Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
File: 1-XhhvCSEodMubzbMLEayFG4xW8E.mft (raw, json)
Hash identifier: YUIXag0MJfKHJ6BIN4dcUBf5MNaUmSH535h8y91rEug=
Subject key identifier: ED:B0:D7:C9:D9:C0:BD:7B:D5:3E:64:30:F6:44:3B:A0:B7:AD:D2:2B
Authority key identifier: F9:78:61:BC:24:84:A1:D3:2E:6F:36:CC:2C:46:B2:14:6E:31:5B:C1
Certificate issuer: /CN=f97861bc2484a1d32e6f36cc2c46b2146e315bc1
Certificate serial: 019511A26EBE2230319C546B5677BF2E4779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
Manifest number: 0925
Signing time: Mon 17 Feb 2025 02:00:12 +0000
Manifest this update: Mon 17 Feb 2025 02:00:12 +0000
Manifest next update: Tue 18 Feb 2025 02:00:12 +0000
Files and hashes: 1: 1-XhhvCSEodMubzbMLEayFG4xW8E.crl (hash: wPLChOFKrWPBbdWKcNNaCnW4EZeEThxCpESuFk3tPvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:6e:be:22:30:31:9c:54:6b:56:77:bf:2e:47:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97861bc2484a1d32e6f36cc2c46b2146e315bc1
Validity
Not Before: Feb 17 02:00:12 2025 GMT
Not After : Feb 18 02:00:12 2025 GMT
Subject: CN=edb0d7c9d9c0bd7bd53e6430f6443ba0b7add22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:b3:59:04:4d:15:28:d1:bb:17:18:32:7f:
22:e2:86:8a:2e:36:47:8e:7f:a4:42:1c:0c:60:73:
47:8b:6d:9b:e2:ad:ee:86:58:4f:a2:a2:1c:0f:df:
65:41:6d:f3:df:1b:f8:b7:ff:4d:bb:e9:86:df:96:
f4:5a:84:0d:12:99:c3:f0:ff:a7:b9:39:8f:04:ab:
59:09:4c:8f:33:a9:62:21:b4:d3:f3:c2:62:8e:2f:
97:12:ae:3c:10:85:4f:60:ec:1b:3d:95:c5:8b:24:
cc:80:54:02:7c:8a:c6:1f:61:1f:30:94:44:b7:33:
72:d0:97:62:6d:a0:71:29:87:5c:70:45:32:e6:f0:
c3:56:b7:c7:bb:e4:0a:98:80:2c:6b:16:2d:ea:05:
0d:ad:eb:d0:b5:22:cb:51:4c:88:1e:ee:82:f3:4c:
a7:77:77:12:4b:cb:5a:23:f4:48:1c:69:6c:f3:fc:
d6:5f:ba:c1:74:a6:98:f3:cf:5f:8c:93:a8:c2:26:
d2:45:27:8f:e7:55:3a:3d:9b:1f:64:e4:c0:da:3b:
db:88:bf:5a:82:fa:55:67:ec:8d:50:3f:bb:5a:54:
6a:70:be:24:b7:c5:6b:86:ab:27:eb:79:1d:b1:60:
6c:84:8e:1d:1e:bd:03:78:a0:bc:29:38:90:66:68:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B0:D7:C9:D9:C0:BD:7B:D5:3E:64:30:F6:44:3B:A0:B7:AD:D2:2B
X509v3 Authority Key Identifier:
keyid:F9:78:61:BC:24:84:A1:D3:2E:6F:36:CC:2C:46:B2:14:6E:31:5B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:ce:88:26:2a:71:fe:69:ea:ce:9f:9b:0c:35:5c:66:32:0c:
26:12:62:5d:8e:ac:86:00:60:13:27:b3:ae:36:df:25:12:b2:
