Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: 8otFYz1fGgB+ODU23u7KRLdb5Di8396wh9M9frpKNx8=
Subject key identifier: 4B:D1:1A:B4:A2:AF:30:BC:DE:B3:AA:8A:EB:FA:34:2F:E1:7E:3C:FD
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 019510C70793BE4DA1494B76B6A3FAC97C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 0F2F
Signing time: Sun 16 Feb 2025 22:00:33 +0000
Manifest this update: Sun 16 Feb 2025 22:00:33 +0000
Manifest next update: Mon 17 Feb 2025 22:00:33 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: WI1b1KSro0azkgKKDcu5tYl4pbaPd0YmtWRy68CLkZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:07:93:be:4d:a1:49:4b:76:b6:a3:fa:c9:7c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Feb 16 22:00:33 2025 GMT
Not After : Feb 17 22:00:33 2025 GMT
Subject: CN=4bd11ab4a2af30bcdeb3aa8aebfa342fe17e3cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:5b:17:4a:6b:ee:51:14:de:27:de:43:df:
26:ba:c7:9f:d8:14:96:2d:39:f5:2b:46:f4:c4:10:
46:0f:6f:c8:4e:11:50:ff:59:00:46:73:9a:de:92:
ac:26:41:d8:67:0a:71:ff:c7:e6:05:cc:c3:56:29:
ca:6e:1e:a9:f6:a3:66:f2:6f:ae:28:22:7a:26:2b:
41:c5:84:3a:38:76:4e:83:64:ec:ef:75:35:7a:a5:
33:cf:b6:6a:ed:2a:46:b8:8a:f1:a7:02:ea:a3:93:
d5:bd:0c:20:12:cb:11:78:4d:4b:36:4b:48:8f:66:
ae:4c:4d:29:9a:c4:e3:ab:34:40:8c:90:a0:08:90:
b8:3d:f5:09:ff:51:d0:00:90:44:bb:b6:37:e8:b3:
ae:ae:28:4c:46:e7:06:47:4c:f6:e1:b1:00:cd:92:
31:a4:29:87:3c:4b:1e:24:93:97:ca:3a:80:e7:3c:
ab:c2:9c:f1:1e:31:3f:e1:61:14:f0:01:e8:30:45:
9f:4f:9c:64:27:0c:18:8d:8d:d8:77:84:be:ac:6d:
c5:f9:84:ea:a2:db:dd:b9:5f:ee:f3:0b:a7:3d:8b:
63:63:bb:05:45:ea:e6:a1:03:dd:8a:10:bf:37:af:
7b:58:91:0b:2c:d3:e8:3e:5d:5c:07:ec:84:b5:58:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D1:1A:B4:A2:AF:30:BC:DE:B3:AA:8A:EB:FA:34:2F:E1:7E:3C:FD
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:83:52:b1:ae:08:54:89:9d:ed:a9:c3:02:32:02:b4:47:2a:
e3:58:8b:24:2c:6f:b8:a0:06:2e:83:05:fc:7c:75:3a:9b:1f:
36:22:2f:6d:01:fb:b8:3b:8a:4d:0a:dc:4f:6e:5d:fe:92:fb:
d4:74:4f:b4:01:7a:30:d1:10:aa:b0:8f:e3:d9:a1:ec:d6:a5:
de:d7:7d:ac:50:1a:2e:4f:4e:fa:e3:46:21:dc:1e:ab:27:85:
36:07:9f:6a:89:63:58:63:4a:91:02:f2:58:2e:60:6d:7a:49:
14:99:86:f0:8e:c8:30:d1:39:11:86:c7:60:ed:0b:16:86:d0:
3e:90:09:79:d5:3a:5b:9f:7e:b2:35:f8:9c:31:c3:19:c0:38:
9d:34:6e:0f:56:b9:ae:40:df:d4:22:62:d1:9a:e8:35:d1:57:
fe:0b:84:cb:31:ec:ca:c1:36:fa:b5:21:14:62:50:a7:de:1b:
80:ce:e0:1a:e9:49:04:f1:ef:72:8d:b9:cc:18:76:7d:55:5e:
69:8d:f9:7f:1e:71:58:b4:cd:8a:fe:f3:de:1d:eb:74:66:f2:
01:e7:80:25:94:21:24:ed:06:3f:e3:57:37:42:f9:9f:ed:22:
8a:d3:75:2a:b6:66:0e:8a:e3:e1:de:5d:82:91:64:1e:4e:4c:
75:3d:c4:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxweTvk2hSUt2tqP6yXwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTYyNWRjMzk4Y2I3MDBmNzJmYThlYTZmNDMxM2JmMzMz
NWE1M2IwHhcNMjUwMjE2MjIwMDMzWhcNMjUwMjE3MjIwMDMzWjAzMTEwLwYDVQQD
Eyg0YmQxMWFiNGEyYWYzMGJjZGViM2FhOGFlYmZhMzQyZmUxN2UzY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vNbF0pr7lEU3ifeQ98musef2BSW
LTn1K0b0xBBGD2/IThFQ/1kARnOa3pKsJkHYZwpx/8fmBczDVinKbh6p9qNm8m+u
KCJ6JitBxYQ6OHZOg2Ts73U1eqUzz7Zq7SpGuIrxpwLqo5PVvQwgEssReE1LNktI
j2auTE0pmsTjqzRAjJCgCJC4PfUJ/1HQAJBEu7Y36LOurihMRucGR0z24bEAzZIx
pCmHPEseJJOXyjqA5zyrwpzxHjE/4WEU8AHoMEWfT5xkJwwYjY3Yd4S+rG3F+YTq
otvduV/u8wunPYtjY7sFRermoQPdihC/N697WJELLNPoPl1cB+yEtVhdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvRGrSirzC83rOqiuv6NC/hfjz9MB8GA1UdIwQY
MBaAFF+mJdw5jLcA9y+o6m9DE78zNaU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAt
ZWFjMTA2MzAwYjBhLzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAtZWFjMTA2MzAwYjBh
LzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIINSsa4I
VImd7anDAjICtEcq41iLJCxvuKAGLoMF/Hx1OpsfNiIvbQH7uDuKTQrcT25d/pL7
1HRPtAF6MNEQqrCP49mh7Nal3td9rFAaLk9O+uNGIdweqyeFNgefaoljWGNKkQLy
WC5gbXpJFJmG8I7IMNE5EYbHYO0LFobQPpAJedU6W59+sjX4nDHDGcA4nTRuD1a5
rkDf1CJi0ZroNdFX/guEyzHsysE2+rUhFGJQp94bgM7gGulJBPHvco25zBh2fVVe
aY35fx5xWLTNiv7z3h3rdGbyAeeAJZQhJO0GP+NXN0L5n+0iitN1KrZmDorj4d5d
gpFkHk5MdT3EmQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:31 2025 by rpki-client