Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File: LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier: geI7bnAZ75aJyhkpoxgwVgVTrxeT5Pg5CV0dIptDAi8=
Subject key identifier: 9C:E4:03:D4:96:1D:BA:A4:BC:67:49:0B:36:6E:57:E7:4D:94:11:F7
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer: /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial: 0194BA8434B1A5D87DEFE7A730BBA08726DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number: 049C
Signing time: Fri 31 Jan 2025 04:00:13 +0000
Manifest this update: Fri 31 Jan 2025 04:00:13 +0000
Manifest next update: Sat 01 Feb 2025 04:00:13 +0000
Files and hashes: 1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: TZb8ErsNVIE0H63zWOTkaCFtdwvSz4u27FStSHIrWCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:34:b1:a5:d8:7d:ef:e7:a7:30:bb:a0:87:26:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Validity
Not Before: Jan 31 04:00:13 2025 GMT
Not After : Feb 1 04:00:13 2025 GMT
Subject: CN=9ce403d4961dbaa4bc67490b366e57e74d9411f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:a7:df:6f:96:e9:ec:a7:ef:3b:58:a7:56:
a8:13:57:e2:6c:15:43:bd:8b:62:41:10:c6:f9:ec:
5c:ae:c9:3c:f7:2f:18:40:f4:56:34:aa:b4:86:71:
dd:36:35:1b:4b:6b:4b:55:39:5e:c4:16:f5:ba:cd:
f8:ba:e0:72:6b:94:ee:d2:78:de:a7:42:af:3f:5f:
f0:19:7a:22:c2:52:bd:90:7c:20:bd:53:47:9e:75:
21:08:04:7b:4d:17:05:52:c8:16:03:f8:fb:d8:38:
41:2c:c4:6e:bb:e2:f4:f1:fe:c1:bd:2a:e5:b6:f9:
9e:29:37:f3:e1:6f:24:94:ab:80:a5:ef:ee:08:88:
c8:03:db:bb:a2:6c:7d:73:40:a8:cd:96:d2:d9:fd:
70:41:d2:70:47:0e:2e:ba:e3:87:a6:aa:40:fd:8b:
55:73:08:66:9f:0f:3e:4b:cb:ed:67:85:b5:0d:75:
e8:46:4e:c9:bc:7d:b7:96:be:ef:eb:13:25:9a:2a:
ef:1a:f9:76:ed:c9:7a:c3:be:2d:7c:6d:4f:96:2c:
6e:cd:12:2b:6e:1f:c5:00:3a:e3:cd:38:08:7a:c2:
ba:b3:cb:a4:94:7b:41:8a:53:df:8b:b9:aa:d6:b0:
2a:ff:e7:d4:d9:25:48:da:ea:f9:ce:a4:51:99:98:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:03:D4:96:1D:BA:A4:BC:67:49:0B:36:6E:57:E7:4D:94:11:F7
X509v3 Authority Key Identifier:
keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:80:dc:27:cf:bb:44:a1:df:d1:0c:50:b5:07:45:94:8c:c1:
77:bb:78:28:31:61:b8:db:e1:dc:92:c4:2a:ff:de:e1:c3:e9:
68:40:f7:f5:bc:f9:e1:d5:be:9f:54:94:9c:c4:89:75:87:66:
f1:0b:33:a7:1a:5a:ad:f3:fa:5e:06:f4:67:f3:56:45:1e:4f:
6b:23:86:58:32:61:19:f6:81:c8:00:fc:db:5b:f5:89:d1:bb:
aa:8e:99:df:f5:31:09:5c:6e:31:de:55:30:13:39:1c:d1:7f:
43:02:72:8c:3f:de:bd:d2:40:1f:5e:e3:17:83:23:b4:81:87:
b1:03:86:6b:a7:9c:33:7a:e9:7d:2c:a9:6f:b7:dd:6d:fe:f1:
ec:86:0f:2f:8d:e4:07:52:b3:a8:c1:b8:b6:9e:16:0d:7b:ed:
26:a8:dc:aa:9a:5f:a0:5a:96:c1:44:a8:10:d7:72:c6:dc:91:
a4:2b:8f:ed:3f:61:61:35:61:1d:c2:ec:3d:0e:da:19:92:34:
94:e6:00:c2:1a:82:45:bc:01:02:56:90:a6:95:4f:51:2a:73:
59:9f:2d:06:7f:3a:51:86:06:18:97:c5:69:e8:2e:cf:45:b7:
64:9d:d9:4d:a2:f8:be:f9:10:65:26:e7:fa:c6:18:13:1d:69:
ee:24:e2:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hDSxpdh97+enMLughybaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDUyNDY2Yzk1ODVmNmY1YTljYzFjMzBlOGQ3YjE2ZWQ0
NzRhNDgwHhcNMjUwMTMxMDQwMDEzWhcNMjUwMjAxMDQwMDEzWjAzMTEwLwYDVQQD
Eyg5Y2U0MDNkNDk2MWRiYWE0YmM2NzQ5MGIzNjZlNTdlNzRkOTQxMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPCn32+W6eyn7ztYp1aoE1fibBVD
vYtiQRDG+excrsk89y8YQPRWNKq0hnHdNjUbS2tLVTlexBb1us34uuBya5Tu0nje
p0KvP1/wGXoiwlK9kHwgvVNHnnUhCAR7TRcFUsgWA/j72DhBLMRuu+L08f7BvSrl
tvmeKTfz4W8klKuApe/uCIjIA9u7omx9c0CozZbS2f1wQdJwRw4uuuOHpqpA/YtV
cwhmnw8+S8vtZ4W1DXXoRk7JvH23lr7v6xMlmirvGvl27cl6w74tfG1PlixuzRIr
bh/FADrjzTgIesK6s8uklHtBilPfi7mq1rAq/+fU2SVI2ur5zqRRmZhJfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzkA9SWHbqkvGdJCzZuV+dNlBH3MB8GA1UdIwQY
MBaAFC1FJGbJWF9vWpzBww6NexbtR0pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUt
MjNlOWFhNWM4YWExLzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUtMjNlOWFhNWM4YWEx
LzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4DcJ8+7
RKHf0QxQtQdFlIzBd7t4KDFhuNvh3JLEKv/e4cPpaED39bz54dW+n1SUnMSJdYdm
8QszpxparfP6Xgb0Z/NWRR5PayOGWDJhGfaByAD821v1idG7qo6Z3/UxCVxuMd5V
MBM5HNF/QwJyjD/evdJAH17jF4MjtIGHsQOGa6ecM3rpfSypb7fdbf7x7IYPL43k
B1KzqMG4tp4WDXvtJqjcqppfoFqWwUSoENdyxtyRpCuP7T9hYTVhHcLsPQ7aGZI0
lOYAwhqCRbwBAlaQppVPUSpzWZ8tBn86UYYGGJfFaeguz0W3ZJ3ZTaL4vvkQZSbn
+sYYEx1p7iTi/Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:11 2025 by rpki-client on console-fra.rpki-client.org