Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier: 4j65Pg0yBASbE6HtyOmg+uGSFTRAFODxSrNmfGTNZpc=
Subject key identifier: CD:F3:B1:97:D1:C0:E3:8B:EF:F5:46:82:56:EC:2F:F5:B2:A5:65:61
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 0195116BBB2579964149DBABB7904E8DB131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 01:00:27 +0000
Manifest this update: Mon 17 Feb 2025 01:00:27 +0000
Manifest next update: Tue 18 Feb 2025 01:00:27 +0000
Files and hashes: 1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: vkTWiW0zvcwuC68iYV6xnEhbYGqA1pUUWcGELZVEJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:bb:25:79:96:41:49:db:ab:b7:90:4e:8d:b1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Feb 17 01:00:27 2025 GMT
Not After : Feb 18 01:00:27 2025 GMT
Subject: CN=cdf3b197d1c0e38beff5468256ec2ff5b2a56561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:bf:4a:3d:29:76:a8:ca:7f:a9:8c:4b:60:
4e:d8:ab:02:2c:df:14:1e:3b:c1:f4:dc:ce:6d:7b:
4a:d3:51:bb:50:7a:96:66:d0:ee:55:d1:78:b4:2c:
0e:97:75:d0:00:43:3b:9c:ac:f4:8b:18:5a:52:17:
13:a9:24:d4:a2:5b:cf:6d:ef:ce:d2:ac:8d:6a:6e:
8f:ab:fe:40:84:b3:32:c6:45:be:f9:44:dd:d3:e6:
62:35:b3:b2:7e:be:23:73:fd:bc:d3:84:91:4a:44:
c5:81:cc:38:56:4c:82:6a:01:20:4f:e2:df:3b:0f:
c8:35:ca:e7:46:81:e7:75:b2:cc:da:d3:fc:46:43:
3f:b9:71:88:67:cf:cc:c2:66:8f:72:6f:86:0b:43:
b6:c7:8f:46:3f:da:3b:e1:df:19:11:ec:07:38:54:
e6:ea:7d:af:bb:26:9c:e0:ab:64:5d:27:22:c3:1b:
08:e3:ea:cf:8e:ad:32:30:21:24:c7:de:90:45:f3:
6d:25:d1:b7:39:32:8c:d8:e8:42:89:4f:0f:12:5a:
f3:d5:b3:da:1a:03:75:70:95:39:a9:d8:dc:5e:ac:
61:2f:76:b6:0e:e5:d2:aa:9c:d1:50:ad:fb:df:69:
f0:08:ff:c4:9e:df:b4:a8:94:05:5a:2d:e6:d8:41:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F3:B1:97:D1:C0:E3:8B:EF:F5:46:82:56:EC:2F:F5:B2:A5:65:61
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:89:ed:1e:f1:76:6c:a3:ef:55:ef:86:51:07:a4:70:b9:51:
ce:e7:b6:5b:1f:87:1b:29:68:95:59:b3:b7:50:c4:d5:a3:69:
69:25:0a:05:e6:f7:a7:5d:5d:3f:db:76:5a:20:2d:a4:b7:a6:
8e:36:f9:1e:0b:59:00:8a:05:95:5a:1c:23:bb:33:4c:8a:1a:
f2:43:d3:e5:71:b3:08:85:27:a8:7a:86:3d:10:64:cc:c5:44:
55:68:f9:1e:30:ff:f1:b6:5a:1d:c6:bc:d8:8b:30:5a:cd:02:
c2:f7:b5:02:b0:af:0b:e7:62:8c:ce:a3:60:aa:fa:6e:e6:a7:
0e:8b:d8:71:2f:c3:8a:4f:8b:45:60:3f:07:ef:f0:8d:11:5e:
3c:ce:2c:75:3a:e9:f1:39:52:16:c3:13:f0:3e:43:d6:a0:9a:
5a:af:4e:16:6c:f2:54:53:3c:d7:8e:6c:3f:cb:5e:19:31:a3:
14:7a:39:e3:da:f2:c1:ae:46:57:63:b3:1b:08:b8:c1:51:64:
68:f8:8a:ee:03:78:87:b7:9f:09:bc:e8:34:fc:f1:f5:4b:f6:
af:de:06:c0:57:85:2a:54:1d:f7:e7:c4:29:57:a8:62:e4:98:
4b:62:84:80:a5:1b:6d:76:75:9b:86:47:cd:6b:fd:1f:ba:34:
25:0f:40:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa7sleZZBSdurt5BOjbExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Mjk3OTJlM2ZmMjFmYzM1ODI3ZjY4YTc4YzgwNTAwMTVj
NjZhNzIwHhcNMjUwMjE3MDEwMDI3WhcNMjUwMjE4MDEwMDI3WjAzMTEwLwYDVQQD
EyhjZGYzYjE5N2QxYzBlMzhiZWZmNTQ2ODI1NmVjMmZmNWIyYTU2NTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlK/Sj0pdqjKf6mMS2BO2KsCLN8U
HjvB9NzObXtK01G7UHqWZtDuVdF4tCwOl3XQAEM7nKz0ixhaUhcTqSTUolvPbe/O
0qyNam6Pq/5AhLMyxkW++UTd0+ZiNbOyfr4jc/2804SRSkTFgcw4VkyCagEgT+Lf
Ow/INcrnRoHndbLM2tP8RkM/uXGIZ8/MwmaPcm+GC0O2x49GP9o74d8ZEewHOFTm
6n2vuyac4KtkXSciwxsI4+rPjq0yMCEkx96QRfNtJdG3OTKM2OhCiU8PElrz1bPa
GgN1cJU5qdjcXqxhL3a2DuXSqpzRUK3732nwCP/Ent+0qJQFWi3m2EE7zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3zsZfRwOOL7/VGglbsL/WypWVhMB8GA1UdIwQY
MBaAFIgpeS4/8h/DWCf2injIBQAVxmpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ZjM4NWUtN2ZlMS00OWFkLTgxZmIt
MTg4MmY0YzI3NmNkLzEvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC82ZjM4NWUtN2ZlMS00OWFkLTgxZmItMTg4MmY0YzI3NmNk
LzEvaUNsNUxqX3lIOE5ZSl9hS2VNZ0ZBQlhHYW5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIntHvF2
bKPvVe+GUQekcLlRzue2Wx+HGylolVmzt1DE1aNpaSUKBeb3p11dP9t2WiAtpLem
jjb5HgtZAIoFlVocI7szTIoa8kPT5XGzCIUnqHqGPRBkzMVEVWj5HjD/8bZaHca8
2IswWs0Cwve1ArCvC+dijM6jYKr6buanDovYcS/Dik+LRWA/B+/wjRFePM4sdTrp
8TlSFsMT8D5D1qCaWq9OFmzyVFM8145sP8teGTGjFHo549rywa5GV2OzGwi4wVFk
aPiK7gN4h7efCbzoNPzx9Uv2r94GwFeFKlQd9+fEKVeoYuSYS2KEgKUbbXZ1m4ZH
zWv9H7o0JQ9ABQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:43 2025 by rpki-client