Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: b1vpGVUABNWuYmFDDQ7VDcPienLDqr7s8K5biUYizFk=
Subject key identifier: 3F:27:D3:2D:EE:8C:96:65:77:7D:B0:B4:F8:F1:80:C0:82:4E:24:9E
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 0194C387C34A84D514C7BB73153907E2DA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 142B
Signing time: Sat 01 Feb 2025 22:00:41 +0000
Manifest this update: Sat 01 Feb 2025 22:00:41 +0000
Manifest next update: Sun 02 Feb 2025 22:00:41 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: 0p21c6W7+pm1goQU+w7D9oHFrIRILj68pfZmcE9H4EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:c3:4a:84:d5:14:c7:bb:73:15:39:07:e2:da:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Feb 1 22:00:41 2025 GMT
Not After : Feb 2 22:00:41 2025 GMT
Subject: CN=3f27d32dee8c9665777db0b4f8f180c0824e249e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:c1:09:fa:c7:50:d0:e8:a6:f5:f9:83:75:
25:93:1b:88:ab:ff:ff:dd:c1:6d:62:86:bf:48:f8:
91:26:83:ec:df:f2:69:0f:05:61:01:f7:46:34:c5:
a5:3b:be:1a:d0:5f:d4:eb:d9:a3:b3:c8:93:45:a6:
73:57:ac:39:12:be:15:26:86:3a:b3:35:a7:b5:31:
6f:fc:b8:1d:36:f2:91:44:9b:61:32:39:26:63:9e:
55:ed:eb:c8:8b:16:1f:f8:0a:5d:eb:75:80:65:77:
f4:ec:2a:a3:bd:02:7a:25:38:fc:5d:b6:d3:6e:65:
0c:02:09:7f:d6:76:3b:cb:db:58:ce:86:08:d0:d6:
b4:42:2a:0d:dc:60:d3:69:43:df:d8:70:fd:52:29:
d1:f7:b7:5a:64:e0:33:71:7a:33:d9:60:6a:77:38:
14:3c:fe:fa:e1:2c:b7:d3:be:bc:3c:21:22:f5:dc:
8a:1d:be:f5:9e:4c:f8:1d:8f:69:83:c4:ad:9d:8c:
59:fe:56:dc:c8:93:6a:99:a8:9d:ad:28:0c:5d:94:
7b:d0:03:ed:6b:19:9d:7c:55:ff:c1:ea:4d:88:94:
de:21:55:af:5b:35:64:f9:7d:85:89:fb:02:bb:0a:
29:33:ae:73:13:17:10:bc:7a:20:26:07:fc:ba:e9:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:27:D3:2D:EE:8C:96:65:77:7D:B0:B4:F8:F1:80:C0:82:4E:24:9E
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c9:7d:2e:56:b3:b1:79:92:90:35:f4:cd:83:f3:d7:66:e2:
3c:c5:5d:66:0b:13:d5:c8:38:90:37:ce:8e:db:dd:73:9d:3d:
f5:75:cf:97:0c:70:a6:b3:b4:fc:a9:82:47:1e:c8:8f:3d:1d:
e8:71:ce:00:0b:7a:cc:e1:26:af:c9:2e:0a:7d:94:89:b7:62:
47:99:85:9b:d0:da:ec:01:5e:95:17:61:a1:28:c4:0b:fb:67:
34:16:47:79:62:45:7d:5c:72:35:29:0d:12:a4:8d:3a:2c:a8:
a3:ac:19:25:14:0e:39:3c:de:1b:00:3d:6f:33:1c:d8:1f:ed:
3f:41:d9:fc:a1:01:1d:ac:45:b9:13:75:15:6a:20:aa:7d:3d:
38:0f:04:7d:5d:6a:48:0e:70:f8:c5:5e:b7:10:9f:5b:b9:f9:
a0:e7:b8:60:26:1e:ab:b9:c9:3b:35:10:86:f5:b2:dc:fa:ba:
46:a9:5d:bd:f0:14:4d:95:36:44:63:b7:7f:42:30:8b:c0:8f:
f9:ee:ca:a5:fe:ad:4d:ce:e6:ec:f2:43:fd:66:f7:23:27:b6:
c8:2a:cc:5e:7f:10:b0:3b:23:4d:38:5f:2a:72:91:c6:bd:b5:
05:38:ed:2e:af:26:ec:b6:14:ee:8a:48:e3:cd:b0:dd:c2:9e:
d5:c7:95:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh8NKhNUUx7tzFTkH4tp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYmNhYmYwN2MxOWM4YTIwYTc2OWFhODI5MDcxYWIzMzgy
ZjU4OGEwHhcNMjUwMjAxMjIwMDQxWhcNMjUwMjAyMjIwMDQxWjAzMTEwLwYDVQQD
EygzZjI3ZDMyZGVlOGM5NjY1Nzc3ZGIwYjRmOGYxODBjMDgyNGUyNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3krBCfrHUNDopvX5g3UlkxuIq///
3cFtYoa/SPiRJoPs3/JpDwVhAfdGNMWlO74a0F/U69mjs8iTRaZzV6w5Er4VJoY6
szWntTFv/LgdNvKRRJthMjkmY55V7evIixYf+Apd63WAZXf07CqjvQJ6JTj8XbbT
bmUMAgl/1nY7y9tYzoYI0Na0QioN3GDTaUPf2HD9UinR97daZOAzcXoz2WBqdzgU
PP764Sy30768PCEi9dyKHb71nkz4HY9pg8StnYxZ/lbcyJNqmaidrSgMXZR70APt
axmdfFX/wepNiJTeIVWvWzVk+X2FifsCuwopM65zExcQvHogJgf8uulhRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8n0y3ujJZld32wtPjxgMCCTiSeMB8GA1UdIwQY
MBaAFG+8q/B8GciiCnaaqCkHGrM4L1iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjd5cjhId1p5S0lLZHBxb0tRY2Fzemd2V0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zNjRkM2UtYTQ0ZC00NDZhLTgyZWUt
NjVkOWU0NjExMjcwLzEvYjd5cjhId1p5S0lLZHBxb0tRY2Fzemd2V0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zNjRkM2UtYTQ0ZC00NDZhLTgyZWUtNjVkOWU0NjExMjcw
LzEvYjd5cjhId1p5S0lLZHBxb0tRY2Fzemd2V0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcl9Llaz
sXmSkDX0zYPz12biPMVdZgsT1cg4kDfOjtvdc5099XXPlwxwprO0/KmCRx7Ijz0d
6HHOAAt6zOEmr8kuCn2UibdiR5mFm9Da7AFelRdhoSjEC/tnNBZHeWJFfVxyNSkN
EqSNOiyoo6wZJRQOOTzeGwA9bzMc2B/tP0HZ/KEBHaxFuRN1FWogqn09OA8EfV1q
SA5w+MVetxCfW7n5oOe4YCYeq7nJOzUQhvWy3Pq6RqldvfAUTZU2RGO3f0Iwi8CP
+e7Kpf6tTc7m7PJD/Wb3Iye2yCrMXn8QsDsjTThfKnKRxr21BTjtLq8m7LYU7opI
482w3cKe1ceV+Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:46:10 2025 by rpki-client