Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json)
Hash identifier: fUUACs1CRER/ZBq63QB1ks4DMS1WcDdkL6GnZHyLpKg=
Subject key identifier: B2:7F:C9:41:A8:9D:B7:53:6B:56:8E:FB:43:0D:3B:14:CB:FA:A4:A0
Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Certificate serial: 0194BA844617E21A550BD8B33C5A7B4B9BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
Manifest number: 0179
Signing time: Fri 31 Jan 2025 04:00:18 +0000
Manifest this update: Fri 31 Jan 2025 04:00:18 +0000
Manifest next update: Sat 01 Feb 2025 04:00:18 +0000
Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: EyEoEz88BHsJGs/FRpvssIQXdmKNK8vVPYWtRN4PMYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:46:17:e2:1a:55:0b:d8:b3:3c:5a:7b:4b:9b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Validity
Not Before: Jan 31 04:00:18 2025 GMT
Not After : Feb 1 04:00:18 2025 GMT
Subject: CN=b27fc941a89db7536b568efb430d3b14cbfaa4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:34:d7:b8:fb:d9:2d:13:e3:d2:ed:1e:e9:
e3:02:21:e3:dd:14:2e:62:36:51:06:6e:28:f0:65:
8d:a4:82:43:2e:ff:81:7c:92:91:61:c0:14:78:08:
ca:f5:14:b2:20:67:9c:25:20:7f:57:03:94:a3:33:
7b:a8:88:10:75:9a:59:97:50:2d:0c:27:23:1d:bf:
57:7c:3b:a1:e6:f7:57:61:a9:82:8f:2c:69:63:21:
25:58:f1:e6:d9:8f:c6:17:ce:c2:3f:e3:b7:12:7b:
e5:ed:c6:24:99:1a:9c:63:7f:e2:60:9d:21:be:b6:
5a:6f:46:c2:ac:88:88:90:b7:21:d4:1c:8c:40:eb:
ea:1e:88:e3:0d:46:83:67:b4:07:fe:1a:a8:17:26:
49:61:6a:dc:95:3b:db:02:2f:4a:45:6c:07:15:c5:
06:bc:e3:84:29:e0:7c:dd:f8:9d:65:4d:ad:84:0f:
c7:3e:21:d2:46:02:a4:14:ea:28:af:e5:15:e1:83:
35:9e:fe:48:cb:9f:62:d0:22:5e:fb:0d:d7:72:0f:
fa:40:81:b2:fc:ee:c5:6d:9f:ba:c5:4d:51:9e:79:
b8:ef:67:ab:68:a6:fe:f3:c3:72:8a:39:df:e4:2d:
75:ad:b1:98:9c:14:1a:15:38:d5:49:54:58:74:9f:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:C9:41:A8:9D:B7:53:6B:56:8E:FB:43:0D:3B:14:CB:FA:A4:A0
X509v3 Authority Key Identifier:
keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f0:ad:aa:c2:bd:5f:7c:f6:79:9b:32:f7:96:eb:e8:cb:b8:
1b:67:05:9b:d8:c6:f2:5b:54:1c:92:8c:41:6a:c6:6e:23:ed:
26:ad:ac:c6:d6:47:10:9f:1d:12:36:7e:7b:c3:87:ad:11:f0:
da:e5:35:95:a2:ba:b7:83:12:83:13:a5:fb:69:2e:3e:93:b9:
a0:e0:65:3c:8d:b6:42:d7:f9:6f:71:ff:64:45:ab:3e:cb:db:
6f:1e:fc:e9:15:78:7f:05:8c:fc:b1:4f:6e:f9:76:9f:7e:8d:
4f:97:3f:79:94:44:bf:85:9a:7f:44:ad:d2:92:3f:10:8c:82:
0a:db:b0:d6:94:a4:fb:1a:98:9d:5a:aa:fe:68:e0:5d:31:82:
b8:e8:ab:bf:24:54:d5:e4:3e:e5:6e:12:ba:19:b5:b3:19:37:
57:39:d0:8c:0a:ef:ee:99:b7:9c:7c:7e:82:fb:82:09:3c:d0:
0a:65:a1:dc:49:55:a0:e1:9d:26:bf:dd:7c:d0:ff:71:62:89:
e7:c5:fd:8a:e9:9f:ed:0d:fc:88:78:e2:88:8f:05:ae:4c:1e:
db:c6:57:e7:48:c6:a9:c8:13:22:6e:f6:a0:ee:fb:00:91:22:
f1:50:3a:82:e5:0c:6b:54:45:fe:41:4c:ac:1d:dd:69:05:1b:
c2:7f:d5:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hEYX4hpVC9izPFp7S5v0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGZiNjZkN2U4NWJiNGFkMDhjNTA5MmYwYmI4MDYyOTJi
YTBlMDgwHhcNMjUwMTMxMDQwMDE4WhcNMjUwMjAxMDQwMDE4WjAzMTEwLwYDVQQD
EyhiMjdmYzk0MWE4OWRiNzUzNmI1NjhlZmI0MzBkM2IxNGNiZmFhNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnk017j72S0T49LtHunjAiHj3RQu
YjZRBm4o8GWNpIJDLv+BfJKRYcAUeAjK9RSyIGecJSB/VwOUozN7qIgQdZpZl1At
DCcjHb9XfDuh5vdXYamCjyxpYyElWPHm2Y/GF87CP+O3Envl7cYkmRqcY3/iYJ0h
vrZab0bCrIiIkLch1ByMQOvqHojjDUaDZ7QH/hqoFyZJYWrclTvbAi9KRWwHFcUG
vOOEKeB83fidZU2thA/HPiHSRgKkFOoor+UV4YM1nv5Iy59i0CJe+w3Xcg/6QIGy
/O7FbZ+6xU1Rnnm472eraKb+88Nyijnf5C11rbGYnBQaFTjVSVRYdJ/BIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ/yUGonbdTa1aO+0MNOxTL+qSgMB8GA1UdIwQY
MBaAFEdPtm1+hbtK0IxQkvC7gGKSug4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xMjhjYTctNmYwYS00OTA0LTk3ZWIt
YWZlY2YyMmVlMTE1LzEvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xMjhjYTctNmYwYS00OTA0LTk3ZWItYWZlY2YyMmVlMTE1
LzEvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfCtqsK9
X3z2eZsy95br6Mu4G2cFm9jG8ltUHJKMQWrGbiPtJq2sxtZHEJ8dEjZ+e8OHrRHw
2uU1laK6t4MSgxOl+2kuPpO5oOBlPI22Qtf5b3H/ZEWrPsvbbx786RV4fwWM/LFP
bvl2n36NT5c/eZREv4Waf0St0pI/EIyCCtuw1pSk+xqYnVqq/mjgXTGCuOirvyRU
1eQ+5W4Suhm1sxk3VznQjArv7pm3nHx+gvuCCTzQCmWh3ElVoOGdJr/dfND/cWKJ
58X9iumf7Q38iHjiiI8Frkwe28ZX50jGqcgTIm72oO77AJEi8VA6guUMa1RF/kFM
rB3daQUbwn/Vkg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:03 2025 by rpki-client on console-fra.rpki-client.org