Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
File: W3jiiHXnMAJWzM62gfCmAIc9eVI.mft (raw, json)
Hash identifier: iI9dkfM0gulj/1/CCFRpIkY5TXe62nv5RaJrzoMZJsE=
Subject key identifier: 52:23:28:7B:4B:E9:49:3C:0F:0E:15:33:70:03:30:A0:02:9A:D6:91
Authority key identifier: 5B:78:E2:88:75:E7:30:02:56:CC:CE:B6:81:F0:A6:00:87:3D:79:52
Certificate issuer: /CN=5b78e28875e7300256ccceb681f0a600873d7952
Certificate serial: 019510FDC1C89731D427EAAC5DD9B66A18DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
Manifest number: 02E5
Signing time: Sun 16 Feb 2025 23:00:20 +0000
Manifest this update: Sun 16 Feb 2025 23:00:20 +0000
Manifest next update: Mon 17 Feb 2025 23:00:20 +0000
Files and hashes: 1: W3jiiHXnMAJWzM62gfCmAIc9eVI.crl (hash: zMO6/MObpeFBUaT8RKe0TB9yCl/tT+HS0IBi0+FLt5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:c1:c8:97:31:d4:27:ea:ac:5d:d9:b6:6a:18:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b78e28875e7300256ccceb681f0a600873d7952
Validity
Not Before: Feb 16 23:00:20 2025 GMT
Not After : Feb 17 23:00:20 2025 GMT
Subject: CN=5223287b4be9493c0f0e1533700330a0029ad691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:de:af:be:00:95:3f:dd:16:e1:3a:77:ce:
95:42:64:fb:0f:f7:b8:f8:bb:69:28:77:2e:f3:34:
88:54:e0:94:3e:12:d2:84:a6:00:e1:9d:09:84:41:
3e:6e:72:b2:e4:bf:95:e8:8f:98:37:ab:4f:9c:76:
0c:16:8a:8f:24:bc:38:ba:e2:0c:38:24:23:a6:b8:
c2:8d:5b:76:ec:0b:2c:6b:ab:7d:d6:2c:27:c4:32:
ad:40:ee:18:b2:f3:71:3a:5c:71:b2:37:d2:6a:b3:
2d:31:b7:82:e8:4e:1a:69:13:a9:d4:3f:45:f5:07:
ea:b6:bd:0e:03:18:3c:98:29:11:ba:f6:44:62:ad:
a7:5f:39:ec:11:ab:4a:79:07:37:da:97:f8:e5:32:
74:87:f7:bc:a7:54:51:43:24:8b:3e:64:ec:80:68:
ff:82:57:e2:b1:80:4e:2f:17:ab:f1:4e:2f:31:26:
ad:b4:54:81:cb:01:19:f6:98:36:f0:f4:81:2f:4f:
be:af:4b:94:8a:f5:1a:b1:9f:68:2a:4b:a6:7d:03:
98:82:a1:bf:31:ca:a1:3d:58:0b:5b:d2:05:b5:35:
9c:0e:1b:d7:9e:78:2d:43:e8:82:85:7c:2e:5e:4d:
b4:a3:68:e1:83:40:dd:f7:5c:f4:2f:d3:70:65:35:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:23:28:7B:4B:E9:49:3C:0F:0E:15:33:70:03:30:A0:02:9A:D6:91
X509v3 Authority Key Identifier:
keyid:5B:78:E2:88:75:E7:30:02:56:CC:CE:B6:81:F0:A6:00:87:3D:79:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0f:06:0d:cb:39:b4:96:bd:61:e1:f0:f3:2c:37:66:8f:13:
49:52:6b:d1:65:d3:2d:46:4e:bc:fa:4a:f7:4d:2e:7c:d4:79:
