Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
File: _JfnqMJOB2HT5dydVjmLxH0m08A.mft (raw, json)
Hash identifier: 1Iurfb6Eh39wmjAQyLgXYifI4Nq0E2GW54nV/TvRvjU=
Subject key identifier: 26:7F:9E:DD:C7:86:9A:9C:0D:09:5A:90:98:F0:DE:E5:22:89:BF:74
Authority key identifier: FC:97:E7:A8:C2:4E:07:61:D3:E5:DC:9D:56:39:8B:C4:7D:26:D3:C0
Certificate issuer: /CN=fc97e7a8c24e0761d3e5dc9d56398bc47d26d3c0
Certificate serial: 019512472333A9AA8475226F6C531E38B9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
Manifest number: 0384
Signing time: Mon 17 Feb 2025 05:00:06 +0000
Manifest this update: Mon 17 Feb 2025 05:00:06 +0000
Manifest next update: Tue 18 Feb 2025 05:00:06 +0000
Files and hashes: 1: _JfnqMJOB2HT5dydVjmLxH0m08A.crl (hash: 1xvRMvkPyCr03n0Ijm5rFdRMqYmAuahlr87uodCKaAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:23:33:a9:aa:84:75:22:6f:6c:53:1e:38:b9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc97e7a8c24e0761d3e5dc9d56398bc47d26d3c0
Validity
Not Before: Feb 17 05:00:06 2025 GMT
Not After : Feb 18 05:00:06 2025 GMT
Subject: CN=267f9eddc7869a9c0d095a9098f0dee52289bf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:00:03:6d:b6:85:88:a0:ba:4a:b0:70:88:
45:e3:34:13:9b:50:d2:8e:04:9b:53:88:da:b8:8e:
e2:99:92:cd:fb:b3:3e:be:ab:8c:d5:3f:02:14:ae:
56:c0:44:ba:80:60:5b:4d:a4:50:5f:b4:be:52:71:
eb:59:42:d6:fb:c7:31:6d:41:b3:b4:61:a3:a9:56:
93:36:84:f7:33:05:20:50:51:95:95:7b:ba:3c:c4:
e4:13:1c:8e:cd:85:ce:d6:3d:29:3b:28:9c:ad:3c:
a6:73:39:4a:de:94:9a:46:ec:57:43:7c:2a:e9:17:
d5:ee:33:77:5d:16:84:95:77:8d:54:38:7f:99:9b:
af:60:8d:82:9f:d2:66:0a:39:bf:da:d6:69:10:45:
ea:38:59:02:2d:87:6b:b1:6a:65:37:8f:b4:10:e5:
06:8f:1b:52:54:fb:37:d2:61:51:f0:f7:21:66:7c:
a4:db:05:ff:c9:d0:3b:b7:fc:e9:be:87:bd:21:f2:
eb:f9:46:4a:1f:36:53:c3:08:7a:0b:f6:60:a3:79:
af:80:2e:16:1c:ff:e7:de:ac:70:af:3a:cd:5f:24:
af:e5:9a:5c:ff:af:f7:95:68:1b:5c:3e:8b:ef:dc:
ed:9d:97:a6:65:d5:8a:26:b1:3c:a6:c5:c0:fa:a1:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7F:9E:DD:C7:86:9A:9C:0D:09:5A:90:98:F0:DE:E5:22:89:BF:74
X509v3 Authority Key Identifier:
keyid:FC:97:E7:A8:C2:4E:07:61:D3:E5:DC:9D:56:39:8B:C4:7D:26:D3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:55:9d:a7:bd:ba:dd:b7:49:2c:d1:43:77:64:b3:16:20:9b:
4f:da:d0:4e:4b:ba:51:2e:6a:1a:46:f5:cd:dc:d6:59:03:0a:
