Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft
File: soehvthfaZtS-gaqGeUc8liPFLk.mft (raw, json)
Hash identifier: /6ZZb3cfcyKW5nlBOLHoegBPdj7MWNsjBeNRjvtcsn0=
Subject key identifier: C5:D7:B9:E1:E2:38:D2:01:52:49:70:3A:94:2B:CD:00:CA:3A:07:33
Authority key identifier: B2:87:A1:BE:D8:5F:69:9B:52:FA:06:AA:19:E5:1C:F2:58:8F:14:B9
Certificate issuer: /CN=b287a1bed85f699b52fa06aa19e51cf2588f14b9
Certificate serial: 019510C6FA3DB4D37C2728FA77B751629479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soehvthfaZtS-gaqGeUc8liPFLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft
Manifest number: 0EF8
Signing time: Sun 16 Feb 2025 22:00:30 +0000
Manifest this update: Sun 16 Feb 2025 22:00:30 +0000
Manifest next update: Mon 17 Feb 2025 22:00:30 +0000
Files and hashes: 1: soehvthfaZtS-gaqGeUc8liPFLk.crl (hash: rGYUh+aycVWlyUilABuPULC0SgKaf89kZtSMfRsP0S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/soehvthfaZtS-gaqGeUc8liPFLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:fa:3d:b4:d3:7c:27:28:fa:77:b7:51:62:94:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b287a1bed85f699b52fa06aa19e51cf2588f14b9
Validity
Not Before: Feb 16 22:00:30 2025 GMT
Not After : Feb 17 22:00:30 2025 GMT
Subject: CN=c5d7b9e1e238d2015249703a942bcd00ca3a0733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:a8:78:a8:9f:07:27:b4:09:61:4d:91:a5:
1d:b0:fa:6f:6c:6b:c4:76:9f:92:43:f2:2e:e0:d9:
67:eb:ba:7d:63:50:af:2e:97:f8:ff:0c:b6:c8:81:
12:d4:67:81:fb:68:94:cd:b0:64:12:c7:8e:61:f6:
4c:b7:dc:c2:df:5a:9d:43:ac:a8:b0:1c:65:fd:13:
e7:18:a6:cb:b7:09:de:e1:27:c6:d6:69:25:78:0b:
24:cd:93:cb:ba:1e:75:c2:6d:78:a0:cb:4a:8e:85:
76:49:da:04:47:14:e7:7e:d1:f3:91:6f:79:2f:8e:
18:46:08:2e:0a:c7:60:1e:23:c3:05:33:5c:ac:35:
85:3d:9a:72:06:8c:4e:37:b0:53:d7:f6:30:d5:aa:
df:ed:cd:de:15:51:9d:1a:53:88:1f:ad:71:96:15:
60:b2:a7:da:3f:e6:99:f6:67:f9:69:fd:25:f4:43:
6a:5a:9d:9c:ec:3c:93:e5:49:b3:d5:49:e5:91:f8:
71:2a:7e:30:14:0c:98:8d:b1:9d:b6:8c:78:1c:54:
91:93:37:c6:bd:8e:3c:41:08:a1:6b:8e:29:7b:e0:
80:5d:35:09:b9:1f:aa:e6:d4:b3:06:48:b1:6c:c5:
27:d7:45:37:80:68:27:88:a6:b0:f0:63:0a:d3:c5:
df:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:B9:E1:E2:38:D2:01:52:49:70:3A:94:2B:CD:00:CA:3A:07:33
X509v3 Authority Key Identifier:
keyid:B2:87:A1:BE:D8:5F:69:9B:52:FA:06:AA:19:E5:1C:F2:58:8F:14:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soehvthfaZtS-gaqGeUc8liPFLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:aa:18:d6:d7:d1:16:6f:2b:1c:1d:4c:48:e8:17:8e:83:80:
