Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File: xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier: THrBiBt7nRNpnzVJZmHwzlA2u2EnvBigPo6KHqvlIz0=
Subject key identifier: D1:6C:96:04:B2:FF:66:0E:D3:36:B6:0B:3C:32:A7:BF:45:7F:A6:30
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer: /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial: 0195116BBAB35DFF87E18319B5FB7CEC70DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number: 0A97
Signing time: Mon 17 Feb 2025 01:00:27 +0000
Manifest this update: Mon 17 Feb 2025 01:00:27 +0000
Manifest next update: Tue 18 Feb 2025 01:00:27 +0000
Files and hashes: 1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: Wq1HgcGdkqwD9xxZcvZPvh+4RSgl1DkYLUU29NSL1gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:ba:b3:5d:ff:87:e1:83:19:b5:fb:7c:ec:70:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Validity
Not Before: Feb 17 01:00:27 2025 GMT
Not After : Feb 18 01:00:27 2025 GMT
Subject: CN=d16c9604b2ff660ed336b60b3c32a7bf457fa630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fd:73:ef:98:29:7e:de:ed:9b:70:5a:0c:52:
9d:08:14:9c:ee:8b:65:c7:d3:30:52:e9:07:7e:e6:
fa:10:04:35:ae:c9:71:8e:be:82:bf:b3:88:13:f7:
0e:71:d3:65:0a:89:4a:e3:13:c9:92:cb:91:bc:b9:
a4:6b:47:8d:b2:bf:3b:f8:bb:3e:b4:11:51:dc:ac:
c5:e7:fc:c7:dd:60:f2:f8:30:bc:87:bb:47:30:e1:
ec:58:d1:87:2f:87:81:fb:04:03:aa:af:1e:bf:cb:
d2:71:61:ad:d4:c6:f3:c8:ad:07:18:38:32:1a:78:
69:5f:6f:35:56:a2:78:3b:73:da:b7:b1:09:ec:0a:
f0:c8:dc:94:c9:96:ee:f1:ec:f5:8f:6e:0e:0f:79:
29:72:2e:b0:dd:5e:ef:23:d3:34:e9:f2:65:9a:f2:
a9:b3:a0:7c:1a:57:6a:99:c4:60:f0:7f:af:f1:6c:
b5:d7:de:ff:5b:05:e5:ce:31:36:b4:a4:1c:cb:d1:
18:51:a9:46:11:f2:03:60:cc:7d:f4:c4:d7:96:6d:
dc:48:66:ee:e6:de:58:32:4a:06:99:9b:f4:39:6a:
84:27:04:81:b2:fb:06:b6:c9:9c:43:6e:c5:d6:0e:
1b:17:d7:23:f4:6c:0d:ee:4a:69:08:82:12:24:75:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6C:96:04:B2:FF:66:0E:D3:36:B6:0B:3C:32:A7:BF:45:7F:A6:30
X509v3 Authority Key Identifier:
keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:64:31:0d:d6:ca:4b:09:26:44:30:9f:51:53:a6:b6:19:69:
b6:6b:42:b3:b0:af:82:e5:5f:b0:ba:38:3c:d1:10:58:d1:00:
85:c8:61:4a:d6:2a:7a:08:53:25:4a:5a:1a:cb:13:89:e6:12:
c6:6e:88:95:e7:d9:ac:8f:e9:44:71:82:e4:4f:93:c9:0c:3f:
04:c2:c2:64:9c:f8:fe:da:a9:4f:7b:2b:53:da:0b:eb:1c:7a:
66:d8:16:07:63:64:c0:75:13:02:79:a1:04:7c:73:1b:6e:fd:
66:7a:f7:8a:1d:c5:75:b1:04:b7:85:92:69:f2:4c:96:a6:10:
b5:8c:24:b0:c0:4e:29:9d:7d:e8:18:b3:48:8e:7e:ba:ad:c1:
49:67:c3:12:93:2e:56:73:35:33:4d:d3:f2:34:5f:40:c9:3d:
a3:2f:59:c0:71:c2:dc:a4:6a:77:d9:a3:d8:68:ea:9e:62:9d:
ee:4b:4a:68:95:ba:3f:89:f9:38:a4:d3:45:4f:e9:d1:e2:56:
bc:ef:01:0c:48:5b:d4:d4:2d:ba:ba:b3:02:de:d9:26:a9:d3:
85:da:8d:13:d2:79:2b:24:ca:52:9e:2d:0b:0e:22:54:d5:24:
d1:64:51:e6:97:00:fe:54:0a:38:7e:5b:cf:22:76:9e:97:d6:
81:53:96:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa7qzXf+H4YMZtft87HDbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MjdiYWU5Nzk0MWI2MGYzZGNkM2FhMDdlMmM1ZmQ5ZGQw
M2E2YzEwHhcNMjUwMjE3MDEwMDI3WhcNMjUwMjE4MDEwMDI3WjAzMTEwLwYDVQQD
EyhkMTZjOTYwNGIyZmY2NjBlZDMzNmI2MGIzYzMyYTdiZjQ1N2ZhNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6f1z75gpft7tm3BaDFKdCBSc7otl
x9MwUukHfub6EAQ1rslxjr6Cv7OIE/cOcdNlColK4xPJksuRvLmka0eNsr87+Ls+
tBFR3KzF5/zH3WDy+DC8h7tHMOHsWNGHL4eB+wQDqq8ev8vScWGt1MbzyK0HGDgy
GnhpX281VqJ4O3Pat7EJ7ArwyNyUyZbu8ez1j24OD3kpci6w3V7vI9M06fJlmvKp
s6B8GldqmcRg8H+v8Wy1197/WwXlzjE2tKQcy9EYUalGEfIDYMx99MTXlm3cSGbu
5t5YMkoGmZv0OWqEJwSBsvsGtsmcQ27F1g4bF9cj9GwN7kppCIISJHUQoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFslgSy/2YO0za2Czwyp79Ff6YwMB8GA1UdIwQY
MBaAFMUnuul5QbYPPc06oH4sX9ndA6bBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQt
MTM2NmQ0ZWY3ZjNiLzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQtMTM2NmQ0ZWY3ZjNi
LzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWQxDdbK
SwkmRDCfUVOmthlptmtCs7CvguVfsLo4PNEQWNEAhchhStYqeghTJUpaGssTieYS
xm6IlefZrI/pRHGC5E+TyQw/BMLCZJz4/tqpT3srU9oL6xx6ZtgWB2NkwHUTAnmh
BHxzG279Znr3ih3FdbEEt4WSafJMlqYQtYwksMBOKZ196BizSI5+uq3BSWfDEpMu
VnM1M03T8jRfQMk9oy9ZwHHC3KRqd9mj2GjqnmKd7ktKaJW6P4n5OKTTRU/p0eJW
vO8BDEhb1NQturqzAt7ZJqnThdqNE9J5KyTKUp4tCw4iVNUk0WRR5pcA/lQKOH5b
zyJ2npfWgVOW0A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:30 2025 by rpki-client