Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: i+wwIU/qdAZUBZUDh3XL9xZRtgkSmBwu/zwvCkz2qaE=
Subject key identifier: 33:6E:08:94:FF:F5:14:AF:6F:8E:E7:1A:D0:61:BF:F4:A6:95:E4:A3
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 0194C3F555671CE60B9B9EA7A45E9AC689D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 040C
Signing time: Sun 02 Feb 2025 00:00:22 +0000
Manifest this update: Sun 02 Feb 2025 00:00:22 +0000
Manifest next update: Mon 03 Feb 2025 00:00:22 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: rER9IISYVgVwX+1RobdQEA6XnUDHS0eA9BuHFAj41fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:55:67:1c:e6:0b:9b:9e:a7:a4:5e:9a:c6:89:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Feb 2 00:00:22 2025 GMT
Not After : Feb 3 00:00:22 2025 GMT
Subject: CN=336e0894fff514af6f8ee71ad061bff4a695e4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:72:5c:5b:84:c2:6d:2a:42:39:36:7a:f8:
4e:23:c2:fd:b9:16:61:b7:c2:29:dc:4b:e2:aa:20:
07:4f:6a:fd:83:30:d0:9d:2e:90:eb:8a:b6:66:b0:
f9:60:d9:0e:6d:99:5b:06:e8:e9:56:62:76:c3:35:
37:f7:11:ff:79:80:1e:02:96:f7:15:00:4a:f3:e3:
d6:97:45:2f:2d:d8:69:ae:57:d9:b8:f6:9b:f5:50:
d9:1d:cd:f7:09:5b:f5:be:16:9c:57:bc:e8:58:be:
c2:21:52:38:5c:37:0e:a0:f6:2f:b8:11:81:c6:2f:
0b:08:b4:e8:ee:49:ea:1e:cf:fd:47:21:ea:43:3b:
5f:da:a6:4b:07:55:11:11:12:6e:d1:49:05:3f:e7:
d3:b0:f3:d1:b4:3f:17:e7:67:55:91:12:ec:52:80:
ae:50:88:2e:e1:67:60:f2:49:4f:fb:aa:87:48:d5:
78:41:00:df:58:07:80:2f:ae:d4:68:23:3f:dc:bb:
99:3a:dd:64:f9:03:9a:9e:70:d4:38:ab:0f:81:74:
90:b5:9a:d3:1a:e4:b2:ea:ff:9c:9d:87:ca:04:af:
37:40:f1:70:4c:db:8d:1a:bd:a9:35:ab:d2:9b:1f:
5f:92:4d:ec:14:09:0a:3b:f6:3a:6d:8a:50:9a:1f:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:08:94:FF:F5:14:AF:6F:8E:E7:1A:D0:61:BF:F4:A6:95:E4:A3
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:23:d4:61:56:86:16:da:e3:36:8c:86:22:e2:af:94:6e:75:
93:f2:50:8f:14:96:24:11:b5:ad:20:3c:42:c4:46:9e:7c:eb:
dc:c8:3f:3e:48:99:e3:7a:34:46:4d:bb:70:89:c2:f5:52:97:
98:dd:01:70:5a:9e:f0:d9:3d:88:cb:1a:14:6a:66:62:8e:f4:
e3:35:64:0d:76:5e:51:33:f1:1f:aa:6f:87:42:41:d1:9c:e4:
96:25:17:e4:f9:23:2b:15:d1:96:ef:fa:f7:60:af:ed:78:af:
a3:c2:f5:ed:d3:df:f2:ad:58:4c:03:e3:6b:0d:ff:1e:86:b1:
e9:17:98:39:87:90:03:a4:cb:91:e6:0c:73:56:e1:f0:39:02:
76:11:9a:92:3b:65:52:5a:3a:bf:9f:3e:a7:d5:ae:97:08:9b:
30:06:d1:89:01:48:05:8b:9c:5d:15:4c:60:1f:e2:65:56:97:
85:6b:5e:59:f4:56:ac:2a:d1:7a:79:3e:54:90:e7:01:50:77:
b5:b4:a4:18:6d:c7:ac:a4:3e:d0:7c:7f:8b:71:29:41:ea:48:
eb:35:8b:05:6c:d0:89:89:de:5d:5c:f1:44:7a:1b:b1:8f:5c:
c1:4f:3e:54:ae:a7:73:b8:bf:87:c3:68:a6:36:9f:60:d8:4c:
a8:68:7e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9VVnHOYLm56npF6axonXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWE1M2Q5NjJkNjdhMDE0OGU2MzdiNGI0Njg5YmU0ZDA4
NGE5ZTUwHhcNMjUwMjAyMDAwMDIyWhcNMjUwMjAzMDAwMDIyWjAzMTEwLwYDVQQD
EygzMzZlMDg5NGZmZjUxNGFmNmY4ZWU3MWFkMDYxYmZmNGE2OTVlNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllJyXFuEwm0qQjk2evhOI8L9uRZh
t8Ip3EviqiAHT2r9gzDQnS6Q64q2ZrD5YNkObZlbBujpVmJ2wzU39xH/eYAeApb3
FQBK8+PWl0UvLdhprlfZuPab9VDZHc33CVv1vhacV7zoWL7CIVI4XDcOoPYvuBGB
xi8LCLTo7knqHs/9RyHqQztf2qZLB1URERJu0UkFP+fTsPPRtD8X52dVkRLsUoCu
UIgu4Wdg8klP+6qHSNV4QQDfWAeAL67UaCM/3LuZOt1k+QOannDUOKsPgXSQtZrT
GuSy6v+cnYfKBK83QPFwTNuNGr2pNavSmx9fkk3sFAkKO/Y6bYpQmh9ZrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNuCJT/9RSvb47nGtBhv/SmleSjMB8GA1UdIwQY
MBaAFGvqU9li1noBSOY3tLRom+TQhKnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEt
ZTIwYjdlNjc5NjIyLzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEtZTIwYjdlNjc5NjIy
LzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSPUYVaG
FtrjNoyGIuKvlG51k/JQjxSWJBG1rSA8QsRGnnzr3Mg/PkiZ43o0Rk27cInC9VKX
mN0BcFqe8Nk9iMsaFGpmYo704zVkDXZeUTPxH6pvh0JB0ZzkliUX5PkjKxXRlu/6
92Cv7Xivo8L17dPf8q1YTAPjaw3/Hoax6ReYOYeQA6TLkeYMc1bh8DkCdhGakjtl
Ulo6v58+p9WulwibMAbRiQFIBYucXRVMYB/iZVaXhWteWfRWrCrRenk+VJDnAVB3
tbSkGG3HrKQ+0Hx/i3EpQepI6zWLBWzQiYneXVzxRHobsY9cwU8+VK6nc7i/h8No
pjafYNhMqGh+HQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:40 2025 by rpki-client