13:f8:05:e1:cb:da:5a:49:a7:9b:d2:e1:b3:01:7b:4e:a4:15:
b7:0b:cc:5d:e2:d5:33:ac:1d:e7:7d:0e:62:76:c8:27:4e:38:
a3:2d:17:11:33:de:0b:47:3d:32:23:80:e2:ce:de:20:d3:ae:
9d:40:e8:da:cc:41:25:13:37:74:cc:44:e5:b3:fd:09:c5:18:
7d:ed:3a:7d:75:46:79:5c:fd:bf:2c:3c:b8:d8:39:0f:2c:bb:
72:9c:8d:43:17:47:15:29:51:f6:d2:a0:44:dc:cc:ac:a3:19:
42:7a:6d:db:1b:01:9f:d5:83:0d:ad:d4:03:32:2e:ae:eb:79:
9f:5d:75:88:6b:0d:ba:88:e0:23:e9:cc:2f:5d:c1:95:fd:82:
92:96:25:5e:c2:73:e3:a0:89:82:c8:9d:cb:42:f4:01:ac:65:
cd:03:fe:3b:5d:80:5a:9d:f5:54:9a:8c:01:ad:41:b9:4b:c1:
93:b2:99:57:cc:82:66:35:30:69:04:2f:72:7f:e1:ca:a5:bd:
e5:f2:41:3e:51:30:ed:42:3e:17:b4:01:76:25:76:aa:12:f5:
4e:a9:84:f5:5e:74:3d:1f:5e:01:fb:7e:63:93:90:5e:97:bb:
bd:03:7c:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxvo9tNN8Jyj6d7dRYpR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODdhMWJlZDg1ZjY5OWI1MmZhMDZhYTE5ZTUxY2YyNTg4
ZjE0YjkwHhcNMjUwMjE2MjIwMDMwWhcNMjUwMjE3MjIwMDMwWjAzMTEwLwYDVQQD
EyhjNWQ3YjllMWUyMzhkMjAxNTI0OTcwM2E5NDJiY2QwMGNhM2EwNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUioeKifBye0CWFNkaUdsPpvbGvE
dp+SQ/Iu4Nln67p9Y1CvLpf4/wy2yIES1GeB+2iUzbBkEseOYfZMt9zC31qdQ6yo
sBxl/RPnGKbLtwne4SfG1mkleAskzZPLuh51wm14oMtKjoV2SdoERxTnftHzkW95
L44YRgguCsdgHiPDBTNcrDWFPZpyBoxON7BT1/Yw1arf7c3eFVGdGlOIH61xlhVg
sqfaP+aZ9mf5af0l9ENqWp2c7DyT5Umz1UnlkfhxKn4wFAyYjbGdtox4HFSRkzfG
vY48QQiha44pe+CAXTUJuR+q5tSzBkixbMUn10U3gGgniKaw8GMK08Xf6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXXueHiONIBUklwOpQrzQDKOgczMB8GA1UdIwQY
MBaAFLKHob7YX2mbUvoGqhnlHPJYjxS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29laHZ0aGZhWnRTLWdhcUdlVWM4bGlQRkxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wYTI3N2UtMDY1Ni00Y2ZlLWE4YTgt
MDJlM2Q5ZTAyZWVjLzEvc29laHZ0aGZhWnRTLWdhcUdlVWM4bGlQRkxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wYTI3N2UtMDY1Ni00Y2ZlLWE4YTgtMDJlM2Q5ZTAyZWVj
LzEvc29laHZ0aGZhWnRTLWdhcUdlVWM4bGlQRkxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqoY1tfR
Fm8rHB1MSOgXjoOAE/gF4cvaWkmnm9LhswF7TqQVtwvMXeLVM6wd530OYnbIJ044
oy0XETPeC0c9MiOA4s7eINOunUDo2sxBJRM3dMxE5bP9CcUYfe06fXVGeVz9vyw8
uNg5Dyy7cpyNQxdHFSlR9tKgRNzMrKMZQnpt2xsBn9WDDa3UAzIurut5n111iGsN
uojgI+nML13Blf2CkpYlXsJz46CJgsidy0L0AaxlzQP+O12AWp31VJqMAa1BuUvB
k7KZV8yCZjUwaQQvcn/hyqW95fJBPlEw7UI+F7QBdiV2qhL1TqmE9V50PR9eAft+
Y5OQXpe7vQN8+w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:53 2025 by rpki-client