Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File: dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier: LTUzzADgbBjvfavoavHqjFIDtasON/NO80TuYk5XPkI=
Subject key identifier: 28:2A:E1:10:9B:99:D2:B3:40:D6:C1:F3:89:28:4D:BF:AC:1F:22:19
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer: /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial: 019511D968A0AC4BDFAACC4945DC3F1219CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number: 0AE7
Signing time: Mon 17 Feb 2025 03:00:15 +0000
Manifest this update: Mon 17 Feb 2025 03:00:15 +0000
Manifest next update: Tue 18 Feb 2025 03:00:15 +0000
Files and hashes: 1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=)
2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: kjML9fBHPIECwtJZcbCpWl0Frx0RPop4g0YJtL9cv1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:68:a0:ac:4b:df:aa:cc:49:45:dc:3f:12:19:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Validity
Not Before: Feb 17 03:00:15 2025 GMT
Not After : Feb 18 03:00:15 2025 GMT
Subject: CN=282ae1109b99d2b340d6c1f389284dbfac1f2219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:33:26:5e:43:4f:71:ca:ae:9a:5f:85:a5:
ff:81:f0:13:f9:15:0a:67:be:9e:45:8c:65:1c:55:
5a:3b:09:d3:65:b2:c7:8a:06:99:45:fe:60:1e:0a:
fe:61:ba:19:86:70:22:29:94:db:4a:53:1b:30:00:
5b:bc:72:04:4c:70:10:d2:09:8c:3f:5a:93:a5:4e:
b5:25:48:f7:94:cd:5f:81:8a:03:3b:85:98:60:76:
aa:09:e0:ba:8e:37:e5:cf:75:39:9a:31:8d:d9:fc:
64:56:81:00:dc:b0:cc:35:00:28:e9:b5:9f:dd:3d:
5b:54:cd:f4:8b:ff:21:71:16:ae:91:c6:1c:56:4b:
00:c0:36:64:35:f2:b9:b9:65:66:81:e3:af:5b:84:
bb:c9:5f:f9:51:a9:e3:0b:aa:24:94:d8:7a:25:1d:
46:7c:cd:50:49:d6:98:bd:dd:b4:66:fc:11:92:2f:
76:db:a6:66:35:e7:de:72:b3:8f:d0:44:85:cc:2a:
67:7a:d6:68:bd:37:f5:71:34:29:ee:c6:0a:03:02:
5c:6d:4c:bd:e5:89:ea:e9:d1:77:e0:b7:46:68:af:
43:eb:1d:88:10:0e:d2:ee:f1:2f:c0:51:42:37:c8:
44:11:1f:82:ee:5b:2f:b5:a3:ff:58:10:83:93:02:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:E1:10:9B:99:D2:B3:40:D6:C1:F3:89:28:4D:BF:AC:1F:22:19
X509v3 Authority Key Identifier:
keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6a:21:84:26:94:ab:c5:eb:4c:7a:19:9a:cc:24:95:3f:3c:
35:c4:0f:ca:d3:50:77:5c:f7:b9:19:c4:bb:c3:05:54:df:84:
be:58:85:60:a2:43:3a:26:54:56:fa:93:62:94:84:24:79:2b:
95:e4:8a:63:5b:e8:9c:90:b3:8b:38:c5:94:2b:7d:cd:0e:d2:
7d:29:e0:b8:0d:6a:fe:d6:b2:8b:10:69:ad:5a:60:24:f5:40:
cc:c9:c1:d2:da:05:5b:c6:93:55:b8:cd:cd:24:da:03:0b:09:
63:fb:01:1b:fb:46:52:95:c8:78:ba:bb:2a:6e:88:ce:5b:41:
27:31:5a:04:c3:99:bd:5b:f5:2a:66:ee:34:20:a8:a4:53:49:
4b:74:e7:4e:ae:80:d2:9e:ed:41:46:f1:52:b4:82:b1:c2:cc:
0e:1a:64:9b:ba:a2:fb:78:f4:5b:26:69:fe:ce:ca:57:7c:12:
4f:9a:7b:e4:17:6a:a1:69:05:66:8d:ba:3b:77:e4:f8:74:99:
5a:70:b0:7a:9b:7d:55:fc:e7:3b:78:a5:e7:c0:3a:eb:eb:b7:
73:38:93:23:c1:f4:d9:c9:75:4d:e6:a4:98:6d:16:a1:ca:69:
11:36:65:d7:fb:82:02:46:ae:b0:c0:e8:d3:e2:1a:20:5b:f4:
bc:4b:28:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2WigrEvfqsxJRdw/EhnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmJjODlhZDA0MjBkZTdiNWJjMmRkMzJmZWEzYjk3OWZh
ZGUwMjcwHhcNMjUwMjE3MDMwMDE1WhcNMjUwMjE4MDMwMDE1WjAzMTEwLwYDVQQD
EygyODJhZTExMDliOTlkMmIzNDBkNmMxZjM4OTI4NGRiZmFjMWYyMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlgzJl5DT3HKrppfhaX/gfAT+RUK
Z76eRYxlHFVaOwnTZbLHigaZRf5gHgr+YboZhnAiKZTbSlMbMABbvHIETHAQ0gmM
P1qTpU61JUj3lM1fgYoDO4WYYHaqCeC6jjflz3U5mjGN2fxkVoEA3LDMNQAo6bWf
3T1bVM30i/8hcRaukcYcVksAwDZkNfK5uWVmgeOvW4S7yV/5UanjC6oklNh6JR1G
fM1QSdaYvd20ZvwRki9226ZmNefecrOP0ESFzCpnetZovTf1cTQp7sYKAwJcbUy9
5Ynq6dF34LdGaK9D6x2IEA7S7vEvwFFCN8hEER+C7lsvtaP/WBCDkwKl8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgq4RCbmdKzQNbB84koTb+sHyIZMB8GA1UdIwQY
MBaAFHW7yJrQQg3ntbwt0y/qO5efreAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAt
MDJmYTIxOGQxNGY4LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAtMDJmYTIxOGQxNGY4
LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2ohhCaU
q8XrTHoZmswklT88NcQPytNQd1z3uRnEu8MFVN+EvliFYKJDOiZUVvqTYpSEJHkr
leSKY1vonJCzizjFlCt9zQ7SfSnguA1q/tayixBprVpgJPVAzMnB0toFW8aTVbjN
zSTaAwsJY/sBG/tGUpXIeLq7Km6IzltBJzFaBMOZvVv1KmbuNCCopFNJS3TnTq6A
0p7tQUbxUrSCscLMDhpkm7qi+3j0WyZp/s7KV3wST5p75BdqoWkFZo26O3fk+HSZ
WnCwept9VfznO3il58A66+u3cziTI8H02cl1TeakmG0WocppETZl1/uCAkausMDo
0+IaIFv0vEso2A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:53 2025 by rpki-client