Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: c9QWHTXQz50egDQm7fIx+MLPpP8Hs+aCFLt2IsAlIw8=
Subject key identifier: C8:26:40:D1:D9:A4:E2:E0:C5:CA:3A:B2:17:1F:7B:78:67:F1:57:43
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 019510C6C550D8D6AF4FD1C2B64020D1598F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 0B47
Signing time: Sun 16 Feb 2025 22:00:16 +0000
Manifest this update: Sun 16 Feb 2025 22:00:16 +0000
Manifest next update: Mon 17 Feb 2025 22:00:16 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: 3C+ppR11TTvDhcxudE6z75rl1pqm/o77Weg+8DMJn8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:c5:50:d8:d6:af:4f:d1:c2:b6:40:20:d1:59:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Feb 16 22:00:16 2025 GMT
Not After : Feb 17 22:00:16 2025 GMT
Subject: CN=c82640d1d9a4e2e0c5ca3ab2171f7b7867f15743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:ee:5d:6d:5b:52:2c:de:85:2f:d2:6f:aa:
4a:54:2d:c1:f5:69:b0:12:9d:a3:08:d5:88:6b:d2:
b7:c5:5d:f0:bd:50:a7:0d:6e:7c:d2:5f:22:68:2f:
89:45:9f:97:f4:c6:a0:7f:29:26:12:57:34:4d:cb:
1c:ad:2c:2f:f2:a3:47:40:61:57:6b:81:e9:21:bb:
9f:67:06:99:c8:3a:56:59:b9:fb:56:5c:fd:fb:29:
40:9b:e8:82:5e:30:05:3f:f4:55:76:58:4a:78:01:
e3:d3:a5:43:ea:47:eb:74:b0:fc:90:9f:d3:87:9b:
e0:91:e9:77:ce:4d:ca:25:ee:98:41:79:e0:35:f1:
df:a1:4e:cb:22:a3:17:64:90:40:69:db:35:1b:0c:
ac:c8:7e:86:aa:fb:4c:a0:6d:1f:77:2c:3c:8c:14:
28:1e:9c:c9:4b:47:43:e9:25:33:e0:e5:52:07:2a:
9d:ad:cf:b7:30:87:16:c1:5d:b2:43:cf:5e:d9:2d:
66:5b:10:cd:bf:8e:db:82:a8:8a:07:25:e4:a6:75:
ed:4e:7a:42:8e:b2:ad:15:d7:53:cd:a2:33:32:29:
3b:24:35:a1:e4:1a:27:88:b2:80:3b:6e:71:0f:6e:
a5:e2:13:4a:de:37:ac:18:73:09:2a:cb:c6:0c:5a:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:26:40:D1:D9:A4:E2:E0:C5:CA:3A:B2:17:1F:7B:78:67:F1:57:43
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d0:bd:c5:6d:c7:e0:39:74:52:52:11:07:82:9a:e4:cc:2d:
9f:29:ba:14:a6:80:ed:ca:8b:be:8f:95:ee:db:d0:bd:c0:bd:
5b:e3:a7:71:bb:a8:fe:3d:fd:b3:47:d2:98:99:60:fe:fb:a1:
d0:0a:86:49:a4:46:90:b8:19:e2:c7:63:ec:79:80:0a:02:23:
46:8c:ea:f5:01:57:29:a5:26:52:73:86:d0:b2:10:d8:87:1d:
56:d5:68:e3:d9:84:a0:08:94:3e:da:d5:b1:c8:0c:b9:27:6a:
2c:31:5d:c1:96:7c:48:2c:4d:ff:4f:e7:ed:4c:58:27:7b:a8:
f7:60:eb:53:1e:37:1e:40:f1:9e:03:b2:d1:29:bd:7e:e8:5e:
92:a9:ae:51:90:76:59:11:cd:b6:af:1b:54:30:85:27:0a:09:
ce:69:9d:bb:8e:6b:8a:82:5a:ae:2d:c1:16:d5:b7:46:fa:1c:
e3:3b:f4:27:18:82:2b:07:97:dc:4e:30:5a:fa:4d:18:a6:ef:
54:0b:61:12:ea:18:9e:5b:91:2f:bb:e0:46:2d:e4:b3:ad:bb:
ff:17:87:fa:5f:3c:92:f1:f8:32:63:53:3d:16:36:8d:ba:bb:
18:e5:c5:0a:8b:41:d7:8c:bd:b5:d6:5e:8d:d3:35:58:40:99:
9d:a2:f3:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxsVQ2NavT9HCtkAg0VmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDEwNjNiMmQ1N2U0ZWZhZWY2ODI0ZjYyM2Q0NjVhMWMz
N2I4NDMwHhcNMjUwMjE2MjIwMDE2WhcNMjUwMjE3MjIwMDE2WjAzMTEwLwYDVQQD
EyhjODI2NDBkMWQ5YTRlMmUwYzVjYTNhYjIxNzFmN2I3ODY3ZjE1NzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQTuXW1bUizehS/Sb6pKVC3B9Wmw
Ep2jCNWIa9K3xV3wvVCnDW580l8iaC+JRZ+X9MagfykmElc0TcscrSwv8qNHQGFX
a4HpIbufZwaZyDpWWbn7Vlz9+ylAm+iCXjAFP/RVdlhKeAHj06VD6kfrdLD8kJ/T
h5vgkel3zk3KJe6YQXngNfHfoU7LIqMXZJBAads1GwysyH6GqvtMoG0fdyw8jBQo
HpzJS0dD6SUz4OVSByqdrc+3MIcWwV2yQ89e2S1mWxDNv47bgqiKByXkpnXtTnpC
jrKtFddTzaIzMik7JDWh5BoniLKAO25xD26l4hNK3jesGHMJKsvGDFp5MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgmQNHZpOLgxco6shcfe3hn8VdDMB8GA1UdIwQY
MBaAFAJBBjstV+TvrvaCT2I9RlocN7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQt
Y2IwNzVlMjM5YTU2LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQtY2IwNzVlMjM5YTU2
LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtC9xW3H
4Dl0UlIRB4Ka5Mwtnym6FKaA7cqLvo+V7tvQvcC9W+Oncbuo/j39s0fSmJlg/vuh
0AqGSaRGkLgZ4sdj7HmACgIjRozq9QFXKaUmUnOG0LIQ2IcdVtVo49mEoAiUPtrV
scgMuSdqLDFdwZZ8SCxN/0/n7UxYJ3uo92DrUx43HkDxngOy0Sm9fuhekqmuUZB2
WRHNtq8bVDCFJwoJzmmdu45rioJari3BFtW3Rvoc4zv0JxiCKweX3E4wWvpNGKbv
VAthEuoYnluRL7vgRi3ks627/xeH+l88kvH4MmNTPRY2jbq7GOXFCotB14y9tdZe
jdM1WECZnaLz+g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:42 2025 by rpki-client