Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File: dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier: aGjkPGjpFYkz4xcAgzq11pZRsTNosiCH16H2MTgTjdY=
Subject key identifier: C2:B8:69:71:DC:07:4D:E2:4F:D1:5A:A4:C5:AD:80:6A:35:15:AD:4E
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial: 0194BA844FF1CA56202207DF0D52D8637EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 04:00:20 +0000
Manifest this update: Fri 31 Jan 2025 04:00:20 +0000
Manifest next update: Sat 01 Feb 2025 04:00:20 +0000
Files and hashes: 1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: uAAtC7zZxEFIhnn9cOjRJdgXeXUXDy5jPGidec7l16U=)
2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:4f:f1:ca:56:20:22:07:df:0d:52:d8:63:7e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
Validity
Not Before: Jan 31 04:00:20 2025 GMT
Not After : Feb 1 04:00:20 2025 GMT
Subject: CN=c2b86971dc074de24fd15aa4c5ad806a3515ad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:d5:d2:be:8a:ce:6c:c8:15:0f:c7:8d:72:
e2:da:40:f9:a6:e6:00:de:45:22:96:9f:cb:e6:93:
3b:46:85:58:fa:de:69:fe:19:d5:99:3c:54:a5:ca:
3b:d8:e6:37:57:c5:dd:ec:b6:01:ee:05:70:bb:59:
cf:40:c4:83:df:e5:99:f2:85:b2:8a:e9:76:b8:e6:
4f:e8:5f:db:ff:1b:0d:f8:d9:1f:37:ca:96:11:2b:
d7:ee:71:7c:6a:9b:f4:ba:a8:c2:24:94:09:14:f0:
a5:2f:14:85:86:50:28:61:d2:e8:d6:df:0b:11:86:
d4:a2:d0:f4:6e:37:58:4b:b8:5f:df:56:12:2a:5b:
e6:43:17:f3:93:c7:09:5b:82:c6:02:5f:3b:d4:cd:
36:dd:35:e3:e2:7e:6a:cc:ce:19:57:f6:e2:1e:1a:
df:a1:0d:81:b5:9d:69:a9:cc:e9:89:3d:e8:b3:9b:
cd:33:f9:7b:ac:19:f4:63:e3:63:44:2b:dd:21:85:
6e:a7:bb:e9:ab:e4:35:b3:e8:6e:7f:e3:16:76:9b:
f7:e0:8e:4e:1a:cd:9f:5e:0f:8f:d5:96:4e:16:91:
d6:54:43:f3:6b:af:b5:f1:49:44:88:eb:05:35:aa:
f8:5c:55:59:fc:7b:93:18:d2:16:8a:72:cb:d8:66:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B8:69:71:DC:07:4D:E2:4F:D1:5A:A4:C5:AD:80:6A:35:15:AD:4E
X509v3 Authority Key Identifier:
keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c0:0c:73:c8:9a:61:d5:d9:53:97:81:0f:07:df:0f:0c:45:
d6:ae:cd:be:f6:a6:1f:d6:9d:0e:0a:ce:1a:14:85:b4:63:3f:
54:fa:2c:51:39:02:b6:89:ec:ed:51:d9:d5:65:6f:8a:a7:06:
a6:9d:bc:be:99:fd:91:fd:f2:ca:c1:ef:1a:6b:2a:7a:a4:68:
4c:5d:90:0d:d8:24:4a:8c:99:2e:74:b8:34:fc:31:40:80:47:
98:b0:e5:35:b6:c1:07:01:df:4d:51:c7:14:29:f4:ee:2e:00:
8e:c8:57:cd:1b:9e:1e:a8:d6:7a:45:a7:42:40:f3:4e:d8:df:
3a:55:54:65:70:c8:4f:96:26:46:ed:12:b9:43:01:5a:e5:66:
85:6d:50:db:f0:57:40:ef:5a:26:05:01:9f:3f:80:db:d4:77:
b9:b2:e4:6d:f1:5f:20:c3:f9:d4:43:08:a5:48:f5:bb:f6:cb:
c7:e7:d5:a9:60:6b:77:94:28:a0:eb:7b:62:91:84:f6:d5:89:
a1:8c:17:fa:ca:89:7a:31:46:c4:4a:da:09:88:c8:e3:26:5b:
37:8d:c9:49:9f:45:96:d6:bf:72:5d:73:d4:dc:2e:03:69:eb:
ce:b9:9d:5a:2a:c1:a2:3c:3d:01:81:90:0f:28:b4:29:3b:ea:
66:e8:43:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hE/xylYgIgffDVLYY37jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MjQ1NDM4YTJiNjIwOWM4MTY3NWVmMzU3ODNkODlhMTli
NzA3ZmEwHhcNMjUwMTMxMDQwMDIwWhcNMjUwMjAxMDQwMDIwWjAzMTEwLwYDVQQD
EyhjMmI4Njk3MWRjMDc0ZGUyNGZkMTVhYTRjNWFkODA2YTM1MTVhZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX/V0r6KzmzIFQ/HjXLi2kD5puYA
3kUilp/L5pM7RoVY+t5p/hnVmTxUpco72OY3V8Xd7LYB7gVwu1nPQMSD3+WZ8oWy
iul2uOZP6F/b/xsN+NkfN8qWESvX7nF8apv0uqjCJJQJFPClLxSFhlAoYdLo1t8L
EYbUotD0bjdYS7hf31YSKlvmQxfzk8cJW4LGAl871M023TXj4n5qzM4ZV/biHhrf
oQ2BtZ1pqczpiT3os5vNM/l7rBn0Y+NjRCvdIYVup7vpq+Q1s+huf+MWdpv34I5O
Gs2fXg+P1ZZOFpHWVEPza6+18UlEiOsFNar4XFVZ/HuTGNIWinLL2GbpfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK4aXHcB03iT9FapMWtgGo1Fa1OMB8GA1UdIwQY
MBaAFHUkVDiitiCcgWde81eD2JoZtwf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wZWVkMmItMjA1Ny00NWU3LTlmMDAt
NWVlMTg1ODhkZjU5LzEvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wZWVkMmItMjA1Ny00NWU3LTlmMDAtNWVlMTg1ODhkZjU5
LzEvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsAMc8ia
YdXZU5eBDwffDwxF1q7NvvamH9adDgrOGhSFtGM/VPosUTkCtons7VHZ1WVviqcG
pp28vpn9kf3yysHvGmsqeqRoTF2QDdgkSoyZLnS4NPwxQIBHmLDlNbbBBwHfTVHH
FCn07i4AjshXzRueHqjWekWnQkDzTtjfOlVUZXDIT5YmRu0SuUMBWuVmhW1Q2/BX
QO9aJgUBnz+A29R3ubLkbfFfIMP51EMIpUj1u/bLx+fVqWBrd5QooOt7YpGE9tWJ
oYwX+sqJejFGxEraCYjI4yZbN43JSZ9Flta/cl1z1NwuA2nrzrmdWirBojw9AYGQ
Dyi0KTvqZuhDFg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:34 2025 by rpki-client on console-fra.rpki-client.org