Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
File: vdI1_DzDTEVIxqhONeSVMyhTm-E.mft (raw, json)
Hash identifier: op/UScvnQksX/jdosUIQhduyBI1C2L1Q9X3H4GB3Il8=
Subject key identifier: E4:E2:14:94:CF:D0:72:0D:5D:6B:BD:80:EF:F6:A2:E9:25:05:A1:3A
Authority key identifier: BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
Certificate issuer: /CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Certificate serial: 0194BB28E9D37EA28BB51708A9224C9F51FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
Manifest number: 0E33
Signing time: Fri 31 Jan 2025 07:00:08 +0000
Manifest this update: Fri 31 Jan 2025 07:00:08 +0000
Manifest next update: Sat 01 Feb 2025 07:00:08 +0000
Files and hashes: 1: vdI1_DzDTEVIxqhONeSVMyhTm-E.crl (hash: Wzbmi2PzqHILr5UZCXdORWZnWxusY2sY/7zbqmASJfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:e9:d3:7e:a2:8b:b5:17:08:a9:22:4c:9f:51:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd235fc3cc34c4548c6a84e35e4953328539be1
Validity
Not Before: Jan 31 07:00:08 2025 GMT
Not After : Feb 1 07:00:08 2025 GMT
Subject: CN=e4e21494cfd0720d5d6bbd80eff6a2e92505a13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:22:01:e1:c5:9d:ba:12:f2:57:30:95:2b:
15:e3:28:b3:50:cb:05:db:cf:47:6e:35:7d:aa:92:
ad:3a:81:3b:7d:9f:1e:2e:21:bb:83:98:f4:da:ec:
78:e5:93:c8:d7:36:8a:8d:94:94:23:f8:eb:3e:0a:
9a:b6:23:a3:14:6f:a9:d7:a2:99:27:23:b5:be:11:
e8:e9:59:a8:b6:eb:0e:45:74:bb:75:85:83:f3:91:
9d:d3:73:7d:32:9d:23:36:8f:12:e7:b5:f5:a5:93:
17:e2:42:5a:a0:98:8f:f3:92:2c:28:9f:b0:4c:3f:
23:f6:9f:dd:61:7e:85:b2:f1:70:0d:df:06:c0:7d:
ae:75:6d:cc:f5:8a:66:6a:fa:0a:be:c4:79:40:8d:
1c:9f:33:95:7f:2d:7b:e9:22:fc:97:a5:48:7f:98:
cb:12:c1:04:4b:f9:5b:d4:04:72:f0:28:6b:0d:76:
bc:6d:5b:99:4a:18:39:0a:4c:1c:b9:69:5c:98:78:
ba:1e:65:64:c8:a0:ce:a0:45:05:8b:b2:49:17:7d:
5b:4b:c5:de:71:ac:1c:d5:a4:76:27:ca:84:2b:b9:
fd:ae:88:5d:4b:6b:5d:6c:cd:47:5c:ef:45:a9:ec:
10:ac:12:a6:0b:4a:b8:05:20:a5:17:7d:a3:dc:6e:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E2:14:94:CF:D0:72:0D:5D:6B:BD:80:EF:F6:A2:E9:25:05:A1:3A
X509v3 Authority Key Identifier:
keyid:BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:35:c5:f4:f8:88:90:bb:6a:d7:3d:48:3a:77:f0:34:4d:c0:
f5:33:08:c1:c5:3f:fc:6f:16:8a:17:41:59:7f:fa:ee:58:db:
4d:95:8b:f9:f2:1f:f0:d7:1e:c2:48:f7:f2:3d:db:b7:c8:84:
