Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
File: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft (raw, json)
Hash identifier: ufanwoFiyTgdo0U3YPtsmBFmjDMK0rmuYM4CZ7VaIk0=
Subject key identifier: 2F:CA:FA:6C:8C:E5:23:99:D9:41:71:69:03:97:19:41:64:FC:EF:68
Authority key identifier: 66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
Certificate issuer: /CN=6688f0f1b5d341670069202717d63c0540464ff5
Certificate serial: 019510C6BFA162511009D68D441FC6B89FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
Manifest number: 1452
Signing time: Sun 16 Feb 2025 22:00:15 +0000
Manifest this update: Sun 16 Feb 2025 22:00:15 +0000
Manifest next update: Mon 17 Feb 2025 22:00:15 +0000
Files and hashes: 1: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl (hash: JJFHeEZCmfZx/gwUpt1EiBy9RXkgHkZdIIy5kamgqaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:bf:a1:62:51:10:09:d6:8d:44:1f:c6:b8:9f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6688f0f1b5d341670069202717d63c0540464ff5
Validity
Not Before: Feb 16 22:00:15 2025 GMT
Not After : Feb 17 22:00:15 2025 GMT
Subject: CN=2fcafa6c8ce52399d94171690397194164fcef68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8a:80:0f:92:52:6d:10:9f:13:39:92:05:23:
9d:c8:c6:95:ce:e6:59:72:41:8e:6f:ab:b2:ef:92:
1f:f7:12:22:d8:56:af:3b:2d:36:13:62:68:22:f0:
13:65:b4:b5:4d:9e:c5:53:fd:5c:3d:14:41:dd:cd:
de:7c:0d:b9:81:38:0d:94:15:88:2f:df:bc:03:2b:
d4:c5:13:14:9a:cd:c0:29:3f:20:fc:b5:6a:9b:8a:
62:d8:a0:72:34:48:15:aa:aa:0b:43:b5:f2:c0:e5:
93:29:ff:60:89:88:50:fd:06:11:53:f4:06:ab:8d:
72:f3:50:d3:25:fe:60:c1:a4:6b:1a:68:f0:8c:9d:
da:9f:b8:32:87:d2:08:c2:46:c6:2c:41:e7:ba:85:
7c:bd:b6:67:2f:4c:d3:d7:e7:d8:05:12:90:83:55:
d2:b1:b3:df:79:c4:5e:e7:8d:1b:ce:db:dd:05:1a:
e6:a3:ca:3b:7e:42:3e:ff:0e:be:f6:a0:2f:0f:ea:
82:8b:51:a3:9b:2b:ae:25:b5:2a:b9:94:ae:39:1d:
05:0f:69:70:68:a0:aa:e2:10:e1:6a:41:e1:69:7d:
94:9a:66:3a:6e:0c:45:32:0b:b5:de:7c:4f:d1:16:
74:8d:64:20:59:c9:aa:a5:47:06:d8:19:65:f7:24:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:FA:6C:8C:E5:23:99:D9:41:71:69:03:97:19:41:64:FC:EF:68
X509v3 Authority Key Identifier:
keyid:66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5c:f9:4d:dd:5e:ad:b9:a3:f7:de:3e:8f:c5:93:79:c3:b5:
4c:d4:f3:aa:f6:13:36:50:73:28:76:e3:09:b8:f6:42:e0:a9:
39:4c:df:18:e3:53:7d:3e:df:71:54:bf:ca:c1:56:9b:4f:50:
99:02:c7:06:c5:25:a1:50:e3:2a:fd:0f:c3:e7:ae:8f:d0:a1:
9b:ea:c9:be:d3:06:9c:a3:3e:a9:a1:ac:99:4d:de:3e:1e:44:
fb:20:73:ae:62:8f:ab:69:31:b4:28:0c:cf:c3:42:e7:fc:bc:
1b:80:cd:bd:07:f5:19:ab:d0:a5:96:59:b8:43:b4:54:76:bd:
60:6d:44:3f:14:cd:aa:a0:8d:51:74:da:cb:ae:7e:31:b4:dd:
9a:c9:21:37:c7:9a:1b:50:7b:c5:a3:df:ef:9a:72:ee:55:a2:
d5:13:01:94:b7:02:73:34:f5:47:9b:05:f2:c7:c8:7d:77:96:
40:40:c5:26:1f:05:6c:c5:8d:98:e2:73:6f:ae:be:ad:41:32:
2b:12:8d:08:de:ea:5d:87:f4:4b:97:ce:cb:4b:98:fd:6c:a3:
53:a9:7b:c7:fc:0c:e9:b1:85:59:2c:ec:e4:75:c2:53:73:6f:
9b:fb:33:0e:7f:de:b3:7e:d7:ae:4e:5a:8f:ce:e5:76:ae:4d:
b5:6e:cc:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxr+hYlEQCdaNRB/GuJ/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODhmMGYxYjVkMzQxNjcwMDY5MjAyNzE3ZDYzYzA1NDA0
NjRmZjUwHhcNMjUwMjE2MjIwMDE1WhcNMjUwMjE3MjIwMDE1WjAzMTEwLwYDVQQD
EygyZmNhZmE2YzhjZTUyMzk5ZDk0MTcxNjkwMzk3MTk0MTY0ZmNlZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIqAD5JSbRCfEzmSBSOdyMaVzuZZ
ckGOb6uy75If9xIi2FavOy02E2JoIvATZbS1TZ7FU/1cPRRB3c3efA25gTgNlBWI
L9+8AyvUxRMUms3AKT8g/LVqm4pi2KByNEgVqqoLQ7XywOWTKf9giYhQ/QYRU/QG
q41y81DTJf5gwaRrGmjwjJ3an7gyh9IIwkbGLEHnuoV8vbZnL0zT1+fYBRKQg1XS
sbPfecRe540bztvdBRrmo8o7fkI+/w6+9qAvD+qCi1GjmyuuJbUquZSuOR0FD2lw
aKCq4hDhakHhaX2UmmY6bgxFMgu13nxP0RZ0jWQgWcmqpUcG2Bll9ySHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/K+myM5SOZ2UFxaQOXGUFk/O9oMB8GA1UdIwQY
MBaAFGaI8PG100FnAGkgJxfWPAVARk/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YzFiMTQtZTNhOS00ZDkyLWJlN2Et
YjEzZDJmZWQxZGM2LzEvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My85YzFiMTQtZTNhOS00ZDkyLWJlN2EtYjEzZDJmZWQxZGM2
LzEvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1z5Td1e
rbmj994+j8WTecO1TNTzqvYTNlBzKHbjCbj2QuCpOUzfGONTfT7fcVS/ysFWm09Q
mQLHBsUloVDjKv0Pw+euj9Chm+rJvtMGnKM+qaGsmU3ePh5E+yBzrmKPq2kxtCgM
z8NC5/y8G4DNvQf1GavQpZZZuEO0VHa9YG1EPxTNqqCNUXTay65+MbTdmskhN8ea
G1B7xaPf75py7lWi1RMBlLcCczT1R5sF8sfIfXeWQEDFJh8FbMWNmOJzb66+rUEy
KxKNCN7qXYf0S5fOy0uY/WyjU6l7x/wM6bGFWSzs5HXCU3Nvm/szDn/es37Xrk5a
j87ldq5NtW7MpA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:15 2025 by rpki-client