Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
File: 0J8gULc6LOfoLIPUdPvWHl83I1k.mft (raw, json)
Hash identifier: Fnic/qqTk3FAytGo6WFVJijwRvdTx5zrUzxsa4lHTaY=
Subject key identifier: 11:7C:2E:7C:46:F8:A9:D8:EA:B0:30:E4:0A:D9:F7:55:C9:57:CF:FA
Authority key identifier: D0:9F:20:50:B7:3A:2C:E7:E8:2C:83:D4:74:FB:D6:1E:5F:37:23:59
Certificate issuer: /CN=d09f2050b73a2ce7e82c83d474fbd61e5f372359
Certificate serial: 019407217CB86AC5D5C838CB001D0CE3F97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
Manifest number: 08B9
Signing time: Fri 27 Dec 2024 08:00:22 +0000
Manifest this update: Fri 27 Dec 2024 08:00:22 +0000
Manifest next update: Sat 28 Dec 2024 08:00:22 +0000
Files and hashes: 1: 0J8gULc6LOfoLIPUdPvWHl83I1k.crl (hash: dwbUQHRSIM/jAw3Hsh1kWHuiMfKqzWQrsqepPVtP1cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:7c:b8:6a:c5:d5:c8:38:cb:00:1d:0c:e3:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09f2050b73a2ce7e82c83d474fbd61e5f372359
Validity
Not Before: Dec 27 08:00:22 2024 GMT
Not After : Dec 28 08:00:22 2024 GMT
Subject: CN=117c2e7c46f8a9d8eab030e40ad9f755c957cffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:e0:cf:53:46:26:7f:ad:37:3a:56:a1:84:
dd:a4:e5:5b:bb:07:d0:da:10:90:55:61:19:2b:54:
ba:49:f3:aa:bd:18:84:6b:2b:92:4d:9a:d4:27:2b:
59:cc:48:dc:90:ac:07:a9:fc:e6:57:65:15:33:51:
c6:2c:8e:66:4a:91:b4:94:6b:a1:fc:4a:7b:c2:ae:
34:15:9b:84:94:15:9d:a4:07:95:48:2c:10:a4:c6:
8d:63:84:65:3d:13:79:6e:d0:a1:57:05:78:e2:76:
9b:14:80:f3:76:9a:c3:25:72:e9:7f:b4:f4:01:b4:
4c:12:8d:49:39:0c:7c:85:f1:59:58:8d:e7:65:fa:
84:ef:60:97:eb:0d:47:f5:ea:c2:24:9d:72:f4:25:
db:7f:23:c8:7c:31:a9:c1:d9:d3:de:d0:83:eb:28:
50:ae:50:8b:6d:f8:89:27:dd:9e:e5:27:ef:08:d6:
77:25:90:cf:fb:0e:e7:62:1c:2c:aa:b2:95:06:4d:
49:9d:76:b4:81:30:11:45:3f:63:11:76:49:90:5c:
1d:02:ba:88:89:43:10:61:71:10:40:15:37:15:db:
57:37:ba:63:24:a6:39:cf:97:ca:19:87:25:b2:e5:
e0:5b:40:48:d7:f0:78:91:12:ff:13:32:00:38:99:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7C:2E:7C:46:F8:A9:D8:EA:B0:30:E4:0A:D9:F7:55:C9:57:CF:FA
X509v3 Authority Key Identifier:
keyid:D0:9F:20:50:B7:3A:2C:E7:E8:2C:83:D4:74:FB:D6:1E:5F:37:23:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:1d:f1:54:a6:3d:8e:e6:67:fd:74:ab:c3:75:f3:c6:55:
f2:4c:35:42:3d:28:79:4c:b2:b0:15:6e:0a:88:40:a9:4c:9f:
ac:e1:66:fb:1f:d5:0c:40:c7:49:49:57:97:e8:71:4d:da:92:
90:9f:5b:3b:7e:13:43:6d:6f:5e:de:2d:cc:13:21:6b:70:35:
7a:5e:0e:40:a9:f8:f8:4f:d9:a5:28:6d:c2:17:78:d7:7f:0b:
ab:1b:5e:f2:03:d2:a5:3e:73:c6:2b:e6:09:82:f9:a5:0c:e1:
aa:7e:c4:b6:8b:36:99:7f:4b:ee:6a:3d:41:e9:22:04:69:f0:
73:e1:f4:50:8e:af:ff:fa:05:df:c7:42:0d:b9:63:48:bf:9b:
e0:fb:cc:4c:df:2f:64:e5:66:dc:78:f4:9e:76:70:03:09:d8:
85:4c:93:71:4e:b4:6f:35:69:59:c7:31:50:54:e8:5a:ed:a6:
51:a7:81:07:7d:2e:c9:a3:21:99:d0:bb:c5:c7:e5:ae:a5:81:
9d:1c:94:a0:e2:77:e6:c3:cc:21:db:a0:c0:42:f7:d4:b5:79:
bf:d2:dd:53:78:f9:53:27:de:44:17:80:6d:ab:42:4d:18:7a:
05:78:b1:8b:81:72:40:aa:dd:82:4d:15:4b:90:6d:4a:bf:d9:
98:92:3b:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQHIXy4asXVyDjLAB0M4/l+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWYyMDUwYjczYTJjZTdlODJjODNkNDc0ZmJkNjFlNWYz
NzIzNTkwHhcNMjQxMjI3MDgwMDIyWhcNMjQxMjI4MDgwMDIyWjAzMTEwLwYDVQQD
EygxMTdjMmU3YzQ2ZjhhOWQ4ZWFiMDMwZTQwYWQ5Zjc1NWM5NTdjZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGPgz1NGJn+tNzpWoYTdpOVbuwfQ
2hCQVWEZK1S6SfOqvRiEayuSTZrUJytZzEjckKwHqfzmV2UVM1HGLI5mSpG0lGuh
/Ep7wq40FZuElBWdpAeVSCwQpMaNY4RlPRN5btChVwV44nabFIDzdprDJXLpf7T0
AbRMEo1JOQx8hfFZWI3nZfqE72CX6w1H9erCJJ1y9CXbfyPIfDGpwdnT3tCD6yhQ
rlCLbfiJJ92e5SfvCNZ3JZDP+w7nYhwsqrKVBk1JnXa0gTARRT9jEXZJkFwdArqI
iUMQYXEQQBU3FdtXN7pjJKY5z5fKGYclsuXgW0BI1/B4kRL/EzIAOJlWnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF8LnxG+KnY6rAw5ArZ91XJV8/6MB8GA1UdIwQY
MBaAFNCfIFC3Oizn6CyD1HT71h5fNyNZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEo4Z1VMYzZMT2ZvTElQVWRQdldIbDgzSTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83YjMxZGItODY0My00ODE1LTgwN2Qt
NGU0MjNjYTUwNDg5LzEvMEo4Z1VMYzZMT2ZvTElQVWRQdldIbDgzSTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83YjMxZGItODY0My00ODE1LTgwN2QtNGU0MjNjYTUwNDg5
LzEvMEo4Z1VMYzZMT2ZvTElQVWRQdldIbDgzSTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3sd8VSm
PY7mZ/10q8N188ZV8kw1Qj0oeUyysBVuCohAqUyfrOFm+x/VDEDHSUlXl+hxTdqS
kJ9bO34TQ21vXt4tzBMha3A1el4OQKn4+E/ZpShtwhd4138Lqxte8gPSpT5zxivm
CYL5pQzhqn7Etos2mX9L7mo9QekiBGnwc+H0UI6v//oF38dCDbljSL+b4PvMTN8v
ZOVm3Hj0nnZwAwnYhUyTcU60bzVpWccxUFToWu2mUaeBB30uyaMhmdC7xcflrqWB
nRyUoOJ35sPMIdugwEL31LV5v9LdU3j5UyfeRBeAbatCTRh6BXixi4FyQKrdgk0V
S5BtSr/ZmJI7Jg==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:50:50 2024 by rpki-client on console-fra.rpki-client.org