Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json)
Hash identifier: Jpr+PvVAFZhIuowoIuzQkBveRqeNSeVFOL0juZOaaBI=
Subject key identifier: 3E:DA:62:C3:31:E8:69:BB:54:6C:3A:C8:CF:D7:D1:83:0F:AF:15:21
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 0194C463547694FA07355F600A9645C95ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
Manifest number: 0867
Signing time: Sun 02 Feb 2025 02:00:31 +0000
Manifest this update: Sun 02 Feb 2025 02:00:31 +0000
Manifest next update: Mon 03 Feb 2025 02:00:31 +0000
Files and hashes: 1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: BZlitbztSzdbYzTliRTfOBl0FJ5cjQoyXxyY2XC6lSs=)
2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:54:76:94:fa:07:35:5f:60:0a:96:45:c9:5a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: Feb 2 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2025 GMT
Subject: CN=3eda62c331e869bb546c3ac8cfd7d1830faf1521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:cc:4d:51:77:9f:75:00:5f:77:af:7c:a8:
3d:d5:2d:55:fb:e5:c6:b3:d2:e2:4c:b3:a2:b8:af:
02:fe:2d:dc:45:1f:67:c8:39:37:16:2f:65:48:28:
84:20:04:d1:f1:6a:2c:97:10:c3:20:e5:80:2e:4b:
14:f7:d4:fc:e5:53:9e:8f:b6:7d:43:6f:74:0a:32:
a4:28:91:cb:a6:64:d3:13:a0:b7:85:8c:45:1f:49:
cf:cc:fe:fe:44:00:e2:bd:20:77:57:87:36:fe:38:
94:59:17:10:0a:9e:8f:5d:9c:1c:57:5c:04:0e:f2:
3e:70:87:3e:9a:c2:79:88:61:28:d4:53:ed:b6:98:
f2:36:97:61:68:cf:59:e3:8c:e6:c3:16:ee:19:c9:
55:c3:42:6c:c3:52:46:e1:a3:b6:3c:ff:31:c1:76:
7e:a2:90:fa:53:5e:4f:25:62:59:73:5d:f5:68:6e:
70:3c:57:c6:a8:cd:0b:f4:c9:52:05:2b:d7:16:3d:
3b:a7:69:53:fb:2c:e3:d6:6c:de:de:bd:0f:a0:87:
11:54:38:7b:37:d3:a5:2e:b1:91:ef:17:43:69:3d:
8e:13:81:93:d1:18:80:db:84:0c:63:71:5d:04:20:
3c:db:78:d5:7a:88:19:ba:f6:19:5d:93:fd:5b:96:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DA:62:C3:31:E8:69:BB:54:6C:3A:C8:CF:D7:D1:83:0F:AF:15:21
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:52:8b:2e:5a:59:b3:5c:8d:65:3c:3b:c5:1e:6d:2d:57:de:
7e:3e:a6:b8:9d:1a:db:d5:0b:4d:d1:48:11:77:e7:3f:09:86:
c4:5d:fa:8b:fb:6f:22:c6:56:69:88:ec:73:89:92:ad:17:b1:
24:32:32:b9:78:b6:1a:da:86:cd:8d:00:41:46:ad:48:74:a4:
c5:85:6a:06:04:db:3f:95:d9:e8:d6:ac:02:3b:1a:09:1a:ba:
9e:3e:f2:d4:2d:c2:1a:46:1f:86:20:d8:dc:28:53:92:98:a7:
f2:77:8f:2d:81:8e:6d:cb:d5:e4:83:ed:7d:80:68:93:58:4c:
01:35:bb:68:f0:dc:09:f7:3b:3f:cd:e6:5f:b0:d0:0c:86:46:
e7:7f:4b:9a:dd:a3:3f:9b:ec:60:70:83:24:20:80:4d:58:0f:
d8:92:01:e7:99:a7:83:e5:7e:5f:bd:69:05:87:9f:53:a7:b2:
de:57:b1:ae:ed:e5:8d:5d:a7:18:56:24:f4:a4:2d:03:9f:1c:
43:be:8d:e7:75:a7:58:0b:51:e6:55:2a:e7:45:2e:b2:2b:d1:
1d:5e:42:ec:ec:30:1b:62:b5:d0:45:f8:f6:4f:fa:4f:92:88:
b6:ce:a0:6b:0d:45:c0:be:68:d1:25:9a:3c:53:ed:9b:0e:90:
c1:1f:1d:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY1R2lPoHNV9gCpZFyVrPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTY0ZDliNmIzYzdjYmQxZTlkMjc5YzZjODY3YmFkMzk3
ZDFlMTcwHhcNMjUwMjAyMDIwMDMxWhcNMjUwMjAzMDIwMDMxWjAzMTEwLwYDVQQD
EygzZWRhNjJjMzMxZTg2OWJiNTQ2YzNhYzhjZmQ3ZDE4MzBmYWYxNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XTMTVF3n3UAX3evfKg91S1V++XG
s9LiTLOiuK8C/i3cRR9nyDk3Fi9lSCiEIATR8WoslxDDIOWALksU99T85VOej7Z9
Q290CjKkKJHLpmTTE6C3hYxFH0nPzP7+RADivSB3V4c2/jiUWRcQCp6PXZwcV1wE
DvI+cIc+msJ5iGEo1FPttpjyNpdhaM9Z44zmwxbuGclVw0Jsw1JG4aO2PP8xwXZ+
opD6U15PJWJZc131aG5wPFfGqM0L9MlSBSvXFj07p2lT+yzj1mze3r0PoIcRVDh7
N9OlLrGR7xdDaT2OE4GT0RiA24QMY3FdBCA823jVeogZuvYZXZP9W5aX8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7aYsMx6Gm7VGw6yM/X0YMPrxUhMB8GA1UdIwQY
MBaAFG0WTZtrPHy9Hp0nnGyGe605fR4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzIt
M2Q3ZTRiNDk2YjIzLzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzItM2Q3ZTRiNDk2YjIz
LzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlKLLlpZ
s1yNZTw7xR5tLVfefj6muJ0a29ULTdFIEXfnPwmGxF36i/tvIsZWaYjsc4mSrRex
JDIyuXi2GtqGzY0AQUatSHSkxYVqBgTbP5XZ6NasAjsaCRq6nj7y1C3CGkYfhiDY
3ChTkpin8nePLYGObcvV5IPtfYBok1hMATW7aPDcCfc7P83mX7DQDIZG539Lmt2j
P5vsYHCDJCCATVgP2JIB55mng+V+X71pBYefU6ey3lexru3ljV2nGFYk9KQtA58c
Q76N53WnWAtR5lUq50UusivRHV5C7OwwG2K10EX49k/6T5KIts6gaw1FwL5o0SWa
PFPtmw6QwR8d3w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:50:43 2025 by rpki-client