Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: pTmtDjhaA32lvD1nDeHXEEo9mX23P4Uh7/llJZig/lo=
Subject key identifier: 17:BB:31:FC:4F:A3:1D:D0:02:19:E4:D6:52:C8:EB:29:03:47:49:F8
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 019511A255CBA9D795060B0BD19CFBAC00C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 0345
Signing time: Mon 17 Feb 2025 02:00:06 +0000
Manifest this update: Mon 17 Feb 2025 02:00:06 +0000
Manifest next update: Tue 18 Feb 2025 02:00:06 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: NOXVrZDZ7CcFHXaEZuxbguvukrogrOUYL8v6Tkv+5KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:55:cb:a9:d7:95:06:0b:0b:d1:9c:fb:ac:00:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Feb 17 02:00:06 2025 GMT
Not After : Feb 18 02:00:06 2025 GMT
Subject: CN=17bb31fc4fa31dd00219e4d652c8eb29034749f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:ac:9b:b9:f6:85:27:ca:57:5c:ed:a5:d8:
f2:90:a2:be:3b:68:e3:a6:ec:2d:ce:a8:26:1d:a5:
4a:50:e2:c1:f8:33:35:0b:cd:c7:f4:b5:f2:90:06:
e6:fc:5c:f2:03:7e:a9:e6:c5:db:a6:e5:9d:fa:ce:
5f:e6:ad:0a:e6:31:4c:5f:92:45:69:28:6b:1c:85:
3e:44:9d:aa:6e:83:0c:91:3a:c9:6f:29:15:da:4e:
de:78:fc:dc:0d:58:7a:16:e4:8c:b6:42:3d:70:83:
bf:48:55:92:93:5b:70:5a:b3:73:02:9b:0d:30:c5:
a2:89:30:81:74:52:a5:96:46:8a:a1:85:0c:aa:99:
74:22:d8:bc:04:3a:55:48:ea:9a:f5:3f:40:49:e6:
72:73:dc:41:2a:12:6b:ab:c5:86:64:4b:a9:e6:85:
d5:d6:94:b5:1e:15:9f:a0:ab:3f:16:00:44:5f:db:
4c:9f:71:1d:67:42:84:8f:76:75:85:e9:46:68:28:
a2:75:72:3c:2c:91:84:30:70:1c:a2:6b:62:85:18:
69:41:10:99:ac:d6:63:de:4e:c3:31:c3:10:8d:98:
cc:30:f2:3e:c7:2b:66:e6:30:06:8d:70:79:ec:a2:
2c:e1:9a:fd:4c:20:a9:75:7c:28:ae:96:e3:9d:86:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:31:FC:4F:A3:1D:D0:02:19:E4:D6:52:C8:EB:29:03:47:49:F8
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b1:42:37:49:36:e0:d8:b2:89:64:31:04:4b:33:d6:82:11:
7f:f6:83:26:e1:fa:0c:08:3c:b9:a7:b6:c9:fd:f1:f5:87:22:
a6:ef:fc:f1:b3:5e:b0:c3:0d:70:64:0e:c2:62:8e:56:0e:ab:
2d:b1:12:e0:04:22:27:61:eb:cd:b2:e8:e1:3a:f7:a5:d3:6c:
4e:b4:a7:34:d5:3e:64:e0:09:1b:3f:4b:fa:d5:5e:9c:17:f2:
d4:8c:63:03:bb:02:db:07:1f:d2:39:79:db:b7:a8:bf:bd:7e:
a2:8c:5d:7a:3a:e2:a5:5b:19:2b:d3:08:e9:e7:bf:67:89:cb:
2f:46:90:09:50:5a:6e:36:42:3f:87:07:0c:16:e5:b2:d4:9d:
c8:6e:0b:ef:48:4c:ac:37:42:b1:a9:15:69:07:78:70:e0:60:
05:55:a0:8e:b2:4b:3e:e5:f7:1b:4a:14:4c:fb:1d:4f:60:53:
95:55:5b:17:7c:88:6c:1f:7f:e0:31:09:eb:58:03:32:78:07:
fe:d5:eb:1f:a3:8c:dd:ca:04:f5:55:1e:eb:69:c8:57:4b:28:
cc:74:21:47:5a:64:4d:6d:8b:99:e9:2a:68:39:cf:a0:5a:60:
61:03:5b:a3:5e:e9:bb:b2:15:55:c4:12:f5:79:d6:62:85:c9:
34:32:4b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURolXLqdeVBgsL0Zz7rADHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDZiN2QwYTYzMDM1N2JjM2MxZTBjZGRhMDZkY2E4OGEz
NDYzZWMwHhcNMjUwMjE3MDIwMDA2WhcNMjUwMjE4MDIwMDA2WjAzMTEwLwYDVQQD
EygxN2JiMzFmYzRmYTMxZGQwMDIxOWU0ZDY1MmM4ZWIyOTAzNDc0OWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT+sm7n2hSfKV1ztpdjykKK+O2jj
puwtzqgmHaVKUOLB+DM1C83H9LXykAbm/FzyA36p5sXbpuWd+s5f5q0K5jFMX5JF
aShrHIU+RJ2qboMMkTrJbykV2k7eePzcDVh6FuSMtkI9cIO/SFWSk1twWrNzApsN
MMWiiTCBdFKllkaKoYUMqpl0Iti8BDpVSOqa9T9ASeZyc9xBKhJrq8WGZEup5oXV
1pS1HhWfoKs/FgBEX9tMn3EdZ0KEj3Z1helGaCiidXI8LJGEMHAcomtihRhpQRCZ
rNZj3k7DMcMQjZjMMPI+xytm5jAGjXB57KIs4Zr9TCCpdXworpbjnYZnrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe7MfxPox3QAhnk1lLI6ykDR0n4MB8GA1UdIwQY
MBaAFE/Wt9CmMDV7w8HgzdoG3KiKNGPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUt
ZDMxNDZiZmNkZGZmLzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUtZDMxNDZiZmNkZGZm
LzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrFCN0k2
4NiyiWQxBEsz1oIRf/aDJuH6DAg8uae2yf3x9Ycipu/88bNesMMNcGQOwmKOVg6r
LbES4AQiJ2HrzbLo4Tr3pdNsTrSnNNU+ZOAJGz9L+tVenBfy1IxjA7sC2wcf0jl5
27eov71+ooxdejripVsZK9MI6ee/Z4nLL0aQCVBabjZCP4cHDBblstSdyG4L70hM
rDdCsakVaQd4cOBgBVWgjrJLPuX3G0oUTPsdT2BTlVVbF3yIbB9/4DEJ61gDMngH
/tXrH6OM3coE9VUe62nIV0sozHQhR1pkTW2LmekqaDnPoFpgYQNbo17pu7IVVcQS
9XnWYoXJNDJLrg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:46 2025 by rpki-client