Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
File: DLvQEU2XGWdQ1IxeElbtBVpeniw.mft (raw, json)
Hash identifier: GFvMSD3fgqmk/etUia1bNvaIu3f5byxoKgTT4sy6Tz0=
Subject key identifier: C3:79:64:AE:30:DA:93:8B:88:88:A7:6D:87:E3:DC:B2:06:94:D6:0F
Authority key identifier: 0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Certificate issuer: /CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Certificate serial: 019510FDD727D6A6A4B62F1A5EFFE94335C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
Manifest number: 08AE
Signing time: Sun 16 Feb 2025 23:00:25 +0000
Manifest this update: Sun 16 Feb 2025 23:00:25 +0000
Manifest next update: Mon 17 Feb 2025 23:00:25 +0000
Files and hashes: 1: C1pdtFvgr0xoHUm63plkKuj-C_Y.roa (hash: b/y/wC9aBMLG4uCve6DdHlmgdXRsPrspZQT4HGYlIp0=)
2: DLvQEU2XGWdQ1IxeElbtBVpeniw.crl (hash: enPbgSSPkgHiWk6xG7+DjtU2U2LQTd4hA3n3uXuZ8EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d7:27:d6:a6:a4:b6:2f:1a:5e:ff:e9:43:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Validity
Not Before: Feb 16 23:00:25 2025 GMT
Not After : Feb 17 23:00:25 2025 GMT
Subject: CN=c37964ae30da938b8888a76d87e3dcb20694d60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:64:f3:b5:ab:07:28:df:0b:45:da:b5:12:
2e:d8:ce:63:9d:78:8f:60:13:32:24:a5:1c:f3:d7:
53:a7:0f:ed:17:96:00:78:e9:9d:d2:77:2e:ff:f7:
6f:4b:8b:e9:ae:ed:c9:ec:e3:4d:db:e3:e8:d4:38:
ba:3c:d9:9a:0e:a4:47:cc:f7:e9:47:98:93:8a:c3:
c5:b5:46:bf:53:47:b6:ee:7d:e8:73:bd:96:47:dd:
8c:4d:3a:c6:10:65:59:18:5f:f8:bc:63:11:b2:0e:
07:77:bb:b5:f7:5f:8e:a0:ef:8c:3d:49:f3:e2:51:
4e:81:e6:8d:16:03:f0:b3:6b:37:00:7d:92:5f:9c:
de:c6:68:37:69:97:5e:d9:9b:35:93:06:c0:10:1e:
5d:c5:b2:a0:dd:61:11:ab:8c:cf:e4:df:3e:99:a8:
e4:89:5f:a3:d9:ad:fe:1c:f3:57:a6:ad:37:22:57:
23:8a:7c:e6:00:58:a5:f3:53:98:50:96:11:7b:a5:
e0:24:e2:13:27:6a:53:26:ff:03:2b:e6:d6:ab:56:
d0:a5:c9:e4:20:8a:a9:c1:41:aa:73:af:64:98:a6:
60:59:a7:d2:9f:8a:c0:78:d1:d3:54:a5:86:e0:57:
0d:cf:07:04:c0:2f:b5:33:49:2f:5f:89:6e:0b:05:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:79:64:AE:30:DA:93:8B:88:88:A7:6D:87:E3:DC:B2:06:94:D6:0F
X509v3 Authority Key Identifier:
keyid:0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a8:5f:ba:6f:79:b4:23:3b:8b:64:6e:3a:8b:03:6f:1d:8c:
d6:09:42:be:d3:96:d3:c7:15:5c:71:51:fb:30:55:4c:df:23:
