Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier: /gkHlnK73nfwpSaaDeZDI7pptRUX4h5uVtoxqNc4zxM=
Subject key identifier: 0F:DE:47:EE:AD:42:7A:7A:89:75:41:87:66:E2:AE:36:8D:C6:2E:3E
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial: 0194C46317FCFC8A7EC770AF854129306AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number: 0F2F
Signing time: Sun 02 Feb 2025 02:00:16 +0000
Manifest this update: Sun 02 Feb 2025 02:00:16 +0000
Manifest next update: Mon 03 Feb 2025 02:00:16 +0000
Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: O9xLeGrzMIbfguKDrdBYXNVaBFRi7p3dfkr3C3QFsiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:17:fc:fc:8a:7e:c7:70:af:85:41:29:30:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Validity
Not Before: Feb 2 02:00:16 2025 GMT
Not After : Feb 3 02:00:16 2025 GMT
Subject: CN=0fde47eead427a7a8975418766e2ae368dc62e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:6b:06:64:09:0c:a5:4e:a1:27:ad:0b:ff:
3b:5a:3f:43:31:4e:5b:45:61:f8:6f:28:9e:04:d6:
79:b7:d9:b9:1c:e9:4d:17:1b:16:62:6e:c7:e1:1b:
44:67:7a:d7:a2:9d:64:9a:44:b0:ff:fa:d4:57:44:
fe:4c:4d:56:65:95:32:63:2b:d1:05:89:e3:6b:4a:
15:8e:38:6d:02:1c:75:9a:5e:ce:05:1c:49:64:e4:
ea:92:dd:66:d3:6c:28:bd:d8:5d:15:6c:34:a5:0d:
e2:55:da:ad:66:71:df:1b:5f:f3:72:8c:f1:ce:19:
c3:24:1b:46:1c:6b:3d:78:98:e5:80:89:8b:7d:1d:
cf:73:9a:9d:86:63:76:97:89:9d:87:b2:f9:0b:ad:
84:7b:f2:16:fd:f0:c8:00:53:f8:99:0e:7e:f1:6e:
08:6e:7e:df:04:7d:ac:7b:8e:e6:42:37:ac:de:8a:
e7:27:18:fa:81:5b:68:85:91:f7:d4:f7:79:e9:b6:
b1:7e:ff:73:46:a3:24:62:52:b8:22:90:c3:ca:5d:
59:77:02:ec:d6:98:4f:ff:5b:86:7f:5d:04:38:78:
10:c8:aa:a4:86:b6:99:7d:56:3a:9e:dd:26:38:fe:
7b:50:90:a8:9c:63:20:8c:f2:08:54:e7:69:37:3e:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DE:47:EE:AD:42:7A:7A:89:75:41:87:66:E2:AE:36:8D:C6:2E:3E
X509v3 Authority Key Identifier:
keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:40:41:e0:e9:0c:d5:91:d9:ab:35:20:5f:15:a0:38:1d:9d:
3b:2f:0a:01:0e:6f:44:00:2c:b6:d9:10:cf:01:5d:dc:01:7a:
2a:ee:82:f9:fa:b8:d9:c4:8e:80:c6:72:6f:90:68:16:f1:f7:
bf:81:00:49:6a:31:60:fc:0a:ee:f3:bc:92:6d:21:61:7f:db:
c8:50:6a:35:59:dc:4f:34:31:9f:04:08:18:0a:45:5e:53:74:
43:70:21:5a:89:e2:ad:5b:29:db:cc:85:9d:fc:14:0c:0e:70:
91:ce:ad:03:45:0d:6f:5f:38:71:9b:ff:2a:5f:98:82:c4:00:
83:2f:ff:cc:2e:ff:dc:83:51:c0:e4:28:3d:06:13:95:ba:be:
ff:df:1e:ec:ad:cc:77:95:16:5e:20:d4:ca:67:57:6c:f7:27:
a2:f9:e7:45:e7:b0:af:0f:00:6e:66:98:c5:d8:7c:fa:67:05:
a0:a7:60:9f:46:59:ce:39:e4:b8:66:19:b2:d9:e0:ca:65:cb:
c9:46:e7:d6:63:45:04:7e:77:6d:25:e5:07:4a:e2:5a:d6:ad:
b1:38:15:03:ba:67:e1:ed:01:e2:18:df:13:6e:80:99:5e:58:
58:09:1c:21:58:ab:93:64:22:eb:c0:bd:51:cb:23:b1:34:14:
8c:42:56:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEYxf8/Ip+x3CvhUEpMGqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MmZiNjEwNTNiYTJkYWJjNTE3MTViMGY1M2NkN2I2Yjk0
NTRkMGMwHhcNMjUwMjAyMDIwMDE2WhcNMjUwMjAzMDIwMDE2WjAzMTEwLwYDVQQD
EygwZmRlNDdlZWFkNDI3YTdhODk3NTQxODc2NmUyYWUzNjhkYzYyZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD1rBmQJDKVOoSetC/87Wj9DMU5b
RWH4byieBNZ5t9m5HOlNFxsWYm7H4RtEZ3rXop1kmkSw//rUV0T+TE1WZZUyYyvR
BYnja0oVjjhtAhx1ml7OBRxJZOTqkt1m02wovdhdFWw0pQ3iVdqtZnHfG1/zcozx
zhnDJBtGHGs9eJjlgImLfR3Pc5qdhmN2l4mdh7L5C62Ee/IW/fDIAFP4mQ5+8W4I
bn7fBH2se47mQjes3ornJxj6gVtohZH31Pd56baxfv9zRqMkYlK4IpDDyl1ZdwLs
1phP/1uGf10EOHgQyKqkhraZfVY6nt0mOP57UJConGMgjPIIVOdpNz4mcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/eR+6tQnp6iXVBh2birjaNxi4+MB8GA1UdIwQY
MBaAFMQvthBTui2rxRcVsPU817a5RU0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mNzYzNmEtNWUwYy00MGIwLWIwYjIt
OGYxMWY2Mjc1YWFmLzEveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mNzYzNmEtNWUwYy00MGIwLWIwYjItOGYxMWY2Mjc1YWFm
LzEveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUBB4OkM
1ZHZqzUgXxWgOB2dOy8KAQ5vRAAsttkQzwFd3AF6Ku6C+fq42cSOgMZyb5BoFvH3
v4EASWoxYPwK7vO8km0hYX/byFBqNVncTzQxnwQIGApFXlN0Q3AhWonirVsp28yF
nfwUDA5wkc6tA0UNb184cZv/Kl+YgsQAgy//zC7/3INRwOQoPQYTlbq+/98e7K3M
d5UWXiDUymdXbPcnovnnReewrw8AbmaYxdh8+mcFoKdgn0ZZzjnkuGYZstngymXL
yUbn1mNFBH53bSXlB0riWtatsTgVA7pn4e0B4hjfE26AmV5YWAkcIVirk2Qi68C9
UcsjsTQUjEJWRg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:05 2025 by rpki-client