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:89:09:51:10:5b:f2:cf:a8:c2:16:d0:d4:
a3:bb:ac:53:1a:3c:ad:ab:d5:6f:7f:4c:75:5a:cb:
af:5f:f0:66:ba:74:32:ea:36:df:2f:af:4e:23:68:
89:db:88:4e:c5:8c:67:9f:e4:4b:4a:2b:f4:67:18:
9c:5d:a4:b6:e8:1a:30:32:6c:85:3b:c6:a5:83:f8:
9f:00:80:cf:93:1e:36:d3:65:d3:03:98:1f:43:6d:
f1:d1:f9:7a:f6:cd:52:8b:c8:7a:8f:8a:63:ce:37:
69:29:69:2c:f6:67:96:1c:66:91:25:15:e9:49:84:
d7:52:24:87:5b:68:51:b2:2d:cc:3c:69:13:5c:60:
f8:57:dd:9a:72:24:91:0c:14:ac:ad:6b:cf:08:55:
4f:26:c3:5c:5c:d5:ce:90:b4:95:0e:5c:5e:41:a8:
2b:af:70:ce:8f:7e:1f:66:c4:59:3e:07:0d:b3:80:
e5:4c:b1:b3:46:bf:8c:37:be:12:e3:a6:ff:c8:db:
97:6c:6e:9b:a4:d5:48:25:2b:ec:b8:71:e0:da:77:
27:75:74:34:fa:c8:22:f8:6a:ba:87:0f:6f:d8:57:
55:0e:c1:e8:69:66:57:7d:c5:c8:3e:b4:3c:4a:23:
5a:ab:66:25:8f:43:14:5a:b6:d9:39:1d:15:f2:df:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:B4:BA:84:4D:E3:97:22:F5:BF:E0:C5:B0:44:40:AC:7C:C5:F1
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ae:82:ec:9c:c2:0e:cb:a4:1c:0b:29:e6:69:58:8c:ec:6f:
14:3a:5a:59:cf:5e:6a:e7:1b:b9:98:3f:a8:44:15:1d:a4:1c:
90:3a:23:18:dd:d8:65:12:f0:30:45:2e:98:79:1d:6d:23:7d:
e3:c2:b3:8e:f9:84:dd:9a:aa:fd:7b:e7:3a:e5:21:1e:ff:82:
aa:ca:cb:ab:28:12:0c:43:a4:89:5f:fe:21:de:20:73:83:13:
96:58:5c:29:74:33:7a:f5:4c:e3:c0:1b:46:fa:bd:a7:03:c6:
b1:70:ea:75:a9:87:11:f4:1e:46:8c:56:3c:f8:28:76:f7:c1:
ef:c7:6b:8a:69:93:0d:4e:b9:5c:36:51:0b:c1:33:82:5e:46:
14:31:29:5f:d4:f3:70:32:8e:f3:86:d3:67:34:44:26:87:06:
38:e3:38:cb:55:e1:a6:ec:dc:8a:dd:d2:3a:65:fc:96:c6:e1:
5c:8f:4b:a0:35:36:35:06:0d:59:b0:3d:54:c6:e4:37:59:12:
99:40:76:34:5b:38:9a:96:4f:f1:bf:69:ea:60:64:24:d9:40:
17:e1:f5:e3:4f:3b:ce:9e:d0:7b:98:d1:5a:ec:35:0a:ad:5f:
67:d3:d8:d1:82:f1:d1:32:4b:1f:a8:67:8f:84:95:8e:08:4a:
9c:92:de:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURooGXxHAQp6hLqzNBG/2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMzg0NjU4OWEzYjM5NWIzNzU4NzczZGEzZDlmMTMzMzRj
NzIwMzgwHhcNMjUwMjE3MDIwMDE3WhcNMjUwMjE4MDIwMDE3WjAzMTEwLwYDVQQD
EyhjNTE2YjRiYTg0NGRlMzk3MjJmNWJmZTBjNWIwNDQ0MGFjN2NjNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFuJCVEQW/LPqMIW0NSju6xTGjyt
q9Vvf0x1WsuvX/BmunQy6jbfL69OI2iJ24hOxYxnn+RLSiv0ZxicXaS26BowMmyF
O8alg/ifAIDPkx4202XTA5gfQ23x0fl69s1Si8h6j4pjzjdpKWks9meWHGaRJRXp
SYTXUiSHW2hRsi3MPGkTXGD4V92aciSRDBSsrWvPCFVPJsNcXNXOkLSVDlxeQagr
r3DOj34fZsRZPgcNs4DlTLGzRr+MN74S46b/yNuXbG6bpNVIJSvsuHHg2ncndXQ0
+sgi+Gq6hw9v2FdVDsHoaWZXfcXIPrQ8SiNaq2Ylj0MUWrbZOR0V8t+udQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUWtLqETeOXIvW/4MWwRECsfMXxMB8GA1UdIwQY
MBaAFHw4RliaOzlbN1h3PaPZ8TM0xyA4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkRoR1dKbzdPVnMzV0hjOW85bnhNelRISURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yY2Q2MzgtYzc1Zi00ZDI0LWJiYWQt
Y2ZkODg2OWRmNTkxLzEvZkRoR1dKbzdPVnMzV0hjOW85bnhNelRISURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yY2Q2MzgtYzc1Zi00ZDI0LWJiYWQtY2ZkODg2OWRmNTkx
LzEvZkRoR1dKbzdPVnMzV0hjOW85bnhNelRISURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYq6C7JzC
DsukHAsp5mlYjOxvFDpaWc9eaucbuZg/qEQVHaQckDojGN3YZRLwMEUumHkdbSN9
48KzjvmE3Zqq/XvnOuUhHv+CqsrLqygSDEOkiV/+Id4gc4MTllhcKXQzevVM48Ab
Rvq9pwPGsXDqdamHEfQeRoxWPPgodvfB78drimmTDU65XDZRC8Ezgl5GFDEpX9Tz
cDKO84bTZzREJocGOOM4y1Xhpuzcit3SOmX8lsbhXI9LoDU2NQYNWbA9VMbkN1kS
mUB2NFs4mpZP8b9p6mBkJNlAF+H14087zp7Qe5jRWuw1Cq1fZ9PY0YLx0TJLH6hn
j4SVjghKnJLeLw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:56 2025 by rpki-client