55:7e:a2:39:41:b9:b1:e3:c1:28:8c:b7:2a:65:96:4b:15:75:
cf:66:36:25:81:47:12:df:dd:e0:58:05:47:14:a3:84:ad:24:
58:9f:61:d0:73:d2:10:e8:c5:99:03:de:c8:ba:d0:be:ed:d7:
21:86:b3:dd:a1:9e:bb:c6:93:be:43:b4:59:20:25:bd:c7:c9:
f4:f6:84:0f:88:d3:ed:a8:6c:90:01:c0:fd:ad:24:ac:1b:4f:
c9:f6:a4:79:59:d4:f6:8c:44:5d:06:d8:64:9c:c5:1a:60:7e:
52:92:6b:66:c9:3c:a7:7e:0a:11:05:0b:0e:48:82:ac:da:68:
19:af:30:27:45:82:d0:b9:a9:13:b0:a3:10:2f:db:8b:b2:20:
be:e4:85:21:17:02:0f:ec:fe:38:27:6d:4f:b0:30:ea:2f:a9:
e2:f4:07:83:b3:3c:c7:2d:e1:02:f0:f2:6b:33:3e:e4:a4:23:
40:6a:5a:11:76:d6:03:53:1d:28:d7:da:b6:21:4c:e1:f4:ff:
06:54:aa:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KOnTfqKLtRcIqSJMn1H7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDIzNWZjM2NjMzRjNDU0OGM2YTg0ZTM1ZTQ5NTMzMjg1
MzliZTEwHhcNMjUwMTMxMDcwMDA4WhcNMjUwMjAxMDcwMDA4WjAzMTEwLwYDVQQD
EyhlNGUyMTQ5NGNmZDA3MjBkNWQ2YmJkODBlZmY2YTJlOTI1MDVhMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB0iAeHFnboS8lcwlSsV4yizUMsF
289HbjV9qpKtOoE7fZ8eLiG7g5j02ux45ZPI1zaKjZSUI/jrPgqatiOjFG+p16KZ
JyO1vhHo6VmotusORXS7dYWD85Gd03N9Mp0jNo8S57X1pZMX4kJaoJiP85IsKJ+w
TD8j9p/dYX6FsvFwDd8GwH2udW3M9YpmavoKvsR5QI0cnzOVfy176SL8l6VIf5jL
EsEES/lb1ARy8ChrDXa8bVuZShg5CkwcuWlcmHi6HmVkyKDOoEUFi7JJF31bS8Xe
cawc1aR2J8qEK7n9rohdS2tdbM1HXO9FqewQrBKmC0q4BSClF32j3G6nbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTiFJTP0HINXWu9gO/2ouklBaE6MB8GA1UdIwQY
MBaAFL3SNfw8w0xFSMaoTjXklTMoU5vhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRJMV9EekRURVZJeHFoT05lU1ZNeWhUbS1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNDRmMjktM2I3MC00MTU1LWIyOGMt
MWVjZjFlZDY0ODdiLzEvdmRJMV9EekRURVZJeHFoT05lU1ZNeWhUbS1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNDRmMjktM2I3MC00MTU1LWIyOGMtMWVjZjFlZDY0ODdi
LzEvdmRJMV9EekRURVZJeHFoT05lU1ZNeWhUbS1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijXF9PiI
kLtq1z1IOnfwNE3A9TMIwcU//G8WihdBWX/67ljbTZWL+fIf8Ncewkj38j3bt8iE
VX6iOUG5sePBKIy3KmWWSxV1z2Y2JYFHEt/d4FgFRxSjhK0kWJ9h0HPSEOjFmQPe
yLrQvu3XIYaz3aGeu8aTvkO0WSAlvcfJ9PaED4jT7ahskAHA/a0krBtPyfakeVnU
9oxEXQbYZJzFGmB+UpJrZsk8p34KEQULDkiCrNpoGa8wJ0WC0LmpE7CjEC/bi7Ig
vuSFIRcCD+z+OCdtT7Aw6i+p4vQHg7M8xy3hAvDyazM+5KQjQGpaEXbWA1MdKNfa
tiFM4fT/BlSqBQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:54 2025 by rpki-client on console-fra.rpki-client.org