Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
File: ar_WA8cUHPY0bXXcFMCINTWWjMo.mft (raw, json)
Hash identifier: BXxP5WN8XOz5KOn5AnIaS4muFW+HnHKL7DYIHMeejzk=
Subject key identifier: 50:C6:F5:80:43:8E:82:F8:01:CD:40:85:9A:18:0B:D5:B2:D8:1B:96
Authority key identifier: 6A:BF:D6:03:C7:14:1C:F6:34:6D:75:DC:14:C0:88:35:35:96:8C:CA
Certificate issuer: /CN=6abfd603c7141cf6346d75dc14c0883535968cca
Certificate serial: 0194C3876D042010B1FDED6BBCDC935A8414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar_WA8cUHPY0bXXcFMCINTWWjMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
Manifest number: 0879
Signing time: Sat 01 Feb 2025 22:00:19 +0000
Manifest this update: Sat 01 Feb 2025 22:00:19 +0000
Manifest next update: Sun 02 Feb 2025 22:00:19 +0000
Files and hashes: 1: ar_WA8cUHPY0bXXcFMCINTWWjMo.crl (hash: ftzElnCLqtW+jKeNjj8nQ9ogkprOvdUWEOk8/VccBPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar_WA8cUHPY0bXXcFMCINTWWjMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:6d:04:20:10:b1:fd:ed:6b:bc:dc:93:5a:84:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abfd603c7141cf6346d75dc14c0883535968cca
Validity
Not Before: Feb 1 22:00:19 2025 GMT
Not After : Feb 2 22:00:19 2025 GMT
Subject: CN=50c6f580438e82f801cd40859a180bd5b2d81b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:ff:15:ae:26:68:08:35:8b:76:89:c6:bf:
70:cb:fb:be:d0:33:87:0e:6b:47:04:c4:7c:14:7b:
b5:74:7d:c1:73:f3:37:be:8d:7b:93:b9:12:0b:60:
bd:f4:f8:f1:d2:83:cc:52:8d:08:ad:1d:a8:59:36:
11:2f:70:5e:9c:51:26:bf:45:4e:0c:d4:7e:90:14:
69:88:d8:82:55:d3:11:3f:6d:8f:ba:26:83:62:b2:
87:72:c6:bf:91:a4:e5:83:97:bd:04:f0:f8:32:0f:
04:78:d5:35:1b:a1:70:e9:f6:be:79:56:e3:42:c4:
d2:af:ed:3d:6a:69:d4:a4:06:d9:90:1c:c8:49:9a:
55:45:e7:c8:e2:e1:1b:c7:da:11:04:2d:47:86:e3:
0c:93:ba:17:94:65:4a:bf:e3:61:8d:9b:4b:24:43:
51:61:d5:7d:60:c8:f6:bf:02:a8:46:67:74:27:9e:
f6:3c:70:9d:b3:1d:a7:2e:50:2d:ef:8f:33:fb:5a:
86:a9:11:b7:be:6a:03:74:8b:8a:c8:c5:65:8b:0a:
60:6a:52:e3:5a:93:79:2f:f0:c3:1f:e4:b2:4b:36:
f2:9a:97:7a:5b:23:07:ab:15:43:20:dc:b3:a9:e7:
90:76:b9:7f:70:59:c4:e7:8e:ab:b5:f4:cc:e3:e1:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C6:F5:80:43:8E:82:F8:01:CD:40:85:9A:18:0B:D5:B2:D8:1B:96
X509v3 Authority Key Identifier:
keyid:6A:BF:D6:03:C7:14:1C:F6:34:6D:75:DC:14:C0:88:35:35:96:8C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar_WA8cUHPY0bXXcFMCINTWWjMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0b:94:bf:d9:6d:4d:c4:03:b3:5c:e7:5e:3f:cd:4f:31:11:
