Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: gcrGep/UR5e0cJ4ZOoITu7THZ0dk7i1lQOn8fcdIqdA=
Subject key identifier: F7:72:91:57:45:F2:7E:25:ED:A4:BC:CF:30:20:55:9E:F0:5B:D0:FE
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 01935764CBC0739881E70E9B1B0827E97C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 05:00:43 +0000
Manifest this update: Sat 23 Nov 2024 05:00:43 +0000
Manifest next update: Sun 24 Nov 2024 05:00:43 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: 55N/nxXWIU1emapb6CNS+h2GR8EvTGVAfkJFZeE9Qhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:cb:c0:73:98:81:e7:0e:9b:1b:08:27:e9:7c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Nov 23 05:00:43 2024 GMT
Not After : Nov 24 05:00:43 2024 GMT
Subject: CN=f772915745f27e25eda4bccf3020559ef05bd0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:3c:b2:13:63:ca:d2:ec:7a:fd:93:ed:38:
0a:3e:ec:9a:56:38:61:4d:24:54:2c:6a:4d:b7:5f:
0d:84:9e:db:54:02:23:7c:49:53:1f:07:09:a4:ef:
90:7f:09:07:1f:ab:a5:31:f0:8c:f8:dd:40:63:53:
90:0d:3f:d0:17:44:f0:13:6d:fa:ef:73:d5:2f:81:
2c:0d:69:b4:55:a2:15:2d:1a:51:ea:0b:74:01:b8:
a4:e4:a7:66:2d:eb:72:f3:fa:27:bb:5f:fd:c4:57:
f8:39:23:1f:89:f7:a8:4b:a2:3c:60:4d:05:bf:3d:
14:d9:d1:d7:ab:ca:68:ba:0f:a0:ec:8d:a1:c9:59:
80:32:7f:ac:e2:75:8e:2d:39:b1:a0:bb:10:57:ba:
e8:7c:24:16:55:4e:36:2a:ff:da:44:8b:e7:c9:51:
63:e0:ec:52:0e:6a:0e:1e:3b:1a:66:9b:af:2c:69:
77:8b:3f:d2:23:37:06:52:9c:9d:bb:cb:2b:dc:68:
9c:76:89:e6:b0:0a:0c:bd:81:de:8a:58:9f:5f:32:
4b:21:0a:88:ce:b4:83:89:b8:24:ea:a4:9c:e6:74:
84:66:5f:0e:b2:cd:43:ac:8d:d5:c9:c4:78:d8:0e:
ec:35:28:42:e9:7b:8f:09:b3:c3:18:7f:74:0c:7e:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:72:91:57:45:F2:7E:25:ED:A4:BC:CF:30:20:55:9E:F0:5B:D0:FE
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:38:1b:f2:09:93:df:1a:c9:8a:b3:54:cf:0e:cb:6a:91:
71:f9:c1:a9:8a:18:27:43:7c:2b:0f:54:b3:0e:dd:77:39:19:
b3:9a:fe:75:ab:83:2f:47:66:43:2b:75:ba:ec:fd:b2:d8:89:
9c:6f:91:e4:c2:ac:96:6f:9f:79:d9:2d:d8:df:a6:e4:1b:03:
86:dd:37:0d:da:05:cf:c0:67:d3:ba:49:95:dd:5c:97:38:f5:
8d:01:86:09:50:3b:31:36:51:c0:b6:f6:a7:29:0a:37:bd:3e:
75:51:26:8e:dd:61:60:b2:7f:b5:c6:1a:9b:ca:f9:f8:e9:75:
b5:3c:6f:90:0d:52:b1:7b:af:e1:91:30:4d:fb:4c:05:1d:11:
fb:d1:a6:a7:52:94:fe:dc:a6:57:b4:dd:17:8d:5a:db:ef:1f:
99:b6:24:37:e4:df:d3:47:06:56:4f:89:6c:ac:3c:b4:94:bf:
03:c2:2f:b6:e1:98:55:e8:ab:04:48:7c:d6:e9:78:8d:36:f2:
fd:2e:86:d4:4a:75:68:03:c3:ec:68:00:a6:8a:ad:82:37:b1:
98:07:1e:58:02:1a:ea:5f:a6:93:3b:a2:9a:ea:59:6f:ad:d9:
d1:78:9b:83:ea:eb:95:9c:97:f2:0e:90:bf:b3:dd:07:37:e7:
dc:b5:b0:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZMvAc5iB5w6bGwgn6XyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2JjOGNlYWIxZTc5M2EyMTAzOWNkMGIxZTU0NzJjNzI2
NDFmNjgwHhcNMjQxMTIzMDUwMDQzWhcNMjQxMTI0MDUwMDQzWjAzMTEwLwYDVQQD
EyhmNzcyOTE1NzQ1ZjI3ZTI1ZWRhNGJjY2YzMDIwNTU5ZWYwNWJkMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqM8shNjytLsev2T7TgKPuyaVjhh
TSRULGpNt18NhJ7bVAIjfElTHwcJpO+QfwkHH6ulMfCM+N1AY1OQDT/QF0TwE236
73PVL4EsDWm0VaIVLRpR6gt0Abik5KdmLety8/onu1/9xFf4OSMfifeoS6I8YE0F
vz0U2dHXq8poug+g7I2hyVmAMn+s4nWOLTmxoLsQV7rofCQWVU42Kv/aRIvnyVFj
4OxSDmoOHjsaZpuvLGl3iz/SIzcGUpydu8sr3GicdonmsAoMvYHeilifXzJLIQqI
zrSDibgk6qSc5nSEZl8Oss1DrI3VycR42A7sNShC6XuPCbPDGH90DH71MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdykVdF8n4l7aS8zzAgVZ7wW9D+MB8GA1UdIwQY
MBaAFAw7yM6rHnk6IQOc0LHlRyxyZB9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQt
ZjhiYWM0ZmI4ZjhhLzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQtZjhiYWM0ZmI4Zjhh
LzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE984G/IJ
k98ayYqzVM8Oy2qRcfnBqYoYJ0N8Kw9Usw7ddzkZs5r+dauDL0dmQyt1uuz9stiJ
nG+R5MKslm+fedkt2N+m5BsDht03DdoFz8Bn07pJld1clzj1jQGGCVA7MTZRwLb2
pykKN70+dVEmjt1hYLJ/tcYam8r5+Ol1tTxvkA1SsXuv4ZEwTftMBR0R+9Gmp1KU
/tymV7TdF41a2+8fmbYkN+Tf00cGVk+JbKw8tJS/A8IvtuGYVeirBEh81ul4jTby
/S6G1Ep1aAPD7GgApoqtgjexmAceWAIa6l+mkzuimupZb63Z0Xibg+rrlZyX8g6Q
v7PdBzfn3LWwMg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:35 2024 by rpki-client on console-ams.rpki-client.org