Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File: rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier: EbNN3+tt8NMZl+G2ljkW7CPMwNHgtcFNWtTEHXk/BlQ=
Subject key identifier: 31:5F:B4:94:E3:72:EC:8A:D7:76:AF:2C:B5:4C:02:B4:E8:BC:B1:1B
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer: /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial: 0194C4D17DE12E84D4A767E9F2A7CE7F519C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number: 132A
Signing time: Sun 02 Feb 2025 04:00:50 +0000
Manifest this update: Sun 02 Feb 2025 04:00:50 +0000
Manifest next update: Mon 03 Feb 2025 04:00:50 +0000
Files and hashes: 1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: /EEqDC34s9eT4GT5/MpxjUHXqvYTWXTiCWN4k0P3oeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:7d:e1:2e:84:d4:a7:67:e9:f2:a7:ce:7f:51:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Validity
Not Before: Feb 2 04:00:50 2025 GMT
Not After : Feb 3 04:00:50 2025 GMT
Subject: CN=315fb494e372ec8ad776af2cb54c02b4e8bcb11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:fa:de:9a:cf:d1:9f:e3:3c:01:c7:c2:75:
4b:d7:93:a1:15:b3:d8:0d:ab:22:48:45:54:11:c8:
62:cf:4a:74:85:5e:3f:d7:1e:f2:79:70:f1:80:1f:
89:7a:1d:6f:82:39:07:47:68:63:da:f0:30:43:f7:
ea:b6:5c:33:c2:d3:4b:73:e5:0e:99:da:7c:56:88:
35:b7:f9:cb:09:71:42:68:04:25:d9:2c:c9:bd:f7:
d6:cf:e3:a9:e7:55:f9:6b:3d:84:00:dc:c0:b3:13:
76:66:9c:a3:3b:b5:69:b1:2c:b8:10:a7:96:34:1a:
5e:11:f2:39:04:c3:07:94:5a:5a:18:46:3b:73:e7:
c9:0b:ef:bc:b0:a1:c2:01:f6:8e:b8:bd:37:f6:b4:
84:59:58:9e:90:93:db:e1:f2:a9:1b:fa:aa:46:5d:
8b:3b:a5:f9:66:4f:ca:1e:cc:51:bf:61:6b:7c:4f:
be:f8:f2:87:23:8f:42:99:59:89:c0:ee:93:f4:3f:
15:e6:9d:c8:87:fe:40:c6:ba:65:da:47:e7:41:52:
05:23:a9:c7:00:0c:ca:79:25:2d:4d:a1:6e:b3:a8:
ef:28:80:cb:a5:d1:4e:5c:cb:58:9c:c9:71:59:14:
a7:fa:00:26:24:00:38:41:5a:92:49:15:30:ea:7c:
b6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:B4:94:E3:72:EC:8A:D7:76:AF:2C:B5:4C:02:B4:E8:BC:B1:1B
X509v3 Authority Key Identifier:
keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e7:65:50:63:67:27:11:41:56:ed:09:19:e4:df:05:ba:b6:
2a:c8:53:5a:6b:15:02:38:fb:36:b9:af:2d:69:5d:a0:e7:ea:
3e:06:42:1f:da:cd:d7:fb:cc:37:73:26:ff:c0:04:2a:ad:27:
fd:48:4c:c8:7a:5c:17:9a:63:95:73:8a:0f:33:75:ba:6f:ed:
c9:f1:8e:ab:f6:2d:2d:bd:81:d0:84:45:05:af:f2:8f:59:11:
8e:9d:22:44:b0:70:f3:a3:04:49:a9:4d:b6:bf:c1:4d:b0:a6:
46:f8:2a:30:d3:ee:e0:01:b8:00:d1:60:2e:7c:c3:45:f7:12:
99:5a:98:82:c9:dd:55:bb:f1:5e:71:ca:eb:7b:0c:75:8f:5a:
19:bb:0a:f7:48:46:55:b8:86:17:9a:38:06:a9:ee:28:5a:99:
9e:b7:3b:1b:0b:fd:19:d2:ac:85:95:03:4d:e4:50:b2:68:ef:
11:7d:66:2f:ce:d5:c5:d5:e2:c4:46:ad:3c:dc:db:e6:d1:11:
65:9d:7a:3d:70:3b:aa:54:11:54:85:9e:5a:c9:5a:8d:b3:89:
fc:7d:88:6e:ce:96:a8:ed:08:2d:16:f0:d7:c8:b1:40:c8:e8:
ff:0d:2a:84:62:e0:60:ef:08:9b:00:c8:a8:c8:79:e8:98:06:
0c:9c:79:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0X3hLoTUp2fp8qfOf1GcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNlODI2ZTdlNDJlZGRkNjlkZmFkM2E1OWE5YjlhYTRl
MjgxODMwHhcNMjUwMjAyMDQwMDUwWhcNMjUwMjAzMDQwMDUwWjAzMTEwLwYDVQQD
EygzMTVmYjQ5NGUzNzJlYzhhZDc3NmFmMmNiNTRjMDJiNGU4YmNiMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRz63prP0Z/jPAHHwnVL15OhFbPY
DasiSEVUEchiz0p0hV4/1x7yeXDxgB+Jeh1vgjkHR2hj2vAwQ/fqtlwzwtNLc+UO
mdp8Vog1t/nLCXFCaAQl2SzJvffWz+Op51X5az2EANzAsxN2ZpyjO7VpsSy4EKeW
NBpeEfI5BMMHlFpaGEY7c+fJC++8sKHCAfaOuL039rSEWViekJPb4fKpG/qqRl2L
O6X5Zk/KHsxRv2FrfE+++PKHI49CmVmJwO6T9D8V5p3Ih/5Axrpl2kfnQVIFI6nH
AAzKeSUtTaFus6jvKIDLpdFOXMtYnMlxWRSn+gAmJAA4QVqSSRUw6ny2LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFftJTjcuyK13avLLVMArTovLEbMB8GA1UdIwQY
MBaAFK0s6Cbn5C7d1p3606Wam5qk4oGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzct
YTgzYThkNTMzMjc1LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzctYTgzYThkNTMzMjc1
LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+dlUGNn
JxFBVu0JGeTfBbq2KshTWmsVAjj7NrmvLWldoOfqPgZCH9rN1/vMN3Mm/8AEKq0n
/UhMyHpcF5pjlXOKDzN1um/tyfGOq/YtLb2B0IRFBa/yj1kRjp0iRLBw86MESalN
tr/BTbCmRvgqMNPu4AG4ANFgLnzDRfcSmVqYgsndVbvxXnHK63sMdY9aGbsK90hG
VbiGF5o4BqnuKFqZnrc7Gwv9GdKshZUDTeRQsmjvEX1mL87VxdXixEatPNzb5tER
ZZ16PXA7qlQRVIWeWslajbOJ/H2Ibs6WqO0ILRbw18ixQMjo/w0qhGLgYO8ImwDI
qMh56JgGDJx5FQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:43 2025 by rpki-client