Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: 5BKgjuQmllblbNcD4Nb5fHF3dC0wr044i2ANSyigtiU=
Subject key identifier: EC:7E:54:FF:1D:81:27:15:45:1E:E5:DE:7A:61:D7:63:6D:C1:91:2E
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 0194064740AAA8C4F96EF314F678364CF4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0508
Signing time: Fri 27 Dec 2024 04:02:00 +0000
Manifest this update: Fri 27 Dec 2024 04:02:00 +0000
Manifest next update: Sat 28 Dec 2024 04:02:00 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: FPT7qS1BfGbcCeen4zpj+SQijrWx/KJu+owJHqPJ66o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:40:aa:a8:c4:f9:6e:f3:14:f6:78:36:4c:f4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Dec 27 04:02:00 2024 GMT
Not After : Dec 28 04:02:00 2024 GMT
Subject: CN=ec7e54ff1d812715451ee5de7a61d7636dc1912e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:bd:5c:4d:f7:55:18:09:5f:78:a0:5f:dd:
7b:06:5f:25:8a:44:ab:d1:fa:aa:ae:9b:53:21:85:
35:8a:1c:fe:b0:7e:92:87:77:58:86:cd:82:0f:ad:
44:d7:42:cf:a1:8a:eb:fd:9c:db:ad:87:a4:b2:a4:
41:43:6e:7e:e4:25:33:f1:37:de:d0:a0:ee:f0:35:
30:0b:bb:70:b2:5e:92:44:67:22:d2:c8:cb:57:cc:
fe:27:4e:f8:4f:63:81:ac:53:8a:4d:34:1b:d5:6d:
51:84:32:1e:ab:c0:9b:77:c2:2c:92:ec:e6:e8:9c:
0b:20:18:58:5e:d3:ee:5a:5a:c1:0d:05:c8:93:48:
b9:e3:bc:cd:be:a2:03:a2:27:69:af:aa:95:22:dc:
51:a6:27:36:d6:33:b1:30:0d:4a:5b:05:7c:40:13:
6f:5c:1a:e4:18:d8:33:a8:9f:43:3d:3e:c8:84:b8:
2e:15:cc:bd:4b:a7:ad:d2:f6:35:7b:0a:a6:06:f1:
f7:2a:c7:c0:b5:8c:d3:7b:df:89:ee:ea:23:0f:b1:
9e:b5:90:86:8b:d8:9b:e8:65:88:d0:4f:4d:33:56:
de:c3:f6:85:3f:1b:3e:2a:83:ec:e0:2a:09:9d:a9:
95:fd:33:ad:80:04:2e:7a:70:80:4f:85:69:10:80:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7E:54:FF:1D:81:27:15:45:1E:E5:DE:7A:61:D7:63:6D:C1:91:2E
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:bc:09:51:c0:18:85:86:3a:64:aa:ff:cb:49:1b:5a:e7:96:
a2:15:37:ea:9a:20:d1:34:86:16:c2:26:1e:78:cf:f9:92:07:
8c:5e:4a:e9:a3:6c:38:3c:af:02:69:4b:b8:df:51:99:59:b6:
3d:c1:69:fc:e3:b3:ac:aa:26:0e:af:fa:fb:6c:8d:f9:e7:2b:
a4:a5:bd:a1:5e:df:3e:1d:d1:17:b1:f5:f0:b1:a7:7f:4b:e2:
3f:bc:7f:ed:56:df:2d:64:cd:b5:ff:d8:60:8f:27:f1:d7:60:
9b:fb:1b:38:21:fb:17:fb:50:ae:c1:6f:ee:42:b6:36:fc:bf:
3f:36:8e:e1:97:88:4d:d9:c5:80:a2:3a:05:62:f0:89:38:7a:
c3:39:4e:53:b5:f7:80:cc:f1:49:94:88:5c:64:20:b9:9e:b2:
bc:e1:ee:0a:86:70:6c:56:d6:c9:57:a9:36:4f:cb:ae:58:d2:
7f:5e:7a:42:aa:80:c3:b0:be:8d:ed:eb:cf:17:0b:5b:8e:16:
37:8e:47:e2:82:fd:13:14:2b:7c:0d:ed:ad:73:9e:a6:a1:c3:
48:a5:5e:de:48:d6:80:a3:d4:62:e9:21:fc:91:f8:44:db:2e:
78:0c:da:27:56:f4:ca:83:1e:0a:dd:d4:2d:1c:4e:b1:2b:32:
d3:1a:d4:4e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQGR0CqqMT5bvMU9ng2TPShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4N2M1ODY0NjJjM2YzZmQ3ZTYyNzgwZjRkMzNmMThiNmE2
OWJhYzEwHhcNMjQxMjI3MDQwMjAwWhcNMjQxMjI4MDQwMjAwWjAzMTEwLwYDVQQD
EyhlYzdlNTRmZjFkODEyNzE1NDUxZWU1ZGU3YTYxZDc2MzZkYzE5MTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrG9XE33VRgJX3igX917Bl8likSr
0fqqrptTIYU1ihz+sH6Sh3dYhs2CD61E10LPoYrr/ZzbrYeksqRBQ25+5CUz8Tfe
0KDu8DUwC7twsl6SRGci0sjLV8z+J074T2OBrFOKTTQb1W1RhDIeq8Cbd8Iskuzm
6JwLIBhYXtPuWlrBDQXIk0i547zNvqIDoidpr6qVItxRpic21jOxMA1KWwV8QBNv
XBrkGNgzqJ9DPT7IhLguFcy9S6et0vY1ewqmBvH3KsfAtYzTe9+J7uojD7GetZCG
i9ib6GWI0E9NM1bew/aFPxs+KoPs4CoJnamV/TOtgAQuenCAT4VpEIAzdQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOx+VP8dgScVRR7l3nph12NtwZEuMB8GA1UdIwQY
MBaAFPh8WGRiw/P9fmJ4D00z8YtqabrBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IeFlaR0xEOF8xLVluZ1BUVFB4aTJwcHVzRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvZjk5ZTlkLTdhOGUtNDBkYS04ODli
LWUzYWNjYTVlYmZmMC8xLzEtSHhZWkdMRDhfMS1ZbmdQVFRQeGkycHB1c0UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNhL2Y5OWU5ZC03YThlLTQwZGEtODg5Yi1lM2FjY2E1ZWJm
ZjAvMS8xLUh4WVpHTEQ4XzEtWW5nUFRUUHhpMnBwdXNFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1bwJ
UcAYhYY6ZKr/y0kbWueWohU36pog0TSGFsImHnjP+ZIHjF5K6aNsODyvAmlLuN9R
mVm2PcFp/OOzrKomDq/6+2yN+ecrpKW9oV7fPh3RF7H18LGnf0viP7x/7VbfLWTN
tf/YYI8n8ddgm/sbOCH7F/tQrsFv7kK2Nvy/PzaO4ZeITdnFgKI6BWLwiTh6wzlO
U7X3gMzxSZSIXGQguZ6yvOHuCoZwbFbWyVepNk/LrljSf156QqqAw7C+je3rzxcL
W44WN45H4oL9ExQrfA3trXOepqHDSKVe3kjWgKPUYukh/JH4RNsueAzaJ1b0yoMe
Ct3ULRxOsSsy0xrUTg==
-----END CERTIFICATE-----
Generated at Fri Dec 27 09:43:33 2024 by rpki-client on console-ams.rpki-client.org