Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: psQCdTADvCvRjgWEbFFbj4UA6iCniny9r4mZmCUig14=
Subject key identifier: 3C:B1:4D:1E:FD:19:F4:A8:52:59:FB:70:E3:B6:C9:A2:F2:DB:7C:2F
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 019407217DF4A7048DF430A00BB4CB5C0A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 06DE
Signing time: Fri 27 Dec 2024 08:00:22 +0000
Manifest this update: Fri 27 Dec 2024 08:00:22 +0000
Manifest next update: Sat 28 Dec 2024 08:00:22 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: a6ygEw6X0oN9DGLQCAf11ikfwuEx4uqtMBNs0X2JbKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:7d:f4:a7:04:8d:f4:30:a0:0b:b4:cb:5c:0a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Dec 27 08:00:22 2024 GMT
Not After : Dec 28 08:00:22 2024 GMT
Subject: CN=3cb14d1efd19f4a85259fb70e3b6c9a2f2db7c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:b2:16:28:c5:43:7f:a9:87:ff:59:6d:6a:
9e:8f:93:b7:84:3c:54:92:f5:b4:02:19:b0:34:56:
0a:1c:57:13:c4:74:71:22:bb:34:98:b2:64:5d:7c:
09:a7:4a:56:11:38:75:aa:fb:b4:6c:7c:cb:30:a5:
98:59:a6:ab:e2:9b:60:5d:a8:ad:9c:a4:6f:b7:11:
d3:37:83:37:95:05:d3:ae:ac:32:ea:34:d0:5f:49:
ab:00:1b:19:05:7b:ea:75:5c:f9:52:e7:99:0a:03:
7c:3a:1e:f1:ba:a6:7c:5f:62:08:1a:4f:f1:11:28:
7d:42:b9:38:24:33:58:8a:40:c5:24:d6:a0:5b:89:
f8:bf:f7:f3:39:c6:35:5c:74:5f:5e:ec:f4:77:90:
11:d3:f5:e3:f8:38:ed:f7:c5:9f:78:c8:31:b6:57:
ec:0b:8c:9a:f7:99:99:ad:62:2d:6e:95:7b:50:a6:
7e:cd:06:50:88:93:62:36:9b:89:1d:08:47:bb:20:
8d:5d:36:a1:a1:41:24:99:4b:17:8b:80:cd:87:ea:
43:d7:f9:19:f6:40:e2:89:6c:d1:44:98:cc:a3:87:
51:6c:e5:48:42:df:e1:e7:7d:36:4d:39:5b:9a:b8:
fc:cf:80:b5:0a:75:89:b4:d9:3f:d9:08:ee:da:33:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B1:4D:1E:FD:19:F4:A8:52:59:FB:70:E3:B6:C9:A2:F2:DB:7C:2F
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ce:dc:85:7e:4d:bf:a7:fd:be:f0:34:75:e5:ec:0b:ab:98:
b5:8a:ab:c3:a1:88:4f:df:87:f5:66:eb:89:1b:d8:3b:f3:b8:
16:5d:6f:50:d0:6f:9f:55:0b:7b:90:21:15:7b:66:c1:ba:31:
6b:d3:2d:79:b3:44:ea:e6:ca:7b:1d:bd:22:c2:58:8c:e8:fa:
be:25:4f:00:57:e7:da:12:5b:ad:21:b8:f5:46:e1:a3:2e:af:
e3:87:00:75:3e:4c:e4:7e:b7:cb:0a:b6:cb:ab:14:fa:89:41:
1c:1b:88:8f:d4:e7:ed:d6:2f:25:20:72:8a:cd:29:c6:16:49:
a4:ab:8c:c4:8a:cb:19:c5:36:42:fa:29:ba:56:05:45:b5:14:
c9:c9:be:b6:e5:57:b2:14:55:03:e7:6e:4d:ee:58:65:7c:40:
d5:2b:90:4e:66:69:e4:27:d9:ef:ed:5a:35:75:3e:23:20:49:
24:6c:67:35:de:25:c9:b1:2b:b5:9b:31:aa:87:2a:65:b1:59:
3b:be:3f:c6:04:77:d1:5e:ac:ac:f8:14:fe:83:ed:63:4a:7e:
a3:f9:37:9a:c7:63:31:ec:f5:ce:e5:b5:90:fe:1c:ea:3a:8c:
19:1c:7b:b0:4c:ef:d5:b3:28:b6:21:9a:18:92:04:37:af:ae:
16:c1:fc:a5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQHIX30pwSN9DCgC7TLXAqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Y2ZhNDdkYzA4MjUyZTg1NDg2NWRkOGU1MjhjZmY4NGVl
NjM2OWMwHhcNMjQxMjI3MDgwMDIyWhcNMjQxMjI4MDgwMDIyWjAzMTEwLwYDVQQD
EygzY2IxNGQxZWZkMTlmNGE4NTI1OWZiNzBlM2I2YzlhMmYyZGI3YzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4+yFijFQ3+ph/9ZbWqej5O3hDxU
kvW0AhmwNFYKHFcTxHRxIrs0mLJkXXwJp0pWETh1qvu0bHzLMKWYWaar4ptgXait
nKRvtxHTN4M3lQXTrqwy6jTQX0mrABsZBXvqdVz5UueZCgN8Oh7xuqZ8X2IIGk/x
ESh9Qrk4JDNYikDFJNagW4n4v/fzOcY1XHRfXuz0d5AR0/Xj+Djt98WfeMgxtlfs
C4ya95mZrWItbpV7UKZ+zQZQiJNiNpuJHQhHuyCNXTahoUEkmUsXi4DNh+pD1/kZ
9kDiiWzRRJjMo4dRbOVIQt/h5302TTlbmrj8z4C1CnWJtNk/2Qju2jOWvQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDyxTR79GfSoUln7cOO2yaLy23wvMB8GA1UdIwQY
MBaAFPjPpH3AglLoVIZd2OUoz/hO5jacMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NLWtmY0NDVXVoVWhsM1k1U2pQLUU3bU5wdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvNGQ0MDBhLWY3NzktNDcwNC1iMTEx
LWNhOGQ3ZDhmYjljMS8xLzEtTS1rZmNDQ1V1aFVobDNZNVNqUC1FN21OcHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNhLzRkNDAwYS1mNzc5LTQ3MDQtYjExMS1jYThkN2Q4ZmI5
YzEvMS8xLU0ta2ZjQ0NVdWhVaGwzWTVTalAtRTdtTnB3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEM7c
hX5Nv6f9vvA0deXsC6uYtYqrw6GIT9+H9WbriRvYO/O4Fl1vUNBvn1ULe5AhFXtm
wboxa9MtebNE6ubKex29IsJYjOj6viVPAFfn2hJbrSG49Ubhoy6v44cAdT5M5H63
ywq2y6sU+olBHBuIj9Tn7dYvJSByis0pxhZJpKuMxIrLGcU2QvopulYFRbUUycm+
tuVXshRVA+duTe5YZXxA1SuQTmZp5CfZ7+1aNXU+IyBJJGxnNd4lybErtZsxqocq
ZbFZO74/xgR30V6srPgU/oPtY0p+o/k3msdjMez1zuW1kP4c6jqMGRx7sEzv1bMo
tiGaGJIEN6+uFsH8pQ==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:49:47 2024 by rpki-client on console-fra.rpki-client.org