Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: R5V39eOVVyEox3VBmt2Rzqmzgqnos0H7fDevco2h/oU=
Subject key identifier: 76:16:06:E3:F8:2B:3D:76:02:32:CE:B7:1B:17:28:43:B1:75:D1:A5
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 019511A3052B2B7A9171D2BCA2B60D78065F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 12AD
Signing time: Mon 17 Feb 2025 02:00:51 +0000
Manifest this update: Mon 17 Feb 2025 02:00:51 +0000
Manifest next update: Tue 18 Feb 2025 02:00:51 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: PSIEeTr2MX5+az6ZSEMc4tXA6eHXWrvj610MG+zTeAQ=)
2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:05:2b:2b:7a:91:71:d2:bc:a2:b6:0d:78:06:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Feb 17 02:00:51 2025 GMT
Not After : Feb 18 02:00:51 2025 GMT
Subject: CN=761606e3f82b3d760232ceb71b172843b175d1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:84:4b:ea:d1:ae:d2:a5:8e:37:15:a0:8d:
03:62:77:df:18:1c:87:ff:14:b3:4c:1a:05:58:69:
fd:27:70:8b:09:f5:d5:f9:17:e9:ed:1c:fa:94:3e:
77:4c:7d:c4:ab:2d:14:c0:2e:f9:91:49:fb:20:81:
a1:77:7a:4a:6b:a1:c8:e1:0d:c9:e9:64:f1:b2:06:
bc:8b:d6:d3:9d:52:8d:ce:d1:cb:b9:1f:0f:ed:6c:
43:f0:ce:73:a8:e8:e7:a7:a4:39:9a:fb:1f:88:bd:
d7:88:67:b4:2f:26:da:87:0d:6d:9a:d1:22:41:2e:
b3:58:45:6b:44:0c:85:25:75:66:2c:94:44:05:86:
ff:36:d1:0f:d8:d6:34:25:1e:c2:50:98:c5:6a:07:
e4:16:d4:fd:b9:06:fd:38:35:2a:71:45:1c:b9:af:
d1:77:7b:11:17:18:2f:6d:6e:b9:cf:34:f1:16:c9:
78:f5:b8:c0:5c:69:78:2b:a4:8e:25:03:1e:bc:d9:
9e:e0:20:c3:09:24:f7:3f:0e:3d:0b:fd:24:1b:31:
78:0b:42:46:24:5c:98:ad:2d:0e:0f:e3:f1:cd:22:
57:df:87:19:3f:08:21:44:9e:0f:62:04:13:e7:47:
84:a7:17:32:82:9b:70:af:e9:87:b4:1b:f4:64:cd:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:16:06:E3:F8:2B:3D:76:02:32:CE:B7:1B:17:28:43:B1:75:D1:A5
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:45:74:d9:2b:d0:20:e3:38:54:71:76:18:b3:ec:8b:6c:3a:
4d:35:c0:73:73:70:b4:ae:3f:54:1c:dc:53:03:40:c3:f2:f9:
30:61:7b:76:9e:07:ef:6b:c5:14:d5:6b:59:22:3c:57:dc:e1:
95:2e:cb:91:8d:f9:96:b1:a5:71:42:ca:35:70:52:31:83:e5:
ed:f1:be:d8:f0:57:c2:e9:9e:55:20:04:3e:1d:b1:4e:b7:be:
7d:7e:f6:2b:98:6c:33:59:cd:2b:36:a8:7f:bb:c6:05:f1:07:
12:00:de:19:49:26:5f:f2:0d:8e:ed:2a:27:91:4a:48:71:bc:
22:77:cc:eb:9e:f7:1f:02:65:8a:ca:1a:59:ac:36:05:16:0a:
7b:04:18:a5:75:b2:7a:20:4a:fb:cc:31:a1:35:ae:9e:e8:6f:
f8:1f:4f:68:60:63:0b:a1:42:1a:b5:56:44:97:21:32:da:14:
27:fc:24:de:1e:88:8c:99:f3:05:3b:3d:0c:f6:8f:18:d9:53:
7d:0d:84:e4:57:d7:6c:35:85:45:1e:1e:ce:16:22:da:d7:70:
68:92:d2:20:be:80:eb:12:d3:5c:37:c0:a8:67:26:71:4e:d3:
6e:09:99:8f:0b:6f:27:74:2f:d1:f4:c9:3b:c2:79:f3:2f:d7:
b1:6c:47:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURowUrK3qRcdK8orYNeAZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzc2NjJmNjBiNWM0MTAzMmUwNTM1ZWU3MjcxODRlM2Fk
YjdiNzcwHhcNMjUwMjE3MDIwMDUxWhcNMjUwMjE4MDIwMDUxWjAzMTEwLwYDVQQD
Eyg3NjE2MDZlM2Y4MmIzZDc2MDIzMmNlYjcxYjE3Mjg0M2IxNzVkMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqKES+rRrtKljjcVoI0DYnffGByH
/xSzTBoFWGn9J3CLCfXV+Rfp7Rz6lD53TH3Eqy0UwC75kUn7IIGhd3pKa6HI4Q3J
6WTxsga8i9bTnVKNztHLuR8P7WxD8M5zqOjnp6Q5mvsfiL3XiGe0Lybahw1tmtEi
QS6zWEVrRAyFJXVmLJREBYb/NtEP2NY0JR7CUJjFagfkFtT9uQb9ODUqcUUcua/R
d3sRFxgvbW65zzTxFsl49bjAXGl4K6SOJQMevNme4CDDCST3Pw49C/0kGzF4C0JG
JFyYrS0OD+PxzSJX34cZPwghRJ4PYgQT50eEpxcygptwr+mHtBv0ZM1XnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYWBuP4Kz12AjLOtxsXKEOxddGlMB8GA1UdIwQY
MBaAFN93Zi9gtcQQMuBTXucnGE4623t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2Yt
NDEwNWY4YTNiYjljLzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2YtNDEwNWY4YTNiYjlj
LzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUV02SvQ
IOM4VHF2GLPsi2w6TTXAc3NwtK4/VBzcUwNAw/L5MGF7dp4H72vFFNVrWSI8V9zh
lS7LkY35lrGlcULKNXBSMYPl7fG+2PBXwumeVSAEPh2xTre+fX72K5hsM1nNKzao
f7vGBfEHEgDeGUkmX/INju0qJ5FKSHG8InfM6573HwJlisoaWaw2BRYKewQYpXWy
eiBK+8wxoTWunuhv+B9PaGBjC6FCGrVWRJchMtoUJ/wk3h6IjJnzBTs9DPaPGNlT
fQ2E5FfXbDWFRR4ezhYi2tdwaJLSIL6A6xLTXDfAqGcmcU7TbgmZjwtvJ3Qv0fTJ
O8J58y/XsWxH1g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:52 2025 by rpki-client