Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
File: h00SbPtCScNLlJJESW1rSTeJWBQ.mft (raw, json)
Hash identifier: QmCbtq6rfh8s9RyPHV1zvgjRA0/yn24x1Z1mU3FTt9A=
Subject key identifier: 7F:DA:FB:8D:8D:7C:3C:ED:5A:7E:C8:B2:02:FA:CC:B7:AC:91:E1:A1
Authority key identifier: 87:4D:12:6C:FB:42:49:C3:4B:94:92:44:49:6D:6B:49:37:89:58:14
Certificate issuer: /CN=874d126cfb4249c34b949244496d6b4937895814
Certificate serial: 0194C3887019D24B16B30A5AF17608988229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h00SbPtCScNLlJJESW1rSTeJWBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
Manifest number: 08F3
Signing time: Sat 01 Feb 2025 22:01:26 +0000
Manifest this update: Sat 01 Feb 2025 22:01:26 +0000
Manifest next update: Sun 02 Feb 2025 22:01:26 +0000
Files and hashes: 1: h00SbPtCScNLlJJESW1rSTeJWBQ.crl (hash: DTAW86Uyc6U2XmAI6BQagDlg008k+q4/tL2DfdlCDZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h00SbPtCScNLlJJESW1rSTeJWBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:70:19:d2:4b:16:b3:0a:5a:f1:76:08:98:82:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874d126cfb4249c34b949244496d6b4937895814
Validity
Not Before: Feb 1 22:01:26 2025 GMT
Not After : Feb 2 22:01:26 2025 GMT
Subject: CN=7fdafb8d8d7c3ced5a7ec8b202faccb7ac91e1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:90:ef:f4:89:71:ce:22:91:69:42:54:40:
65:01:6b:09:62:f0:d6:90:51:21:e2:df:8a:31:6c:
8f:11:cf:b6:b1:ed:a3:c0:20:a5:23:0f:50:8f:c0:
37:c7:b4:53:d7:e4:64:ca:e0:c6:77:d9:cc:f1:cd:
59:f7:b7:0a:17:a9:d9:12:67:b6:f6:ad:d6:b2:d1:
9f:a7:87:d0:45:fc:13:8d:92:d7:1b:b7:32:37:c5:
73:9c:ae:d9:fa:a1:74:a0:b2:ca:61:f6:e0:9f:98:
58:17:fd:4b:70:01:3f:28:cc:47:ac:48:a4:03:1a:
4c:a5:c4:85:9e:f4:d5:2f:a7:a0:74:c2:0f:22:93:
49:d7:c7:f8:93:9a:51:79:44:94:3b:4b:2c:27:42:
26:aa:33:87:b5:54:46:cc:9b:be:c9:c8:b9:81:5f:
54:8e:7a:5f:59:4d:76:33:d2:7e:b5:81:b3:a5:6a:
bb:b0:27:31:44:10:9c:3e:c2:64:d6:13:9d:5b:23:
7f:95:c3:f7:92:3d:e0:72:e9:20:e6:e6:3f:af:f4:
c5:b0:70:f8:96:48:db:07:3c:1e:8e:ce:f9:86:6f:
56:52:65:26:d7:35:7a:18:c5:26:b4:fd:c1:1f:33:
2a:fe:7e:31:2f:b3:c5:8e:c6:40:e1:94:fb:fb:d7:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DA:FB:8D:8D:7C:3C:ED:5A:7E:C8:B2:02:FA:CC:B7:AC:91:E1:A1
X509v3 Authority Key Identifier:
keyid:87:4D:12:6C:FB:42:49:C3:4B:94:92:44:49:6D:6B:49:37:89:58:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h00SbPtCScNLlJJESW1rSTeJWBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:97:e4:11:09:b3:af:d8:ee:af:45:86:c3:49:ff:b7:1e:de:
