Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier: IZTI2gHsH7a/Cfr7JqwIYBFII9+cm/8x/sw/qcOGSPQ=
Subject key identifier: C2:20:D9:5F:A8:95:D4:52:9C:E9:25:DF:65:A2:9D:9B:CF:7E:19:FA
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial: 0194BB970F9889F3D4010507273073BFDDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number: 016A
Signing time: Fri 31 Jan 2025 09:00:26 +0000
Manifest this update: Fri 31 Jan 2025 09:00:26 +0000
Manifest next update: Sat 01 Feb 2025 09:00:26 +0000
Files and hashes: 1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: lDXc7oVHQkHb+rlIAGCrTQLV20Oaiyq5JP0pv0QB8+o=)
2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0f:98:89:f3:d4:01:05:07:27:30:73:bf:dd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Validity
Not Before: Jan 31 09:00:26 2025 GMT
Not After : Feb 1 09:00:26 2025 GMT
Subject: CN=c220d95fa895d4529ce925df65a29d9bcf7e19fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:02:c0:01:37:e0:97:c3:52:75:bc:e1:22:
f8:f3:b1:40:f3:0c:b7:9f:84:00:c7:51:12:76:58:
5c:16:fa:bc:f8:70:f9:58:2c:10:fa:ab:cb:e5:0b:
8e:40:17:fe:15:47:5c:4e:86:88:f0:bd:46:c8:d4:
98:ab:19:82:c3:b4:fd:81:5b:7b:10:a1:df:b7:09:
9e:28:e7:e8:ab:c9:89:62:8e:3a:45:a1:88:e5:57:
d6:a7:82:20:f0:ee:40:df:3e:4d:e4:36:5b:ea:9d:
a1:b9:a9:86:45:dd:35:72:ac:b2:73:51:14:cd:81:
e6:49:b3:fd:ae:9f:0d:ff:7c:06:a0:0b:4b:a7:c5:
67:ce:2d:84:68:a4:90:d4:f8:b0:29:d0:19:70:04:
e4:21:6d:d6:89:45:2a:6d:cb:35:82:7e:8a:0b:6c:
c2:1b:53:89:10:da:66:e6:1c:70:02:f4:fb:f8:90:
f2:4f:06:8c:b0:44:3a:90:f6:af:e6:af:66:4b:d9:
43:9f:84:81:b3:56:2c:b0:05:50:21:a7:39:c7:47:
30:14:70:61:81:10:2f:7f:48:f4:94:38:80:7c:a2:
17:4d:e1:d2:11:fa:50:33:d8:f1:ff:d4:dc:34:29:
dd:77:05:1a:73:7c:2d:2d:7a:5f:9a:ed:f1:20:0a:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:D9:5F:A8:95:D4:52:9C:E9:25:DF:65:A2:9D:9B:CF:7E:19:FA
X509v3 Authority Key Identifier:
keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:18:64:1d:65:57:e3:05:4d:eb:3c:0d:19:1e:8e:42:c9:a3:
21:ec:a3:ff:fb:fd:f1:c2:4a:80:00:c8:a4:67:56:1f:8d:fa:
7a:f0:1d:f9:7f:51:27:c4:94:08:15:89:d2:e2:fd:18:bb:da:
5b:a8:b4:dc:d7:27:23:18:88:4e:e4:7d:63:72:a3:81:28:52:
3a:0e:bf:e9:2f:84:91:fd:75:d9:39:f9:7a:02:ab:00:51:4b:
ba:e4:50:05:61:a4:ee:98:e1:ec:51:a9:e4:22:08:30:c1:c6:
18:b0:29:40:88:90:2d:9a:fe:ce:f3:c4:9b:d8:4f:00:65:e6:
bf:d9:25:16:73:14:0a:58:fe:fe:37:d4:25:5e:d9:28:15:2c:
56:08:f8:dd:b1:72:4b:eb:e9:fb:12:5f:22:16:a8:f8:d7:12:
22:ec:5a:f5:95:81:ed:72:de:1e:92:c5:7e:60:1a:b9:d2:88:
d3:67:16:d5:79:31:d3:71:99:f5:21:0f:8a:95:8b:84:78:84:
c5:27:31:5b:04:27:eb:28:37:51:23:63:8b:bc:63:c2:4e:8e:
d3:1a:62:84:ef:3b:48:e4:97:c9:d3:37:de:2a:43:b7:30:24:
fc:b9:98:11:8f:e3:68:9f:72:03:bf:2c:19:aa:c3:ca:4d:54:
9c:75:9a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lw+YifPUAQUHJzBzv92mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMTE3YTNlMGQwZDA1ZDRiMGFiODIzMDgwZTdiZjZjZmQ0
YjM3NzYwHhcNMjUwMTMxMDkwMDI2WhcNMjUwMjAxMDkwMDI2WjAzMTEwLwYDVQQD
EyhjMjIwZDk1ZmE4OTVkNDUyOWNlOTI1ZGY2NWEyOWQ5YmNmN2UxOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yECwAE34JfDUnW84SL487FA8wy3
n4QAx1ESdlhcFvq8+HD5WCwQ+qvL5QuOQBf+FUdcToaI8L1GyNSYqxmCw7T9gVt7
EKHftwmeKOfoq8mJYo46RaGI5VfWp4Ig8O5A3z5N5DZb6p2huamGRd01cqyyc1EU
zYHmSbP9rp8N/3wGoAtLp8Vnzi2EaKSQ1PiwKdAZcATkIW3WiUUqbcs1gn6KC2zC
G1OJENpm5hxwAvT7+JDyTwaMsEQ6kPav5q9mS9lDn4SBs1YssAVQIac5x0cwFHBh
gRAvf0j0lDiAfKIXTeHSEfpQM9jx/9TcNCnddwUac3wtLXpfmu3xIArZoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIg2V+oldRSnOkl32WinZvPfhn6MB8GA1UdIwQY
MBaAFA4Rej4NDQXUsKuCMIDnv2z9Szd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2It
ZDg0NzVmMTg0NjRlLzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2ItZDg0NzVmMTg0NjRl
LzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxhkHWVX
4wVN6zwNGR6OQsmjIeyj//v98cJKgADIpGdWH436evAd+X9RJ8SUCBWJ0uL9GLva
W6i03NcnIxiITuR9Y3KjgShSOg6/6S+Ekf112Tn5egKrAFFLuuRQBWGk7pjh7FGp
5CIIMMHGGLApQIiQLZr+zvPEm9hPAGXmv9klFnMUClj+/jfUJV7ZKBUsVgj43bFy
S+vp+xJfIhao+NcSIuxa9ZWB7XLeHpLFfmAaudKI02cW1Xkx03GZ9SEPipWLhHiE
xScxWwQn6yg3USNji7xjwk6O0xpihO87SOSXydM33ipDtzAk/LmYEY/jaJ9yA78s
GarDyk1UnHWaJQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:55 2025 by rpki-client on console-fra.rpki-client.org