Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: 5Lw4LHdmpSoRoQUpL/CFmIUk/BvcyVstiVOO5cx3E9A=
Subject key identifier: E8:88:93:CD:97:1D:E8:2A:89:1F:47:92:6D:55:1E:D1:4F:CE:F6:2C
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 019510C76BE95C1D65E21334DCF0CC914FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 22:00:59 +0000
Manifest this update: Sun 16 Feb 2025 22:00:59 +0000
Manifest next update: Mon 17 Feb 2025 22:00:59 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: JW2KLa6nq2AovnGjjosTRfha4k32dNZZ93kcQLO0CE0=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:6b:e9:5c:1d:65:e2:13:34:dc:f0:cc:91:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Feb 16 22:00:59 2025 GMT
Not After : Feb 17 22:00:59 2025 GMT
Subject: CN=e88893cd971de82a891f47926d551ed14fcef62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:6f:86:88:63:c2:e9:bb:43:78:c6:6d:e8:
36:ca:62:ea:22:c5:43:63:be:3e:b0:2f:b4:cc:27:
46:79:13:aa:58:ec:a3:da:6b:fc:37:2d:4d:53:b0:
3a:ad:59:f9:39:a6:f7:61:e7:9d:c6:d1:c5:58:b5:
fd:46:75:5a:8c:1c:dd:0e:51:14:0a:94:2e:0e:f9:
c1:03:56:c5:b6:87:0b:31:65:6c:c7:41:00:b5:b7:
f2:16:46:86:a8:f8:d9:6a:9a:d4:36:66:ec:88:98:
a7:96:ef:06:b7:c9:71:f7:7d:b0:95:ff:72:29:73:
1c:9c:e1:be:d1:17:50:54:d6:a9:ff:3c:6c:fc:fd:
6c:61:1a:06:c7:ab:6a:d9:24:b4:d9:e7:1a:97:c6:
23:a9:6d:2e:4d:ce:d4:da:14:bb:93:d3:87:f3:cb:
1a:ff:2e:eb:65:88:61:ad:03:b8:a5:10:30:38:5d:
7a:aa:3e:de:37:e0:e5:cb:77:8e:7c:8f:b2:52:57:
79:9a:f7:f0:9a:0a:6e:f3:84:6d:d8:14:3c:89:a2:
2d:ec:74:3b:b3:23:a2:ed:41:d3:b3:fc:fe:b5:b1:
27:84:f3:d4:81:fa:e7:ca:77:1a:86:22:fb:90:6f:
91:11:f2:cd:f5:e3:01:c7:ec:6d:c7:ec:56:46:d8:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:93:CD:97:1D:E8:2A:89:1F:47:92:6D:55:1E:D1:4F:CE:F6:2C
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:76:78:7f:02:57:af:33:7c:99:5c:c4:4d:12:0f:7a:54:0e:
19:e3:07:0c:69:2d:cf:7c:a9:6e:53:d3:e6:c9:91:38:4e:fd:
9a:87:66:d5:ee:b8:49:d4:21:e1:92:77:3b:68:1a:26:08:07:
b4:57:21:99:97:02:ae:c9:d1:4b:a4:95:ad:d4:85:43:f7:74:
d7:97:72:b2:eb:eb:5e:c0:ed:6e:12:95:1a:db:e0:4c:81:d5:
2f:08:5b:01:ad:f0:56:b8:f8:64:7b:5a:86:ff:f2:b1:5d:71:
17:a8:fa:0c:65:5d:8a:e5:84:1e:df:f3:23:2a:c5:d2:c6:a4:
26:1a:f4:40:92:ce:f6:42:bb:c5:f7:ea:da:be:34:f9:01:42:
f7:9f:61:ff:64:e5:82:4a:d8:87:df:7f:23:f0:23:b6:d3:94:
50:6f:d6:27:62:04:4f:b9:73:12:15:38:6a:80:08:d8:61:eb:
36:54:5d:c1:9f:08:15:66:41:0e:47:6c:29:bd:24:f5:19:97:
02:8a:92:1d:03:fb:55:30:c2:73:91:19:d4:ac:58:cf:3d:d3:
9b:72:9a:ca:bd:fe:16:fa:e5:f9:f3:30:b4:03:1d:c4:3e:fd:
0d:1a:48:55:89:e7:4e:cc:00:e2:46:6f:fc:e5:de:ee:e8:e0:
a5:02:96:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx2vpXB1l4hM03PDMkU/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2
YzA1ZjAwHhcNMjUwMjE2MjIwMDU5WhcNMjUwMjE3MjIwMDU5WjAzMTEwLwYDVQQD
EyhlODg4OTNjZDk3MWRlODJhODkxZjQ3OTI2ZDU1MWVkMTRmY2VmNjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqtvhohjwum7Q3jGbeg2ymLqIsVD
Y74+sC+0zCdGeROqWOyj2mv8Ny1NU7A6rVn5Oab3YeedxtHFWLX9RnVajBzdDlEU
CpQuDvnBA1bFtocLMWVsx0EAtbfyFkaGqPjZaprUNmbsiJinlu8Gt8lx932wlf9y
KXMcnOG+0RdQVNap/zxs/P1sYRoGx6tq2SS02ecal8YjqW0uTc7U2hS7k9OH88sa
/y7rZYhhrQO4pRAwOF16qj7eN+Dly3eOfI+yUld5mvfwmgpu84Rt2BQ8iaIt7HQ7
syOi7UHTs/z+tbEnhPPUgfrnyncahiL7kG+REfLN9eMBx+xtx+xWRtgqAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiIk82XHegqiR9Hkm1VHtFPzvYsMB8GA1UdIwQY
MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et
MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh
LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3Z4fwJX
rzN8mVzETRIPelQOGeMHDGktz3ypblPT5smROE79modm1e64SdQh4ZJ3O2gaJggH
tFchmZcCrsnRS6SVrdSFQ/d015dysuvrXsDtbhKVGtvgTIHVLwhbAa3wVrj4ZHta
hv/ysV1xF6j6DGVdiuWEHt/zIyrF0sakJhr0QJLO9kK7xffq2r40+QFC959h/2Tl
gkrYh99/I/AjttOUUG/WJ2IET7lzEhU4aoAI2GHrNlRdwZ8IFWZBDkdsKb0k9RmX
AoqSHQP7VTDCc5EZ1KxYzz3Tm3Kayr3+Fvrl+fMwtAMdxD79DRpIVYnnTswA4kZv
/OXe7ujgpQKW6g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:24 2025 by rpki-client