2f:58:1d:55:04:e5:44:2d:d8:0f:b8:eb:58:d1:86:bf:06:bc:
86:2d:6a:e6:97:9e:e9:23:27:af:df:c3:78:ae:3b:f1:4e:eb:
c8:26:83:c8:18:30:0c:58:de:87:10:1a:05:f8:7c:4e:bb:80:
10:27:dc:53:8a:e4:2f:b4:ee:b4:7f:2b:60:f6:6a:33:48:fb:
78:c1:25:b1:06:3e:99:cd:77:bb:b9:fd:4b:d3:38:85:c0:b4:
11:70:6c:6f:8c:07:36:e0:10:82:37:0d:42:7d:21:d5:d7:24:
af:6f:2c:5d:3f:0d:8b:09:e1:ef:62:8b:48:b2:a9:1a:eb:05:
82:21:48:b8:ee:28:3e:de:24:d3:6b:13:b0:40:10:95:62:66:
29:28:03:d6:3b:49:10:83:67:68:89:06:fb:d7:e0:d4:26:cf:
93:4d:ec:5b:44:a1:56:4d:8d:5c:c5:d1:b4:e0:78:aa:a9:e5:
8c:35:69:52:25:b6:4f:b1:54:92:55:00:1d:f8:45:94:e0:96:
71:30:99:cf:ca:78:1b:a8:94:19:57:b3:e8:07:a1:96:60:44:
29:bc:a3:a5:1a:81:56:0f:33:f4:a5:6b:64:2c:ae:1b:0b:8e:
bf:20:e7:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiHAZ0ksWswpa8XYImIIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGQxMjZjZmI0MjQ5YzM0Yjk0OTI0NDQ5NmQ2YjQ5Mzc4
OTU4MTQwHhcNMjUwMjAxMjIwMTI2WhcNMjUwMjAyMjIwMTI2WjAzMTEwLwYDVQQD
Eyg3ZmRhZmI4ZDhkN2MzY2VkNWE3ZWM4YjIwMmZhY2NiN2FjOTFlMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWiQ7/SJcc4ikWlCVEBlAWsJYvDW
kFEh4t+KMWyPEc+2se2jwCClIw9Qj8A3x7RT1+RkyuDGd9nM8c1Z97cKF6nZEme2
9q3WstGfp4fQRfwTjZLXG7cyN8VznK7Z+qF0oLLKYfbgn5hYF/1LcAE/KMxHrEik
AxpMpcSFnvTVL6egdMIPIpNJ18f4k5pReUSUO0ssJ0ImqjOHtVRGzJu+yci5gV9U
jnpfWU12M9J+tYGzpWq7sCcxRBCcPsJk1hOdWyN/lcP3kj3gcukg5uY/r/TFsHD4
lkjbBzwejs75hm9WUmUm1zV6GMUmtP3BHzMq/n4xL7PFjsZA4ZT7+9d4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/a+42NfDztWn7IsgL6zLeskeGhMB8GA1UdIwQY
MBaAFIdNEmz7QknDS5SSRElta0k3iVgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDAwU2JQdENTY05MbEpKRVNXMXJTVGVKV0JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zMmE5YjMtNjBkYS00YTU4LWJkMzct
MTU2ODAxNDY0NjMwLzEvaDAwU2JQdENTY05MbEpKRVNXMXJTVGVKV0JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zMmE5YjMtNjBkYS00YTU4LWJkMzctMTU2ODAxNDY0NjMw
LzEvaDAwU2JQdENTY05MbEpKRVNXMXJTVGVKV0JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5fkEQmz
r9jur0WGw0n/tx7eL1gdVQTlRC3YD7jrWNGGvwa8hi1q5pee6SMnr9/DeK478U7r
yCaDyBgwDFjehxAaBfh8TruAECfcU4rkL7TutH8rYPZqM0j7eMElsQY+mc13u7n9
S9M4hcC0EXBsb4wHNuAQgjcNQn0h1dckr28sXT8Niwnh72KLSLKpGusFgiFIuO4o
Pt4k02sTsEAQlWJmKSgD1jtJEINnaIkG+9fg1CbPk03sW0ShVk2NXMXRtOB4qqnl
jDVpUiW2T7FUklUAHfhFlOCWcTCZz8p4G6iUGVez6AehlmBEKbyjpRqBVg8z9KVr
ZCyuGwuOvyDnRw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:38 2025 by rpki-client