ee:d9:84:fc:f8:7a:ba:a5:b0:9a:7b:69:ef:0e:9a:a1:ff:95:
07:a9:0c:f6:a6:74:2b:ab:c8:c4:8d:72:33:8b:06:a8:f7:91:
ca:0d:c5:f3:b4:44:3a:7a:bc:5e:7a:78:34:e2:19:b7:42:83:
1c:34:77:b6:1b:3c:95:57:2d:7b:fb:ca:69:bc:e8:17:a1:34:
08:50:1d:e5:99:04:75:ab:00:79:05:30:0f:2a:d2:fb:39:32:
60:48:00:e4:b6:f0:a9:23:2f:f3:92:9f:ae:22:a5:7e:6a:17:
66:1c:d7:7d:35:0e:fa:ee:c3:1a:5e:59:1f:31:2f:5b:31:b6:
f4:f5:9a:4e:a4:a6:5f:a1:9d:4f:05:30:59:54:37:1d:4a:48:
2a:8f:4c:87:91:01:04:9d:0b:1a:ef:48:42:63:97:6b:d4:66:
82:bb:d3:83:2c:c7:04:36:3f:c8:f1:cf:52:b9:df:5d:cf:e6:
55:b8:fd:0d:2f:cd:be:2e:04:ef:b0:fd:2b:59:5d:d1:89:bd:
53:3c:61:2c:a6:be:cb:aa:c0:7a:83:8d:ed:00:7b:80:e1:61:
b1:41:04:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/dcn1qakti8aXv/pQzXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYmJkMDExNGQ5NzE5Njc1MGQ0OGM1ZTEyNTZlZDA1NWE1
ZTllMmMwHhcNMjUwMjE2MjMwMDI1WhcNMjUwMjE3MjMwMDI1WjAzMTEwLwYDVQQD
EyhjMzc5NjRhZTMwZGE5MzhiODg4OGE3NmQ4N2UzZGNiMjA2OTRkNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon1k87WrByjfC0XatRIu2M5jnXiP
YBMyJKUc89dTpw/tF5YAeOmd0ncu//dvS4vpru3J7ONN2+Po1Di6PNmaDqRHzPfp
R5iTisPFtUa/U0e27n3oc72WR92MTTrGEGVZGF/4vGMRsg4Hd7u191+OoO+MPUnz
4lFOgeaNFgPws2s3AH2SX5zexmg3aZde2Zs1kwbAEB5dxbKg3WERq4zP5N8+majk
iV+j2a3+HPNXpq03IlcjinzmAFil81OYUJYRe6XgJOITJ2pTJv8DK+bWq1bQpcnk
IIqpwUGqc69kmKZgWafSn4rAeNHTVKWG4FcNzwcEwC+1M0kvX4luCwUo7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMN5ZK4w2pOLiIinbYfj3LIGlNYPMB8GA1UdIwQY
MBaAFAy70BFNlxlnUNSMXhJW7QVaXp4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREx2UUVVMlhHV2RRMUl4ZUVsYnRCVnBlbml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yYTFiNGUtZDc1NC00NDNjLWEzNjAt
YWZiNTY2Y2RmYWM2LzEvREx2UUVVMlhHV2RRMUl4ZUVsYnRCVnBlbml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yYTFiNGUtZDc1NC00NDNjLWEzNjAtYWZiNTY2Y2RmYWM2
LzEvREx2UUVVMlhHV2RRMUl4ZUVsYnRCVnBlbml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKhfum95
tCM7i2RuOosDbx2M1glCvtOW08cVXHFR+zBVTN8j7tmE/Ph6uqWwmntp7w6aof+V
B6kM9qZ0K6vIxI1yM4sGqPeRyg3F87REOnq8Xnp4NOIZt0KDHDR3ths8lVcte/vK
abzoF6E0CFAd5ZkEdasAeQUwDyrS+zkyYEgA5LbwqSMv85KfriKlfmoXZhzXfTUO
+u7DGl5ZHzEvWzG29PWaTqSmX6GdTwUwWVQ3HUpIKo9Mh5EBBJ0LGu9IQmOXa9Rm
grvTgyzHBDY/yPHPUrnfXc/mVbj9DS/Nvi4E77D9K1ld0Ym9UzxhLKa+y6rAeoON
7QB7gOFhsUEE+g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:14 2025 by rpki-client