Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
File: TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json)
Hash identifier: t/dY9PkP27YSDstUzaGKHQPzS3L6VitMRjWNkCdfzGo=
Subject key identifier: D8:5C:E0:D8:C9:00:96:18:64:8D:08:01:46:16:04:D5:C8:82:F2:45
Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
Certificate issuer: /CN=4c461f837868cbeaca17aef486784f61f49243ed
Certificate serial: 01951134D4F365E4421920F5E3DD1C0308E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
Manifest number: 13E5
Signing time: Mon 17 Feb 2025 00:00:29 +0000
Manifest this update: Mon 17 Feb 2025 00:00:29 +0000
Manifest next update: Tue 18 Feb 2025 00:00:29 +0000
Files and hashes: 1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: 3NzYZ/9zzcT7cH1Q5R0uEVsrVxSQe2Gaw/yLmhS5X6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:d4:f3:65:e4:42:19:20:f5:e3:dd:1c:03:08:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed
Validity
Not Before: Feb 17 00:00:29 2025 GMT
Not After : Feb 18 00:00:29 2025 GMT
Subject: CN=d85ce0d8c9009618648d0801461604d5c882f245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:37:a1:4e:eb:8c:0f:d4:e0:57:1f:e4:53:
59:4c:32:a3:61:49:58:5d:93:42:89:7d:4c:cb:ff:
6c:c8:f3:8f:4b:a2:05:f7:3c:d0:fe:04:c6:92:af:
75:3f:d7:8a:af:96:3f:c5:3a:b8:9f:0b:ea:a5:a3:
ab:e2:db:a4:28:10:b5:51:04:e5:b0:82:06:53:b9:
d3:11:27:5c:c0:90:74:82:0a:03:a3:9c:04:9d:d2:
7a:0b:85:a0:d7:25:7d:55:9d:d2:da:e9:05:d8:76:
1f:4d:13:e8:b5:8d:f8:a2:ab:dd:ca:de:26:97:39:
94:ed:57:85:3b:57:85:e3:bf:32:e6:52:03:44:9e:
99:96:92:2a:c9:32:00:d8:08:ab:b3:55:ca:26:0e:
ed:01:6d:84:42:4d:62:d7:57:42:d6:6b:6c:9e:f7:
98:21:af:c2:8b:54:10:41:a6:59:47:c9:34:13:e9:
2e:c0:8b:ba:df:68:f0:60:8c:87:13:2c:5c:55:a3:
9b:09:c3:0a:04:87:a9:24:b0:1f:f6:c6:ca:a2:8f:
22:e9:c7:6e:4b:2a:53:44:c2:23:49:23:af:92:bf:
8b:7c:75:1d:71:3d:ae:fb:8c:fa:ec:b0:16:73:8b:
dd:67:e3:b8:72:27:67:45:91:42:4a:6d:f6:fd:c6:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5C:E0:D8:C9:00:96:18:64:8D:08:01:46:16:04:D5:C8:82:F2:45
X509v3 Authority Key Identifier:
keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c2:4e:b8:96:42:6f:65:76:e7:9f:38:e9:83:fb:14:f5:68:
6a:0f:c7:80:66:54:09:4d:fc:dc:d1:74:9a:cf:c0:e2:a3:4e:
69:95:a0:b2:9b:8a:fc:92:61:38:7b:d6:fe:9a:d4:5b:47:78:
69:7c:2e:d1:a5:57:50:9f:f0:7d:9d:83:1e:86:b3:f0:5e:02:
52:05:b3:3d:de:3a:f2:60:32:81:55:ba:2d:4d:76:cf:03:16:
72:eb:54:6e:b3:26:fb:d9:fd:39:c3:fe:16:9e:28:d4:c5:34:
97:ca:9d:c6:87:4c:e4:63:53:0f:11:eb:5c:e3:4d:51:76:fc:
7d:72:5d:c5:46:4e:5c:ab:d4:86:58:be:9f:19:10:e6:62:b9:
a4:fb:45:67:a4:ce:23:a3:87:0e:cd:a9:e3:a5:75:24:fb:ff:
4a:ba:70:b7:a0:c2:46:e8:34:7d:67:de:c9:33:d8:b2:05:0f:
b1:7e:de:e4:a5:86:de:d9:c6:9f:e4:10:fb:56:30:a9:cf:1b:
1e:d7:47:96:b6:49:16:e4:25:6a:c3:c0:4d:92:ff:9e:e5:6f:
91:c7:4b:73:f0:8b:14:51:bb:5a:6b:2b:90:0a:41:5d:0e:5a:
33:77:75:19:31:86:fb:48:a2:46:f3:b8:a9:bc:28:79:65:ab:
d0:d4:7f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNNTzZeRCGSD1490cAwjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDYxZjgzNzg2OGNiZWFjYTE3YWVmNDg2Nzg0ZjYxZjQ5
MjQzZWQwHhcNMjUwMjE3MDAwMDI5WhcNMjUwMjE4MDAwMDI5WjAzMTEwLwYDVQQD
EyhkODVjZTBkOGM5MDA5NjE4NjQ4ZDA4MDE0NjE2MDRkNWM4ODJmMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHs3oU7rjA/U4Fcf5FNZTDKjYUlY
XZNCiX1My/9syPOPS6IF9zzQ/gTGkq91P9eKr5Y/xTq4nwvqpaOr4tukKBC1UQTl
sIIGU7nTESdcwJB0ggoDo5wEndJ6C4Wg1yV9VZ3S2ukF2HYfTRPotY34oqvdyt4m
lzmU7VeFO1eF478y5lIDRJ6ZlpIqyTIA2Airs1XKJg7tAW2EQk1i11dC1mtsnveY
Ia/Ci1QQQaZZR8k0E+kuwIu632jwYIyHEyxcVaObCcMKBIepJLAf9sbKoo8i6cdu
SypTRMIjSSOvkr+LfHUdcT2u+4z67LAWc4vdZ+O4cidnRZFCSm32/caxRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhc4NjJAJYYZI0IAUYWBNXIgvJFMB8GA1UdIwQY
MBaAFExGH4N4aMvqyheu9IZ4T2H0kkPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lNGMzMTktNzIyMy00MjQ2LWI2NmIt
ZjlkMDk2NTI0YzEzLzEvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lNGMzMTktNzIyMy00MjQ2LWI2NmItZjlkMDk2NTI0YzEz
LzEvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMJOuJZC
b2V255846YP7FPVoag/HgGZUCU383NF0ms/A4qNOaZWgspuK/JJhOHvW/prUW0d4
aXwu0aVXUJ/wfZ2DHoaz8F4CUgWzPd468mAygVW6LU12zwMWcutUbrMm+9n9OcP+
Fp4o1MU0l8qdxodM5GNTDxHrXONNUXb8fXJdxUZOXKvUhli+nxkQ5mK5pPtFZ6TO
I6OHDs2p46V1JPv/Srpwt6DCRug0fWfeyTPYsgUPsX7e5KWG3tnGn+QQ+1Ywqc8b
HtdHlrZJFuQlasPATZL/nuVvkcdLc/CLFFG7WmsrkApBXQ5aM3d1GTGG+0iiRvO4
qbwoeWWr0NR/iA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:04 2025 by rpki-client