Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier: 0yI0WLcNw9MvuYOKNb04zsEOqh3ZY7vvf5EckYHEroM=
Subject key identifier: E2:46:33:AF:32:E6:FD:55:C9:9D:DD:86:CC:68:C6:F8:75:5A:94:86
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial: 019510C76BED3ACA13FA08FD58FF8EFAD480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number: 0D19
Signing time: Sun 16 Feb 2025 22:00:59 +0000
Manifest this update: Sun 16 Feb 2025 22:00:59 +0000
Manifest next update: Mon 17 Feb 2025 22:00:59 +0000
Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: bh+e4WX20ohpzmqlFntCu8Uw9HGZ9pv1x+B+dgvT+gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:6b:ed:3a:ca:13:fa:08:fd:58:ff:8e:fa:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Validity
Not Before: Feb 16 22:00:59 2025 GMT
Not After : Feb 17 22:00:59 2025 GMT
Subject: CN=e24633af32e6fd55c99ddd86cc68c6f8755a9486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:86:de:ea:fb:fc:9b:b5:a0:8a:d1:30:67:
88:22:0f:b0:37:a4:29:5e:1d:5d:3d:15:a6:bb:85:
1b:fc:ad:dc:59:b5:3c:47:ec:b2:12:2e:f4:ba:e0:
af:36:51:84:26:95:db:12:b4:ba:02:f6:2f:1c:eb:
56:b0:b0:43:98:75:b0:44:01:4a:0c:e6:33:88:e9:
a6:52:f4:93:3a:39:9e:3c:40:cc:15:29:f9:25:94:
2b:c0:2f:b1:36:53:00:4d:69:09:2c:02:48:0c:73:
cc:48:c1:e5:07:77:b9:37:e2:36:e7:93:3a:5f:80:
e5:54:cd:3a:a4:fe:5d:e0:d1:9f:ab:20:83:4c:3d:
23:b6:8a:e8:95:65:63:66:02:57:4a:d6:7d:f3:a6:
d9:eb:a8:03:b9:3f:7f:79:d0:1b:9c:ea:37:08:d5:
a5:1a:33:bd:5b:cd:82:69:6d:b4:23:82:6b:23:d5:
5c:05:97:12:96:c8:69:79:3d:c8:bd:b1:9e:38:e9:
a1:6a:61:df:70:d3:d2:62:cf:a6:11:46:74:5c:19:
9d:69:5d:c5:38:16:37:1d:0c:cf:17:0b:7a:af:30:
57:f2:c8:b2:08:c6:c1:df:98:2c:82:71:9e:80:df:
59:22:8d:6e:fa:d3:1f:29:c3:10:cd:08:88:01:b6:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:46:33:AF:32:E6:FD:55:C9:9D:DD:86:CC:68:C6:F8:75:5A:94:86
X509v3 Authority Key Identifier:
keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:83:c3:03:c9:b0:af:cf:51:7f:13:bb:e4:13:69:74:f7:19:
13:24:a6:9e:74:fe:c9:52:f1:4d:a3:c6:89:cc:2a:dc:d0:3c:
b4:43:a2:ce:c5:f4:97:48:29:03:0c:60:bc:3c:0e:ed:bb:8a:
fd:cf:a5:65:65:a7:6d:5b:9c:fb:59:bc:38:fa:84:a0:fd:60:
92:21:9a:f7:a2:43:69:a3:5a:1a:2c:8c:ff:e4:af:f3:09:56:
3e:15:78:4d:1f:fe:72:aa:3a:78:c1:52:db:0f:a2:49:e9:d4:
09:8c:94:2e:4f:11:ab:f4:c4:40:f5:c9:f5:d0:26:6e:37:5a:
19:09:eb:91:d1:58:8a:74:79:a9:ce:b6:b4:81:4b:a0:62:b5:
70:97:80:ba:32:e9:29:d8:dc:43:74:d0:6b:67:a3:72:e0:f7:
bc:ed:1a:9a:38:58:99:a7:ed:ad:9f:d2:9c:51:44:5f:d0:4f:
9f:7b:97:4f:3c:5d:87:18:e8:89:47:e2:8d:d0:fa:92:9f:e3:
75:4c:07:ed:48:ce:a3:19:d5:64:0a:84:35:c6:c3:72:94:67:
90:6b:43:0c:f3:0b:c7:b1:a1:11:2b:93:74:c5:5b:f2:13:a8:
32:81:1c:e4:d0:b0:4d:ca:ff:77:a5:4e:3d:ab:b3:ac:aa:e4:
81:1b:bd:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx2vtOsoT+gj9WP+O+tSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDU5MzdkOGU2MDJiNDhjYjJmZjUxNzE2ZDk5NWQyM2Ex
ZjNlMWEwHhcNMjUwMjE2MjIwMDU5WhcNMjUwMjE3MjIwMDU5WjAzMTEwLwYDVQQD
EyhlMjQ2MzNhZjMyZTZmZDU1Yzk5ZGRkODZjYzY4YzZmODc1NWE5NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubmG3ur7/Ju1oIrRMGeIIg+wN6Qp
Xh1dPRWmu4Ub/K3cWbU8R+yyEi70uuCvNlGEJpXbErS6AvYvHOtWsLBDmHWwRAFK
DOYziOmmUvSTOjmePEDMFSn5JZQrwC+xNlMATWkJLAJIDHPMSMHlB3e5N+I255M6
X4DlVM06pP5d4NGfqyCDTD0jtorolWVjZgJXStZ986bZ66gDuT9/edAbnOo3CNWl
GjO9W82CaW20I4JrI9VcBZcSlshpeT3IvbGeOOmhamHfcNPSYs+mEUZ0XBmdaV3F
OBY3HQzPFwt6rzBX8siyCMbB35gsgnGegN9ZIo1u+tMfKcMQzQiIAbb8wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJGM68y5v1VyZ3dhsxoxvh1WpSGMB8GA1UdIwQY
MBaAFEnVk32OYCtIyy/1FxbZldI6Hz4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFhMzItYzVkOS00MDEzLTg0YmIt
OWIyYWRjNzRiNTJkLzEvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZGFhMzItYzVkOS00MDEzLTg0YmItOWIyYWRjNzRiNTJk
LzEvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4PDA8mw
r89RfxO75BNpdPcZEySmnnT+yVLxTaPGicwq3NA8tEOizsX0l0gpAwxgvDwO7buK
/c+lZWWnbVuc+1m8OPqEoP1gkiGa96JDaaNaGiyM/+Sv8wlWPhV4TR/+cqo6eMFS
2w+iSenUCYyULk8Rq/TEQPXJ9dAmbjdaGQnrkdFYinR5qc62tIFLoGK1cJeAujLp
KdjcQ3TQa2ejcuD3vO0amjhYmaftrZ/SnFFEX9BPn3uXTzxdhxjoiUfijdD6kp/j
dUwH7UjOoxnVZAqENcbDcpRnkGtDDPMLx7GhESuTdMVb8hOoMoEc5NCwTcr/d6VO
PauzrKrkgRu98w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:53 2025 by rpki-client