c4:ca:c6:f4:c2:90:04:69:7f:43:7a:5f:fa:98:89:da:9c:f8:
78:b7:2e:c2:aa:80:fd:5e:05:38:a5:5c:cb:8e:ff:1a:41:9f:
9f:27:4d:ca:e2:ac:07:ca:a1:1c:dc:17:bc:65:b7:c8:b6:93:
96:ba:2e:16:e4:63:75:7d:9f:52:57:3f:bd:37:b3:52:3a:60:
e2:02:de:59:7f:41:ea:d7:55:41:b1:f7:f5:2e:54:e3:a9:0e:
01:c2:09:a7:92:46:5d:41:a5:be:62:31:03:1f:ce:9a:fd:1a:
4f:19:55:12:93:33:3a:25:27:ba:ec:97:38:19:35:1b:f1:8a:
9d:60:c3:b5:fc:61:e6:e8:88:e7:57:b2:1b:d6:b0:20:c0:f6:
a9:cc:d7:a2:55:9d:01:62:f0:62:a8:54:e7:ef:e6:5a:fc:53:
79:95:d4:be:63:2d:5e:6e:02:97:15:3d:df:8d:09:31:e8:7d:
a7:b4:df:d8:4f:71:21:c3:2d:ce:98:dc:16:bf:d0:63:4c:b7:
7b:35:ab:b6:81:44:6a:b8:85:59:ae:d0:a2:1b:25:54:73:a4:
96:a7:59:54:c0:9f:8f:7e:9f:2c:87:a5:6f:17:1e:42:6a:d8:
6b:49:22:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh20EIBCx/e1rvNyTWoQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYmZkNjAzYzcxNDFjZjYzNDZkNzVkYzE0YzA4ODM1MzU5
NjhjY2EwHhcNMjUwMjAxMjIwMDE5WhcNMjUwMjAyMjIwMDE5WjAzMTEwLwYDVQQD
Eyg1MGM2ZjU4MDQzOGU4MmY4MDFjZDQwODU5YTE4MGJkNWIyZDgxYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoH/Fa4maAg1i3aJxr9wy/u+0DOH
DmtHBMR8FHu1dH3Bc/M3vo17k7kSC2C99Pjx0oPMUo0IrR2oWTYRL3BenFEmv0VO
DNR+kBRpiNiCVdMRP22PuiaDYrKHcsa/kaTlg5e9BPD4Mg8EeNU1G6Fw6fa+eVbj
QsTSr+09amnUpAbZkBzISZpVRefI4uEbx9oRBC1HhuMMk7oXlGVKv+NhjZtLJENR
YdV9YMj2vwKoRmd0J572PHCdsx2nLlAt748z+1qGqRG3vmoDdIuKyMVliwpgalLj
WpN5L/DDH+SySzbympd6WyMHqxVDINyzqeeQdrl/cFnE546rtfTM4+GjuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDG9YBDjoL4Ac1AhZoYC9Wy2BuWMB8GA1UdIwQY
MBaAFGq/1gPHFBz2NG113BTAiDU1lozKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJfV0E4Y1VIUFkwYlhYY0ZNQ0lOVFdXak1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83YjVhMzQtYmFhZC00NDIyLWFkM2Qt
YmUyNzI5NzUyNDhlLzEvYXJfV0E4Y1VIUFkwYlhYY0ZNQ0lOVFdXak1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83YjVhMzQtYmFhZC00NDIyLWFkM2QtYmUyNzI5NzUyNDhl
LzEvYXJfV0E4Y1VIUFkwYlhYY0ZNQ0lOVFdXak1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwuUv9lt
TcQDs1znXj/NTzERxMrG9MKQBGl/Q3pf+piJ2pz4eLcuwqqA/V4FOKVcy47/GkGf
nydNyuKsB8qhHNwXvGW3yLaTlrouFuRjdX2fUlc/vTezUjpg4gLeWX9B6tdVQbH3
9S5U46kOAcIJp5JGXUGlvmIxAx/Omv0aTxlVEpMzOiUnuuyXOBk1G/GKnWDDtfxh
5uiI51eyG9awIMD2qczXolWdAWLwYqhU5+/mWvxTeZXUvmMtXm4ClxU9340JMeh9
p7Tf2E9xIcMtzpjcFr/QY0y3ezWrtoFEariFWa7QohslVHOklqdZVMCfj36fLIel
bxceQmrYa0kiKA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:02 2025 by rpki-client