Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
File: DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft (raw, json)
Hash identifier: 2tdsY+1U2QH4n3Fj1l63sN41nDQ0WDw8DvXQQ6BtE4M=
Subject key identifier: 33:3C:2F:8E:13:40:6A:15:72:30:AB:49:15:16:6C:4E:9A:55:98:91
Authority key identifier: 0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24
Certificate issuer: /CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
Certificate serial: 0194BB5FF43813FACCAD4D8C4B34C776820D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
Manifest number: 060B
Signing time: Fri 31 Jan 2025 08:00:15 +0000
Manifest this update: Fri 31 Jan 2025 08:00:15 +0000
Manifest next update: Sat 01 Feb 2025 08:00:15 +0000
Files and hashes: 1: DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl (hash: 2jAMdOJddIb6UCB3ac5AvDiatIDeMws1WVO50rNEcrc=)
2: tn341Lzi5MPGO9EUcmk0M7cXZxM.roa (hash: FFlSPwmOxmVm+VW9zVZtaZMl/pgjePvamNa1bTrjlRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f4:38:13:fa:cc:ad:4d:8c:4b:34:c7:76:82:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
Validity
Not Before: Jan 31 08:00:15 2025 GMT
Not After : Feb 1 08:00:15 2025 GMT
Subject: CN=333c2f8e13406a157230ab4915166c4e9a559891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:e3:06:76:35:1f:bf:ad:c8:34:b0:c7:b7:
50:e3:50:a3:a1:55:17:37:10:7a:b4:b8:0a:bb:c8:
1c:6b:82:4d:a1:06:29:0b:dd:b1:52:a6:97:ea:de:
f9:69:54:83:9a:41:84:7d:56:af:7e:dd:9a:20:65:
ce:32:ad:27:5e:56:66:4a:42:0a:dc:80:31:33:71:
08:7f:6d:97:a0:f9:33:fb:ad:fc:fa:21:38:42:26:
d5:9b:4e:c5:7c:d4:50:ca:fd:6b:e6:55:c4:ef:40:
6d:39:aa:9e:bf:f2:e7:82:20:d8:08:28:6e:9f:67:
5b:65:f0:72:34:6f:f4:71:38:1f:27:a6:de:35:4d:
19:c1:b4:e0:46:c9:b3:b4:bd:6a:fd:b6:bf:97:81:
b6:31:87:c9:98:f5:f2:41:30:63:1e:27:af:ff:a7:
2e:27:ea:a0:9a:fe:ed:8d:b0:f9:a5:2d:44:f7:24:
9a:0c:9d:c7:ba:33:dc:9a:a6:f1:28:67:04:e6:85:
1d:b8:6b:56:c0:d1:cc:14:ba:0f:b2:77:5b:d6:66:
1b:38:6b:7e:41:69:25:9f:12:bd:36:b5:8e:9d:fe:
2e:e2:c3:46:fc:7e:a7:fb:7f:65:9d:eb:3c:f2:60:
30:13:2a:d3:f8:77:1f:02:af:41:b3:1c:b9:ad:de:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:2F:8E:13:40:6A:15:72:30:AB:49:15:16:6C:4E:9A:55:98:91
X509v3 Authority Key Identifier:
keyid:0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a2:26:36:0e:45:aa:d9:cd:90:fc:12:a1:07:4b:aa:6c:b6:
f7:9c:19:3f:d4:04:4a:44:fb:bf:e3:f4:ad:2d:07:d1:38:b7:
