Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft
File: TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft (raw, json)
Hash identifier: TAy6R06kmbcUq0VIKPvs9RrTrXvZ03hBMFp3n8YPlD4=
Subject key identifier: DD:A5:70:5F:6B:31:46:4A:5E:54:69:40:6E:F8:FA:A7:9F:27:9E:F2
Authority key identifier: 4C:EC:03:14:DD:99:1D:A3:A0:D6:61:39:3A:60:6A:31:7C:6C:BC:8D
Certificate issuer: /CN=4cec0314dd991da3a0d661393a606a317c6cbc8d
Certificate serial: 0194C463B2A7ECE97BE3C296B062DD35D285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft
Manifest number: 0911
Signing time: Sun 02 Feb 2025 02:00:55 +0000
Manifest this update: Sun 02 Feb 2025 02:00:55 +0000
Manifest next update: Mon 03 Feb 2025 02:00:55 +0000
Files and hashes: 1: TOwDFN2ZHaOg1mE5OmBqMXxsvI0.crl (hash: 14LekFhclw8xR3TndnE83KGNIEF4BNogREyNsZ4LrKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:b2:a7:ec:e9:7b:e3:c2:96:b0:62:dd:35:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cec0314dd991da3a0d661393a606a317c6cbc8d
Validity
Not Before: Feb 2 02:00:55 2025 GMT
Not After : Feb 3 02:00:55 2025 GMT
Subject: CN=dda5705f6b31464a5e5469406ef8faa79f279ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:5f:88:1f:c8:54:c6:f2:01:3a:6a:f4:e5:
bc:5d:a0:6a:54:8f:3c:88:b9:f8:64:f9:52:e1:f1:
8d:b4:84:4d:dd:ca:f4:a0:16:97:bf:28:b0:5e:ea:
79:e7:e5:a0:4d:0f:41:62:89:2b:d8:17:bf:09:b3:
c2:51:c8:f6:c4:4a:94:2c:68:14:c5:f1:2d:f1:de:
17:7f:73:91:60:1b:6a:9c:58:f6:01:46:9c:ee:7b:
17:75:01:78:fd:f1:f6:9e:9c:44:fc:a8:74:87:c6:
07:8e:8c:f1:53:c7:e5:e5:9e:70:43:0c:31:7f:4c:
78:bc:f3:00:d1:85:87:2c:da:b1:8f:75:54:36:10:
b1:57:38:33:b7:a6:90:5e:81:80:37:dc:3d:7b:78:
c7:dc:ac:52:84:24:41:b3:bf:29:8e:f4:3a:c1:33:
76:74:54:20:81:02:aa:eb:8c:88:ce:86:72:5e:28:
0b:5a:b8:30:35:47:52:37:f2:26:10:ca:24:66:dc:
96:1b:a1:b8:62:fa:89:79:8e:67:22:0f:9c:b6:71:
44:46:80:aa:bd:42:1d:c1:e0:fa:35:7a:d8:d2:7d:
9a:dc:1d:f0:84:b4:ca:bd:96:de:0e:3d:96:8a:87:
de:d1:87:0f:ba:70:f1:18:c6:77:d8:8b:52:96:25:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A5:70:5F:6B:31:46:4A:5E:54:69:40:6E:F8:FA:A7:9F:27:9E:F2
X509v3 Authority Key Identifier:
keyid:4C:EC:03:14:DD:99:1D:A3:A0:D6:61:39:3A:60:6A:31:7C:6C:BC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:54:49:22:c4:d6:cf:c9:24:71:7a:60:1b:96:61:9c:14:
fb:b9:b8:0b:78:98:c5:cf:81:5b:4f:ea:7b:2f:91:60:59:21:
