Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: bA4N2a8j2DuWLxMXLqEfJMrVdmhU2VwDDUd+u+Xee8w=
Subject key identifier: 7D:FD:D6:4D:D5:73:B5:0A:51:F5:66:94:18:03:91:1D:DA:B4:4C:C0
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 01958EF3ADB998DB01D3EBDD126768DC9EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0B27
Signing time: Thu 13 Mar 2025 10:01:29 +0000
Manifest this update: Thu 13 Mar 2025 10:01:29 +0000
Manifest next update: Fri 14 Mar 2025 10:01:29 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: c8iB8tuQRHvTD37Xrib/i+gphTYmk5U9tDe5N/lJVcI=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:ad:b9:98:db:01:d3:eb:dd:12:67:68:dc:9e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Mar 13 10:01:29 2025 GMT
Not After : Mar 14 10:01:29 2025 GMT
Subject: CN=7dfdd64dd573b50a51f566941803911ddab44cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:7f:d7:a5:ed:85:73:cc:af:9b:b6:41:21:
65:a1:19:c6:04:45:55:8b:b0:f5:4c:1f:36:c3:5d:
24:fb:0f:ea:63:d6:63:5c:5e:4b:a3:bd:74:5d:96:
87:5e:98:bc:bd:43:a4:eb:41:3c:d6:9f:ee:01:fe:
a4:21:e9:a4:b6:4c:a9:cf:30:8a:c5:98:24:76:0f:
d3:d8:c3:75:0f:aa:ec:67:67:2c:19:55:59:6c:7a:
a3:01:0c:f8:58:c8:b2:a5:12:e2:9a:85:00:cb:35:
57:ee:99:8b:fb:24:10:af:a1:9a:26:64:69:2c:18:
18:f8:ae:20:87:aa:a1:0e:dd:c7:a6:31:83:00:f6:
b2:8b:cc:09:27:8e:1f:50:f4:4e:09:3f:9f:18:37:
d1:23:06:ad:61:71:c1:cb:f4:0f:02:93:02:a1:3b:
cb:e3:f3:3d:83:93:4a:8e:b8:b8:1f:2f:5b:c8:e3:
d0:a5:14:c2:f0:48:e9:03:a4:a7:f7:5a:ce:7b:75:
26:6d:a0:48:90:67:67:1f:c0:d7:01:f5:7b:26:d3:
ea:92:44:c7:4a:04:7b:a6:5a:5b:01:42:43:8e:e3:
64:1c:c4:13:54:39:3e:a1:aa:cf:fd:78:fa:a6:cb:
08:78:7c:9d:b0:85:1b:39:f6:e6:48:4f:f4:cb:cb:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FD:D6:4D:D5:73:B5:0A:51:F5:66:94:18:03:91:1D:DA:B4:4C:C0
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5d:a6:8a:9f:a6:e9:2a:8c:cb:06:cd:2c:62:8c:a7:7e:b2:
a1:0f:f2:c6:e8:83:3a:0c:de:05:f9:ca:76:68:c0:ef:fe:15:
76:07:ec:53:c8:ea:d8:06:f0:63:9b:b5:29:c7:b0:a7:24:c6:
eb:d0:62:83:11:b2:7b:54:9f:0e:7c:0d:d6:11:7a:dc:87:b3:
58:56:d0:d6:66:ce:df:92:fa:70:2b:40:78:c8:00:01:6c:72:
dd:ee:84:13:74:92:f1:c4:9b:e8:b5:4a:c1:73:23:d9:73:f1:
c5:f2:2e:f7:45:74:14:11:45:54:98:fc:d9:d3:4c:56:96:64:
2f:cc:3d:00:9d:2c:45:0a:61:9a:07:a6:bc:16:93:f8:e7:99:
01:ce:1f:d0:6a:17:47:f8:e6:89:23:e9:68:6d:0d:d0:fc:17:
26:f5:19:12:fb:f2:9d:77:97:10:00:df:b1:56:6e:61:72:c7:
d9:47:1f:c3:37:76:2d:6d:44:8d:11:14:6a:1b:e6:e2:4b:5e:
a6:53:35:86:67:74:88:6d:b3:41:a5:0c:fc:ae:d5:06:87:ca:
cf:ce:bc:68:21:c9:2d:78:af:5c:31:2e:6a:63:86:14:bc:52:
86:8b:30:f9:5f:10:66:91:1e:15:bd:18:8b:3d:1e:2b:6b:c4:
7f:4d:29:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWO8625mNsB0+vdEmdo3J75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDkwMmEwN2ZjN2Q0OGUwZGIyOWJmZmJlM2FiMTA1NDNm
YzE0NjUwHhcNMjUwMzEzMTAwMTI5WhcNMjUwMzE0MTAwMTI5WjAzMTEwLwYDVQQD
Eyg3ZGZkZDY0ZGQ1NzNiNTBhNTFmNTY2OTQxODAzOTExZGRhYjQ0Y2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0B/16XthXPMr5u2QSFloRnGBEVV
i7D1TB82w10k+w/qY9ZjXF5Lo710XZaHXpi8vUOk60E81p/uAf6kIemktkypzzCK
xZgkdg/T2MN1D6rsZ2csGVVZbHqjAQz4WMiypRLimoUAyzVX7pmL+yQQr6GaJmRp
LBgY+K4gh6qhDt3HpjGDAPayi8wJJ44fUPROCT+fGDfRIwatYXHBy/QPApMCoTvL
4/M9g5NKjri4Hy9byOPQpRTC8EjpA6Sn91rOe3UmbaBIkGdnH8DXAfV7JtPqkkTH
SgR7plpbAUJDjuNkHMQTVDk+oarP/Xj6pssIeHydsIUbOfbmSE/0y8uQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH391k3Vc7UKUfVmlBgDkR3atEzAMB8GA1UdIwQY
MBaAFNXZAqB/x9SODbKb/746sQVD/BRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEt
YTZjZWMyNWI4MDA2LzEvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEtYTZjZWMyNWI4MDA2
LzEvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl2mip+m
6SqMywbNLGKMp36yoQ/yxuiDOgzeBfnKdmjA7/4VdgfsU8jq2AbwY5u1KcewpyTG
69BigxGye1SfDnwN1hF63IezWFbQ1mbO35L6cCtAeMgAAWxy3e6EE3SS8cSb6LVK
wXMj2XPxxfIu90V0FBFFVJj82dNMVpZkL8w9AJ0sRQphmgemvBaT+OeZAc4f0GoX
R/jmiSPpaG0N0PwXJvUZEvvynXeXEADfsVZuYXLH2Ucfwzd2LW1EjREUahvm4kte
plM1hmd0iG2zQaUM/K7VBofKz868aCHJLXivXDEuamOGFLxShosw+V8QZpEeFb0Y
iz0eK2vEf00pWQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:54 2025 by rpki-client