Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File: 639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier: U6/VJGfZNHHm8jgsNgOiTi8Q4kwQ7KRwJ/5hV8QEhMQ=
Subject key identifier: 39:B4:C7:99:CA:13:1D:CB:58:0B:EA:4E:8C:36:67:A1:F1:F6:54:CA
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer: /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial: 019510C71DA7778383B61BA409109519C0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:00:39 +0000
Manifest this update: Sun 16 Feb 2025 22:00:39 +0000
Manifest next update: Mon 17 Feb 2025 22:00:39 +0000
Files and hashes: 1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: WgvsyckvGd4r+wshZdcKLKuF8Ed3Hf14e/+EaZx0+to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:1d:a7:77:83:83:b6:1b:a4:09:10:95:19:c0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Validity
Not Before: Feb 16 22:00:39 2025 GMT
Not After : Feb 17 22:00:39 2025 GMT
Subject: CN=39b4c799ca131dcb580bea4e8c3667a1f1f654ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:24:e4:9e:fe:30:95:2a:c1:c0:f1:e2:d2:
a1:45:87:c0:ec:71:ff:56:2f:c4:b0:7e:69:d7:7e:
4f:ed:1c:64:61:83:e5:38:e1:9d:bf:ff:6b:ce:91:
d9:cc:55:b2:47:23:26:f8:1b:5e:fe:74:a6:23:38:
2a:b1:f2:40:e2:fa:db:0d:34:96:5b:e0:eb:32:28:
5a:a5:22:e2:22:70:01:c1:e7:4e:a9:1b:77:8c:11:
6a:7a:56:9f:94:74:a0:6d:8c:5a:a3:56:24:6e:0d:
04:63:47:72:e7:01:c3:61:62:04:21:16:d3:8d:be:
f5:74:d8:e9:f7:47:68:ef:1f:68:ff:5c:24:6d:28:
60:c1:0b:60:ff:e3:22:18:4d:27:6a:a0:ed:b4:83:
8e:6d:8f:e4:20:44:4e:21:18:6a:cb:a4:a3:a5:7f:
68:6b:86:30:63:95:38:7d:2a:96:5d:a9:c0:65:7e:
ca:87:d2:50:20:92:3c:b1:7d:54:1d:05:a1:f4:f8:
aa:05:0e:28:85:b8:f4:15:64:65:94:1e:fa:58:9f:
a4:db:89:4e:b6:b5:d5:78:8e:c0:aa:a8:86:59:24:
bf:f1:34:80:13:57:81:ef:4e:4c:57:9b:3c:2c:11:
5d:45:ea:9a:fa:4c:12:6b:1b:6e:ff:bc:31:c9:57:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B4:C7:99:CA:13:1D:CB:58:0B:EA:4E:8C:36:67:A1:F1:F6:54:CA
X509v3 Authority Key Identifier:
keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d4:70:79:2d:3b:06:42:1f:c9:f4:e8:4f:83:b0:5f:6b:18:
97:ff:79:2e:9b:7b:b0:94:0d:14:2c:61:e5:ec:f1:d9:fc:4c:
1d:f2:41:69:5d:38:c4:32:1b:85:47:9b:66:12:b1:0c:f2:a3:
1b:30:95:43:35:66:89:b5:5b:bf:c3:21:9a:be:fb:e7:d9:c6:
06:85:1d:e5:9e:f0:32:e1:f9:a6:55:f4:7b:74:5b:90:65:9f:
b1:91:39:6a:c8:e6:bb:2a:80:58:3a:97:13:c5:75:39:c3:8a:
82:2e:a2:21:6d:38:e5:19:7a:94:75:e1:da:d1:f7:ef:ad:7f:
33:c6:fb:0e:e1:dc:99:b1:20:7b:aa:30:98:f6:32:5b:ef:40:
09:69:4c:fc:6a:27:9a:b1:2c:bb:30:04:07:1e:9d:e7:03:69:
eb:b8:d8:58:dc:da:2d:19:0e:09:ce:91:09:96:a6:0d:79:a1:
4b:8c:80:cd:a4:bc:27:b3:f8:84:3d:cb:15:aa:44:b4:2a:0c:
3d:1f:82:63:0e:32:86:6d:db:ba:ff:63:08:50:a6:de:bd:d7:
e7:a4:fe:72:fe:d9:44:20:3a:09:cf:fc:fe:2e:cc:ac:d5:31:
55:4b:a4:fa:77:8a:ca:89:db:b5:c7:ce:8e:87:12:fa:bd:2d:
8f:db:ec:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxx2nd4ODthukCRCVGcDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2Y2YjUzZjk4OGI1NzczMjBlZjI4OTMzODBhNWVhODI0
YjZhZTQwHhcNMjUwMjE2MjIwMDM5WhcNMjUwMjE3MjIwMDM5WjAzMTEwLwYDVQQD
EygzOWI0Yzc5OWNhMTMxZGNiNTgwYmVhNGU4YzM2NjdhMWYxZjY1NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxick5J7+MJUqwcDx4tKhRYfA7HH/
Vi/EsH5p135P7RxkYYPlOOGdv/9rzpHZzFWyRyMm+Bte/nSmIzgqsfJA4vrbDTSW
W+DrMihapSLiInABwedOqRt3jBFqelaflHSgbYxao1Ykbg0EY0dy5wHDYWIEIRbT
jb71dNjp90do7x9o/1wkbShgwQtg/+MiGE0naqDttIOObY/kIEROIRhqy6SjpX9o
a4YwY5U4fSqWXanAZX7Kh9JQIJI8sX1UHQWh9PiqBQ4ohbj0FWRllB76WJ+k24lO
trXVeI7AqqiGWSS/8TSAE1eB705MV5s8LBFdReqa+kwSaxtu/7wxyVdLjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDm0x5nKEx3LWAvqTow2Z6Hx9lTKMB8GA1UdIwQY
MBaAFOt/a1P5iLV3Mg7yiTOApeqCS2rkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mZmFjZWUtMDljYy00MWNiLTkzNjIt
MDJmMzAxM2Q5MWE5LzEvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mZmFjZWUtMDljYy00MWNiLTkzNjItMDJmMzAxM2Q5MWE5
LzEvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9RweS07
BkIfyfToT4OwX2sYl/95Lpt7sJQNFCxh5ezx2fxMHfJBaV04xDIbhUebZhKxDPKj
GzCVQzVmibVbv8Mhmr7759nGBoUd5Z7wMuH5plX0e3RbkGWfsZE5asjmuyqAWDqX
E8V1OcOKgi6iIW045Rl6lHXh2tH3761/M8b7DuHcmbEge6owmPYyW+9ACWlM/Gon
mrEsuzAEBx6d5wNp67jYWNzaLRkOCc6RCZamDXmhS4yAzaS8J7P4hD3LFapEtCoM
PR+CYw4yhm3buv9jCFCm3r3X56T+cv7ZRCA6Cc/8/i7MrNUxVUuk+neKyonbtcfO
jocS+r0tj9vsyg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:16 2025 by rpki-client