Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
File: dggs9uV3xDJnGZEkoogbNzLO9AQ.mft (raw, json)
Hash identifier: TH2KbpuZ2FOIUXDdjKmOyNE+Bp8dk+KAcjmmAxTGCCU=
Subject key identifier: 7D:1E:B0:93:95:C0:43:94:00:91:BE:A6:AD:03:87:80:9A:40:30:38
Authority key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
Certificate issuer: /CN=76082cf6e577c43267199124a2881b3732cef404
Certificate serial: 01951134BF5A6097ED24EB9698A163075FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 00:00:24 +0000
Manifest this update: Mon 17 Feb 2025 00:00:24 +0000
Manifest next update: Tue 18 Feb 2025 00:00:24 +0000
Files and hashes: 1: dggs9uV3xDJnGZEkoogbNzLO9AQ.crl (hash: 5DbWqknPKG9vvUrxgDEJlsNIiJsBNrquoSUnz24F+KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:bf:5a:60:97:ed:24:eb:96:98:a1:63:07:5f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76082cf6e577c43267199124a2881b3732cef404
Validity
Not Before: Feb 17 00:00:24 2025 GMT
Not After : Feb 18 00:00:24 2025 GMT
Subject: CN=7d1eb09395c043940091bea6ad0387809a403038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:86:a2:65:c9:a4:75:4b:69:bb:25:7e:6a:
68:de:d1:d2:90:6d:9e:ca:6a:c0:2f:d4:b8:62:ea:
e7:e2:43:3c:c9:19:30:dd:52:7f:04:08:45:58:ad:
01:95:88:38:9e:05:cd:5a:2e:e8:1a:0e:2d:5a:19:
52:60:bc:14:c0:eb:3d:2c:25:94:3a:8b:2c:68:9d:
2a:6b:c0:d0:8f:62:6c:d0:38:29:23:26:8c:d0:78:
2f:e1:72:0e:98:7c:4a:e2:b9:2f:ec:b3:d6:01:f0:
43:e6:bb:5d:45:69:82:9e:44:eb:31:7f:6a:f2:c4:
32:41:8b:76:b2:01:c4:95:41:2a:38:fd:74:d7:b7:
f8:b1:47:47:37:6d:d9:3c:9c:57:00:92:de:38:8e:
07:ab:08:b0:ea:b2:db:00:a0:c4:67:e8:ec:bd:05:
63:64:8d:3c:e8:d7:84:7f:cb:b5:2b:c6:4d:f8:6b:
93:c4:c1:84:05:4e:16:ef:f5:6e:5d:3c:dc:a0:b2:
9b:30:c6:1e:5f:91:e5:9b:e3:a0:b0:9a:c5:0a:f5:
75:09:2e:0b:c1:a2:75:41:21:20:40:62:38:a6:69:
40:46:92:6a:7e:5b:3e:c0:35:0a:8a:d2:15:ae:67:
96:fe:f3:40:dc:3f:66:42:04:0c:0f:46:9d:62:2b:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:B0:93:95:C0:43:94:00:91:BE:A6:AD:03:87:80:9A:40:30:38
X509v3 Authority Key Identifier:
keyid:76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6c:f9:14:8d:a4:a0:fd:f2:fc:8d:f7:0d:40:cb:d8:ec:ef:
71:0e:67:85:29:34:10:a6:1d:1e:30:02:9a:a7:a2:76:f6:1f:
e6:91:11:79:01:8e:bd:ef:58:d1:88:2d:31:bc:7d:6a:8c:49:
93:37:e5:85:f5:54:5f:a7:6b:38:fc:f0:57:97:dd:ae:02:4d:
87:3d:fc:c8:c4:64:b2:3a:24:43:5d:bf:1b:77:8b:8c:b9:bb:
dd:63:fa:f6:2c:9a:d9:fb:12:65:8e:56:1d:bb:3c:bb:ed:74:
ae:cc:73:4f:ba:96:bb:b5:34:d7:2a:52:22:6f:e1:2a:6b:e8:
ed:c8:f4:3b:19:0c:15:b3:28:5f:b9:ad:1a:b3:81:33:a4:75:
cc:05:bd:00:5d:6b:62:77:53:71:4b:a6:26:dc:e8:0a:ca:8d:
02:d4:d2:bf:4a:bc:dc:7e:68:89:4c:62:0b:e1:95:34:8e:07:
e3:07:ed:d9:4d:e2:64:bd:fd:34:4c:7e:aa:27:09:63:65:e4:
74:6c:3c:f6:15:35:5d:c2:90:33:65:61:64:25:d2:60:78:fb:
c1:9e:5b:6a:7b:fa:e2:15:27:ff:8f:d3:b8:3d:c7:e8:3b:13:
a2:52:b2:3c:1f:e6:3a:d5:d3:72:6d:1f:01:f1:20:d5:60:6c:
13:de:8b:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNL9aYJftJOuWmKFjB1//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MDgyY2Y2ZTU3N2M0MzI2NzE5OTEyNGEyODgxYjM3MzJj
ZWY0MDQwHhcNMjUwMjE3MDAwMDI0WhcNMjUwMjE4MDAwMDI0WjAzMTEwLwYDVQQD
Eyg3ZDFlYjA5Mzk1YzA0Mzk0MDA5MWJlYTZhZDAzODc4MDlhNDAzMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8qGomXJpHVLabslfmpo3tHSkG2e
ymrAL9S4Yurn4kM8yRkw3VJ/BAhFWK0BlYg4ngXNWi7oGg4tWhlSYLwUwOs9LCWU
OossaJ0qa8DQj2Js0DgpIyaM0Hgv4XIOmHxK4rkv7LPWAfBD5rtdRWmCnkTrMX9q
8sQyQYt2sgHElUEqOP1017f4sUdHN23ZPJxXAJLeOI4Hqwiw6rLbAKDEZ+jsvQVj
ZI086NeEf8u1K8ZN+GuTxMGEBU4W7/VuXTzcoLKbMMYeX5Hlm+OgsJrFCvV1CS4L
waJ1QSEgQGI4pmlARpJqfls+wDUKitIVrmeW/vNA3D9mQgQMD0adYiscxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0esJOVwEOUAJG+pq0Dh4CaQDA4MB8GA1UdIwQY
MBaAFHYILPbld8QyZxmRJKKIGzcyzvQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGdnczl1VjN4REpuR1pFa29vZ2JOekxPOUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83ZjdlM2UtYzAyMi00NzM5LWI5Mzkt
ZDVkNGYwNzIwNWY4LzEvZGdnczl1VjN4REpuR1pFa29vZ2JOekxPOUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83ZjdlM2UtYzAyMi00NzM5LWI5MzktZDVkNGYwNzIwNWY4
LzEvZGdnczl1VjN4REpuR1pFa29vZ2JOekxPOUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGz5FI2k
oP3y/I33DUDL2OzvcQ5nhSk0EKYdHjACmqeidvYf5pEReQGOve9Y0YgtMbx9aoxJ
kzflhfVUX6drOPzwV5fdrgJNhz38yMRksjokQ12/G3eLjLm73WP69iya2fsSZY5W
Hbs8u+10rsxzT7qWu7U01ypSIm/hKmvo7cj0OxkMFbMoX7mtGrOBM6R1zAW9AF1r
YndTcUumJtzoCsqNAtTSv0q83H5oiUxiC+GVNI4H4wft2U3iZL39NEx+qicJY2Xk
dGw89hU1XcKQM2VhZCXSYHj7wZ5banv64hUn/4/TuD3H6DsTolKyPB/mOtXTcm0f
AfEg1WBsE96L7A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:37 2025 by rpki-client