Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: nIhiJwvv/mPIOBlUicvm4NcoKDtBbce9sSsTnlQ/79I=
Subject key identifier: B0:C6:1D:00:9B:98:C2:7D:04:B1:F0:D7:6C:1B:C7:71:5A:93:31:4E
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 0195127E5112E179F7A99A04073A3DB7D317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 06:00:22 +0000
Manifest this update: Mon 17 Feb 2025 06:00:22 +0000
Manifest next update: Tue 18 Feb 2025 06:00:22 +0000
Files and hashes: 1: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: v21zgkxP+Vb6Q0HaxYEj1RGQLxQhyOCbq43IbyHY4Ok=)
2: xGrKS_7fIZAr--QcVe4rlk4LUrE.roa (hash: d+a6fGxhsrjWA8L3BsW9wjwHxXWu/4T+PL0txa2lkUk=)
3: yzk3REVSGQxP3rEVAZsJQRpTPkM.roa (hash: dAn/JyxTOrxcNXrruPk6InrufFAxEVKtC99woebiErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:51:12:e1:79:f7:a9:9a:04:07:3a:3d:b7:d3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Feb 17 06:00:22 2025 GMT
Not After : Feb 18 06:00:22 2025 GMT
Subject: CN=b0c61d009b98c27d04b1f0d76c1bc7715a93314e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:c8:9d:fd:43:04:f8:6a:3c:fc:46:97:a0:
ac:34:d8:b3:b4:4e:81:ab:fd:91:fe:17:77:0a:72:
8d:73:89:15:af:98:80:93:aa:de:5b:ab:a4:09:7a:
5d:13:f7:8f:e2:30:3a:62:42:6f:19:59:f5:fc:4e:
a3:3a:93:df:cc:df:9a:2b:b4:73:4f:a7:05:5b:30:
5e:bb:79:f6:37:70:3b:5b:82:e3:65:a6:4a:3b:9d:
22:7d:15:7a:50:d6:e5:ca:a0:1b:47:d8:2e:8f:60:
33:51:7b:7d:8f:d8:d1:6f:c6:8a:00:6e:0f:17:91:
89:dd:03:6d:3b:d1:96:c5:ff:97:7c:aa:fc:1b:fa:
55:eb:8f:0a:84:31:7d:64:2a:c5:b8:51:e7:4c:69:
d6:6c:54:60:3e:cd:9d:1d:14:73:7d:ac:ce:ff:86:
29:cf:09:31:d1:87:e4:06:fc:49:cd:e9:c2:d7:a1:
13:1d:c5:29:99:5b:d0:1c:39:a6:d8:47:63:e8:46:
af:2d:61:8f:46:88:e3:1e:2d:84:5f:75:3a:c3:f8:
fc:04:a2:b6:85:68:65:70:58:9b:5a:d0:18:db:80:
a7:34:f8:96:3b:15:d5:56:b0:f1:5b:b6:15:ce:e4:
b5:4d:6d:b5:1a:bc:06:d8:9a:6d:54:12:20:91:25:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:1D:00:9B:98:C2:7D:04:B1:F0:D7:6C:1B:C7:71:5A:93:31:4E
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:da:e2:b6:cf:fd:4d:ed:4d:a1:a3:91:ce:38:62:5a:59:e6:
df:1b:02:ff:ea:c5:07:49:6c:f4:7b:11:49:15:ea:85:fc:bb:
1f:96:4a:ce:35:f4:51:71:1c:40:5d:c1:c3:5d:85:4f:0f:75:
e6:96:36:9b:6e:55:7f:83:6e:83:e4:0c:d4:8a:5b:32:20:7e:
bf:3b:b2:c6:0f:30:dc:83:58:6a:6d:e8:95:5c:a9:62:2d:0d:
03:38:8e:77:75:d7:7f:88:20:24:87:f5:74:bf:6e:36:13:8e:
44:b5:c4:ec:21:f1:43:ed:cd:c2:b5:31:b0:7e:80:f7:62:aa:
1b:bb:70:fc:20:6d:80:cf:c3:b5:65:7d:7f:8c:ba:6f:ad:70:
46:a1:a4:db:c9:55:bd:ca:1d:d9:d3:3c:db:2d:11:79:5f:b0:
f0:42:c1:a0:1b:82:68:72:8c:aa:6c:dd:ea:df:f1:40:29:99:
c8:b6:eb:ae:82:f5:ac:31:b9:a7:24:cb:ea:c1:16:b8:89:3f:
00:c7:99:65:b7:97:46:5a:73:cf:0e:3b:81:b8:6a:dd:3c:77:
05:58:ce:f1:c6:a4:f5:ed:1e:db:73:a0:f2:ab:39:9a:26:0e:
66:3f:44:00:b5:c1:31:17:bf:7b:ae:a9:55:ec:d2:86:36:fd:
b3:72:0c:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSflES4Xn3qZoEBzo9t9MXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjgwNTJhZTdkMTBmZDIyNjFhMjI0OGZjMDBkMjAyYjBm
MjU1NzQwHhcNMjUwMjE3MDYwMDIyWhcNMjUwMjE4MDYwMDIyWjAzMTEwLwYDVQQD
EyhiMGM2MWQwMDliOThjMjdkMDRiMWYwZDc2YzFiYzc3MTVhOTMzMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqejInf1DBPhqPPxGl6CsNNiztE6B
q/2R/hd3CnKNc4kVr5iAk6reW6ukCXpdE/eP4jA6YkJvGVn1/E6jOpPfzN+aK7Rz
T6cFWzBeu3n2N3A7W4LjZaZKO50ifRV6UNblyqAbR9guj2AzUXt9j9jRb8aKAG4P
F5GJ3QNtO9GWxf+XfKr8G/pV648KhDF9ZCrFuFHnTGnWbFRgPs2dHRRzfazO/4Yp
zwkx0YfkBvxJzenC16ETHcUpmVvQHDmm2Edj6EavLWGPRojjHi2EX3U6w/j8BKK2
hWhlcFibWtAY24CnNPiWOxXVVrDxW7YVzuS1TW21GrwG2JptVBIgkSX9/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDGHQCbmMJ9BLHw12wbx3FakzFOMB8GA1UdIwQY
MBaAFHcoBSrn0Q/SJhoiSPwA0gKw8lV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Y2IxYjEtNzAxYi00ZTQyLThiMDUt
MmNiYzQwZTVmZTYyLzEvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80Y2IxYjEtNzAxYi00ZTQyLThiMDUtMmNiYzQwZTVmZTYy
LzEvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvtrits/9
Te1NoaORzjhiWlnm3xsC/+rFB0ls9HsRSRXqhfy7H5ZKzjX0UXEcQF3Bw12FTw91
5pY2m25Vf4Nug+QM1IpbMiB+vzuyxg8w3INYam3olVypYi0NAziOd3XXf4ggJIf1
dL9uNhOORLXE7CHxQ+3NwrUxsH6A92KqG7tw/CBtgM/DtWV9f4y6b61wRqGk28lV
vcod2dM82y0ReV+w8ELBoBuCaHKMqmzd6t/xQCmZyLbrroL1rDG5pyTL6sEWuIk/
AMeZZbeXRlpzzw47gbhq3Tx3BVjO8cak9e0e23Og8qs5miYOZj9EALXBMRe/e66p
VezShjb9s3IM3Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:18 2025 by rpki-client