Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File: wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier: Tm8qXqoVgYN/dnfr1I5uEAltRwBmC2Pan1k+KLroadM=
Subject key identifier: C0:6D:12:6A:34:8F:14:DC:35:26:2A:2F:AF:77:0C:B8:43:E7:F1:C5
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer: /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial: 019510C7D42C9D411757C93661BCE395FD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number: 06CC
Signing time: Sun 16 Feb 2025 22:01:26 +0000
Manifest this update: Sun 16 Feb 2025 22:01:26 +0000
Manifest next update: Mon 17 Feb 2025 22:01:26 +0000
Files and hashes: 1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: f+DAKx4jc5YGUdcliJnEl2yPVlushQRsiFh4ZnyhgTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d4:2c:9d:41:17:57:c9:36:61:bc:e3:95:fd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
Validity
Not Before: Feb 16 22:01:26 2025 GMT
Not After : Feb 17 22:01:26 2025 GMT
Subject: CN=c06d126a348f14dc35262a2faf770cb843e7f1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:1f:51:cc:20:76:74:3f:64:1c:b1:12:b7:
61:2f:30:0b:bb:0f:1a:d5:38:80:00:ce:be:a7:67:
ac:6f:37:cb:a7:51:97:81:e1:d6:34:35:c6:fd:87:
1c:31:b5:50:ac:f9:74:96:63:55:3a:69:0d:05:12:
90:9a:2f:f0:30:51:fe:7e:28:63:57:10:50:61:e5:
32:22:9a:7b:8d:ff:1f:4f:96:de:3d:91:48:08:f9:
21:27:27:30:18:81:ef:53:a9:b9:7f:c4:fd:0d:4d:
c4:8d:66:58:12:72:c4:66:e9:c5:06:bb:5e:8d:91:
f2:70:72:6f:73:5b:2d:0c:c3:b6:ce:bc:95:e8:4b:
43:11:7f:75:b7:b5:c2:98:00:b4:1d:21:0c:24:99:
2d:34:2d:2a:b0:86:56:c0:0a:11:f5:8b:2e:d8:a2:
9e:82:02:a1:dc:86:04:dc:f9:b2:df:b9:87:26:7b:
6a:86:4f:57:34:d9:08:33:de:67:ba:0d:7b:ab:0f:
20:04:39:4e:da:6e:88:6f:68:b1:14:06:67:19:e2:
ab:e2:3f:d4:5c:40:c8:3d:a6:c5:1c:1c:f2:a6:68:
28:89:dc:2b:95:4b:f4:53:f7:cb:18:55:0e:84:84:
09:33:d1:92:ac:d9:c3:6c:b0:c2:7c:58:99:d8:4a:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6D:12:6A:34:8F:14:DC:35:26:2A:2F:AF:77:0C:B8:43:E7:F1:C5
X509v3 Authority Key Identifier:
keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fd:75:6d:ff:32:e2:5f:40:3b:f0:6c:71:18:0c:93:34:ed:
01:56:54:90:97:7c:79:a0:58:2f:13:8c:0a:35:4f:a8:70:eb:
9b:5f:42:76:da:e6:06:4d:57:22:12:d6:e7:be:5c:18:5c:2a:
c9:76:e0:c8:ba:87:62:bf:94:eb:3b:72:74:da:df:28:3a:9b:
00:d8:c5:89:ba:10:5f:50:a8:7f:d7:03:4c:ab:48:7c:12:26:
b8:17:30:3a:14:9f:c0:5a:af:59:f6:ed:72:1b:0a:40:e9:52:
b0:cb:c0:03:4f:7b:56:c5:ab:10:b7:1f:33:69:9f:c1:95:fb:
c4:2f:a0:e7:01:45:b1:d8:11:41:b7:65:d2:a1:0c:30:b2:2e:
fe:fb:ff:1d:93:f7:84:97:23:7a:c2:96:f9:54:ff:11:77:09:
f5:f4:cc:9c:08:bb:ef:b5:86:97:d5:42:83:5e:e9:97:1d:89:
10:76:f6:ff:cf:87:8c:9a:e7:e1:c7:06:73:f7:8a:88:34:1f:
fe:a4:b7:6e:22:eb:51:72:d8:f1:ad:e9:72:0a:74:6d:ce:eb:
62:2f:f1:45:f4:d2:36:d7:91:b7:eb:a6:e5:d7:7f:7f:4c:92:
5b:a1:6e:cd:f7:f2:f9:40:e5:89:a0:9a:f2:0a:a6:8c:d9:f8:
99:c2:f0:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx9QsnUEXV8k2Ybzjlf0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODFhMjI2NzRkYzI1YWFhNTA4NTM2N2UyMGUwNzhkZTkw
NjRmMTIwHhcNMjUwMjE2MjIwMTI2WhcNMjUwMjE3MjIwMTI2WjAzMTEwLwYDVQQD
EyhjMDZkMTI2YTM0OGYxNGRjMzUyNjJhMmZhZjc3MGNiODQzZTdmMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FUfUcwgdnQ/ZByxErdhLzALuw8a
1TiAAM6+p2esbzfLp1GXgeHWNDXG/YccMbVQrPl0lmNVOmkNBRKQmi/wMFH+fihj
VxBQYeUyIpp7jf8fT5bePZFICPkhJycwGIHvU6m5f8T9DU3EjWZYEnLEZunFBrte
jZHycHJvc1stDMO2zryV6EtDEX91t7XCmAC0HSEMJJktNC0qsIZWwAoR9Ysu2KKe
ggKh3IYE3Pmy37mHJntqhk9XNNkIM95nug17qw8gBDlO2m6Ib2ixFAZnGeKr4j/U
XEDIPabFHBzypmgoidwrlUv0U/fLGFUOhIQJM9GSrNnDbLDCfFiZ2EqfVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBtEmo0jxTcNSYqL693DLhD5/HFMB8GA1UdIwQY
MBaAFMCBoiZ03CWqpQhTZ+IOB43pBk8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lMTM5ZDgtNjhlMC00ZmZhLWI0ZWYt
ZDczNjRkZDM1YjMxLzEvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lMTM5ZDgtNjhlMC00ZmZhLWI0ZWYtZDczNjRkZDM1YjMx
LzEvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/11bf8y
4l9AO/BscRgMkzTtAVZUkJd8eaBYLxOMCjVPqHDrm19CdtrmBk1XIhLW575cGFwq
yXbgyLqHYr+U6ztydNrfKDqbANjFiboQX1Cof9cDTKtIfBImuBcwOhSfwFqvWfbt
chsKQOlSsMvAA097VsWrELcfM2mfwZX7xC+g5wFFsdgRQbdl0qEMMLIu/vv/HZP3
hJcjesKW+VT/EXcJ9fTMnAi777WGl9VCg17plx2JEHb2/8+HjJrn4ccGc/eKiDQf
/qS3biLrUXLY8a3pcgp0bc7rYi/xRfTSNteRt+um5dd/f0ySW6Fuzffy+UDliaCa
8gqmjNn4mcLwAw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:54 2025 by rpki-client