f8:ab:93:df:67:40:66:b2:52:9e:2a:fc:13:ab:d2:d8:b1:95:
28:5d:e5:02:90:48:55:08:3d:2a:b5:b5:28:00:f0:e2:68:71:
38:99:6e:20:52:9e:cf:3d:ed:7d:ce:1a:98:c4:42:7f:93:2e:
52:1a:76:ba:2c:c4:bb:76:83:94:01:03:5a:3a:6b:4e:65:6e:
c2:73:16:aa:93:58:6b:ea:d9:7d:2d:26:08:03:1e:e3:c0:52:
ed:4c:c9:64:78:66:9e:07:75:3d:8a:3a:3c:2b:18:6b:d9:be:
c5:be:a3:4b:13:06:3c:92:ac:2e:2c:9e:d0:e2:53:0f:03:c8:
9c:27:c9:ba:75:9c:f9:32:b5:ae:76:d1:38:7a:d8:b7:3d:ff:
dc:32:ee:c5:ac:7e:74:ce:9f:2b:4e:e0:a8:84:b6:39:3d:5f:
9b:e0:db:32:70:a0:3a:31:2a:de:0d:e7:43:bc:67:84:19:f5:
4d:7c:d4:81:12:a7:da:43:2e:39:9a:02:49:9e:79:06:84:f1:
8c:04:30:f8:77:c7:a5:02:e8:2b:ab:49:5f:10:6a:47:4a:e9:
5e:c4:b4:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY7Kn7Ol748KWsGLdNdKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZWMwMzE0ZGQ5OTFkYTNhMGQ2NjEzOTNhNjA2YTMxN2M2
Y2JjOGQwHhcNMjUwMjAyMDIwMDU1WhcNMjUwMjAzMDIwMDU1WjAzMTEwLwYDVQQD
EyhkZGE1NzA1ZjZiMzE0NjRhNWU1NDY5NDA2ZWY4ZmFhNzlmMjc5ZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+5fiB/IVMbyATpq9OW8XaBqVI88
iLn4ZPlS4fGNtIRN3cr0oBaXvyiwXup55+WgTQ9BYokr2Be/CbPCUcj2xEqULGgU
xfEt8d4Xf3ORYBtqnFj2AUac7nsXdQF4/fH2npxE/Kh0h8YHjozxU8fl5Z5wQwwx
f0x4vPMA0YWHLNqxj3VUNhCxVzgzt6aQXoGAN9w9e3jH3KxShCRBs78pjvQ6wTN2
dFQggQKq64yIzoZyXigLWrgwNUdSN/ImEMokZtyWG6G4YvqJeY5nIg+ctnFERoCq
vUIdweD6NXrY0n2a3B3whLTKvZbeDj2Wiofe0YcPunDxGMZ32ItSliUKzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2lcF9rMUZKXlRpQG74+qefJ57yMB8GA1UdIwQY
MBaAFEzsAxTdmR2joNZhOTpgajF8bLyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE93REZOMlpIYU9nMW1FNU9tQnFNWHhzdkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZDEyMWQtYzhkMy00ZTE5LWJkZTMt
ZDNhYmU4YTNkZDllLzEvVE93REZOMlpIYU9nMW1FNU9tQnFNWHhzdkkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mZDEyMWQtYzhkMy00ZTE5LWJkZTMtZDNhYmU4YTNkZDll
LzEvVE93REZOMlpIYU9nMW1FNU9tQnFNWHhzdkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgRUSSLE
1s/JJHF6YBuWYZwU+7m4C3iYxc+BW0/qey+RYFkh+KuT32dAZrJSnir8E6vS2LGV
KF3lApBIVQg9KrW1KADw4mhxOJluIFKezz3tfc4amMRCf5MuUhp2uizEu3aDlAED
WjprTmVuwnMWqpNYa+rZfS0mCAMe48BS7UzJZHhmngd1PYo6PCsYa9m+xb6jSxMG
PJKsLiye0OJTDwPInCfJunWc+TK1rnbROHrYtz3/3DLuxax+dM6fK07gqIS2OT1f
m+DbMnCgOjEq3g3nQ7xnhBn1TXzUgRKn2kMuOZoCSZ55BoTxjAQw+HfHpQLoK6tJ
XxBqR0rpXsS0Ow==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:06 2025 by rpki-client