Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: RxuyK9bSGgc97yQgfHljcUNosc1xvGMlnScn0vtzD/o=
Subject key identifier: 48:FB:70:8F:F6:9F:CA:6C:D5:D0:6F:18:F1:03:1A:3D:3D:DD:4C:8F
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 0194C387A7B7C272B0D44FEB27E91890F6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 04DA
Signing time: Sat 01 Feb 2025 22:00:34 +0000
Manifest this update: Sat 01 Feb 2025 22:00:34 +0000
Manifest next update: Sun 02 Feb 2025 22:00:34 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: By2ICjUXSZdXVi6RpjVHNTioi7vNz4upvjxr+9CI6zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:a7:b7:c2:72:b0:d4:4f:eb:27:e9:18:90:f6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Feb 1 22:00:34 2025 GMT
Not After : Feb 2 22:00:34 2025 GMT
Subject: CN=48fb708ff69fca6cd5d06f18f1031a3d3ddd4c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:c0:15:fc:8e:1e:80:9a:0d:1b:43:85:04:
e6:f9:86:63:c4:fb:42:e0:8d:df:2c:dd:7e:b5:3a:
23:fa:56:a2:d1:69:3e:90:b4:87:fa:49:fb:7e:ff:
c3:af:ed:5f:d3:c3:0d:b7:c6:6e:56:9c:15:10:78:
78:30:e4:68:ae:ee:06:79:0f:10:7a:89:5c:61:17:
74:ba:ae:d1:e2:5b:fc:b4:28:16:b5:a3:42:16:03:
51:a7:53:ca:7b:68:92:81:fb:60:67:fe:af:f7:e1:
e6:a3:46:f4:4f:24:de:a6:63:bb:b9:74:ff:49:0a:
b4:fa:00:53:53:53:9d:5f:a1:e2:04:34:bd:d5:43:
75:4b:5e:4e:98:e5:26:45:75:a3:69:f8:cf:37:06:
da:f3:c6:5f:0c:11:af:41:c5:33:7b:70:ee:3d:97:
eb:72:06:ec:96:82:6c:3f:0a:cf:08:7d:ea:de:24:
25:43:0f:21:bb:d4:48:d5:8d:0f:a6:e1:b3:94:86:
81:d7:2e:d4:fc:59:42:b5:0e:dd:a1:60:b9:00:24:
a0:7d:68:ed:06:0a:4f:57:ef:b1:ca:7d:e4:83:f2:
7c:25:5a:d2:92:0d:6c:6a:e9:91:69:b4:0b:cb:87:
26:84:78:cc:78:5f:76:64:43:c5:93:2e:99:62:cd:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FB:70:8F:F6:9F:CA:6C:D5:D0:6F:18:F1:03:1A:3D:3D:DD:4C:8F
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:83:63:b3:0a:d5:24:8b:06:eb:98:b6:d9:b4:6f:17:48:cb:
6e:58:9b:31:82:c5:9a:40:63:08:22:e5:9d:8a:0f:c0:b8:e2:
fd:82:5e:b5:3f:d3:b7:96:ca:d9:e3:8a:8e:c4:fe:4b:63:c4:
77:89:b6:34:a5:39:f4:5c:d4:31:cc:66:bf:03:4a:28:9e:4b:
16:03:75:b2:b4:09:26:c8:ec:56:3a:b0:53:f6:53:b7:47:a8:
31:0d:2b:2b:3d:50:5a:ab:d7:75:4c:31:f6:34:7b:ac:0a:23:
14:0b:34:6d:e0:00:a0:5f:ff:23:67:5a:2f:d1:70:ec:d8:9b:
96:8e:3b:43:c1:68:a8:9c:d1:93:b0:69:50:47:94:0e:66:c7:
22:50:1e:05:5d:8d:31:c6:50:28:2a:d0:03:8c:5b:83:0f:b6:
d3:f1:47:66:72:2d:0d:86:15:32:00:ff:7b:66:f6:68:4c:d0:
be:cf:8e:5d:9c:5c:94:e7:bd:7e:b2:df:4f:77:c7:98:e2:65:
a1:35:1a:61:68:f6:f7:cf:6d:9d:5e:17:59:48:59:ba:2c:e3:
fe:ef:ca:aa:3f:ed:d6:b2:01:51:90:46:a1:6b:6a:df:17:3a:
00:a2:ed:06:26:a0:fc:66:71:08:a0:0b:f5:18:b9:a6:99:1d:
5b:f7:93:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh6e3wnKw1E/rJ+kYkPbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTBiZTIwZTAyZmZjNzM1NGQ1YjJkMzNlMGZlNzcxNTE5
YWZkMWYwHhcNMjUwMjAxMjIwMDM0WhcNMjUwMjAyMjIwMDM0WjAzMTEwLwYDVQQD
Eyg0OGZiNzA4ZmY2OWZjYTZjZDVkMDZmMThmMTAzMWEzZDNkZGQ0YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSzAFfyOHoCaDRtDhQTm+YZjxPtC
4I3fLN1+tToj+lai0Wk+kLSH+kn7fv/Dr+1f08MNt8ZuVpwVEHh4MORoru4GeQ8Q
eolcYRd0uq7R4lv8tCgWtaNCFgNRp1PKe2iSgftgZ/6v9+Hmo0b0TyTepmO7uXT/
SQq0+gBTU1OdX6HiBDS91UN1S15OmOUmRXWjafjPNwba88ZfDBGvQcUze3DuPZfr
cgbsloJsPwrPCH3q3iQlQw8hu9RI1Y0PpuGzlIaB1y7U/FlCtQ7doWC5ACSgfWjt
BgpPV++xyn3kg/J8JVrSkg1saumRabQLy4cmhHjMeF92ZEPFky6ZYs1XIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEj7cI/2n8ps1dBvGPEDGj093UyPMB8GA1UdIwQY
MBaAFF/gviDgL/xzVNWy0z4P53FRmv0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ODFiODQtOWZmMC00OGU5LWFiMjEt
OWI2Y2JmYjQzMjQ2LzEvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85ODFiODQtOWZmMC00OGU5LWFiMjEtOWI2Y2JmYjQzMjQ2
LzEvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioNjswrV
JIsG65i22bRvF0jLblibMYLFmkBjCCLlnYoPwLji/YJetT/Tt5bK2eOKjsT+S2PE
d4m2NKU59FzUMcxmvwNKKJ5LFgN1srQJJsjsVjqwU/ZTt0eoMQ0rKz1QWqvXdUwx
9jR7rAojFAs0beAAoF//I2daL9Fw7Niblo47Q8FoqJzRk7BpUEeUDmbHIlAeBV2N
McZQKCrQA4xbgw+20/FHZnItDYYVMgD/e2b2aEzQvs+OXZxclOe9frLfT3fHmOJl
oTUaYWj2989tnV4XWUhZuizj/u/Kqj/t1rIBUZBGoWtq3xc6AKLtBiag/GZxCKAL
9Ri5ppkdW/eTMg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:20 2025 by rpki-client