Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File: AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier: EgJGx32ApJfvtHMSC8Hd2Nfx18SOwS7d/A8bKw544tg=
Subject key identifier: CD:59:76:CE:C4:A1:FC:48:FF:A0:4A:DC:DE:2D:A1:DB:40:2C:2E:E5
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer: /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial: 019510C73C57FCE09C0A92FCEFFA93E77429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number: 1450
Signing time: Sun 16 Feb 2025 22:00:47 +0000
Manifest this update: Sun 16 Feb 2025 22:00:47 +0000
Manifest next update: Mon 17 Feb 2025 22:00:47 +0000
Files and hashes: 1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: Bi7nPxNtkmktTARO5fIsnjUIm0ZaJ3F20+i/YOD6kAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:3c:57:fc:e0:9c:0a:92:fc:ef:fa:93:e7:74:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Validity
Not Before: Feb 16 22:00:47 2025 GMT
Not After : Feb 17 22:00:47 2025 GMT
Subject: CN=cd5976cec4a1fc48ffa04adcde2da1db402c2ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:23:41:c3:56:3b:d9:06:64:70:10:f5:1e:
86:13:3f:8d:0e:9b:6b:c4:f6:85:04:c9:2c:91:d0:
1b:1f:f7:b1:c9:54:bf:27:c9:25:7b:bf:02:ce:07:
85:fc:b8:30:05:7a:e1:e5:34:e7:ec:92:73:35:e6:
16:54:ef:5c:82:9a:ef:ce:8a:08:6b:37:92:6f:56:
e5:ff:a5:af:28:5c:94:e7:e8:e3:dc:71:af:cf:49:
02:b7:e8:33:58:b9:bf:4a:d0:9a:8a:41:1b:5b:62:
6d:9d:79:51:fc:5d:cb:0b:cb:4f:08:80:ca:e4:94:
b1:be:4d:f9:7f:69:d2:9e:26:1b:e6:88:d1:c5:d6:
48:99:eb:f9:46:04:86:f7:91:a0:48:2f:9d:b3:97:
67:36:8b:9d:d3:36:cc:4f:92:ba:e3:c4:21:6c:d5:
b9:55:ed:d3:77:9c:45:af:fb:e6:94:0e:ed:44:e6:
a1:3a:44:a1:de:06:04:e5:a5:e0:83:ed:5b:03:49:
3f:1f:0d:5d:5e:7c:6e:4b:d3:d7:fd:d8:3f:a9:4d:
3b:78:fc:1f:85:5d:f6:9c:17:ca:4a:a8:1e:d9:03:
b5:bd:23:36:c9:60:79:81:05:14:15:d0:f0:f7:d4:
9a:2a:42:1d:96:1c:04:db:b0:53:0f:42:02:2d:52:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:59:76:CE:C4:A1:FC:48:FF:A0:4A:DC:DE:2D:A1:DB:40:2C:2E:E5
X509v3 Authority Key Identifier:
keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a4:5d:75:8d:98:49:8e:ac:e4:0f:a7:bb:79:ff:7b:29:bd:
4f:33:ad:6c:cb:7c:c8:94:1b:04:da:ed:b9:b9:9e:11:61:6a:
9e:7e:74:b9:a6:7e:7b:90:29:a5:33:63:3d:89:f7:ac:66:24:
5b:ac:09:f8:ed:94:3e:5b:66:ed:54:1d:3d:5d:e7:ee:4d:1a:
9e:dc:33:3a:2b:80:3d:5e:49:e3:c5:22:53:d6:8d:67:28:bd:
0d:ec:96:57:63:76:a0:25:64:b6:bf:c9:00:12:d8:1b:6f:c1:
67:1c:84:01:2b:1f:90:01:ab:06:2f:00:05:47:64:5e:ce:5b:
62:49:78:6a:c7:13:af:f1:19:0e:13:b1:64:04:8e:f2:49:20:
d3:03:e5:52:91:eb:fd:88:53:e0:b9:dc:16:0c:8d:1c:00:31:
66:3e:f1:da:b0:94:c7:68:0d:e3:df:cd:69:df:92:48:5c:98:
b2:bc:c0:93:2d:4d:1a:4b:d4:bb:63:cf:54:08:10:ea:51:a8:
7b:d9:ff:d6:e9:e3:f2:86:cd:be:c4:9c:a7:79:51:16:33:6c:
7b:e9:1b:37:42:56:68:b9:dd:b2:18:e2:01:55:b5:71:7e:1e:
1f:8a:d9:73:8e:ce:06:51:30:09:09:b5:f9:6a:78:ec:35:a2:
cb:52:e4:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxzxX/OCcCpL87/qT53QpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDIzMmNjNmZiMmJiZjc3ODZkOTJjNmM2YWViYWEwZWQ5
YTcxZTQwHhcNMjUwMjE2MjIwMDQ3WhcNMjUwMjE3MjIwMDQ3WjAzMTEwLwYDVQQD
EyhjZDU5NzZjZWM0YTFmYzQ4ZmZhMDRhZGNkZTJkYTFkYjQwMmMyZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk8jQcNWO9kGZHAQ9R6GEz+NDptr
xPaFBMkskdAbH/exyVS/J8kle78CzgeF/LgwBXrh5TTn7JJzNeYWVO9cgprvzooI
azeSb1bl/6WvKFyU5+jj3HGvz0kCt+gzWLm/StCaikEbW2JtnXlR/F3LC8tPCIDK
5JSxvk35f2nSniYb5ojRxdZImev5RgSG95GgSC+ds5dnNoud0zbMT5K648QhbNW5
Ve3Td5xFr/vmlA7tROahOkSh3gYE5aXgg+1bA0k/Hw1dXnxuS9PX/dg/qU07ePwf
hV32nBfKSqge2QO1vSM2yWB5gQUUFdDw99SaKkIdlhwE27BTD0ICLVI5kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1Zds7EofxI/6BK3N4todtALC7lMB8GA1UdIwQY
MBaAFAHSMsxvsrv3eG2SxsauuqDtmnHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYTZmZWQtMTk0Yi00MzMxLTgxZGEt
ZDEwYTk3NzFkNzliLzEvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lYTZmZWQtMTk0Yi00MzMxLTgxZGEtZDEwYTk3NzFkNzli
LzEvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqRddY2Y
SY6s5A+nu3n/eym9TzOtbMt8yJQbBNrtubmeEWFqnn50uaZ+e5AppTNjPYn3rGYk
W6wJ+O2UPltm7VQdPV3n7k0antwzOiuAPV5J48UiU9aNZyi9DeyWV2N2oCVktr/J
ABLYG2/BZxyEASsfkAGrBi8ABUdkXs5bYkl4ascTr/EZDhOxZASO8kkg0wPlUpHr
/YhT4LncFgyNHAAxZj7x2rCUx2gN49/Nad+SSFyYsrzAky1NGkvUu2PPVAgQ6lGo
e9n/1unj8obNvsScp3lRFjNse+kbN0JWaLndshjiAVW1cX4eH4rZc47OBlEwCQm1
+Wp47DWiy1Lk+g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:07 2025 by rpki-client