Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: PrigcfyjWgxnEbKDT3dBi6ooTaPI4ZuTpVIvhptKykI=
Subject key identifier: A0:B5:54:66:95:11:85:CC:08:97:F6:47:7B:85:75:BD:AF:A0:61:5A
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 0194C42CAC57D6C3533483AEC11FE00EDBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 1173
Signing time: Sun 02 Feb 2025 01:00:49 +0000
Manifest this update: Sun 02 Feb 2025 01:00:49 +0000
Manifest next update: Mon 03 Feb 2025 01:00:49 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: W50ITxKyt+VQSNNpC05vUgDWxa0/z0gdtv5AH9Ti1Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:ac:57:d6:c3:53:34:83:ae:c1:1f:e0:0e:db:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Feb 2 01:00:49 2025 GMT
Not After : Feb 3 01:00:49 2025 GMT
Subject: CN=a0b55466951185cc0897f6477b8575bdafa0615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:5a:78:30:6a:d6:bb:7e:b2:a4:3b:a8:6d:
49:72:82:0b:19:e3:26:c2:e3:12:55:0a:03:4f:ef:
8c:50:42:b3:c5:26:bd:55:e2:27:f7:8f:25:bd:10:
4b:65:0c:91:bc:d1:fd:44:42:06:64:82:de:74:a8:
f3:00:39:e5:8e:c0:21:9b:ad:96:10:34:9e:2a:e0:
5a:1b:81:1e:12:2f:65:b3:7f:34:75:b3:8b:66:47:
07:00:fe:b5:9e:f0:99:b3:ec:7d:1e:78:e4:7d:7f:
6a:67:f7:b7:0b:7d:b6:3d:e8:d2:9f:30:b3:53:24:
63:33:44:60:33:b4:d8:48:2a:b6:5c:51:97:a9:39:
5a:b1:99:ee:66:03:28:b8:cb:b9:ab:fe:09:3e:d0:
04:18:76:d0:f7:f1:e0:6f:98:17:28:29:67:f0:81:
ec:bd:8c:ad:29:68:60:be:c9:64:5f:29:e7:00:74:
48:c6:c8:03:60:f6:e6:3d:6a:04:12:6a:04:ef:ef:
a8:70:78:4a:d6:81:cc:89:f1:ff:98:42:d7:f3:54:
a3:d8:36:a9:31:df:20:9d:e0:43:58:c5:f0:1b:47:
6a:f7:f9:c5:cb:7a:3f:5f:31:af:60:08:21:e5:79:
7f:7f:64:63:4e:24:60:19:23:a6:07:bc:89:0a:51:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:54:66:95:11:85:CC:08:97:F6:47:7B:85:75:BD:AF:A0:61:5A
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d6:29:e1:53:b4:4c:4c:03:18:c4:e2:0a:f9:18:09:14:6f:
a2:c1:39:a2:4a:0f:16:6d:9f:66:00:67:bd:65:49:f1:85:8c:
01:0e:3d:9d:01:29:35:d8:f4:7c:28:b6:09:31:0d:54:6d:f1:
19:22:68:db:d6:3d:cb:90:e3:6a:aa:a8:40:53:76:9d:57:75:
7a:74:43:c6:1f:4c:93:02:37:11:5d:f0:4b:27:af:60:93:33:
b6:28:52:3f:99:4b:a5:74:8d:7a:98:bd:08:e7:ff:15:49:f9:
a1:e9:4f:ad:7e:79:97:0d:ec:12:52:10:22:83:24:6a:4c:a2:
39:88:91:15:d6:fd:92:ac:b9:72:8d:04:ff:7c:70:46:db:f2:
76:7d:86:d5:27:47:03:3f:bf:6f:c8:27:09:06:ed:fa:19:be:
21:2c:6f:8f:54:78:a7:70:ef:8b:35:5c:5a:26:38:62:ba:89:
70:a5:c2:6d:87:58:b4:ee:22:5e:aa:2c:c9:17:02:a1:f6:0b:
e9:b4:a4:f9:31:40:b6:cd:50:d1:71:a2:e6:f9:d0:93:97:1e:
ec:67:23:3b:4a:5b:66:de:5b:e8:c3:65:46:aa:8c:22:c3:a8:
c8:98:63:a6:48:37:36:42:47:af:45:e4:d6:f6:30:65:8d:78:
95:05:9b:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELKxX1sNTNIOuwR/gDtvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjcyMTJlNmZlNWZjZjBlZTc4ZGNkMDQ0MGRmNjllMDBh
YWQ0ZGMwHhcNMjUwMjAyMDEwMDQ5WhcNMjUwMjAzMDEwMDQ5WjAzMTEwLwYDVQQD
EyhhMGI1NTQ2Njk1MTE4NWNjMDg5N2Y2NDc3Yjg1NzViZGFmYTA2MTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTRaeDBq1rt+sqQ7qG1JcoILGeMm
wuMSVQoDT++MUEKzxSa9VeIn948lvRBLZQyRvNH9REIGZILedKjzADnljsAhm62W
EDSeKuBaG4EeEi9ls380dbOLZkcHAP61nvCZs+x9HnjkfX9qZ/e3C322PejSnzCz
UyRjM0RgM7TYSCq2XFGXqTlasZnuZgMouMu5q/4JPtAEGHbQ9/Hgb5gXKCln8IHs
vYytKWhgvslkXynnAHRIxsgDYPbmPWoEEmoE7++ocHhK1oHMifH/mELX81Sj2Dap
Md8gneBDWMXwG0dq9/nFy3o/XzGvYAgh5Xl/f2RjTiRgGSOmB7yJClEYFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC1VGaVEYXMCJf2R3uFdb2voGFaMB8GA1UdIwQY
MBaAFDO3IS5v5fzw7njc0EQN9p4AqtTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zZDU5ZTgtZDRmNy00YjA4LTlmNzgt
YmRmZWUzNWFmMmI4LzEvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zZDU5ZTgtZDRmNy00YjA4LTlmNzgtYmRmZWUzNWFmMmI4
LzEvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadYp4VO0
TEwDGMTiCvkYCRRvosE5okoPFm2fZgBnvWVJ8YWMAQ49nQEpNdj0fCi2CTENVG3x
GSJo29Y9y5DjaqqoQFN2nVd1enRDxh9MkwI3EV3wSyevYJMztihSP5lLpXSNepi9
COf/FUn5oelPrX55lw3sElIQIoMkakyiOYiRFdb9kqy5co0E/3xwRtvydn2G1SdH
Az+/b8gnCQbt+hm+ISxvj1R4p3DvizVcWiY4YrqJcKXCbYdYtO4iXqosyRcCofYL
6bSk+TFAts1Q0XGi5vnQk5ce7GcjO0pbZt5b6MNlRqqMIsOoyJhjpkg3NkJHr0Xk
1vYwZY14lQWbIA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:14 2025 by rpki-client