Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: 6QOeptuinTJQdpVDoGFe20k2IgwrBMti2wPi13Wa0Cg=
Subject key identifier: 71:17:D8:E0:19:E9:F4:F9:EE:5B:35:2E:59:D6:2C:AE:B1:78:32:93
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 0194C4D0FECEB31DF8953B3D094DF430E707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 018B
Signing time: Sun 02 Feb 2025 04:00:18 +0000
Manifest this update: Sun 02 Feb 2025 04:00:18 +0000
Manifest next update: Mon 03 Feb 2025 04:00:18 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: 0bMhLGGGVax+BoCWKkH4QXYQ/tsT/uloRvlovPtSjpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:fe:ce:b3:1d:f8:95:3b:3d:09:4d:f4:30:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Feb 2 04:00:18 2025 GMT
Not After : Feb 3 04:00:18 2025 GMT
Subject: CN=7117d8e019e9f4f9ee5b352e59d62caeb1783293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:05:81:5b:28:0d:20:1b:5c:37:69:3e:dc:
b6:85:89:cc:9b:9e:a0:b6:0c:25:36:14:cc:0d:de:
85:79:4a:c9:e2:b7:1d:3e:2f:ff:b9:46:4a:60:86:
9c:45:18:57:06:17:b1:c1:13:13:92:65:4d:4a:cd:
45:1f:48:e6:8e:05:ed:47:38:c2:98:f6:07:f4:bd:
d7:4b:22:6d:35:af:7a:b6:72:48:fa:a7:a1:2c:8b:
58:6d:18:9b:46:81:de:1d:89:b4:ff:1d:77:9c:68:
ac:a2:f9:9d:d1:03:67:9a:ee:0c:59:03:02:9d:40:
ae:e7:79:39:2d:f9:c7:0a:c0:7a:02:6a:93:86:3c:
d7:41:fd:33:51:4f:d2:46:06:12:51:b7:af:b7:05:
a0:7a:2f:35:35:ca:b6:ed:a5:ce:b1:46:9f:43:c8:
ee:91:f4:6c:55:4e:50:d4:ab:7f:e8:0b:9c:fa:6a:
d7:94:42:9a:4d:65:68:ac:68:f9:5a:cd:fc:22:6e:
c7:de:9b:87:e6:9b:d4:42:d0:3c:d3:06:1a:ff:78:
58:97:2c:8e:b3:a8:ca:e6:78:a2:33:e5:c8:b8:57:
6e:31:aa:0b:8a:19:2a:45:80:de:1c:63:a1:8b:7f:
93:0e:6c:25:2b:94:b8:f6:e9:74:a4:df:8b:c0:90:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:D8:E0:19:E9:F4:F9:EE:5B:35:2E:59:D6:2C:AE:B1:78:32:93
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:10:54:ea:fa:5d:46:2a:c7:a0:7d:cf:bc:f8:d9:71:2a:c5:
21:3d:ee:d4:0e:68:29:3a:71:72:e7:3c:cc:33:99:b6:c5:48:
f9:51:98:67:fe:10:94:1e:cd:73:e3:0e:ff:52:84:3d:4a:c0:
28:34:72:33:05:76:44:ae:96:9f:f1:6a:26:f7:ec:3a:8b:cd:
4d:3d:c0:bb:3d:74:23:0e:30:31:66:2d:b4:1e:b9:58:02:3f:
43:69:e9:54:a7:00:4e:f1:fa:f3:19:d3:9a:d2:b8:16:4b:df:
2a:42:b4:0e:8f:17:d2:05:02:34:1f:52:09:f2:6f:d4:75:a8:
c5:d1:be:4c:5a:63:4d:b4:49:fb:11:7a:90:bf:bd:d2:22:85:
f9:cc:2c:6c:3a:9d:02:c3:cd:80:36:a4:57:59:92:40:5d:c4:
41:c6:05:73:54:4f:33:a2:6c:f8:5c:98:8c:b9:25:da:f6:73:
a5:e0:76:95:a6:3d:00:6a:6f:65:46:52:d2:85:61:ba:86:5d:
e0:a2:57:6a:e6:33:9f:35:f3:08:e5:12:47:9c:d8:bc:aa:a9:
44:77:d4:dd:86:ef:a4:0b:37:1b:b1:5c:0a:e5:a4:e3:38:5a:
c4:ed:56:e8:0e:32:cb:61:2d:ca:19:72:4a:e3:cc:b7:c8:07:
58:95:51:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0P7Osx34lTs9CU30MOcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjQ0MWNiNTY5YTdjNzk5YTEwNTlmZjU3MzIzYjgzN2Nh
YWE1NGUwHhcNMjUwMjAyMDQwMDE4WhcNMjUwMjAzMDQwMDE4WjAzMTEwLwYDVQQD
Eyg3MTE3ZDhlMDE5ZTlmNGY5ZWU1YjM1MmU1OWQ2MmNhZWIxNzgzMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcgFgVsoDSAbXDdpPty2hYnMm56g
tgwlNhTMDd6FeUrJ4rcdPi//uUZKYIacRRhXBhexwRMTkmVNSs1FH0jmjgXtRzjC
mPYH9L3XSyJtNa96tnJI+qehLItYbRibRoHeHYm0/x13nGisovmd0QNnmu4MWQMC
nUCu53k5LfnHCsB6AmqThjzXQf0zUU/SRgYSUbevtwWgei81Ncq27aXOsUafQ8ju
kfRsVU5Q1Kt/6Auc+mrXlEKaTWVorGj5Ws38Im7H3puH5pvUQtA80wYa/3hYlyyO
s6jK5niiM+XIuFduMaoLihkqRYDeHGOhi3+TDmwlK5S49ul0pN+LwJBJNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEX2OAZ6fT57ls1LlnWLK6xeDKTMB8GA1UdIwQY
MBaAFD20QctWmnx5mhBZ/1cyO4N8qqVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82YmJjZTQtYzdkNi00NDE4LTkzNjgt
MjQ3YTg2YjQwZDVkLzEvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82YmJjZTQtYzdkNi00NDE4LTkzNjgtMjQ3YTg2YjQwZDVk
LzEvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxBU6vpd
RirHoH3PvPjZcSrFIT3u1A5oKTpxcuc8zDOZtsVI+VGYZ/4QlB7Nc+MO/1KEPUrA
KDRyMwV2RK6Wn/FqJvfsOovNTT3Auz10Iw4wMWYttB65WAI/Q2npVKcATvH68xnT
mtK4FkvfKkK0Do8X0gUCNB9SCfJv1HWoxdG+TFpjTbRJ+xF6kL+90iKF+cwsbDqd
AsPNgDakV1mSQF3EQcYFc1RPM6Js+FyYjLkl2vZzpeB2laY9AGpvZUZS0oVhuoZd
4KJXauYznzXzCOUSR5zYvKqpRHfU3YbvpAs3G7FcCuWk4zhaxO1W6A4yy2Etyhly
SuPMt8gHWJVR1A==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:32 2025 by rpki-client