Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier: sRXzaG6MpDlAh43/xisudUUXL+ILOzx7golSkc4dRLk=
Subject key identifier: 5C:54:D2:2C:19:E7:72:C0:19:F0:FB:40:E5:CF:9E:1C:A1:42:D5:02
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial: 0194C463A519580573B394A5C3CDFF34F1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number: 142A
Signing time: Sun 02 Feb 2025 02:00:52 +0000
Manifest this update: Sun 02 Feb 2025 02:00:52 +0000
Manifest next update: Mon 03 Feb 2025 02:00:52 +0000
Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: sQCVoYYFQTcO9b7e/PyBxxeUJ8WR8wlLLmunq+lWWiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:a5:19:58:05:73:b3:94:a5:c3:cd:ff:34:f1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Validity
Not Before: Feb 2 02:00:52 2025 GMT
Not After : Feb 3 02:00:52 2025 GMT
Subject: CN=5c54d22c19e772c019f0fb40e5cf9e1ca142d502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:19:a0:70:eb:1e:ee:89:d0:5a:7d:be:06:
b6:db:e1:98:fc:76:c3:ab:bf:fc:6b:d9:6c:cf:52:
e1:a1:f7:1b:0a:64:a8:09:05:1c:57:d8:67:ce:37:
68:bd:b7:30:b4:65:a2:a2:8e:bf:d2:4e:5d:d5:cc:
45:94:de:b8:4b:17:ac:ec:d9:0a:2d:04:7c:bb:a6:
ea:0b:ce:83:6e:7f:a7:96:27:78:ba:e4:27:57:e2:
fd:b6:25:8a:9d:06:76:c9:e9:0a:55:a3:9a:ca:eb:
46:8f:aa:7c:9e:9c:cc:0e:60:95:85:14:70:79:65:
7e:32:dc:fa:79:93:7d:6a:2f:a5:3f:63:99:1c:62:
e3:c2:49:5f:fa:7a:5f:82:8d:1e:ec:b9:c2:ed:a2:
62:fc:f6:55:9f:bd:0f:ff:80:bf:fa:7e:03:23:fe:
85:a9:4f:0f:4a:18:4a:66:7b:cd:a1:e5:32:a3:04:
41:89:cc:b5:70:3e:79:05:64:dd:c7:3e:7c:f6:a6:
b2:57:40:ca:c2:21:f3:0a:38:c1:63:44:80:56:6e:
cf:5c:27:c7:eb:86:f5:aa:e4:c7:5a:b7:e3:ed:01:
bc:f6:37:ab:3b:a4:31:a9:f9:52:03:93:df:27:65:
56:77:59:c3:51:38:bb:57:08:e4:28:b9:59:ae:69:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:D2:2C:19:E7:72:C0:19:F0:FB:40:E5:CF:9E:1C:A1:42:D5:02
X509v3 Authority Key Identifier:
keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1c:fd:24:12:eb:1e:a2:50:ea:5c:00:c0:a8:ca:74:b9:c0:
7d:fa:25:bc:14:88:02:ed:5a:ab:ea:17:4d:a6:7c:d8:9d:1b:
cd:88:e4:64:d8:54:5c:9e:72:39:5f:ba:12:ee:3c:c2:f8:ee:
98:d9:8e:b7:91:41:2a:ca:81:ac:48:c6:62:c5:10:a1:4a:45:
2c:b5:d1:83:68:4c:68:8c:a2:54:be:33:7c:92:05:56:be:f5:
8b:0c:21:21:16:6a:2a:11:4d:a4:3a:9c:b6:82:f1:12:cc:79:
71:f0:5d:e8:96:02:ae:18:44:0a:73:2c:d7:11:7a:85:54:8e:
1a:d8:67:54:4b:55:a0:c3:2f:10:36:50:ce:0f:31:27:48:1a:
e7:5b:aa:42:bb:af:02:79:49:c0:e4:b6:ca:f8:c2:a6:db:4a:
09:14:ef:44:af:01:f3:30:82:78:22:e5:9f:8f:07:1a:db:19:
34:37:a4:1c:fd:b5:e8:ca:50:ba:04:52:fa:9e:ad:ef:c7:26:
f5:fd:0a:7d:24:c4:52:ab:cc:99:13:f0:f1:65:21:b5:77:00:
09:ba:4d:86:5d:4a:a0:a2:c0:c3:ee:f2:d0:6f:0c:08:c1:23:
58:be:5d:be:1e:a1:d5:ed:bc:d2:b7:17:c3:8b:00:f5:6c:a2:
93:41:6c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY6UZWAVzs5Slw83/NPHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkY2Y0ZjBjMjc3M2VmOTg5MDBmOWMzNTkwNzVjY2E2MWQx
N2MwYjMwHhcNMjUwMjAyMDIwMDUyWhcNMjUwMjAzMDIwMDUyWjAzMTEwLwYDVQQD
Eyg1YzU0ZDIyYzE5ZTc3MmMwMTlmMGZiNDBlNWNmOWUxY2ExNDJkNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoEZoHDrHu6J0Fp9vga22+GY/HbD
q7/8a9lsz1LhofcbCmSoCQUcV9hnzjdovbcwtGWioo6/0k5d1cxFlN64Sxes7NkK
LQR8u6bqC86Dbn+nlid4uuQnV+L9tiWKnQZ2yekKVaOayutGj6p8npzMDmCVhRRw
eWV+Mtz6eZN9ai+lP2OZHGLjwklf+npfgo0e7LnC7aJi/PZVn70P/4C/+n4DI/6F
qU8PShhKZnvNoeUyowRBicy1cD55BWTdxz589qayV0DKwiHzCjjBY0SAVm7PXCfH
64b1quTHWrfj7QG89jerO6QxqflSA5PfJ2VWd1nDUTi7VwjkKLlZrml9pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxU0iwZ53LAGfD7QOXPnhyhQtUCMB8GA1UdIwQY
MBaAFD3PTwwnc++YkA+cNZB1zKYdF8CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYt
M2JkZTczOTZiN2I0LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYtM2JkZTczOTZiN2I0
LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRz9JBLr
HqJQ6lwAwKjKdLnAffolvBSIAu1aq+oXTaZ82J0bzYjkZNhUXJ5yOV+6Eu48wvju
mNmOt5FBKsqBrEjGYsUQoUpFLLXRg2hMaIyiVL4zfJIFVr71iwwhIRZqKhFNpDqc
toLxEsx5cfBd6JYCrhhECnMs1xF6hVSOGthnVEtVoMMvEDZQzg8xJ0ga51uqQruv
AnlJwOS2yvjCpttKCRTvRK8B8zCCeCLln48HGtsZNDekHP216MpQugRS+p6t78cm
9f0KfSTEUqvMmRPw8WUhtXcACbpNhl1KoKLAw+7y0G8MCMEjWL5dvh6h1e280rcX
w4sA9Wyik0Fs4Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:00 2025 by rpki-client