Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
File: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft (raw, json)
Hash identifier: PUKUlNCZyMGdta86tctaKh3tzvZyRg7xxHHDJNMOASI=
Subject key identifier: 1C:BC:22:28:B4:C1:17:AA:6A:7C:22:D4:F3:87:3A:5A:D8:C2:8D:4B
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Certificate issuer: /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial: 0194BC04D36996C911D4309C24FE2B43A379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 27P-M6RaZradAhI02XRCxNJRajc.roa (hash: tTsvmnH5D7n+aX14SSx07+7ZXmYT0c1J8AfGLOoiThg=)
2: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl (hash: TckfAe9IRayGxzH4ceU1tuCX0MK99y58o+aFHc4/KoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d3:69:96:c9:11:d4:30:9c:24:fe:2b:43:a3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=1cbc2228b4c117aa6a7c22d4f3873a5ad8c28d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:df:0c:45:c8:5a:51:20:2b:5a:06:91:58:
1b:27:98:03:f8:af:47:fb:4e:0c:cb:22:09:39:80:
4f:cc:e7:6a:af:d3:79:82:91:9b:54:81:d9:80:37:
0a:69:e6:71:8e:b0:87:40:d3:76:b6:76:b0:60:90:
7c:9c:95:77:b7:1f:3f:78:01:97:41:4d:85:8c:13:
d9:61:8d:22:61:54:b7:59:f0:dd:1f:82:dc:28:ec:
41:85:ea:93:25:70:6a:0c:3c:cd:fc:f1:6b:9d:83:
c1:be:7a:d5:2a:3c:08:19:44:24:73:b7:03:1e:3f:
b2:2b:58:3a:19:b2:2a:e7:72:60:ce:7b:e4:3f:38:
9d:55:eb:c0:93:a4:58:9e:63:d2:55:7a:a2:d6:9c:
b4:0a:93:7d:52:16:39:55:1e:dc:de:5e:ad:c6:4d:
a2:c8:6a:3a:8d:69:2a:79:23:7c:9c:2e:70:a6:f9:
05:50:e6:2c:5a:7b:34:d7:65:3e:9b:8a:64:56:58:
ba:f5:74:95:fd:10:a8:e8:6f:c6:5b:e2:02:47:2a:
5c:38:8b:e4:04:80:8c:b3:f6:59:69:47:69:3d:83:
1c:b8:56:a6:48:78:f7:12:5a:0f:23:82:b4:b1:00:
93:3c:07:65:19:48:8f:5b:eb:a0:2a:7f:17:cc:46:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BC:22:28:B4:C1:17:AA:6A:7C:22:D4:F3:87:3A:5A:D8:C2:8D:4B
X509v3 Authority Key Identifier:
keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:88:93:db:b2:ff:a3:73:55:96:50:c4:b4:59:31:0e:00:8c:
f8:5f:8b:80:67:f8:da:35:fd:d5:0e:6f:2b:be:df:2a:f8:f5:
bc:44:0c:b3:21:a3:d9:be:21:4a:02:26:a1:92:a7:8e:64:54:
c3:4e:c6:12:55:27:85:45:b9:ae:f5:b7:bc:72:a4:d9:f2:7a:
03:29:9d:69:53:6d:28:dc:53:ac:a0:d0:a4:7a:65:d2:09:d5:
ea:ce:cf:e4:1c:35:2f:a5:b6:f4:df:23:1a:cc:bd:45:7a:4e:
17:64:f3:e0:e1:1d:d0:0d:fe:30:b3:4a:59:14:7f:da:aa:0d:
ee:2a:05:a4:57:e4:96:e6:61:77:d3:54:53:46:86:7b:d8:41:
d5:71:d6:8d:3c:82:28:91:95:f1:8c:0b:8c:6d:0c:bb:c9:51:
c4:62:5e:57:9e:5f:98:3c:11:e0:ed:a3:4e:f2:e8:0c:ab:25:
ff:4a:14:f7:ba:6c:ec:94:a2:87:b2:ff:06:8a:9c:57:9b:18:
7b:b4:e4:35:0b:82:09:7f:c9:fd:ab:ad:ee:10:20:bf:22:65:
14:93:7e:bf:7b:3a:2c:89:18:37:1c:85:f6:91:db:c0:fb:bf:
2c:19:9b:de:b7:bc:ac:bb:52:fa:a1:b3:34:38:c7:70:fe:85:
98:19:18:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNNplskR1DCcJP4rQ6N5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYjAzZjYwYzJjNDg3YjU2YjNlZWYzZDNlZDY3OTEwMWU0
ODdkYjcwHhcNMjUwMTMxMTEwMDIwWhcNMjUwMjAxMTEwMDIwWjAzMTEwLwYDVQQD
EygxY2JjMjIyOGI0YzExN2FhNmE3YzIyZDRmMzg3M2E1YWQ4YzI4ZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQLfDEXIWlEgK1oGkVgbJ5gD+K9H
+04MyyIJOYBPzOdqr9N5gpGbVIHZgDcKaeZxjrCHQNN2tnawYJB8nJV3tx8/eAGX
QU2FjBPZYY0iYVS3WfDdH4LcKOxBheqTJXBqDDzN/PFrnYPBvnrVKjwIGUQkc7cD
Hj+yK1g6GbIq53JgznvkPzidVevAk6RYnmPSVXqi1py0CpN9UhY5VR7c3l6txk2i
yGo6jWkqeSN8nC5wpvkFUOYsWns012U+m4pkVli69XSV/RCo6G/GW+ICRypcOIvk
BICMs/ZZaUdpPYMcuFamSHj3EloPI4K0sQCTPAdlGUiPW+ugKn8XzEalcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy8Iii0wReqanwi1POHOlrYwo1LMB8GA1UdIwQY
MBaAFA6wP2DCxIe1az7vPT7WeRAeSH23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJBX1lNTEVoN1ZyUHU4OVB0WjVFQjVJZmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjBiOTctNDMwNy00ZWNmLWE5ODct
MzY4NzEyNzc2ZjRjLzEvRHJBX1lNTEVoN1ZyUHU4OVB0WjVFQjVJZmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hYjBiOTctNDMwNy00ZWNmLWE5ODctMzY4NzEyNzc2ZjRj
LzEvRHJBX1lNTEVoN1ZyUHU4OVB0WjVFQjVJZmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4iT27L/
o3NVllDEtFkxDgCM+F+LgGf42jX91Q5vK77fKvj1vEQMsyGj2b4hSgImoZKnjmRU
w07GElUnhUW5rvW3vHKk2fJ6AymdaVNtKNxTrKDQpHpl0gnV6s7P5Bw1L6W29N8j
Gsy9RXpOF2Tz4OEd0A3+MLNKWRR/2qoN7ioFpFfkluZhd9NUU0aGe9hB1XHWjTyC
KJGV8YwLjG0Mu8lRxGJeV55fmDwR4O2jTvLoDKsl/0oU97ps7JSih7L/BoqcV5sY
e7TkNQuCCX/J/aut7hAgvyJlFJN+v3s6LIkYNxyF9pHbwPu/LBmb3re8rLtS+qGz
NDjHcP6FmBkYCg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:19 2025 by rpki-client on console-fra.rpki-client.org