Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
File: ISApS0bJAtk8B5wWhs_kW7ozGMs.mft (raw, json)
Hash identifier: KoNKTfFv5tTFovJREHbgLkmzqI9ylEg6bOMhhdH87nw=
Subject key identifier: 2C:27:89:02:32:4C:4A:7C:D4:27:F2:75:D2:03:B6:0A:A0:19:B8:1B
Authority key identifier: 21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
Certificate issuer: /CN=2120294b46c902d93c079c1686cfe45bba3318cb
Certificate serial: 0194C3881112043BE3AD7F02A38617264329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
Manifest number: 0BC4
Signing time: Sat 01 Feb 2025 22:01:01 +0000
Manifest this update: Sat 01 Feb 2025 22:01:01 +0000
Manifest next update: Sun 02 Feb 2025 22:01:01 +0000
Files and hashes: 1: ISApS0bJAtk8B5wWhs_kW7ozGMs.crl (hash: ETHq5t9ipY/I997+c5cI9kvfewMCW0FbB2TMaDjbPzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:11:12:04:3b:e3:ad:7f:02:a3:86:17:26:43:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2120294b46c902d93c079c1686cfe45bba3318cb
Validity
Not Before: Feb 1 22:01:01 2025 GMT
Not After : Feb 2 22:01:01 2025 GMT
Subject: CN=2c278902324c4a7cd427f275d203b60aa019b81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:00:68:37:01:ae:3e:42:f6:58:7c:a5:ff:
51:ec:01:d6:0e:8a:b7:76:7e:85:ef:1c:cf:c5:84:
5c:00:f1:30:78:b9:01:bb:28:f3:5e:d9:75:f8:92:
9b:66:10:4b:36:03:5b:51:0e:3d:58:fc:18:19:8e:
6d:9b:e5:00:8a:db:56:cc:b2:8a:77:41:ac:48:68:
13:16:22:e6:2d:63:ce:15:62:fc:c9:1b:21:05:3e:
f2:ec:23:43:86:ab:12:0c:15:5b:0e:37:8f:5b:10:
12:d1:01:47:e3:19:20:ef:1b:30:a0:bd:bb:6e:fc:
64:e4:ff:e8:18:a9:e0:11:b4:e7:cb:d6:6b:de:4b:
03:72:66:4c:de:c7:0d:44:e9:de:1e:50:90:fe:4f:
c8:73:3e:6a:18:1e:0c:66:8d:8f:05:f8:fe:8e:86:
ad:ec:9c:81:ec:7a:d4:8d:1d:61:4f:e6:25:ce:68:
55:af:51:28:94:ea:5e:20:30:0b:9a:69:dd:c8:22:
1a:24:c1:08:fd:06:41:30:98:83:4c:ee:a2:b7:d3:
cb:d9:3f:d0:98:0b:e1:c9:41:03:99:4a:9f:a1:31:
3c:c8:e4:90:da:61:13:a6:7c:4b:63:3d:5f:9a:48:
ba:8a:b6:65:db:e5:53:ad:3e:ee:be:85:8a:01:e7:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:27:89:02:32:4C:4A:7C:D4:27:F2:75:D2:03:B6:0A:A0:19:B8:1B
X509v3 Authority Key Identifier:
keyid:21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5c:60:b3:72:10:01:91:ef:26:d4:92:8c:db:ce:3d:09:08:
09:06:61:0a:4c:2e:d7:97:3d:b6:ac:a8:e5:2a:7d:48:12:da:
c6:9e:12:b8:d1:0c:5d:85:37:b2:f5:07:ef:e3:a9:22:5a:4c:
24:01:3a:11:d4:c1:40:e1:72:61:9c:5a:4c:a4:2b:02:46:a6:
43:c3:e7:2c:81:59:22:a6:34:8e:6d:09:cb:31:c4:aa:87:be:
d2:49:f0:eb:c7:62:6c:5a:97:c6:f7:1f:95:d5:71:e0:63:5a:
87:79:a8:c3:df:c7:38:76:c1:02:1d:e4:67:6c:c9:18:4c:6c:
c7:4b:af:d0:ee:a8:83:fa:bf:06:27:38:f1:76:66:8d:5a:4d:
99:2c:68:04:ce:e7:75:07:fa:c4:ce:be:16:d1:d2:b7:2d:f8:
cc:25:fe:ab:f4:d9:90:9f:29:e8:c8:b7:fa:0b:28:6c:e9:b4:
63:1e:15:f1:5e:e0:ca:94:83:c0:da:ed:60:60:cb:12:17:de:
e2:f6:2b:7a:2f:98:0a:0f:19:23:82:46:d0:c1:fa:e4:2c:d7:
0c:15:d1:f3:ee:13:4e:82:ac:f7:41:8c:94:9d:cf:d1:53:1f:
e2:0d:fb:d7:6d:be:ff:f5:15:4a:cc:05:d2:82:73:da:80:e8:
42:84:d2:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiBESBDvjrX8Co4YXJkMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMjAyOTRiNDZjOTAyZDkzYzA3OWMxNjg2Y2ZlNDViYmEz
MzE4Y2IwHhcNMjUwMjAxMjIwMTAxWhcNMjUwMjAyMjIwMTAxWjAzMTEwLwYDVQQD
EygyYzI3ODkwMjMyNGM0YTdjZDQyN2YyNzVkMjAzYjYwYWEwMTliODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaYAaDcBrj5C9lh8pf9R7AHWDoq3
dn6F7xzPxYRcAPEweLkBuyjzXtl1+JKbZhBLNgNbUQ49WPwYGY5tm+UAittWzLKK
d0GsSGgTFiLmLWPOFWL8yRshBT7y7CNDhqsSDBVbDjePWxAS0QFH4xkg7xswoL27
bvxk5P/oGKngEbTny9Zr3ksDcmZM3scNROneHlCQ/k/Icz5qGB4MZo2PBfj+joat
7JyB7HrUjR1hT+YlzmhVr1EolOpeIDALmmndyCIaJMEI/QZBMJiDTO6it9PL2T/Q
mAvhyUEDmUqfoTE8yOSQ2mETpnxLYz1fmki6irZl2+VTrT7uvoWKAeeIQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwniQIyTEp81CfyddIDtgqgGbgbMB8GA1UdIwQY
MBaAFCEgKUtGyQLZPAecFobP5Fu6MxjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kN2JjYjctOTRmMi00OTA4LTk3N2Qt
YTIwZGE1NmM0MTg0LzEvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9kN2JjYjctOTRmMi00OTA4LTk3N2QtYTIwZGE1NmM0MTg0
LzEvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVxgs3IQ
AZHvJtSSjNvOPQkICQZhCkwu15c9tqyo5Sp9SBLaxp4SuNEMXYU3svUH7+OpIlpM
JAE6EdTBQOFyYZxaTKQrAkamQ8PnLIFZIqY0jm0JyzHEqoe+0knw68dibFqXxvcf
ldVx4GNah3mow9/HOHbBAh3kZ2zJGExsx0uv0O6og/q/Bic48XZmjVpNmSxoBM7n
dQf6xM6+FtHSty34zCX+q/TZkJ8p6Mi3+gsobOm0Yx4V8V7gypSDwNrtYGDLEhfe
4vYrei+YCg8ZI4JG0MH65CzXDBXR8+4TToKs90GMlJ3P0VMf4g37122+//UVSswF
0oJz2oDoQoTSFQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:00 2025 by rpki-client