Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
File: l2U-VqlPj_3pS15PKKeeRffvDNw.mft (raw, json)
Hash identifier: sx7BCr5PCqcTx28Xa4GunU/N7NquuVcsPWQt+BdOUuI=
Subject key identifier: 05:51:8B:B0:78:48:0E:2C:B0:12:EC:BF:7C:D7:84:72:5B:45:E7:85
Authority key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
Certificate issuer: /CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Certificate serial: 0194C387A3CB063498183ED45DB8598F5F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
Manifest number: 1414
Signing time: Sat 01 Feb 2025 22:00:33 +0000
Manifest this update: Sat 01 Feb 2025 22:00:33 +0000
Manifest next update: Sun 02 Feb 2025 22:00:33 +0000
Files and hashes: 1: l2U-VqlPj_3pS15PKKeeRffvDNw.crl (hash: vmF+2GjvPeRTPFhYCCKcAPjhpipq5BKYXycJU834r2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:a3:cb:06:34:98:18:3e:d4:5d:b8:59:8f:5f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Validity
Not Before: Feb 1 22:00:33 2025 GMT
Not After : Feb 2 22:00:33 2025 GMT
Subject: CN=05518bb078480e2cb012ecbf7cd784725b45e785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:56:bc:62:72:24:b0:bf:34:52:85:30:8d:
e1:0c:f9:34:68:f2:d5:bb:0d:25:94:e7:6c:d2:67:
ed:64:01:12:2c:a9:a7:2f:19:56:21:4e:11:e4:15:
b3:3b:b1:e8:d5:6e:5d:c6:f8:e7:08:47:26:5e:25:
d4:f9:3f:87:dd:47:96:cb:7b:c1:13:98:0c:f9:27:
b0:e7:1f:a8:b9:42:f3:c5:a0:c3:02:7b:1d:ae:69:
f1:8f:95:ee:91:87:28:c4:3e:9e:1a:f3:30:c6:ca:
3f:ba:b1:3c:cb:bb:40:9c:a7:af:84:dc:57:23:23:
59:79:48:bf:54:da:d8:e5:e5:d3:60:5e:5c:22:89:
71:94:09:58:87:e4:67:42:8d:7a:f6:a7:18:89:da:
3b:67:b8:53:83:f8:2f:2f:9c:c1:4c:25:59:79:ed:
41:84:c7:3d:65:cc:0f:d4:a0:55:14:44:1b:9a:ba:
9a:50:7d:32:ee:52:74:30:e5:81:d5:f9:fd:fc:24:
f7:ab:c6:b0:84:d0:e3:94:1f:e1:90:7b:0e:71:94:
ce:f8:a7:f5:f9:71:92:03:ed:81:f8:5a:eb:99:8a:
f2:06:21:6e:da:55:14:b3:13:ce:49:51:ef:b0:46:
10:9a:8c:fd:ec:54:cd:a3:5b:2c:09:4a:13:2b:71:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:51:8B:B0:78:48:0E:2C:B0:12:EC:BF:7C:D7:84:72:5B:45:E7:85
X509v3 Authority Key Identifier:
keyid:97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c2:50:a4:49:ad:3e:36:1d:9f:b8:d9:79:ff:95:5d:1c:52:
e1:2d:64:49:3b:30:42:6c:b6:4c:ce:3b:33:92:35:b2:e6:ab:
7c:e5:9c:86:40:fa:d6:ba:e4:b5:50:06:38:f4:b2:85:4c:11:
b2:59:ad:22:8e:9b:5a:78:0a:8d:76:87:45:34:e1:0e:57:f8:
c5:2d:0c:2e:07:73:03:d7:16:58:da:02:3e:91:7a:48:25:9a:
96:5f:94:d1:ec:b5:c2:37:5d:71:3c:b6:6c:44:4b:dc:75:6d:
00:dc:f2:9e:d1:d8:db:9e:f8:7e:8f:96:00:04:1e:24:5b:2a:
56:e3:86:f6:05:7b:20:b5:2b:43:2c:62:da:c8:19:b5:7e:ff:
b2:8c:59:b4:4a:e7:79:ab:9a:68:d8:a2:ae:98:4f:bd:59:4a:
38:06:37:47:9f:20:38:0f:c0:b0:60:06:da:7d:1a:78:e5:e7:
ba:af:db:3e:60:2a:d9:b3:77:bf:be:2c:67:cf:b0:54:b5:b8:
ea:c1:92:8f:0e:30:ad:a4:bf:51:b6:f0:d7:34:ca:30:22:f3:
aa:17:49:be:72:83:47:84:7c:ce:e1:cc:f5:34:b3:5a:50:94:
b2:50:5c:31:e5:69:5e:d7:d6:f7:b2:b3:d1:d3:4b:50:ce:fe:
f4:e7:2e:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh6PLBjSYGD7UXbhZj1+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NjUzZTU2YTk0ZjhmZmRlOTRiNWU0ZjI4YTc5ZTQ1Zjdl
ZjBjZGMwHhcNMjUwMjAxMjIwMDMzWhcNMjUwMjAyMjIwMDMzWjAzMTEwLwYDVQQD
EygwNTUxOGJiMDc4NDgwZTJjYjAxMmVjYmY3Y2Q3ODQ3MjViNDVlNzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTVWvGJyJLC/NFKFMI3hDPk0aPLV
uw0llOds0mftZAESLKmnLxlWIU4R5BWzO7Ho1W5dxvjnCEcmXiXU+T+H3UeWy3vB
E5gM+Sew5x+ouULzxaDDAnsdrmnxj5XukYcoxD6eGvMwxso/urE8y7tAnKevhNxX
IyNZeUi/VNrY5eXTYF5cIolxlAlYh+RnQo169qcYido7Z7hTg/gvL5zBTCVZee1B
hMc9ZcwP1KBVFEQbmrqaUH0y7lJ0MOWB1fn9/CT3q8awhNDjlB/hkHsOcZTO+Kf1
+XGSA+2B+FrrmYryBiFu2lUUsxPOSVHvsEYQmoz97FTNo1ssCUoTK3EKKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVRi7B4SA4ssBLsv3zXhHJbReeFMB8GA1UdIwQY
MBaAFJdlPlapT4/96UteTyinnkX37wzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJVLVZxbFBqXzNwUzE1UEtLZWVSZmZ2RE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84Y2UxNDYtZTA3ZC00MWQwLWIxMjct
MjhjODljNTFiNGIwLzEvbDJVLVZxbFBqXzNwUzE1UEtLZWVSZmZ2RE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84Y2UxNDYtZTA3ZC00MWQwLWIxMjctMjhjODljNTFiNGIw
LzEvbDJVLVZxbFBqXzNwUzE1UEtLZWVSZmZ2RE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8JQpEmt
PjYdn7jZef+VXRxS4S1kSTswQmy2TM47M5I1suarfOWchkD61rrktVAGOPSyhUwR
slmtIo6bWngKjXaHRTThDlf4xS0MLgdzA9cWWNoCPpF6SCWall+U0ey1wjddcTy2
bERL3HVtANzyntHY2574fo+WAAQeJFsqVuOG9gV7ILUrQyxi2sgZtX7/soxZtErn
eauaaNiirphPvVlKOAY3R58gOA/AsGAG2n0aeOXnuq/bPmAq2bN3v74sZ8+wVLW4
6sGSjw4wraS/Ubbw1zTKMCLzqhdJvnKDR4R8zuHM9TSzWlCUslBcMeVpXtfW97Kz
0dNLUM7+9OcuBg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:58 2025 by rpki-client