Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier: guomMQpqeE9NTXweHC8gQoqRCjnndCOyWoMoGIt/pDs=
Subject key identifier: 98:3E:3A:4B:36:7E:C5:FD:E4:F3:41:7D:88:2F:80:DF:EF:AE:64:38
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial: 019511A2B30A9B7E5461DE8B89C80229F781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number: 0C20
Signing time: Mon 17 Feb 2025 02:00:30 +0000
Manifest this update: Mon 17 Feb 2025 02:00:30 +0000
Manifest next update: Tue 18 Feb 2025 02:00:30 +0000
Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: TV/tXwnEOeG0DdksxNZnWEOYujlDOD7REBwTyV5dVRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b3:0a:9b:7e:54:61:de:8b:89:c8:02:29:f7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Validity
Not Before: Feb 17 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2025 GMT
Subject: CN=983e3a4b367ec5fde4f3417d882f80dfefae6438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:15:a7:f2:1b:43:c2:0a:05:ff:31:69:24:
19:20:56:6d:30:ed:9c:d0:32:f0:e6:f8:f6:13:7e:
2a:96:99:a7:39:3b:bc:aa:00:8b:9b:e6:12:f8:a7:
60:ec:0f:91:be:28:f8:2f:d3:55:67:14:f4:0d:5a:
c4:24:8a:55:2f:29:03:84:7d:9a:4e:af:f3:fc:33:
69:79:7d:e3:4f:cf:33:d8:1f:d1:a8:60:7b:92:5d:
24:39:31:65:5c:53:a1:e0:8c:85:17:10:f8:bf:9c:
6f:4c:02:f9:5c:5f:65:60:67:66:99:b8:41:fb:86:
38:2f:63:91:66:f1:65:46:30:4b:8b:02:3e:65:d5:
e0:e0:7e:10:0e:28:27:65:36:65:22:25:04:05:92:
35:15:0a:2e:d2:1c:54:10:ec:b1:3f:63:49:93:92:
c4:6f:0e:a0:f0:39:88:5f:61:fc:6a:b6:af:c8:a8:
4e:ab:4d:9e:3f:61:11:a3:45:38:a0:93:7a:42:6b:
3e:e3:59:6c:e2:26:9a:ef:27:5a:ce:ce:dd:cd:bd:
33:93:7a:cc:ae:d4:c9:0d:65:11:3a:f8:71:1c:3e:
77:d2:1f:f9:1c:14:33:1d:25:22:36:7d:8d:e6:2d:
db:e7:34:67:1e:71:75:db:c0:0e:e7:c5:15:f2:f5:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:3A:4B:36:7E:C5:FD:E4:F3:41:7D:88:2F:80:DF:EF:AE:64:38
X509v3 Authority Key Identifier:
keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:da:76:d0:46:18:a7:a4:3e:5a:de:54:aa:06:75:e8:7e:bb:
13:8c:03:58:fc:f1:f3:72:f4:d6:91:88:95:5d:fd:59:65:47:
4e:46:9f:04:09:61:50:fb:31:92:a9:f6:64:f9:7e:b1:7e:81:
15:80:66:74:0e:1d:ae:0e:0e:33:8a:a4:ae:60:65:8e:55:d8:
df:c2:63:48:59:7e:ff:85:21:f6:3e:48:3a:45:14:d9:57:43:
2e:be:dc:e6:4f:1a:5b:84:54:02:ce:54:f6:43:d5:b0:c2:61:
e8:94:f2:8f:8d:c8:11:26:aa:b6:10:06:6c:2a:ac:d9:56:17:
a2:32:51:3f:1e:de:9d:29:26:51:1b:08:a2:ac:57:b2:bd:87:
04:7b:f0:6c:74:e4:1b:33:90:dc:87:64:3b:3b:06:75:d0:32:
48:f3:db:74:23:20:87:67:1a:57:b3:f7:c9:2f:a2:c9:3b:30:
a7:17:59:8f:45:9d:78:b4:c3:84:ff:df:e6:92:3a:fc:fe:cc:
b6:04:3e:93:f9:f7:0c:ce:b1:12:ad:1f:aa:7a:33:7a:ec:13:
b2:e7:ce:d4:b6:b3:cf:40:3b:e7:8d:54:94:f2:87:96:1b:1e:
0a:96:53:4a:bd:54:d9:bd:ce:14:22:23:ca:26:e4:b5:9d:63:
d2:42:a6:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURorMKm35UYd6LicgCKfeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjJmMDlmYTM4YTM4YmM4MGNmZjgyZTBjN2I0N2IzNzkx
NjM5OGEwHhcNMjUwMjE3MDIwMDMwWhcNMjUwMjE4MDIwMDMwWjAzMTEwLwYDVQQD
Eyg5ODNlM2E0YjM2N2VjNWZkZTRmMzQxN2Q4ODJmODBkZmVmYWU2NDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwgVp/IbQ8IKBf8xaSQZIFZtMO2c
0DLw5vj2E34qlpmnOTu8qgCLm+YS+Kdg7A+Rvij4L9NVZxT0DVrEJIpVLykDhH2a
Tq/z/DNpeX3jT88z2B/RqGB7kl0kOTFlXFOh4IyFFxD4v5xvTAL5XF9lYGdmmbhB
+4Y4L2ORZvFlRjBLiwI+ZdXg4H4QDignZTZlIiUEBZI1FQou0hxUEOyxP2NJk5LE
bw6g8DmIX2H8aravyKhOq02eP2ERo0U4oJN6Qms+41ls4iaa7ydazs7dzb0zk3rM
rtTJDWUROvhxHD530h/5HBQzHSUiNn2N5i3b5zRnHnF128AO58UV8vUQIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg+Oks2fsX95PNBfYgvgN/vrmQ4MB8GA1UdIwQY
MBaAFGfy8J+jiji8gM/4Lgx7R7N5FjmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQt
Zjk5OTdlMTkxMjZjLzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQtZjk5OTdlMTkxMjZj
LzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9p20EYY
p6Q+Wt5UqgZ16H67E4wDWPzx83L01pGIlV39WWVHTkafBAlhUPsxkqn2ZPl+sX6B
FYBmdA4drg4OM4qkrmBljlXY38JjSFl+/4Uh9j5IOkUU2VdDLr7c5k8aW4RUAs5U
9kPVsMJh6JTyj43IESaqthAGbCqs2VYXojJRPx7enSkmURsIoqxXsr2HBHvwbHTk
GzOQ3IdkOzsGddAySPPbdCMgh2caV7P3yS+iyTswpxdZj0WdeLTDhP/f5pI6/P7M
tgQ+k/n3DM6xEq0fqnozeuwTsufO1Lazz0A7541UlPKHlhseCpZTSr1U2b3OFCIj
yibktZ1j0kKmOw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:47 2025 by rpki-client