3a:b5:cb:e3:c4:d2:bb:50:25:62:77:64:de:cc:8c:9c:24:47:
40:9d:00:06:ec:75:c9:6a:3c:51:b4:b5:7c:1f:19:a5:9c:23:
de:7a:de:85:b2:ad:e9:3d:ce:b9:5c:5c:0a:71:d8:08:ec:09:
3c:2d:25:b6:27:87:06:cd:7a:e0:fe:87:57:42:67:75:7f:77:
79:2b:59:24:e1:31:d3:62:fd:b3:9b:5e:19:3d:e6:95:fb:e3:
df:83:d0:92:9e:ba:7c:b8:d2:04:f8:5a:06:97:34:28:01:9b:
c6:5b:bd:8d:5f:08:b9:e5:4d:c4:35:1e:52:f9:09:64:95:22:
33:4c:7f:63:fa:ad:96:21:7b:4d:50:b0:ba:7c:cd:73:27:90:
17:b6:72:f2:77:8a:db:8f:e3:99:7e:ac:6f:82:e2:ba:a8:c4:
9c:9b:5f:61:e6:19:aa:62:d5:c6:d3:6f:87:4a:dd:80:09:4d:
f1:b0:9f:c4:5c:48:6c:65:b7:0e:92:07:92:df:21:51:b8:fb:
23:74:23:95:8b:2c:2b:78:d3:24:6f:8e:d7:22:97:ea:0a:2c:
ce:24:49:be
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZURom6+IjAxnFRrVne/Lkd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Nzg2MWJjMjQ4NGExZDMyZTZmMzZjYzJjNDZiMjE0NmUz
MTViYzEwHhcNMjUwMjE3MDIwMDEyWhcNMjUwMjE4MDIwMDEyWjAzMTEwLwYDVQQD
EyhlZGIwZDdjOWQ5YzBiZDdiZDUzZTY0MzBmNjQ0M2JhMGI3YWRkMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sGzWQRNFSjRuxcYMn8i4oaKLjZH
jn+kQhwMYHNHi22b4q3uhlhPoqIcD99lQW3z3xv4t/9Nu+mG35b0WoQNEpnD8P+n
uTmPBKtZCUyPM6liIbTT88Jiji+XEq48EIVPYOwbPZXFiyTMgFQCfIrGH2EfMJRE
tzNy0JdibaBxKYdccEUy5vDDVrfHu+QKmIAsaxYt6gUNrevQtSLLUUyIHu6C80yn
d3cSS8taI/RIHGls8/zWX7rBdKaY889fjJOowibSRSeP51U6PZsfZOTA2jvbiL9a
gvpVZ+yNUD+7WlRqcL4kt8Vrhqsn63kdsWBshI4dHr0DeKC8KTiQZmiHswIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO2w18nZwL171T5kMPZEO6C3rdIrMB8GA1UdIwQY
MBaAFPl4YbwkhKHTLm82zCxGshRuMVvBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YaGh2Q1NFb2RNdWJ6Yk1MRWF5Rkc0eFc4RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvYTNhNDhkLWNjYWUtNDU4ZC04ZGJk
LTk2ODViODQ4NDc4OS8xLzEtWGhodkNTRW9kTXViemJNTEVheUZHNHhXOEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzUyL2EzYTQ4ZC1jY2FlLTQ1OGQtOGRiZC05Njg1Yjg0ODQ3
ODkvMS8xLVhoaHZDU0VvZE11YnpiTUxFYXlGRzR4VzhFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4M6I
Jipx/mnqzp+bDDVcZjIMJhJiXY6shgBgEyezrjbfJRKyOrXL48TSu1AlYndk3syM
nCRHQJ0ABux1yWo8UbS1fB8ZpZwj3nrehbKt6T3OuVxcCnHYCOwJPC0ltieHBs16
4P6HV0JndX93eStZJOEx02L9s5teGT3mlfvj34PQkp66fLjSBPhaBpc0KAGbxlu9
jV8IueVNxDUeUvkJZJUiM0x/Y/qtliF7TVCwunzNcyeQF7Zy8neK24/jmX6sb4Li
uqjEnJtfYeYZqmLVxtNvh0rdgAlN8bCfxFxIbGW3DpIHkt8hUbj7I3QjlYssK3jT
JG+O1yKX6gosziRJvg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:03 2025 by rpki-client