f9:23:c2:97:bd:14:1c:f0:57:86:3f:3e:67:82:f1:5d:26:11:
83:68:7d:35:be:20:d1:d4:7e:d9:26:5c:ea:bc:ba:20:59:57:
5b:59:2b:f4:89:21:d7:ea:11:bc:4b:de:cb:1e:96:39:48:67:
2e:5b:af:8b:ee:36:b8:20:93:88:68:e4:6f:55:9d:c2:df:ca:
52:26:80:e8:f5:ef:d3:9a:8d:d6:08:05:dd:5a:60:76:22:fe:
45:d8:f3:68:a9:d2:09:4e:13:ce:94:df:e2:d9:05:e4:2e:79:
a2:7f:c9:06:cd:0b:10:7e:43:ff:2f:3a:db:01:e7:a4:7d:b8:
6a:6d:73:57:50:80:a2:25:d9:2f:e2:b6:d9:9e:8f:d5:aa:fc:
47:52:cb:72:79:50:89:b4:af:79:db:38:dc:25:2e:70:fe:58:
b6:62:fe:cc:7f:96:b7:5f:5f:8e:22:a7:b3:3c:47:91:d7:88:
55:3d:dd:b3:d7:46:ba:f3:c7:27:63:ac:45:60:cd:c4:09:19:
86:d1:2c:f3:16:4f:d8:b9:ae:c2:56:cf:e0:e4:c4:8c:c5:06:
45:06:46:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/cHIlzHUJ+qsXdm2ahjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNzhlMjg4NzVlNzMwMDI1NmNjY2ViNjgxZjBhNjAwODcz
ZDc5NTIwHhcNMjUwMjE2MjMwMDIwWhcNMjUwMjE3MjMwMDIwWjAzMTEwLwYDVQQD
Eyg1MjIzMjg3YjRiZTk0OTNjMGYwZTE1MzM3MDAzMzBhMDAyOWFkNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBHer74AlT/dFuE6d86VQmT7D/e4
+LtpKHcu8zSIVOCUPhLShKYA4Z0JhEE+bnKy5L+V6I+YN6tPnHYMFoqPJLw4uuIM
OCQjprjCjVt27Assa6t91iwnxDKtQO4YsvNxOlxxsjfSarMtMbeC6E4aaROp1D9F
9Qfqtr0OAxg8mCkRuvZEYq2nXznsEatKeQc32pf45TJ0h/e8p1RRQySLPmTsgGj/
glfisYBOLxer8U4vMSattFSBywEZ9pg28PSBL0++r0uUivUasZ9oKkumfQOYgqG/
McqhPVgLW9IFtTWcDhvXnngtQ+iChXwuXk20o2jhg0Dd91z0L9NwZTX0jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIjKHtL6Uk8Dw4VM3ADMKACmtaRMB8GA1UdIwQY
MBaAFFt44oh15zACVszOtoHwpgCHPXlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNqaWlIWG5NQUpXek02MmdmQ21BSWM5ZVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NjcxMzctMmE4Yi00ZjQwLThjYTkt
NjM4ZTMxNWJlZWQ5LzEvVzNqaWlIWG5NQUpXek02MmdmQ21BSWM5ZVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85NjcxMzctMmE4Yi00ZjQwLThjYTktNjM4ZTMxNWJlZWQ5
LzEvVzNqaWlIWG5NQUpXek02MmdmQ21BSWM5ZVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABg8GDcs5
tJa9YeHw8yw3Zo8TSVJr0WXTLUZOvPpK900ufNR5+SPCl70UHPBXhj8+Z4LxXSYR
g2h9Nb4g0dR+2SZc6ry6IFlXW1kr9Ikh1+oRvEveyx6WOUhnLluvi+42uCCTiGjk
b1Wdwt/KUiaA6PXv05qN1ggF3VpgdiL+RdjzaKnSCU4TzpTf4tkF5C55on/JBs0L
EH5D/y862wHnpH24am1zV1CAoiXZL+K22Z6P1ar8R1LLcnlQibSveds43CUucP5Y
tmL+zH+Wt19fjiKnszxHkdeIVT3ds9dGuvPHJ2OsRWDNxAkZhtEs8xZP2LmuwlbP
4OTEjMUGRQZGlw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:02 2025 by rpki-client