7f:d2:5f:f8:78:69:6b:fa:af:22:c9:38:9e:5c:e4:a8:c9:c3:
c1:b4:99:2c:3f:cd:b0:be:46:bc:21:f8:9a:70:57:f3:80:35:
1e:10:07:a9:c1:04:ed:98:0b:84:c9:81:50:48:d8:fb:3a:57:
dd:05:fb:17:6c:3d:bb:94:09:31:05:c4:1b:ec:da:a6:ec:89:
97:71:86:95:c2:6c:f3:9d:a2:53:fe:e6:e6:67:4a:ad:c3:28:
57:2a:c0:d1:3d:fc:92:c5:e1:88:30:49:e7:a8:3c:2b:c2:e8:
c6:40:06:16:10:16:27:45:ba:9e:e9:43:98:c6:08:0e:f0:c0:
a3:a5:11:f6:d0:50:d3:41:b0:65:fd:4c:a8:74:c4:33:04:24:
09:96:e9:24:14:b8:c6:57:dd:ab:a9:c1:95:f4:29:96:87:29:
21:a0:0a:a1:56:56:56:f9:87:8e:da:11:94:87:c2:4e:6e:b4:
69:2e:8b:e6:63:0d:68:05:ef:42:24:36:b6:e4:20:cb:ce:74:
31:e9:ae:6b:64:8a:6f:26:bc:3e:8b:e4:4a:34:e9:3b:0e:c1:
ff:de:8d:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X/Q4E/rMrU2MSzTHdoINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDNmM2MzY2ZmNmQ4Y2Q0YjE1MjQwZjYxNzI4MzZjN2I1
M2ViMjQwHhcNMjUwMTMxMDgwMDE1WhcNMjUwMjAxMDgwMDE1WjAzMTEwLwYDVQQD
EygzMzNjMmY4ZTEzNDA2YTE1NzIzMGFiNDkxNTE2NmM0ZTlhNTU5ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/bjBnY1H7+tyDSwx7dQ41CjoVUX
NxB6tLgKu8gca4JNoQYpC92xUqaX6t75aVSDmkGEfVavft2aIGXOMq0nXlZmSkIK
3IAxM3EIf22XoPkz+638+iE4QibVm07FfNRQyv1r5lXE70BtOaqev/LngiDYCChu
n2dbZfByNG/0cTgfJ6beNU0ZwbTgRsmztL1q/ba/l4G2MYfJmPXyQTBjHiev/6cu
J+qgmv7tjbD5pS1E9ySaDJ3HujPcmqbxKGcE5oUduGtWwNHMFLoPsndb1mYbOGt+
QWklnxK9NrWOnf4u4sNG/H6n+39lnes88mAwEyrT+HcfAq9Bsxy5rd6YTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM8L44TQGoVcjCrSRUWbE6aVZiRMB8GA1UdIwQY
MBaAFA4D88PP9tjNSxUkD2Fyg2x7U+skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdQenc4XzIyTTFMRlNRUFlYS0RiSHRUNnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDk2MTQtNmM1MS00OWEyLTlmZmEt
Zjc1ZjQ4YmQ5NGY0LzEvRGdQenc4XzIyTTFMRlNRUFlYS0RiSHRUNnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDk2MTQtNmM1MS00OWEyLTlmZmEtZjc1ZjQ4YmQ5NGY0
LzEvRGdQenc4XzIyTTFMRlNRUFlYS0RiSHRUNnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKImNg5F
qtnNkPwSoQdLqmy295wZP9QESkT7v+P0rS0H0Ti3f9Jf+Hhpa/qvIsk4nlzkqMnD
wbSZLD/NsL5GvCH4mnBX84A1HhAHqcEE7ZgLhMmBUEjY+zpX3QX7F2w9u5QJMQXE
G+zapuyJl3GGlcJs852iU/7m5mdKrcMoVyrA0T38ksXhiDBJ56g8K8LoxkAGFhAW
J0W6nulDmMYIDvDAo6UR9tBQ00GwZf1MqHTEMwQkCZbpJBS4xlfdq6nBlfQplocp
IaAKoVZWVvmHjtoRlIfCTm60aS6L5mMNaAXvQiQ2tuQgy850Memua2SKbya8Povk
SjTpOw7B/96N/w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:40 2025 by rpki-client on console-fra.rpki-client.org