00:7c:4e:4a:7c:40:bd:41:16:49:44:94:ff:a4:d9:0e:bf:e9:
e6:73:bc:50:0b:67:f5:16:1e:79:44:d5:22:04:70:e0:2d:a7:
3f:75:d5:1c:4b:1b:05:8d:78:92:4d:20:84:96:ec:4a:f9:c1:
c8:49:fa:f6:df:a2:ea:7b:cd:8e:78:fe:66:67:b6:ec:32:aa:
3e:5e:c9:67:2c:4c:62:8d:63:00:e6:ee:49:8f:86:de:6f:0b:
aa:e5:ad:c5:f6:8d:3d:48:7c:d1:37:24:e5:fb:8c:91:19:a2:
93:44:c4:93:0f:b5:33:7e:eb:75:89:4a:cc:02:06:4e:cf:00:
23:e0:d2:0e:05:3e:a0:82:75:c3:dd:3b:ab:bb:e6:2d:8f:6b:
71:c9:6a:84:d8:fe:33:82:4e:85:56:47:ec:7d:2c:78:d9:dc:
88:b4:0c:d9:a0:38:25:9d:2f:ca:d9:e1:d7:e9:b4:54:e8:68:
d5:6a:39:ba:af:e1:26:ae:a4:f2:54:b3:70:c9:c8:57:9e:7d:
45:1c:73:bf:3d:aa:d1:42:f0:0f:2b:e8:3a:b5:10:94:cc:1c:
da:34:26:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSRyMzqaqEdSJvbFMeOLnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTdlN2E4YzI0ZTA3NjFkM2U1ZGM5ZDU2Mzk4YmM0N2Qy
NmQzYzAwHhcNMjUwMjE3MDUwMDA2WhcNMjUwMjE4MDUwMDA2WjAzMTEwLwYDVQQD
EygyNjdmOWVkZGM3ODY5YTljMGQwOTVhOTA5OGYwZGVlNTIyODliZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuMAA222hYigukqwcIhF4zQTm1DS
jgSbU4jauI7imZLN+7M+vquM1T8CFK5WwES6gGBbTaRQX7S+UnHrWULW+8cxbUGz
tGGjqVaTNoT3MwUgUFGVlXu6PMTkExyOzYXO1j0pOyicrTymczlK3pSaRuxXQ3wq
6RfV7jN3XRaElXeNVDh/mZuvYI2Cn9JmCjm/2tZpEEXqOFkCLYdrsWplN4+0EOUG
jxtSVPs30mFR8PchZnyk2wX/ydA7t/zpvoe9IfLr+UZKHzZTwwh6C/Zgo3mvgC4W
HP/n3qxwrzrNXySv5Zpc/6/3lWgbXD6L79ztnZemZdWKJrE8psXA+qE2eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZ/nt3HhpqcDQlakJjw3uUiib90MB8GA1UdIwQY
MBaAFPyX56jCTgdh0+XcnVY5i8R9JtPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pmbnFNSk9CMkhUNWR5ZFZqbUx4SDBtMDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lMzUyOWYtMzc5NC00Yjk0LTkzMTct
M2E1OWM3MGMwYTk5LzEvX0pmbnFNSk9CMkhUNWR5ZFZqbUx4SDBtMDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lMzUyOWYtMzc5NC00Yjk0LTkzMTctM2E1OWM3MGMwYTk5
LzEvX0pmbnFNSk9CMkhUNWR5ZFZqbUx4SDBtMDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFWdp726
3bdJLNFDd2SzFiCbT9rQTku6US5qGkb1zdzWWQMKAHxOSnxAvUEWSUSU/6TZDr/p
5nO8UAtn9RYeeUTVIgRw4C2nP3XVHEsbBY14kk0ghJbsSvnByEn69t+i6nvNjnj+
Zme27DKqPl7JZyxMYo1jAObuSY+G3m8LquWtxfaNPUh80Tck5fuMkRmik0TEkw+1
M37rdYlKzAIGTs8AI+DSDgU+oIJ1w907q7vmLY9rcclqhNj+M4JOhVZH7H0seNnc
iLQM2aA4JZ0vytnh1+m0VOho1Wo5uq/hJq6k8lSzcMnIV559RRxzvz2q0ULwDyvo
OrUQlMwc2jQmTg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:20 2025 by rpki-client