Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: nBmEA73VUAKZqhx/ytAjMSNgrIuTFoG6OO29/XefMz4=
Subject key identifier: 86:8F:63:C4:DB:FB:D6:10:18:76:82:D5:40:B9:6A:04:F1:31:89:1B
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 019510FE3163916753A0B5265D22EBA5C12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 0C2F
Signing time: Sun 16 Feb 2025 23:00:48 +0000
Manifest this update: Sun 16 Feb 2025 23:00:48 +0000
Manifest next update: Mon 17 Feb 2025 23:00:48 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: MTBh78FxyGQCIcfVnYoa57+xMkB9RIiUW7rbTAB82GU=)
2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:31:63:91:67:53:a0:b5:26:5d:22:eb:a5:c1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Feb 16 23:00:48 2025 GMT
Not After : Feb 17 23:00:48 2025 GMT
Subject: CN=868f63c4dbfbd610187682d540b96a04f131891b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:ee:e8:a4:6f:d3:73:26:67:18:48:27:ce:
27:33:0c:7f:1d:f2:17:6b:e2:b8:b7:21:1d:b3:5b:
ac:da:41:ab:f1:34:0f:fd:5c:b9:f9:9f:42:76:d2:
94:f8:ef:a3:db:00:fc:0b:c2:4b:7e:da:91:8b:00:
22:f1:d4:18:ad:c6:e7:d5:95:22:30:12:0e:fd:df:
59:d4:17:36:0e:ff:82:7f:ee:fc:39:ca:47:7c:c7:
2c:e8:df:84:15:61:30:ab:bf:3e:46:54:8f:c5:e4:
dd:bd:7b:5f:2f:d8:39:0b:ef:97:53:43:cd:63:e4:
56:39:10:e3:5e:80:42:93:9f:df:5a:66:f4:3d:a8:
75:53:57:1f:f4:9b:69:62:b8:7e:bf:4d:3f:a2:75:
d4:13:06:6e:15:85:f0:42:bd:34:c6:05:c6:0e:f9:
d8:80:0e:f7:12:f1:63:93:6a:4b:95:fb:51:62:93:
b4:b0:00:72:c0:63:0a:8a:d4:1a:7a:e4:b9:ea:09:
b8:48:b4:79:c0:62:0d:7c:9f:48:1e:ed:44:17:da:
c7:c7:e9:81:1e:60:fd:9f:4d:5d:36:6f:95:db:f6:
1e:a8:9e:af:41:e5:3c:c8:e8:a9:54:0c:55:5f:25:
25:e4:e6:a5:02:c8:57:8c:c9:d4:67:21:ea:ac:86:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:63:C4:DB:FB:D6:10:18:76:82:D5:40:B9:6A:04:F1:31:89:1B
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:e0:2c:f9:a7:0e:c0:bc:c7:ed:b1:d9:96:1c:86:64:cf:
27:16:e4:0b:9a:0f:7b:10:b7:d2:de:bb:da:84:06:75:e1:8f:
5a:c1:77:9b:db:72:1d:a0:09:d0:38:7e:27:f7:e3:5f:78:46:
a9:30:04:f9:e5:da:c3:98:60:29:ea:18:5b:a7:69:d9:dc:82:
cd:21:49:8b:be:5b:8f:e8:53:1f:57:35:59:ee:42:aa:91:d0:
5a:7f:47:5e:0c:29:b2:a5:74:f7:91:5f:42:2a:4b:4e:cd:00:
2c:c4:47:25:40:57:91:f1:62:75:63:b2:72:98:49:b2:03:12:
e9:8d:1c:43:dd:fa:02:74:be:44:60:53:2d:f6:98:0e:73:d0:
46:02:91:92:a2:98:5d:6b:62:2e:4e:c4:85:c1:e5:24:f3:b6:
71:09:bf:e7:aa:7e:a8:d3:dd:9e:16:21:5a:4f:0f:19:b4:28:
59:c9:36:b8:23:ae:1c:e4:07:c6:bc:a9:69:7c:0a:bf:66:90:
79:07:2b:69:db:71:97:69:0c:eb:71:55:d2:dd:48:6d:b3:58:
87:1f:ae:e9:6e:3b:02:eb:76:97:99:93:d4:cb:7a:c2:cb:1a:
94:20:e7:38:49:c1:76:e0:49:d4:8f:68:b1:ca:4b:8d:cb:35:
36:ca:44:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/jFjkWdToLUmXSLrpcEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0
YTViMmYwHhcNMjUwMjE2MjMwMDQ4WhcNMjUwMjE3MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg4NjhmNjNjNGRiZmJkNjEwMTg3NjgyZDU0MGI5NmEwNGYxMzE4OTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxITu6KRv03MmZxhIJ84nMwx/HfIX
a+K4tyEds1us2kGr8TQP/Vy5+Z9CdtKU+O+j2wD8C8JLftqRiwAi8dQYrcbn1ZUi
MBIO/d9Z1Bc2Dv+Cf+78OcpHfMcs6N+EFWEwq78+RlSPxeTdvXtfL9g5C++XU0PN
Y+RWORDjXoBCk5/fWmb0Pah1U1cf9JtpYrh+v00/onXUEwZuFYXwQr00xgXGDvnY
gA73EvFjk2pLlftRYpO0sABywGMKitQaeuS56gm4SLR5wGINfJ9IHu1EF9rHx+mB
HmD9n01dNm+V2/YeqJ6vQeU8yOipVAxVXyUl5OalAshXjMnUZyHqrIaYpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaPY8Tb+9YQGHaC1UC5agTxMYkbMB8GA1UdIwQY
MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt
Njg4NzYyYmI5ODVlLzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl
LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyrgLPmn
DsC8x+2x2ZYchmTPJxbkC5oPexC30t672oQGdeGPWsF3m9tyHaAJ0Dh+J/fjX3hG
qTAE+eXaw5hgKeoYW6dp2dyCzSFJi75bj+hTH1c1We5CqpHQWn9HXgwpsqV095Ff
QipLTs0ALMRHJUBXkfFidWOycphJsgMS6Y0cQ936AnS+RGBTLfaYDnPQRgKRkqKY
XWtiLk7EhcHlJPO2cQm/56p+qNPdnhYhWk8PGbQoWck2uCOuHOQHxrypaXwKv2aQ
eQcradtxl2kM63FV0t1IbbNYhx+u6W47Aut2l5mT1Mt6wssalCDnOEnBduBJ1I9o
scpLjcs1NspEIw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:29 2025 by rpki-client