Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier: zl73MUiu0xzPa6cTJ0XX6V3J8XHKYMT0pXIwg7GXsFU=
Subject key identifier: 2B:FC:D8:18:73:A8:C0:EF:15:CF:08:AE:D5:43:C2:45:10:A9:7F:94
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial: 019511354A7271DFE04FB172DE7ACA4183A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number: 1451
Signing time: Mon 17 Feb 2025 00:00:59 +0000
Manifest this update: Mon 17 Feb 2025 00:00:59 +0000
Manifest next update: Tue 18 Feb 2025 00:00:59 +0000
Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: YmR8Nui03pR3SEWWpqo02HVx/Vug+0Ms26gcZldb63E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:4a:72:71:df:e0:4f:b1:72:de:7a:ca:41:83:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Validity
Not Before: Feb 17 00:00:59 2025 GMT
Not After : Feb 18 00:00:59 2025 GMT
Subject: CN=2bfcd81873a8c0ef15cf08aed543c24510a97f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:b9:fe:f1:6f:ff:39:ae:b2:76:ea:be:13:
cf:73:83:1b:5e:ca:55:b2:ac:b7:09:bb:04:0a:b0:
d7:bf:e4:08:79:cb:db:9b:c7:66:6c:0f:67:64:9e:
37:ed:4e:80:22:87:ef:90:7c:87:8c:3c:cc:f9:1f:
13:cd:7e:e3:46:30:05:ff:72:7c:8b:4f:7e:dd:fb:
a6:95:15:29:be:c0:b0:17:4a:d8:eb:55:4a:4a:59:
30:6a:6d:f3:1d:d1:8d:fd:20:7b:7b:fd:5e:83:24:
69:7d:ce:ec:71:cd:7d:3c:be:c3:34:9e:77:69:c3:
27:82:60:8d:d0:9a:ff:a0:24:94:ec:ea:e0:c1:3c:
9b:48:17:7f:ae:a6:af:52:80:e9:2d:cb:b8:d4:f0:
3a:72:7e:25:6d:a3:77:fb:92:e7:e1:e1:2e:14:c3:
ec:53:f0:25:fb:ce:f0:78:0d:ad:30:63:34:2e:3e:
5d:fa:19:66:c5:a4:da:ff:e1:99:bd:09:bb:1a:0e:
fb:7d:2a:d4:c6:97:f5:3d:5f:18:c7:e6:35:66:ba:
a8:f6:11:4d:89:ee:00:7e:2e:03:f8:df:a4:d6:b5:
35:6d:a3:b9:3d:ed:cd:f7:f3:f2:ea:4e:5b:a9:2f:
ec:4c:97:c4:a5:b2:e5:bb:9c:52:8c:90:28:3c:77:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FC:D8:18:73:A8:C0:EF:15:CF:08:AE:D5:43:C2:45:10:A9:7F:94
X509v3 Authority Key Identifier:
keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bd:ec:e2:95:57:57:df:fb:3d:57:24:af:bd:a2:42:15:78:
ca:5c:12:c8:8e:09:4b:3d:e0:02:ed:8a:48:bc:95:5e:32:5a:
16:c9:22:06:96:19:d4:3a:2d:d8:cd:47:5e:60:9d:c3:c5:d8:
41:29:f3:2e:77:c5:25:bb:69:74:fc:16:71:db:a0:40:bb:48:
12:99:bd:2f:c1:dd:ef:41:a2:d2:9f:cf:00:8c:11:34:89:d4:
17:94:1f:cf:ca:e4:9c:c9:c7:3a:f1:dd:71:dd:02:e8:47:af:
4b:68:02:09:86:04:2b:e3:91:1c:63:5e:fd:e9:80:72:35:87:
31:e9:d8:be:17:c4:c5:40:87:96:2e:a3:f9:e2:b2:fd:35:e8:
d8:e0:b0:0b:c9:9e:2a:58:40:c0:0c:46:b5:4e:c4:c2:6c:91:
1f:5e:f8:eb:e4:1e:26:1a:05:8d:3e:4d:b5:3a:d0:09:e6:20:
98:08:d9:12:99:73:23:24:8d:f4:e2:e9:76:61:26:32:b2:f5:
a1:de:b1:99:30:cd:ce:c4:7e:d7:02:ba:b1:08:7f:20:3b:23:
18:49:cc:1e:eb:10:8c:2c:b4:2b:ab:af:69:c4:0d:87:a4:17:
88:6a:d3:eb:48:29:b8:c8:c9:96:a3:13:1d:bb:24:43:f0:ee:
c7:81:35:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNUpycd/gT7Fy3nrKQYOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTAyZjJmNzI5NjVjOWUxYzliMmQ1N2VhM2ZjMTJmY2Zh
YzkxMDMwHhcNMjUwMjE3MDAwMDU5WhcNMjUwMjE4MDAwMDU5WjAzMTEwLwYDVQQD
EygyYmZjZDgxODczYThjMGVmMTVjZjA4YWVkNTQzYzI0NTEwYTk3Zjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aS5/vFv/zmusnbqvhPPc4MbXspV
sqy3CbsECrDXv+QIecvbm8dmbA9nZJ437U6AIofvkHyHjDzM+R8TzX7jRjAF/3J8
i09+3fumlRUpvsCwF0rY61VKSlkwam3zHdGN/SB7e/1egyRpfc7scc19PL7DNJ53
acMngmCN0Jr/oCSU7OrgwTybSBd/rqavUoDpLcu41PA6cn4lbaN3+5Ln4eEuFMPs
U/Al+87weA2tMGM0Lj5d+hlmxaTa/+GZvQm7Gg77fSrUxpf1PV8Yx+Y1Zrqo9hFN
ie4Afi4D+N+k1rU1baO5Pe3N9/Py6k5bqS/sTJfEpbLlu5xSjJAoPHfrbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv82BhzqMDvFc8IrtVDwkUQqX+UMB8GA1UdIwQY
MBaAFO+gLy9yllyeHJstV+o/wS/PrJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEt
NDg4OTI2Y2ZkYzJkLzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEtNDg4OTI2Y2ZkYzJk
LzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ73s4pVX
V9/7PVckr72iQhV4ylwSyI4JSz3gAu2KSLyVXjJaFskiBpYZ1Dot2M1HXmCdw8XY
QSnzLnfFJbtpdPwWcdugQLtIEpm9L8Hd70Gi0p/PAIwRNInUF5Qfz8rknMnHOvHd
cd0C6EevS2gCCYYEK+ORHGNe/emAcjWHMenYvhfExUCHli6j+eKy/TXo2OCwC8me
KlhAwAxGtU7EwmyRH1746+QeJhoFjT5NtTrQCeYgmAjZEplzIySN9OLpdmEmMrL1
od6xmTDNzsR+1wK6sQh/IDsjGEnMHusQjCy0K6uvacQNh6QXiGrT60gpuMjJlqMT
HbskQ/Dux4E1VQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:38 2025 by rpki-client