Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: vdmfwR0zFHOE9LvkOgLwolqEzxuoi4bzIn6cpZ213nw=
Subject key identifier: 41:98:2B:FF:C5:6F:55:FB:06:B3:ED:84:60:26:55:D9:09:7B:D0:81
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 019511A2638A76BE368F8C6344B250B77148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 143F
Signing time: Mon 17 Feb 2025 02:00:09 +0000
Manifest this update: Mon 17 Feb 2025 02:00:09 +0000
Manifest next update: Tue 18 Feb 2025 02:00:09 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: 3odak0IjVHgXXWrLG428EaVjIxDp+eQzTSDxwmtOtY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:63:8a:76:be:36:8f:8c:63:44:b2:50:b7:71:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Feb 17 02:00:09 2025 GMT
Not After : Feb 18 02:00:09 2025 GMT
Subject: CN=41982bffc56f55fb06b3ed84602655d9097bd081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:ae:8b:9e:e3:55:ac:0a:d0:e1:7a:a6:77:
93:47:2d:a4:b1:99:19:4e:17:8f:03:98:f3:ae:ca:
c1:3e:07:44:95:38:70:d0:f2:f1:2d:67:97:8e:a2:
9c:ea:6c:10:4b:7e:04:b1:73:0a:d6:3d:0a:3c:0f:
2f:fd:e9:30:ce:73:c8:91:9a:98:8d:88:91:a2:41:
6f:3b:45:28:4b:dd:8a:53:bd:ed:1f:f4:ec:ec:3e:
e9:32:ed:f0:82:ac:73:ee:55:fc:4a:01:55:82:49:
01:a5:53:f2:8c:ac:e1:d0:2d:ae:f2:e9:d2:0b:c9:
24:33:b3:0d:64:f9:5c:24:22:82:03:05:84:3d:0d:
df:db:21:80:80:e9:4e:7d:16:fe:1e:b5:1b:46:4b:
88:20:7f:9e:55:dc:62:d4:c6:14:4f:bf:e2:54:bc:
3f:ed:da:1e:ad:77:71:6f:65:3b:98:14:69:c8:3b:
f3:fe:a2:3c:2f:d2:e7:ed:98:c9:29:0f:3f:3e:37:
61:14:a4:72:da:30:e8:ba:a6:44:8d:f8:c2:94:63:
67:45:87:e4:9a:d3:c9:40:09:42:f7:a5:5c:9d:de:
ac:7a:27:ec:e8:6a:39:5e:fe:bf:a7:3e:8a:c0:7a:
78:41:89:f4:98:87:26:79:d1:b0:cf:3a:4d:2d:60:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:98:2B:FF:C5:6F:55:FB:06:B3:ED:84:60:26:55:D9:09:7B:D0:81
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:dc:4c:96:8d:fa:44:18:86:04:5d:66:3e:e3:a4:1c:23:2b:
0c:2e:eb:21:5d:52:57:a5:3a:e2:84:90:df:26:89:7c:f7:54:
d0:33:96:c3:23:fd:f4:be:ba:c8:7d:07:d9:54:b5:45:34:1c:
d7:cb:f8:c7:2c:65:eb:fc:63:2c:98:4c:f2:c0:b4:2d:23:d6:
cc:96:05:0c:18:3e:9d:f5:32:eb:c5:46:26:bf:b6:99:f8:54:
3a:b8:1b:88:79:1c:dc:99:16:04:f8:e9:dc:98:8b:3f:e9:e9:
d3:23:a9:6b:1d:07:3d:4b:d2:24:d2:6c:a8:cf:7a:6c:3a:ca:
1b:f2:e4:70:b2:d9:9a:b2:26:93:2e:04:28:37:4d:f4:39:49:
c5:92:55:6a:3c:92:52:e1:98:25:12:b4:03:50:da:35:bb:90:
16:10:41:99:2e:08:70:fc:94:24:b1:ad:ab:8a:19:99:48:e1:
12:86:46:3a:a8:19:e6:92:65:a2:06:05:43:ea:20:3d:df:8a:
90:12:7a:51:44:4b:8d:c0:79:2b:dc:f1:66:be:f9:bb:10:db:
74:e2:93:f9:97:24:bd:1b:8c:77:fc:fa:61:bb:d5:98:cd:ee:
0d:9a:65:fe:ba:57:a5:3d:e7:0d:ff:d3:58:a8:09:86:25:1c:
20:4c:9d:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURomOKdr42j4xjRLJQt3FIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNWZhYjVjOWE0ZTEzODAzMmU1YjMwMGVhM2VkZDllNGQy
YjY5MDEwHhcNMjUwMjE3MDIwMDA5WhcNMjUwMjE4MDIwMDA5WjAzMTEwLwYDVQQD
Eyg0MTk4MmJmZmM1NmY1NWZiMDZiM2VkODQ2MDI2NTVkOTA5N2JkMDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Wui57jVawK0OF6pneTRy2ksZkZ
ThePA5jzrsrBPgdElThw0PLxLWeXjqKc6mwQS34EsXMK1j0KPA8v/ekwznPIkZqY
jYiRokFvO0UoS92KU73tH/Ts7D7pMu3wgqxz7lX8SgFVgkkBpVPyjKzh0C2u8unS
C8kkM7MNZPlcJCKCAwWEPQ3f2yGAgOlOfRb+HrUbRkuIIH+eVdxi1MYUT7/iVLw/
7doerXdxb2U7mBRpyDvz/qI8L9Ln7ZjJKQ8/PjdhFKRy2jDouqZEjfjClGNnRYfk
mtPJQAlC96Vcnd6seifs6Go5Xv6/pz6KwHp4QYn0mIcmedGwzzpNLWBaXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGYK//Fb1X7BrPthGAmVdkJe9CBMB8GA1UdIwQY
MBaAFC9fq1yaThOAMuWzAOo+3Z5NK2kBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMt
YWE1MmMwMGRlOWMxLzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMtYWE1MmMwMGRlOWMx
LzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdxMlo36
RBiGBF1mPuOkHCMrDC7rIV1SV6U64oSQ3yaJfPdU0DOWwyP99L66yH0H2VS1RTQc
18v4xyxl6/xjLJhM8sC0LSPWzJYFDBg+nfUy68VGJr+2mfhUOrgbiHkc3JkWBPjp
3JiLP+np0yOpax0HPUvSJNJsqM96bDrKG/LkcLLZmrImky4EKDdN9DlJxZJVajyS
UuGYJRK0A1DaNbuQFhBBmS4IcPyUJLGtq4oZmUjhEoZGOqgZ5pJlogYFQ+ogPd+K
kBJ6UURLjcB5K9zxZr75uxDbdOKT+ZckvRuMd/z6YbvVmM3uDZpl/rpXpT3nDf/T
WKgJhiUcIEydVQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:10 2025 by rpki-client