Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: ysj7GcwN/bF+PN4QlIPZp8fMeLqF4FAUK0PcF0BaHn0=
Subject key identifier: 26:A5:2E:6F:6A:EC:B8:F6:48:D6:9A:3A:9A:DC:94:56:68:A0:36:4C
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 0194C463145B651557C3C64905E949BAC64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 0FE1
Signing time: Sun 02 Feb 2025 02:00:15 +0000
Manifest this update: Sun 02 Feb 2025 02:00:15 +0000
Manifest next update: Mon 03 Feb 2025 02:00:15 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: Ek2JHg9qW3F2BAK1rNXTFRhpUFDb3l7ygeib6o5mU0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:14:5b:65:15:57:c3:c6:49:05:e9:49:ba:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Feb 2 02:00:15 2025 GMT
Not After : Feb 3 02:00:15 2025 GMT
Subject: CN=26a52e6f6aecb8f648d69a3a9adc945668a0364c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:df:c9:78:cb:07:b4:0a:9f:22:c4:d6:81:
cb:1b:81:a9:d3:d8:3f:8d:84:4c:26:de:01:bc:fa:
05:cd:94:5f:91:3e:ab:86:f1:b7:b3:75:3f:9b:b4:
ee:ad:05:b3:dc:8e:a4:17:97:db:55:16:c9:e9:04:
d6:39:2b:50:b6:ca:28:a6:ad:8b:ef:4f:3a:14:e7:
40:48:71:b1:46:64:7e:94:00:28:17:49:ff:00:cf:
9e:14:ec:77:ec:be:ce:85:d1:de:68:01:91:6c:5a:
7f:85:8f:2c:b6:b5:41:9a:69:8a:8f:b4:69:92:04:
fe:4e:46:1a:05:26:6e:f8:56:b6:9c:14:37:d2:e6:
47:ff:8e:8f:c3:6f:c1:94:76:72:43:67:3e:95:0a:
00:c4:91:e2:f1:ec:99:df:dd:99:11:f9:53:4c:74:
73:d3:9c:5c:9c:36:a5:5b:43:3b:ae:bf:13:d5:c0:
b9:d8:7e:49:6c:ce:ab:05:e3:90:08:d4:03:df:9e:
80:97:c8:8d:ce:f6:62:86:e7:cf:07:71:32:fa:73:
b2:3b:96:eb:1b:b4:6b:76:7e:16:6d:d8:c7:fc:69:
66:10:e9:3b:e3:2a:46:e7:ff:be:8e:34:69:78:9c:
80:54:0c:89:76:95:99:d5:b5:4f:8c:f8:d7:f7:48:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:2E:6F:6A:EC:B8:F6:48:D6:9A:3A:9A:DC:94:56:68:A0:36:4C
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8a:e0:21:80:aa:42:1b:9e:df:d7:05:09:af:bb:f5:9b:09:
a9:ae:45:82:99:c9:27:68:8a:ee:f5:3e:3b:00:cf:51:b3:9e:
94:19:b0:5d:87:1e:3e:50:12:1e:88:46:80:8c:a4:04:eb:d9:
e5:7f:ad:6b:92:88:0a:48:4b:56:bd:76:77:01:53:e8:bb:37:
fe:ac:d8:48:b3:42:f3:6e:6a:35:63:09:8e:28:e9:26:41:c8:
bb:16:34:63:45:89:61:28:3b:78:71:b4:aa:8a:de:93:f1:fd:
ac:63:d0:5e:5e:9a:06:d3:51:9d:29:f7:5f:c5:c7:21:52:d1:
da:01:5f:6d:95:3b:93:86:16:2b:41:66:85:a1:3a:bc:1e:e5:
78:14:2c:5a:bb:33:67:de:45:ae:b8:c2:45:21:e8:38:87:e2:
3c:cd:dc:fd:19:52:4d:b7:51:62:f5:22:b6:43:8e:9d:d6:73:
79:57:54:97:8b:7b:cc:89:19:0b:97:69:c0:62:d5:5e:ca:3f:
e3:5f:03:f6:b8:57:2f:c4:77:38:cd:84:66:c1:32:c4:36:2b:
65:b1:11:ad:78:91:51:bb:b6:85:7a:46:f1:a0:fc:73:dc:ee:
00:1e:e1:76:14:71:e6:d2:da:15:08:15:ca:74:b2:5b:ff:2d:
b0:3a:1c:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEYxRbZRVXw8ZJBelJusZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZmRmODFmYmYzYWY0MzA2NzJhNGJmNjQyNzczYjk1OWM0
NTA4YTYwHhcNMjUwMjAyMDIwMDE1WhcNMjUwMjAzMDIwMDE1WjAzMTEwLwYDVQQD
EygyNmE1MmU2ZjZhZWNiOGY2NDhkNjlhM2E5YWRjOTQ1NjY4YTAzNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstffyXjLB7QKnyLE1oHLG4Gp09g/
jYRMJt4BvPoFzZRfkT6rhvG3s3U/m7TurQWz3I6kF5fbVRbJ6QTWOStQtsoopq2L
7086FOdASHGxRmR+lAAoF0n/AM+eFOx37L7OhdHeaAGRbFp/hY8strVBmmmKj7Rp
kgT+TkYaBSZu+Fa2nBQ30uZH/46Pw2/BlHZyQ2c+lQoAxJHi8eyZ392ZEflTTHRz
05xcnDalW0M7rr8T1cC52H5JbM6rBeOQCNQD356Al8iNzvZihufPB3Ey+nOyO5br
G7Rrdn4WbdjH/GlmEOk74ypG5/++jjRpeJyAVAyJdpWZ1bVPjPjX90hwVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCalLm9q7Lj2SNaaOprclFZooDZMMB8GA1UdIwQY
MBaAFEj9+B+/OvQwZypL9kJ3O5WcRQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTIt
MDgxZDEyMTQ2ZmEzLzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTItMDgxZDEyMTQ2ZmEz
LzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4rgIYCq
Qhue39cFCa+79ZsJqa5FgpnJJ2iK7vU+OwDPUbOelBmwXYcePlASHohGgIykBOvZ
5X+ta5KICkhLVr12dwFT6Ls3/qzYSLNC825qNWMJjijpJkHIuxY0Y0WJYSg7eHG0
qorek/H9rGPQXl6aBtNRnSn3X8XHIVLR2gFfbZU7k4YWK0FmhaE6vB7leBQsWrsz
Z95FrrjCRSHoOIfiPM3c/RlSTbdRYvUitkOOndZzeVdUl4t7zIkZC5dpwGLVXso/
418D9rhXL8R3OM2EZsEyxDYrZbERrXiRUbu2hXpG8aD8c9zuAB7hdhRx5tLaFQgV
ynSyW/8tsDocTQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:58:07 2025 by rpki-client