Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: EtY8rzDtb7mWF768MxBN0CE2ytd2AwGvgG22xsup12E=
Subject key identifier: FF:4D:FC:B2:D8:E4:33:66:FC:E9:3C:1C:49:54:72:BC:A1:FE:7A:8B
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 0194BA841D285FF5044A63D91D2946AF6A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 074D
Signing time: Fri 31 Jan 2025 04:00:07 +0000
Manifest this update: Fri 31 Jan 2025 04:00:07 +0000
Manifest next update: Sat 01 Feb 2025 04:00:07 +0000
Files and hashes: 1: 8whQoCNJkcO8xIN4te953BPSKIE.roa (hash: Hi+Lg2/SC23FTXEW5HEq9SyVqw0M6I1sge9enc2fYd4=)
2: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: z+lsvztnotO/Va30zNjE2C51L9AWjQpLQ+bAVc5o/gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:1d:28:5f:f5:04:4a:63:d9:1d:29:46:af:6a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Jan 31 04:00:07 2025 GMT
Not After : Feb 1 04:00:07 2025 GMT
Subject: CN=ff4dfcb2d8e43366fce93c1c495472bca1fe7a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:ed:a3:dc:a9:e5:3c:33:62:1c:88:dd:11:
a1:a6:46:dd:59:1c:ed:67:ba:46:07:97:8d:f3:be:
a6:73:96:c1:3c:6b:bb:45:3a:9a:2e:70:d6:03:ab:
3c:c2:21:4b:eb:e3:e5:eb:34:bd:89:64:6c:ba:3e:
1e:4e:00:7a:20:eb:83:20:18:d1:ba:4b:1d:ca:a0:
7f:72:d0:45:13:0d:1f:02:de:38:85:c8:51:37:54:
44:21:15:dd:42:9b:4a:df:cf:99:3f:85:42:e8:02:
56:e5:e1:d0:25:be:ff:2e:8d:81:da:d1:21:da:1a:
cd:26:60:77:62:05:ee:e8:84:d8:a9:ac:8e:dc:0d:
54:9a:8c:9d:fe:99:ec:ab:08:b0:7b:1a:2a:e5:e0:
6f:90:92:b7:28:7d:37:f7:b9:b1:80:0f:8b:a7:16:
8e:57:92:da:69:ba:9a:9a:82:98:76:31:51:1d:2f:
78:c8:9a:84:bc:05:eb:c4:17:2d:ae:53:25:72:70:
32:8a:bd:ff:e1:d1:79:be:94:63:99:7b:2b:b9:32:
c3:89:c3:c8:27:e8:2b:0b:2b:d6:ed:4d:05:14:d4:
02:a7:2f:2a:fb:82:45:fa:ff:0e:67:7c:6e:e0:27:
f6:7e:7b:81:bd:e5:ba:8d:4a:25:29:c7:ce:e8:1a:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4D:FC:B2:D8:E4:33:66:FC:E9:3C:1C:49:54:72:BC:A1:FE:7A:8B
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:51:dc:09:48:7f:e8:f5:02:3d:f1:23:6b:96:8b:8d:f5:d6:
27:a8:3e:76:5f:fb:7f:2d:e8:91:55:dc:e6:dc:46:16:34:0a:
44:a2:15:d0:46:d3:45:67:7e:fe:35:0b:bd:b0:e8:bf:a3:66:
ea:25:ce:e5:72:06:7e:78:0f:b2:5a:d7:e9:24:53:b3:ee:da:
b7:ce:50:4f:4e:00:3f:b2:2f:4e:70:e5:6a:a3:1b:74:62:61:
96:f3:e8:10:ce:91:00:cf:13:a1:28:96:3c:aa:b6:7a:85:bd:
36:3a:4b:1f:2d:99:4f:37:a8:c4:50:ba:27:87:ec:41:9f:13:
e7:92:90:87:d7:11:7f:62:bc:e2:e4:39:13:f1:9f:6a:9a:10:
a1:3e:37:15:17:25:1c:fb:d8:7d:b4:62:36:78:6d:91:7f:5d:
0a:27:9d:5c:92:df:23:53:30:75:cc:0e:b0:23:df:21:10:0e:
84:68:1c:d6:ca:60:fa:b9:05:1b:be:e6:8a:48:97:5c:9c:45:
ad:c6:be:44:69:f1:7d:a6:e6:87:26:4c:59:21:64:c4:41:e7:
09:f1:a4:40:9b:22:3f:57:59:54:9b:f6:df:4b:07:96:c3:5a:
2c:52:ca:4a:ba:5c:33:b7:47:48:56:4f:c9:ef:bc:ac:be:cc:
06:90:5a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hB0oX/UESmPZHSlGr2pEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NzJjMGZlMDgzNzE3NjQwNThjNmFiODVkZmI1ZGNkYzEw
OWY3N2UwHhcNMjUwMTMxMDQwMDA3WhcNMjUwMjAxMDQwMDA3WjAzMTEwLwYDVQQD
EyhmZjRkZmNiMmQ4ZTQzMzY2ZmNlOTNjMWM0OTU0NzJiY2ExZmU3YThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0fto9yp5TwzYhyI3RGhpkbdWRzt
Z7pGB5eN876mc5bBPGu7RTqaLnDWA6s8wiFL6+Pl6zS9iWRsuj4eTgB6IOuDIBjR
uksdyqB/ctBFEw0fAt44hchRN1REIRXdQptK38+ZP4VC6AJW5eHQJb7/Lo2B2tEh
2hrNJmB3YgXu6ITYqayO3A1Umoyd/pnsqwiwexoq5eBvkJK3KH0397mxgA+LpxaO
V5LaabqamoKYdjFRHS94yJqEvAXrxBctrlMlcnAyir3/4dF5vpRjmXsruTLDicPI
J+grCyvW7U0FFNQCpy8q+4JF+v8OZ3xu4Cf2fnuBveW6jUolKcfO6Bp0twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9N/LLY5DNm/Ok8HElUcryh/nqLMB8GA1UdIwQY
MBaAFHZywP4INxdkBYxquF37Xc3BCfd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQt
YzNjODBlNDcwNGU0LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQtYzNjODBlNDcwNGU0
LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy1HcCUh/
6PUCPfEja5aLjfXWJ6g+dl/7fy3okVXc5txGFjQKRKIV0EbTRWd+/jULvbDov6Nm
6iXO5XIGfngPslrX6SRTs+7at85QT04AP7IvTnDlaqMbdGJhlvPoEM6RAM8ToSiW
PKq2eoW9NjpLHy2ZTzeoxFC6J4fsQZ8T55KQh9cRf2K84uQ5E/GfapoQoT43FRcl
HPvYfbRiNnhtkX9dCiedXJLfI1MwdcwOsCPfIRAOhGgc1spg+rkFG77mikiXXJxF
rca+RGnxfabmhyZMWSFkxEHnCfGkQJsiP1dZVJv230sHlsNaLFLKSrpcM7dHSFZP
ye+8rL7MBpBayA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:17 2025 by rpki-client on console-fra.rpki-client.org