Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
File: evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json)
Hash identifier: 4glEfNNulBRg7Up+8MnA1ikhRg6NWPS3ikCAu9lNyE8=
Subject key identifier: E0:00:DF:39:56:2A:16:A1:E3:1F:73:DE:F1:76:EE:01:20:DC:18:88
Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
Certificate issuer: /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Certificate serial: 0194BABB3318B241DBAF2BFDC3C2FC2239C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
Manifest number: 028D
Signing time: Fri 31 Jan 2025 05:00:17 +0000
Manifest this update: Fri 31 Jan 2025 05:00:17 +0000
Manifest next update: Sat 01 Feb 2025 05:00:17 +0000
Files and hashes: 1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: WiSDhoAg0Krb8m0Z/Vh4DUHNRtzmAmHytB1MwEB+aJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:33:18:b2:41:db:af:2b:fd:c3:c2:fc:22:39:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Validity
Not Before: Jan 31 05:00:17 2025 GMT
Not After : Feb 1 05:00:17 2025 GMT
Subject: CN=e000df39562a16a1e31f73def176ee0120dc1888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:a9:61:49:56:f6:8f:b3:b2:e9:dd:ef:8d:
1e:10:6a:02:62:3b:99:c6:70:24:f0:ef:3a:c8:e0:
48:47:ad:d1:ab:04:8d:52:ce:2b:fe:54:ad:a2:b2:
ed:25:d5:75:17:f2:10:37:0e:36:1d:c4:d8:5c:7a:
b2:2a:e6:ad:3c:b4:22:18:b7:8a:c5:b1:f8:5e:2a:
c3:70:8d:db:94:8f:02:e7:ae:11:76:bc:a4:71:c4:
d2:3d:6d:89:6a:79:d1:5b:40:3f:a3:46:b2:c9:9e:
36:6a:8e:b0:01:55:db:bb:a1:cc:97:a7:ec:ec:71:
4b:b1:b3:e0:5d:55:39:bb:33:ae:5b:a5:71:27:81:
c0:db:27:0b:b9:d1:32:e6:00:c3:6a:47:c9:53:0b:
f2:8d:5c:22:fb:b2:4a:a4:50:ab:02:07:9e:57:01:
ee:94:61:ad:46:9d:e9:5a:ea:92:21:19:08:02:5d:
9b:a0:ad:11:ef:be:74:6a:88:95:72:89:64:fc:28:
5b:e5:25:4f:f6:99:d2:91:ef:11:50:f8:07:42:3c:
0e:ad:9c:1c:93:22:a0:7e:1f:c1:85:73:0c:9a:04:
e2:8d:f1:8b:97:e0:12:e4:e2:5f:ab:65:34:a7:f4:
bf:68:75:2c:73:c4:92:5f:5d:57:ae:dd:ea:e9:d5:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:00:DF:39:56:2A:16:A1:E3:1F:73:DE:F1:76:EE:01:20:DC:18:88
X509v3 Authority Key Identifier:
keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:34:e3:6e:a5:f6:35:c2:56:3e:74:00:37:68:b4:bc:34:48:
6e:aa:d6:99:0a:ec:84:c7:30:b6:ec:56:1e:d9:f1:62:ba:c0:
e4:93:a2:37:3b:86:6a:72:d0:5b:e3:45:f6:02:39:79:91:16:
d6:a8:94:82:db:04:e3:a3:60:37:e0:32:eb:30:70:3b:72:a8:
3e:49:e0:81:77:63:af:3a:b3:7e:a0:1b:1a:6e:f5:ca:90:c0:
a0:26:63:1d:fa:86:fd:22:80:12:b1:66:4d:81:c6:98:51:de:
df:f9:c1:06:d0:2b:f3:b3:2c:df:91:6b:f3:47:fb:3c:03:fb:
2e:a8:b1:a9:8f:ad:c2:c7:d8:15:20:fc:ae:aa:9d:28:2d:a8:
8a:19:1c:26:50:22:ef:79:bd:14:b4:b5:b8:79:73:5c:21:6e:
93:7a:24:65:d4:9a:31:50:36:81:28:0c:6c:c4:2c:82:44:a6:
18:bf:4b:82:51:5c:68:8e:2f:f2:8f:ea:98:ef:97:c7:93:c3:
db:e4:d1:ce:64:84:27:ac:9f:e9:fc:80:7f:2b:51:2d:6f:77:
c2:dc:dd:f7:c1:b8:bb:60:7a:6d:91:65:f1:1d:2c:60:ec:9e:
30:d7:ab:30:fa:4a:21:60:5c:97:7a:1c:e0:e5:1f:86:2f:16:
b8:e6:0a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uzMYskHbryv9w8L8IjnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjNhNTE2Mjg5NGQ3ZDFhYzJhZjgzMmQ3YWJjZjFkYmUx
MTBhZTEwHhcNMjUwMTMxMDUwMDE3WhcNMjUwMjAxMDUwMDE3WjAzMTEwLwYDVQQD
EyhlMDAwZGYzOTU2MmExNmExZTMxZjczZGVmMTc2ZWUwMTIwZGMxODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvupYUlW9o+zsund740eEGoCYjuZ
xnAk8O86yOBIR63RqwSNUs4r/lStorLtJdV1F/IQNw42HcTYXHqyKuatPLQiGLeK
xbH4XirDcI3blI8C564RdrykccTSPW2JannRW0A/o0ayyZ42ao6wAVXbu6HMl6fs
7HFLsbPgXVU5uzOuW6VxJ4HA2ycLudEy5gDDakfJUwvyjVwi+7JKpFCrAgeeVwHu
lGGtRp3pWuqSIRkIAl2boK0R7750aoiVcolk/Chb5SVP9pnSke8RUPgHQjwOrZwc
kyKgfh/BhXMMmgTijfGLl+AS5OJfq2U0p/S/aHUsc8SSX11Xrt3q6dV4JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAA3zlWKhah4x9z3vF27gEg3BiIMB8GA1UdIwQY
MBaAFHrzpRYolNfRrCr4Mterzx2+EQrhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTIt
NzVkNTRiMTAzMDljLzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTItNzVkNTRiMTAzMDlj
LzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDTjbqX2
NcJWPnQAN2i0vDRIbqrWmQrshMcwtuxWHtnxYrrA5JOiNzuGanLQW+NF9gI5eZEW
1qiUgtsE46NgN+Ay6zBwO3KoPknggXdjrzqzfqAbGm71ypDAoCZjHfqG/SKAErFm
TYHGmFHe3/nBBtAr87Ms35Fr80f7PAP7LqixqY+twsfYFSD8rqqdKC2oihkcJlAi
73m9FLS1uHlzXCFuk3okZdSaMVA2gSgMbMQsgkSmGL9LglFcaI4v8o/qmO+Xx5PD
2+TRzmSEJ6yf6fyAfytRLW93wtzd98G4u2B6bZFl8R0sYOyeMNerMPpKIWBcl3oc
4OUfhi8WuOYKsg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:15 2025 by rpki-client on console-fra.rpki-client.org