Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
File: 4CzXYQ92Hg7SUq57ufMPHisXtec.mft (raw, json)
Hash identifier: 55daVNuk8+JwoEE6QgNehWM68eoR6qT/OWwLHnqNb/g=
Subject key identifier: FA:71:78:96:05:BE:58:5F:A6:B3:9C:A1:B4:D5:D7:9E:A6:6F:49:65
Authority key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Certificate issuer: /CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Certificate serial: 0194BC3C9375B2D93E5C4736F7F43B34169A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
Manifest number: 10BB
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: 4CzXYQ92Hg7SUq57ufMPHisXtec.crl (hash: gml41eXVJ54sbdFyCPhUomcdTekG17D7HGagd/IpTqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:93:75:b2:d9:3e:5c:47:36:f7:f4:3b:34:16:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=fa71789605be585fa6b39ca1b4d5d79ea66f4965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:6d:9e:45:3d:cb:44:ae:eb:39:61:f2:5f:
ff:a9:63:fb:26:06:a3:fc:03:82:72:86:d2:fd:85:
fa:28:a5:28:c2:5b:8d:3d:d0:f4:12:21:08:24:2f:
e3:f3:44:7a:b0:90:21:e4:13:c9:b1:48:77:67:de:
95:10:f6:9f:d8:63:dc:2f:3f:b8:3f:2d:70:ae:9e:
f5:36:03:3d:48:6f:96:23:bc:f3:11:70:4d:f3:e4:
d0:34:1a:60:47:25:85:64:70:5c:1d:f3:d1:c8:ea:
94:a2:c2:b4:5c:92:77:da:06:c6:64:67:d3:3c:ae:
e5:26:b3:b2:35:69:6c:53:97:2f:35:2c:b4:8b:e8:
11:d1:8f:3a:46:c1:5e:e4:72:6b:55:de:a6:13:b9:
ab:c4:f7:74:d0:d3:21:c5:a3:9e:7b:66:0c:83:e6:
db:62:89:31:d5:28:e4:3c:a4:02:d7:89:d3:4b:ce:
aa:6a:e1:a3:c8:93:4b:4a:32:76:c7:21:51:a2:ac:
16:18:11:f8:25:67:85:4d:c1:54:87:17:0b:d9:3e:
8a:67:25:d3:e8:ab:d3:db:cb:0d:77:3f:f0:a3:c8:
1e:95:15:33:38:76:59:2e:2c:29:7d:b2:48:9a:63:
42:62:0a:b5:ef:86:80:94:2b:6a:69:0b:84:cb:29:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:71:78:96:05:BE:58:5F:A6:B3:9C:A1:B4:D5:D7:9E:A6:6F:49:65
X509v3 Authority Key Identifier:
keyid:E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a0:0f:3b:93:45:f0:19:4e:cb:71:9c:b4:b3:23:2f:61:49:
82:d9:34:ac:5e:57:b8:10:2d:b4:ce:a9:f5:89:7e:52:49:96:
98:df:90:16:07:5f:6f:9b:00:9a:09:1f:c9:3f:b6:4f:1b:16:
d3:4a:ef:ea:9f:c2:25:e8:bc:bd:85:72:b5:c5:7a:a2:90:9a:
a2:ad:e0:8d:56:24:37:11:86:a4:bb:b7:ac:1c:89:ce:b9:70:
53:06:08:2b:73:7d:1c:00:08:0e:73:57:19:a2:80:89:22:96:
c9:9d:46:e2:ac:d7:00:42:30:6c:3a:da:43:76:58:fe:00:c5:
32:24:0e:34:da:0d:68:6d:b6:30:a4:5a:31:46:38:b5:20:26:
2a:4d:af:23:bf:29:f7:f8:4b:6e:11:b3:ec:3f:80:c7:11:e4:
db:a0:13:40:ff:c2:cf:16:38:1c:19:4a:34:e1:1c:bc:af:17:
8f:87:7a:f5:2b:8d:58:48:60:f8:ef:38:0f:4f:49:34:55:8d:
cb:6b:46:f5:94:aa:48:55:73:4a:12:b2:b1:4e:ff:2d:70:da:
dd:66:c5:b6:0e:03:b4:61:55:0b:e5:ee:6d:61:9f:bb:ad:de:
f8:26:05:c8:29:79:70:d4:3c:87:01:71:07:ca:be:a9:14:8a:
e6:7a:d8:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJN1stk+XEc29/Q7NBaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmNkNzYxMGY3NjFlMGVkMjUyYWU3YmI5ZjMwZjFlMmIx
N2I1ZTcwHhcNMjUwMTMxMTIwMTEzWhcNMjUwMjAxMTIwMTEzWjAzMTEwLwYDVQQD
EyhmYTcxNzg5NjA1YmU1ODVmYTZiMzljYTFiNGQ1ZDc5ZWE2NmY0OTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF9tnkU9y0Su6zlh8l//qWP7Jgaj
/AOCcobS/YX6KKUowluNPdD0EiEIJC/j80R6sJAh5BPJsUh3Z96VEPaf2GPcLz+4
Py1wrp71NgM9SG+WI7zzEXBN8+TQNBpgRyWFZHBcHfPRyOqUosK0XJJ32gbGZGfT
PK7lJrOyNWlsU5cvNSy0i+gR0Y86RsFe5HJrVd6mE7mrxPd00NMhxaOee2YMg+bb
Yokx1SjkPKQC14nTS86qauGjyJNLSjJ2xyFRoqwWGBH4JWeFTcFUhxcL2T6KZyXT
6KvT28sNdz/wo8gelRUzOHZZLiwpfbJImmNCYgq174aAlCtqaQuEyynHRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpxeJYFvlhfprOcobTV156mb0llMB8GA1UdIwQY
MBaAFOAs12EPdh4O0lKue7nzDx4rF7XnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEN6WFlROTJIZzdTVXE1N3VmTVBIaXNYdGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZGJlZTktNWVlZS00NTYxLWE1MjMt
OTQzNTE1OWM5M2ViLzEvNEN6WFlROTJIZzdTVXE1N3VmTVBIaXNYdGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iZGJlZTktNWVlZS00NTYxLWE1MjMtOTQzNTE1OWM5M2Vi
LzEvNEN6WFlROTJIZzdTVXE1N3VmTVBIaXNYdGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6APO5NF
8BlOy3GctLMjL2FJgtk0rF5XuBAttM6p9Yl+UkmWmN+QFgdfb5sAmgkfyT+2TxsW
00rv6p/CJei8vYVytcV6opCaoq3gjVYkNxGGpLu3rByJzrlwUwYIK3N9HAAIDnNX
GaKAiSKWyZ1G4qzXAEIwbDraQ3ZY/gDFMiQONNoNaG22MKRaMUY4tSAmKk2vI78p
9/hLbhGz7D+AxxHk26ATQP/CzxY4HBlKNOEcvK8Xj4d69SuNWEhg+O84D09JNFWN
y2tG9ZSqSFVzShKysU7/LXDa3WbFtg4DtGFVC+XubWGfu63e+CYFyCl5cNQ8hwFx
B8q+qRSK5nrYyQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:00 2025 by rpki-client on console-fra.rpki-client.org