Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
File: k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json)
Hash identifier: svIxm8rkyv1PIJ9+snt4vJlk1TT7E2ySjLY2G5CYFiA=
Subject key identifier: 86:9C:35:F1:E4:D5:E4:B6:4C:91:BF:5C:4D:54:30:8D:D1:3B:AD:6A
Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
Certificate issuer: /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Certificate serial: 0194BB2935DF538A17EFCE7CF2077472C90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
Manifest number: 11E5
Signing time: Fri 31 Jan 2025 07:00:27 +0000
Manifest this update: Fri 31 Jan 2025 07:00:27 +0000
Manifest next update: Sat 01 Feb 2025 07:00:27 +0000
Files and hashes: 1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: ecmANlNeQnYpdu9/bY5Aw+ZtgemtBxxBitLHGXapHs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:35:df:53:8a:17:ef:ce:7c:f2:07:74:72:c9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Validity
Not Before: Jan 31 07:00:27 2025 GMT
Not After : Feb 1 07:00:27 2025 GMT
Subject: CN=869c35f1e4d5e4b64c91bf5c4d54308dd13bad6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:42:f6:68:38:09:7d:b4:55:75:e4:fb:e7:
5e:93:1f:7e:2f:1d:43:15:8c:98:0c:c9:8f:aa:46:
af:5f:da:24:91:c8:d6:54:db:39:3c:16:51:c7:e9:
d4:f2:21:32:d7:9c:2d:16:95:98:e8:a5:db:1e:d2:
e3:b2:07:f3:b2:5e:5a:14:9a:37:98:8e:e3:80:10:
ec:c0:67:df:2e:a8:58:fb:53:ee:48:5d:2d:32:da:
12:9b:cb:55:2b:d0:a9:5d:e0:30:54:9d:09:56:ab:
e7:57:c3:52:81:21:29:82:c4:74:d2:be:28:77:8f:
30:c2:be:1c:3d:28:97:34:a9:57:df:cc:0b:db:2d:
ad:0e:2f:ac:9a:55:45:df:df:c6:5b:4a:67:1f:f2:
4b:fd:77:28:b7:a8:a3:5c:2d:f8:ba:7c:73:1d:2c:
dc:00:9c:95:6c:9a:e6:9c:41:f2:77:27:51:74:dd:
68:8c:ca:af:be:4c:57:c8:77:8a:64:d0:ed:de:71:
17:01:5e:0c:0a:e2:d3:60:13:13:37:2c:9f:dd:09:
95:61:cd:18:3e:23:e6:68:aa:05:dd:8a:6b:3b:6b:
91:2f:eb:08:e3:3c:24:d9:e6:f1:9f:7e:ba:32:85:
6c:60:71:c5:ad:53:50:ab:6a:db:4b:3b:e1:0c:1f:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9C:35:F1:E4:D5:E4:B6:4C:91:BF:5C:4D:54:30:8D:D1:3B:AD:6A
X509v3 Authority Key Identifier:
keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:01:e2:9d:df:67:45:09:f9:90:1b:4f:29:ae:52:82:e7:f3:
a8:02:ed:59:62:86:98:b0:70:43:80:80:58:3e:58:6e:bf:ac:
79:ab:b2:47:e9:20:d3:8b:77:64:2a:f7:d3:fe:7e:4c:e9:d7:
65:06:a1:5c:87:80:41:13:ae:ea:af:eb:fa:e7:ff:57:b6:6a:
06:f7:4f:77:69:63:65:04:79:6c:36:bf:24:49:7b:38:01:0d:
06:bc:e1:c0:bb:0e:33:fc:1a:fb:ba:8b:66:9f:f8:84:30:27:
b9:57:dc:1b:3b:eb:ec:7d:78:2c:5e:dd:57:85:97:71:e9:7a:
11:db:6b:cb:ce:6f:fc:66:f3:05:09:30:91:06:63:14:85:60:
53:3d:35:32:4a:5a:e3:e3:e3:26:ac:7a:b9:ac:67:9c:57:5e:
b6:10:e0:22:60:7f:da:42:ec:4a:8d:75:75:cf:a3:73:50:07:
68:9d:89:55:ca:39:43:a4:1c:20:d2:04:f2:2a:0a:48:97:95:
ef:3b:b2:ca:f7:1d:bb:23:f1:9c:f2:0c:39:4f:7b:96:55:04:
7d:c9:f8:bc:7d:bc:71:85:bd:fd:dd:4a:f1:49:26:11:ac:d0:
e6:af:36:f0:37:72:b2:19:a0:42:af:c8:ed:e8:c7:b4:c3:65:
74:50:de:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KTXfU4oX78588gd0cskNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjA1NTYwY2IxZjUzZDY5OGJhN2E3ODViMDJmMjQ4ZWEy
YTJjN2IwHhcNMjUwMTMxMDcwMDI3WhcNMjUwMjAxMDcwMDI3WjAzMTEwLwYDVQQD
Eyg4NjljMzVmMWU0ZDVlNGI2NGM5MWJmNWM0ZDU0MzA4ZGQxM2JhZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB1C9mg4CX20VXXk++dekx9+Lx1D
FYyYDMmPqkavX9okkcjWVNs5PBZRx+nU8iEy15wtFpWY6KXbHtLjsgfzsl5aFJo3
mI7jgBDswGffLqhY+1PuSF0tMtoSm8tVK9CpXeAwVJ0JVqvnV8NSgSEpgsR00r4o
d48wwr4cPSiXNKlX38wL2y2tDi+smlVF39/GW0pnH/JL/Xcot6ijXC34unxzHSzc
AJyVbJrmnEHydydRdN1ojMqvvkxXyHeKZNDt3nEXAV4MCuLTYBMTNyyf3QmVYc0Y
PiPmaKoF3YprO2uRL+sI4zwk2ebxn366MoVsYHHFrVNQq2rbSzvhDB8tBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIacNfHk1eS2TJG/XE1UMI3RO61qMB8GA1UdIwQY
MBaAFJNgVWDLH1PWmLp6eFsC8kjqKix7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJCVllNc2ZVOWFZdW5wNFd3THlTT29xTEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82OWQ2MDUtNmUxNi00OGY3LWIxNzEt
ZDZlODMwMGZjMTk1LzEvazJCVllNc2ZVOWFZdW5wNFd3THlTT29xTEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82OWQ2MDUtNmUxNi00OGY3LWIxNzEtZDZlODMwMGZjMTk1
LzEvazJCVllNc2ZVOWFZdW5wNFd3THlTT29xTEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQHind9n
RQn5kBtPKa5SgufzqALtWWKGmLBwQ4CAWD5Ybr+seauyR+kg04t3ZCr30/5+TOnX
ZQahXIeAQROu6q/r+uf/V7ZqBvdPd2ljZQR5bDa/JEl7OAENBrzhwLsOM/wa+7qL
Zp/4hDAnuVfcGzvr7H14LF7dV4WXcel6Edtry85v/GbzBQkwkQZjFIVgUz01Mkpa
4+PjJqx6uaxnnFdethDgImB/2kLsSo11dc+jc1AHaJ2JVco5Q6QcINIE8ioKSJeV
7zuyyvcduyPxnPIMOU97llUEfcn4vH28cYW9/d1K8UkmEazQ5q828DdyshmgQq/I
7ejHtMNldFDeww==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:23 2025 by rpki-client on console-fra.rpki-client.org