Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: w0fm+qssVMVokNdZp1BQMoehQYlyLGPhn7lWP++991c=
Subject key identifier: 7D:4A:90:A6:2E:A0:16:17:6E:09:5D:1E:2E:FC:BB:CC:F4:A9:34:44
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 0194BABB3ECD35D2092AABBC9BB0B0BCFF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:20 +0000
Manifest this update: Fri 31 Jan 2025 05:00:20 +0000
Manifest next update: Sat 01 Feb 2025 05:00:20 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: 3bQZbE/xl/qX7rJG34RoklHng3rZfrlUCOoXloW5EMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:3e:cd:35:d2:09:2a:ab:bc:9b:b0:b0:bc:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Jan 31 05:00:20 2025 GMT
Not After : Feb 1 05:00:20 2025 GMT
Subject: CN=7d4a90a62ea016176e095d1e2efcbbccf4a93444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:07:80:48:e8:c8:ca:41:ba:5b:77:42:c9:
ca:93:c2:d2:c3:c3:70:89:16:82:fa:33:61:bc:96:
c0:cd:f2:34:76:11:1a:50:8d:00:1c:ec:e7:2d:5e:
6d:3b:2d:d9:1d:cf:d1:9f:7a:1b:98:cc:17:d1:37:
89:e8:ce:91:b6:c8:c0:4e:25:b1:e9:b5:b3:94:b2:
de:46:b0:6b:e2:2e:09:c8:0c:6e:78:1a:65:e2:ac:
59:84:e1:cc:f2:26:11:51:84:5e:64:64:fb:16:6b:
fa:48:06:3f:28:f4:4b:43:8d:92:10:38:7b:7a:90:
f1:4b:59:47:2a:9a:08:8f:44:37:20:49:b5:16:95:
65:74:8c:6f:d2:0a:65:db:1b:14:07:0a:c5:71:61:
b1:b3:39:8b:9e:53:c3:69:9b:0f:34:09:51:0c:c4:
1c:18:70:80:d6:fc:bc:83:aa:d5:b3:7c:65:f2:51:
a5:a9:1c:e4:e2:b4:c4:a8:bf:6c:6a:ee:cf:32:5d:
5a:87:ec:03:c4:10:a0:0b:0c:ae:e4:05:6f:58:85:
53:6e:eb:a4:3e:43:c7:2d:c6:ae:80:3e:1b:47:84:
1e:08:50:31:22:8e:61:ef:d7:e4:24:fc:d9:0a:1f:
2b:15:5d:ed:7d:9a:d7:42:e5:3b:4e:54:36:79:7e:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4A:90:A6:2E:A0:16:17:6E:09:5D:1E:2E:FC:BB:CC:F4:A9:34:44
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:50:3e:22:0a:18:07:cc:73:73:11:47:6a:cd:68:b4:6f:b3:
45:69:22:c8:eb:1d:0f:d1:1d:bc:82:72:62:f2:e2:e8:dd:8a:
9a:fc:c9:82:16:e8:20:79:f0:4c:60:94:3e:27:6c:2a:11:ec:
92:e8:d8:9f:24:e5:98:c1:56:54:49:a9:cb:73:dc:44:8f:57:
2c:f0:68:4a:db:64:8d:cb:1e:ce:3c:a3:a9:3d:a6:ca:8c:15:
ca:96:6e:ac:5f:85:c6:fb:63:71:c8:c4:e8:1e:2e:a1:19:1f:
35:91:4c:bf:21:ad:03:f4:95:96:d4:ba:d8:5e:46:ef:5a:31:
46:ef:6b:df:53:8a:53:80:75:0e:29:27:cf:0d:51:37:88:94:
86:e6:62:85:68:87:8d:29:e0:b1:0d:6c:e2:24:c4:24:8d:f8:
9d:13:49:91:ef:52:93:02:95:fe:17:c3:fd:a5:fd:7f:bb:4b:
04:e6:82:b8:1a:82:e3:e1:7e:ce:5f:88:a3:f4:f0:ea:96:23:
1f:1c:12:77:64:3c:40:97:0e:19:47:c5:10:a4:35:eb:b7:47:
e9:71:c6:7a:f3:ea:81:84:23:e8:4f:b9:a2:55:0a:64:22:6d:
77:5d:69:7c:ad:3e:f7:ff:ac:2a:da:2b:cf:67:1e:d7:c4:f3:
5d:b6:a1:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uz7NNdIJKqu8m7CwvP8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2JjOGNlYWIxZTc5M2EyMTAzOWNkMGIxZTU0NzJjNzI2
NDFmNjgwHhcNMjUwMTMxMDUwMDIwWhcNMjUwMjAxMDUwMDIwWjAzMTEwLwYDVQQD
Eyg3ZDRhOTBhNjJlYTAxNjE3NmUwOTVkMWUyZWZjYmJjY2Y0YTkzNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPMHgEjoyMpBult3QsnKk8LSw8Nw
iRaC+jNhvJbAzfI0dhEaUI0AHOznLV5tOy3ZHc/Rn3obmMwX0TeJ6M6RtsjATiWx
6bWzlLLeRrBr4i4JyAxueBpl4qxZhOHM8iYRUYReZGT7Fmv6SAY/KPRLQ42SEDh7
epDxS1lHKpoIj0Q3IEm1FpVldIxv0gpl2xsUBwrFcWGxszmLnlPDaZsPNAlRDMQc
GHCA1vy8g6rVs3xl8lGlqRzk4rTEqL9sau7PMl1ah+wDxBCgCwyu5AVvWIVTbuuk
PkPHLcaugD4bR4QeCFAxIo5h79fkJPzZCh8rFV3tfZrXQuU7TlQ2eX4uuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1KkKYuoBYXbgldHi78u8z0qTREMB8GA1UdIwQY
MBaAFAw7yM6rHnk6IQOc0LHlRyxyZB9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQt
ZjhiYWM0ZmI4ZjhhLzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQtZjhiYWM0ZmI4Zjhh
LzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1A+IgoY
B8xzcxFHas1otG+zRWkiyOsdD9EdvIJyYvLi6N2KmvzJghboIHnwTGCUPidsKhHs
kujYnyTlmMFWVEmpy3PcRI9XLPBoSttkjcsezjyjqT2myowVypZurF+FxvtjccjE
6B4uoRkfNZFMvyGtA/SVltS62F5G71oxRu9r31OKU4B1Diknzw1RN4iUhuZihWiH
jSngsQ1s4iTEJI34nRNJke9SkwKV/hfD/aX9f7tLBOaCuBqC4+F+zl+Io/Tw6pYj
HxwSd2Q8QJcOGUfFEKQ167dH6XHGevPqgYQj6E+5olUKZCJtd11pfK0+9/+sKtor
z2ce18TzXbahtA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:51 2025 by rpki-client on console-fra.rpki-client.org