Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
File: P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft (raw, json)
Hash identifier: G7poVsN7GC52SMtXOLD6XTfefK6HEkt7hByDCdxtwEw=
Subject key identifier: 42:62:56:23:2B:F3:C5:5D:4A:F6:C2:2D:69:76:40:F2:0B:7D:41:F4
Authority key identifier: 3F:4C:02:6A:6E:27:43:09:30:3C:EA:0C:17:E0:94:93:61:3C:1F:2E
Certificate issuer: /CN=3f4c026a6e274309303cea0c17e09493613c1f2e
Certificate serial: 0194C3BE82B2D82CD7D4FF831BDD8C92E4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0wCam4nQwkwPOoMF-CUk2E8Hy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
Manifest number: 08D3
Signing time: Sat 01 Feb 2025 23:00:29 +0000
Manifest this update: Sat 01 Feb 2025 23:00:29 +0000
Manifest next update: Sun 02 Feb 2025 23:00:29 +0000
Files and hashes: 1: P0wCam4nQwkwPOoMF-CUk2E8Hy4.crl (hash: yi3+qZ0G+vz4DDtsWn6V/skGSKZnA8ZpIL40A6L9izI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0wCam4nQwkwPOoMF-CUk2E8Hy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:82:b2:d8:2c:d7:d4:ff:83:1b:dd:8c:92:e4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f4c026a6e274309303cea0c17e09493613c1f2e
Validity
Not Before: Feb 1 23:00:29 2025 GMT
Not After : Feb 2 23:00:29 2025 GMT
Subject: CN=426256232bf3c55d4af6c22d697640f20b7d41f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:00:fd:ce:33:cf:e8:4e:4b:9b:01:3a:90:
64:d9:9b:67:ad:1d:4f:67:f5:6f:0b:ff:a7:9e:a1:
0b:fb:70:9b:d0:ad:90:c5:77:9c:71:68:b2:ab:ca:
a1:73:9b:e1:c0:ec:7f:2e:48:c9:eb:14:7b:9c:b5:
6a:e5:b3:37:59:39:49:38:81:cd:8c:d7:7e:29:9e:
4f:d5:c9:f7:e3:ee:5d:49:89:14:da:75:6e:d0:06:
af:69:b9:d5:55:26:79:ea:f3:09:2b:85:8f:b0:6c:
81:55:44:1e:42:76:5f:6a:f1:e5:b0:df:ef:15:59:
a1:3c:2a:33:40:3f:e3:32:59:ef:84:79:2f:2e:c3:
0c:e9:1f:dd:e5:5d:c8:3f:6f:61:e0:e7:30:e2:03:
33:19:a6:c9:f9:1a:69:43:dc:7b:39:0c:cd:89:c6:
fc:da:d5:ed:bc:ac:38:2e:9c:d3:a7:bb:df:5f:15:
43:d9:d0:ef:80:c6:40:95:1c:78:ef:ac:9e:a5:41:
a9:15:69:39:69:ae:f7:71:27:83:9f:2a:45:f1:b7:
4b:af:86:18:9e:fd:c0:10:44:0b:23:4e:77:cb:a7:
70:a8:01:d9:7e:22:7a:eb:6c:4d:93:5b:74:63:52:
c2:c4:78:87:fe:86:6c:cc:dd:57:e1:be:69:a1:2a:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:56:23:2B:F3:C5:5D:4A:F6:C2:2D:69:76:40:F2:0B:7D:41:F4
X509v3 Authority Key Identifier:
keyid:3F:4C:02:6A:6E:27:43:09:30:3C:EA:0C:17:E0:94:93:61:3C:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0wCam4nQwkwPOoMF-CUk2E8Hy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4a:cb:77:cf:83:b7:86:90:41:16:e3:5a:12:18:ce:46:28:
0f:d4:f2:47:fa:19:c6:ea:7a:c8:36:0e:71:67:e6:7e:c4:ea:
70:a1:81:66:87:df:1e:d9:7d:bc:d0:79:18:1d:dd:3d:e0:8a:
1c:36:03:fc:1a:68:04:7f:87:b2:c3:ac:19:db:96:79:6b:c7:
a1:fc:2e:47:a4:71:c2:6f:6a:ca:49:73:b0:cd:b0:89:02:8b:
b5:25:f5:4e:bf:06:cb:b7:f3:ed:84:9f:f1:49:00:e9:78:7b:
3d:91:2f:41:06:76:ad:b8:14:69:30:44:31:a7:44:9e:95:b4:
b0:0f:6f:35:d4:92:6f:40:9a:f1:f0:76:84:2c:c7:08:99:74:
4b:98:87:a5:63:f0:9a:08:da:e3:04:00:cf:4f:70:53:d5:c1:
d4:0a:b8:8a:ca:cd:aa:aa:5b:02:21:82:12:83:7c:f3:a7:0b:
bf:af:26:05:a0:e9:d9:77:e9:58:9f:0a:37:7d:f4:4b:14:39:
d1:aa:ee:91:cd:5c:00:c6:f6:c3:55:47:23:1f:35:17:bf:43:
c8:b1:9b:e4:d6:28:9e:b8:21:09:da:c5:8e:fc:49:2a:8e:a5:
be:8b:0b:c1:d8:2c:0b:99:20:89:33:e9:5e:62:0f:57:6e:47:
ef:62:8f:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvoKy2CzX1P+DG92MkuT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNGMwMjZhNmUyNzQzMDkzMDNjZWEwYzE3ZTA5NDkzNjEz
YzFmMmUwHhcNMjUwMjAxMjMwMDI5WhcNMjUwMjAyMjMwMDI5WjAzMTEwLwYDVQQD
Eyg0MjYyNTYyMzJiZjNjNTVkNGFmNmMyMmQ2OTc2NDBmMjBiN2Q0MWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroYA/c4zz+hOS5sBOpBk2ZtnrR1P
Z/VvC/+nnqEL+3Cb0K2QxXeccWiyq8qhc5vhwOx/LkjJ6xR7nLVq5bM3WTlJOIHN
jNd+KZ5P1cn34+5dSYkU2nVu0AavabnVVSZ56vMJK4WPsGyBVUQeQnZfavHlsN/v
FVmhPCozQD/jMlnvhHkvLsMM6R/d5V3IP29h4Ocw4gMzGabJ+RppQ9x7OQzNicb8
2tXtvKw4LpzTp7vfXxVD2dDvgMZAlRx476yepUGpFWk5aa73cSeDnypF8bdLr4YY
nv3AEEQLI053y6dwqAHZfiJ662xNk1t0Y1LCxHiH/oZszN1X4b5poSpMbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJiViMr88VdSvbCLWl2QPILfUH0MB8GA1UdIwQY
MBaAFD9MAmpuJ0MJMDzqDBfglJNhPB8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDB3Q2FtNG5Rd2t3UE9vTUYtQ1VrMkU4SHk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81NWI2MzQtZWVkNS00ZTMyLWJiNmYt
NjA5NjkzMWZmZWJlLzEvUDB3Q2FtNG5Rd2t3UE9vTUYtQ1VrMkU4SHk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81NWI2MzQtZWVkNS00ZTMyLWJiNmYtNjA5NjkzMWZmZWJl
LzEvUDB3Q2FtNG5Rd2t3UE9vTUYtQ1VrMkU4SHk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkrLd8+D
t4aQQRbjWhIYzkYoD9TyR/oZxup6yDYOcWfmfsTqcKGBZoffHtl9vNB5GB3dPeCK
HDYD/BpoBH+HssOsGduWeWvHofwuR6Rxwm9qyklzsM2wiQKLtSX1Tr8Gy7fz7YSf
8UkA6Xh7PZEvQQZ2rbgUaTBEMadEnpW0sA9vNdSSb0Ca8fB2hCzHCJl0S5iHpWPw
mgja4wQAz09wU9XB1Aq4isrNqqpbAiGCEoN886cLv68mBaDp2XfpWJ8KN330SxQ5
0arukc1cAMb2w1VHIx81F79DyLGb5NYonrghCdrFjvxJKo6lvosLwdgsC5kgiTPp
XmIPV25H72KPQQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:05 2025 by rpki-client