Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: P06vY23w7IF6rKzoXMFpKIFPy6yA5CMyL5rIzbkL+Cc=
Subject key identifier: 97:AF:75:24:5E:76:57:98:B2:33:67:CC:63:61:AE:2A:EE:AB:FB:93
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 0194BB974CB67226BC2081AC9EA8ECAE5C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 09:00:42 +0000
Manifest this update: Fri 31 Jan 2025 09:00:42 +0000
Manifest next update: Sat 01 Feb 2025 09:00:42 +0000
Files and hashes: 1: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: EOXxUOTE4Q44jnJsUZW/3StptLtD4ZVQ4RNpC5bFjvw=)
2: y8a09sHjWHM5T2xCi9njj3ZdPYg.roa (hash: CAxwtV7q/TGnHiFNWAua77bFrVfKg4wLI65YyM+74Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:4c:b6:72:26:bc:20:81:ac:9e:a8:ec:ae:5c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: Jan 31 09:00:42 2025 GMT
Not After : Feb 1 09:00:42 2025 GMT
Subject: CN=97af75245e765798b23367cc6361ae2aeeabfb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:36:15:28:1e:5c:82:05:a6:1b:c4:80:0c:
60:16:81:5e:0f:05:a8:8f:49:40:03:5b:ed:61:e6:
a4:18:7f:74:af:1b:a4:48:56:41:42:41:40:67:b8:
da:33:87:bd:60:99:dc:55:72:81:80:bf:15:e5:e8:
cd:8d:f5:99:c9:50:2f:03:ea:0a:bf:1b:6a:1c:8d:
c9:bd:a1:5d:5e:64:82:f5:70:0b:95:a8:4d:bd:f8:
a2:58:8f:9b:66:6e:fe:7a:bd:50:f5:86:8a:a7:5e:
d9:16:e4:dc:6f:f4:76:54:6b:59:8c:f3:4e:a6:75:
54:ca:c7:81:c4:37:32:c3:98:6f:b1:97:f6:ca:46:
8a:c4:5d:07:e0:4e:30:4b:0c:ea:bd:d5:7f:e4:7f:
69:6d:43:7a:1f:f4:e3:e4:99:72:8a:f7:8a:30:88:
0e:2d:41:dc:cf:c8:f3:17:76:33:07:a2:4e:9e:1a:
3a:10:30:53:3d:aa:df:d5:5a:db:2d:c7:8c:b7:25:
f5:41:3c:e9:39:00:35:8f:2b:0e:e8:a4:7c:27:39:
c3:af:21:e4:99:96:2b:56:4f:fb:21:bf:be:de:56:
da:6b:77:30:99:74:6c:de:d0:6a:00:5c:a7:71:3f:
a8:e7:a1:b7:9e:61:1b:58:66:ac:93:99:0e:b6:95:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AF:75:24:5E:76:57:98:B2:33:67:CC:63:61:AE:2A:EE:AB:FB:93
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:05:9f:e7:ba:4b:33:34:d6:92:d2:c6:c3:6f:27:75:89:08:
ce:db:f6:81:58:78:d5:cf:02:4b:54:c2:c7:f0:77:49:e6:b9:
0d:df:65:77:99:6d:e4:53:74:0a:09:9a:bb:5a:14:0b:f8:11:
89:60:00:7f:48:f3:e7:a4:85:4e:f8:45:f3:71:7d:8c:92:55:
7e:2f:a5:82:39:ce:33:af:00:0a:1f:d8:43:6a:c5:c9:00:67:
ac:18:15:55:25:1a:3e:ab:29:9e:a2:b0:86:3d:37:8d:ee:c0:
9a:7b:e6:b3:94:50:cf:16:53:13:04:4f:a6:7a:f4:a6:c0:fb:
3a:4b:4a:df:f1:a2:10:b3:bb:23:f2:e7:0c:fc:f5:f6:79:9e:
4b:f4:93:85:37:da:e4:c7:b8:f0:58:56:9e:59:bf:f6:b8:30:
1f:8f:9e:08:77:fa:4c:f6:13:3c:a6:dc:50:ec:61:7d:2f:24:
3e:60:eb:de:a8:98:23:fa:6d:5d:0c:3a:b5:73:8b:83:e1:8d:
f2:c0:5b:28:93:11:9b:78:2c:02:1c:4c:1f:47:e8:41:30:fe:
fc:40:12:90:df:6a:47:f4:f0:88:e9:b3:76:2e:5f:fb:27:67:
b1:2f:39:e9:6f:fb:53:1d:da:ad:c1:1b:c0:f8:b2:98:15:e1:
69:ef:a8:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7l0y2cia8IIGsnqjsrlyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjBjMWQxMGU0ZTVhNzFlM2NkNWM1ZDZiZWViZjc3OGEw
NmUzMDQwHhcNMjUwMTMxMDkwMDQyWhcNMjUwMjAxMDkwMDQyWjAzMTEwLwYDVQQD
Eyg5N2FmNzUyNDVlNzY1Nzk4YjIzMzY3Y2M2MzYxYWUyYWVlYWJmYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcE2FSgeXIIFphvEgAxgFoFeDwWo
j0lAA1vtYeakGH90rxukSFZBQkFAZ7jaM4e9YJncVXKBgL8V5ejNjfWZyVAvA+oK
vxtqHI3JvaFdXmSC9XALlahNvfiiWI+bZm7+er1Q9YaKp17ZFuTcb/R2VGtZjPNO
pnVUyseBxDcyw5hvsZf2ykaKxF0H4E4wSwzqvdV/5H9pbUN6H/Tj5JlyiveKMIgO
LUHcz8jzF3YzB6JOnho6EDBTParf1VrbLceMtyX1QTzpOQA1jysO6KR8JznDryHk
mZYrVk/7Ib++3lbaa3cwmXRs3tBqAFyncT+o56G3nmEbWGask5kOtpXDGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJevdSRedleYsjNnzGNhriruq/uTMB8GA1UdIwQY
MBaAFIjwwdEOTlpx481cXWvuv3eKBuMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3Mzct
YjI4ZGY4NTU5NTI5LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3MzctYjI4ZGY4NTU5NTI5
LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAWf57pL
MzTWktLGw28ndYkIztv2gVh41c8CS1TCx/B3Sea5Dd9ld5lt5FN0Cgmau1oUC/gR
iWAAf0jz56SFTvhF83F9jJJVfi+lgjnOM68ACh/YQ2rFyQBnrBgVVSUaPqspnqKw
hj03je7Amnvms5RQzxZTEwRPpnr0psD7OktK3/GiELO7I/LnDPz19nmeS/SThTfa
5Me48FhWnlm/9rgwH4+eCHf6TPYTPKbcUOxhfS8kPmDr3qiYI/ptXQw6tXOLg+GN
8sBbKJMRm3gsAhxMH0foQTD+/EASkN9qR/TwiOmzdi5f+ydnsS856W/7Ux3arcEb
wPiymBXhae+osQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:51 2025 by rpki-client on console-fra.rpki-client.org