Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
File: esMB9rptscwntFS8szI5rh1kGrs.mft (raw, json)
Hash identifier: YcKvqW8yPiWQWmMPyxZzxHOYmGinAvtV3F7pZ/j/IuE=
Subject key identifier: 74:62:6F:74:2D:F6:EE:05:66:61:C2:63:CE:36:91:71:90:5C:29:FB
Authority key identifier: 7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
Certificate issuer: /CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Certificate serial: 0194C319BC7A9F9BD28AD7A37D8E726FE9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
Manifest number: 07
Signing time: Sat 01 Feb 2025 20:00:31 +0000
Manifest this update: Sat 01 Feb 2025 20:00:31 +0000
Manifest next update: Sun 02 Feb 2025 20:00:31 +0000
Files and hashes: 1: esMB9rptscwntFS8szI5rh1kGrs.crl (hash: e6qZPk1NfMrCwCSHHjmkUzo/Rxe5qe7/BzF5SVN3gks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:bc:7a:9f:9b:d2:8a:d7:a3:7d:8e:72:6f:e9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Validity
Not Before: Feb 1 20:00:31 2025 GMT
Not After : Feb 2 20:00:31 2025 GMT
Subject: CN=74626f742df6ee056661c263ce369171905c29fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:8f:04:56:f0:4b:0b:0d:81:47:12:5b:c2:59:
f4:d6:b2:8b:f9:33:76:65:3f:8e:76:47:81:ff:67:
40:80:0c:97:71:50:36:83:27:d4:86:b1:94:7a:6a:
fe:26:26:ac:4f:58:21:9d:2b:65:7e:df:ad:b8:4a:
60:59:be:8f:45:37:89:3b:c6:85:99:b7:e7:3c:2f:
e4:a9:ac:6b:16:94:37:55:ae:2a:4b:13:c8:33:5c:
1f:a7:f4:60:45:3a:f4:2c:28:e1:76:8e:9b:04:0e:
80:24:ba:53:2a:09:ac:b5:95:b2:70:2d:19:0e:06:
90:45:41:0c:2b:dc:f5:62:00:cb:da:da:8b:ef:21:
45:a5:e4:ba:eb:c9:47:60:7c:3c:1d:d3:4e:95:08:
f0:4e:11:27:7b:f9:43:b7:b9:ab:c6:4d:29:ca:71:
19:a4:f7:30:5a:e2:cf:44:ae:d2:23:f8:c6:94:58:
92:68:d7:e5:5e:3d:cd:d5:53:77:44:76:c0:12:db:
71:d9:3a:2e:e6:26:ab:bb:1a:b5:20:64:9a:6c:19:
8f:92:ca:f3:89:76:a9:f6:13:d9:3d:98:fb:58:7d:
07:3f:38:79:62:98:c7:f7:1f:b5:d2:aa:fe:f4:8c:
95:dc:d6:76:34:43:41:a9:b2:52:c4:47:b5:44:85:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:6F:74:2D:F6:EE:05:66:61:C2:63:CE:36:91:71:90:5C:29:FB
X509v3 Authority Key Identifier:
keyid:7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c7:aa:67:48:88:e5:68:af:e8:79:c7:f0:6c:dc:bb:65:4b:
c9:23:ee:9f:a8:95:ec:ee:7c:1b:ff:7b:0a:ca:1b:05:65:de:
97:77:bc:fb:8b:8f:66:94:aa:37:65:6f:1c:b6:04:c2:c3:c5:
2d:e8:cb:d5:87:c2:d2:c4:f5:b1:c2:d7:da:8b:c4:ca:43:36:
f1:81:13:1f:86:20:38:0d:e4:b6:94:42:09:18:8a:5e:1c:3b:
12:fb:1c:40:7d:21:9f:09:50:ca:b7:09:53:f6:9e:4b:7b:3d:
83:bf:6e:1d:78:cf:ce:8b:98:39:ea:6e:ee:26:a8:b3:ea:72:
c3:0b:3c:ea:3c:66:4d:de:a6:f4:4f:5b:3e:c0:34:0e:7b:26:
c5:5a:2e:0e:2a:ba:ac:22:db:b3:97:e6:11:cc:10:7b:a6:fa:
cb:d4:76:fd:cf:60:2f:5c:d3:67:cc:81:ab:4e:a9:84:c7:66:
db:3b:b1:c7:c7:6e:46:70:60:16:a0:2c:40:43:00:af:22:e3:
f7:ea:2e:14:98:a1:12:4f:7b:f8:54:ef:a5:3b:1d:70:4a:5b:
07:c3:26:de:95:95:0b:01:5b:03:b2:6e:c6:62:7c:19:16:65:
ff:fc:2c:42:c2:e0:e7:8f:b1:ec:c4:b5:4c:22:74:63:48:10:
2d:46:69:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDGbx6n5vSitejfY5yb+n+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYzMwMWY2YmE2ZGIxY2MyN2I0NTRiY2IzMzIzOWFlMWQ2
NDFhYmIwHhcNMjUwMjAxMjAwMDMxWhcNMjUwMjAyMjAwMDMxWjAzMTEwLwYDVQQD
Eyg3NDYyNmY3NDJkZjZlZTA1NjY2MWMyNjNjZTM2OTE3MTkwNWMyOWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Y8EVvBLCw2BRxJbwln01rKL+TN2
ZT+OdkeB/2dAgAyXcVA2gyfUhrGUemr+JiasT1ghnStlft+tuEpgWb6PRTeJO8aF
mbfnPC/kqaxrFpQ3Va4qSxPIM1wfp/RgRTr0LCjhdo6bBA6AJLpTKgmstZWycC0Z
DgaQRUEMK9z1YgDL2tqL7yFFpeS668lHYHw8HdNOlQjwThEne/lDt7mrxk0pynEZ
pPcwWuLPRK7SI/jGlFiSaNflXj3N1VN3RHbAEttx2Tou5iaruxq1IGSabBmPksrz
iXap9hPZPZj7WH0HPzh5YpjH9x+10qr+9IyV3NZ2NENBqbJSxEe1RIWZtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRib3Qt9u4FZmHCY842kXGQXCn7MB8GA1UdIwQY
MBaAFHrDAfa6bbHMJ7RUvLMyOa4dZBq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXNNQjlycHRzY3dudEZTOHN6STVyaDFrR3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84Nzg3NmQtZDc2Ni00YTZjLTlmMDUt
YTU1ZWY3ZTMzODhlLzEvZXNNQjlycHRzY3dudEZTOHN6STVyaDFrR3JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84Nzg3NmQtZDc2Ni00YTZjLTlmMDUtYTU1ZWY3ZTMzODhl
LzEvZXNNQjlycHRzY3dudEZTOHN6STVyaDFrR3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsseqZ0iI
5Wiv6HnH8Gzcu2VLySPun6iV7O58G/97CsobBWXel3e8+4uPZpSqN2VvHLYEwsPF
LejL1YfC0sT1scLX2ovEykM28YETH4YgOA3ktpRCCRiKXhw7EvscQH0hnwlQyrcJ
U/aeS3s9g79uHXjPzouYOepu7iaos+pywws86jxmTd6m9E9bPsA0DnsmxVouDiq6
rCLbs5fmEcwQe6b6y9R2/c9gL1zTZ8yBq06phMdm2zuxx8duRnBgFqAsQEMAryLj
9+ouFJihEk97+FTvpTsdcEpbB8Mm3pWVCwFbA7JuxmJ8GRZl//wsQsLg54+x7MS1
TCJ0Y0gQLUZpoA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:00:12 2025 by rpki-client