Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: dw6sfUCOF7pH4tVOQNzXuZEHcs+FBhYOpmXRvjHLF7Y=
Subject key identifier: 76:2C:CB:3F:B0:B0:F7:26:96:51:19:C8:5A:54:CF:48:F0:DD:5A:09
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 0194C387620839AA57FFFF580E840D587483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 142B
Signing time: Sat 01 Feb 2025 22:00:17 +0000
Manifest this update: Sat 01 Feb 2025 22:00:17 +0000
Manifest next update: Sun 02 Feb 2025 22:00:17 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: lkE9t1O9RMliga4IK07tyRx+bOlQ5MiG+qOkV0pulCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:62:08:39:aa:57:ff:ff:58:0e:84:0d:58:74:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Feb 1 22:00:17 2025 GMT
Not After : Feb 2 22:00:17 2025 GMT
Subject: CN=762ccb3fb0b0f726965119c85a54cf48f0dd5a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:de:8d:90:78:3e:71:cb:79:9d:67:55:5b:
eb:83:36:5e:34:3e:41:62:2b:23:8e:c0:6e:9c:14:
d6:51:c5:8a:d2:cf:67:f6:1a:ea:88:94:db:09:3e:
b6:f0:cb:00:a1:fd:5e:05:f3:32:62:77:b3:dc:66:
7e:62:e8:ea:be:94:a2:1f:a8:fa:23:59:b1:7e:97:
3e:d4:11:f6:6f:1a:99:f2:be:ae:0e:b0:95:88:3b:
d1:59:13:07:83:57:56:48:5e:a2:11:0a:5f:28:12:
d5:ba:c6:bd:df:8d:1f:42:75:01:3b:39:1d:0d:2b:
d4:5b:ec:6c:74:98:df:34:63:bf:f2:49:8b:36:a4:
43:6f:00:4c:61:f1:0a:19:07:54:0a:81:c9:f4:41:
7a:a5:25:30:7d:7b:f9:11:ee:d0:cc:c1:b5:6c:1a:
8c:cd:93:fa:2d:6b:27:03:7b:ef:37:20:55:f5:89:
7f:44:be:06:05:fc:e3:46:07:3c:14:62:6d:2e:d3:
c3:a1:c3:a9:32:88:11:7b:62:37:99:c2:b3:82:e5:
1a:97:ce:cf:0d:fe:74:23:f5:3d:49:da:2d:92:c5:
3d:d0:e8:0b:1f:d5:41:df:58:0d:17:4c:0f:ab:1c:
e4:77:42:ca:5e:7c:43:a5:f5:e2:1d:36:ed:4a:04:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2C:CB:3F:B0:B0:F7:26:96:51:19:C8:5A:54:CF:48:F0:DD:5A:09
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:03:7f:23:3b:94:f5:10:1b:90:4c:57:d2:00:6c:fd:72:f7:
c4:88:97:a9:1d:f2:4b:52:c4:81:fa:43:31:9d:bd:17:b5:b7:
11:ec:82:c5:bf:58:f5:4a:9c:d7:3a:45:9f:8f:ac:41:c5:27:
2e:7f:e4:57:f8:08:e2:d5:87:6a:b4:0e:b5:c3:e4:d0:44:85:
74:6f:e8:66:96:db:b0:2a:d3:5e:4a:c9:96:f0:ff:dd:3b:ce:
14:9e:2d:36:0f:73:74:5a:1a:9f:a0:c0:f5:fb:35:ce:9b:67:
a9:84:df:b4:bd:6e:20:e0:9e:d0:af:54:d0:b6:9e:a9:35:45:
52:d8:e5:50:9b:3c:c2:6d:aa:6b:2c:9d:a2:25:53:88:22:da:
96:22:ce:a7:bf:98:e2:fc:91:d0:03:a0:0f:57:42:d0:44:95:
98:b0:75:d8:16:fd:37:65:42:8e:f9:b6:34:50:8d:67:e3:d6:
4e:11:ef:c2:53:ca:25:ec:cf:c4:e7:a7:8c:5b:3b:fe:e3:20:
4e:76:eb:e3:a6:4d:0a:81:42:6b:98:49:44:2b:ae:16:21:ef:
07:bc:1e:7f:c5:a5:1d:05:53:4b:91:d9:83:1b:ea:7d:65:e8:
a8:f3:fb:f9:e0:10:bd:71:9a:ca:7b:fc:f2:80:6b:a7:3c:e1:
75:4b:75:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh2IIOapX//9YDoQNWHSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MmU1NzFkMDAwNmZlN2Y2NjBiMDMwOGNjYzYxYTE2OTll
MzQ5MTcwHhcNMjUwMjAxMjIwMDE3WhcNMjUwMjAyMjIwMDE3WjAzMTEwLwYDVQQD
Eyg3NjJjY2IzZmIwYjBmNzI2OTY1MTE5Yzg1YTU0Y2Y0OGYwZGQ1YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl/ejZB4PnHLeZ1nVVvrgzZeND5B
YisjjsBunBTWUcWK0s9n9hrqiJTbCT628MsAof1eBfMyYnez3GZ+YujqvpSiH6j6
I1mxfpc+1BH2bxqZ8r6uDrCViDvRWRMHg1dWSF6iEQpfKBLVusa9340fQnUBOzkd
DSvUW+xsdJjfNGO/8kmLNqRDbwBMYfEKGQdUCoHJ9EF6pSUwfXv5Ee7QzMG1bBqM
zZP6LWsnA3vvNyBV9Yl/RL4GBfzjRgc8FGJtLtPDocOpMogRe2I3mcKzguUal87P
Df50I/U9SdotksU90OgLH9VB31gNF0wPqxzkd0LKXnxDpfXiHTbtSgQ3dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYsyz+wsPcmllEZyFpUz0jw3VoJMB8GA1UdIwQY
MBaAFHQuVx0ABv5/ZgsDCMzGGhaZ40kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yZTAzYWYtODNhNC00YzlmLTkxMWEt
ZDU4NDRiM2M1MTc3LzEvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yZTAzYWYtODNhNC00YzlmLTkxMWEtZDU4NDRiM2M1MTc3
LzEvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAN/IzuU
9RAbkExX0gBs/XL3xIiXqR3yS1LEgfpDMZ29F7W3EeyCxb9Y9Uqc1zpFn4+sQcUn
Ln/kV/gI4tWHarQOtcPk0ESFdG/oZpbbsCrTXkrJlvD/3TvOFJ4tNg9zdFoan6DA
9fs1zptnqYTftL1uIOCe0K9U0LaeqTVFUtjlUJs8wm2qayydoiVTiCLaliLOp7+Y
4vyR0AOgD1dC0ESVmLB12Bb9N2VCjvm2NFCNZ+PWThHvwlPKJezPxOenjFs7/uMg
Tnbr46ZNCoFCa5hJRCuuFiHvB7wef8WlHQVTS5HZgxvqfWXoqPP7+eAQvXGaynv8
8oBrpzzhdUt1pw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:44:47 2025 by rpki-client