Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
File: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft (raw, json)
Hash identifier: JqHm/0tGmJPEQbXNv4ZyqVixi3oehOr5d5GP4Yoi8cc=
Subject key identifier: D4:6F:3D:4B:1F:0B:F9:83:57:B7:0E:FA:F3:A2:20:17:A8:73:F6:08
Authority key identifier: 67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
Certificate issuer: /CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Certificate serial: 0194C4D161E634EA5C83C324A1C418E826E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
Manifest number: 1B
Signing time: Sun 02 Feb 2025 04:00:43 +0000
Manifest this update: Sun 02 Feb 2025 04:00:43 +0000
Manifest next update: Mon 03 Feb 2025 04:00:43 +0000
Files and hashes: 1: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl (hash: kw5Xa6Syjt1V30as6iKzPcDLhPcmJ4aEzOoBPVU0tmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:61:e6:34:ea:5c:83:c3:24:a1:c4:18:e8:26:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Validity
Not Before: Feb 2 04:00:43 2025 GMT
Not After : Feb 3 04:00:43 2025 GMT
Subject: CN=d46f3d4b1f0bf98357b70efaf3a22017a873f608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:56:cc:20:5f:c8:d4:cd:cb:8d:a5:91:54:
94:73:67:25:a1:81:76:0e:38:0c:f5:e3:b0:01:19:
f8:9a:a7:5f:6c:c4:2c:54:6f:47:28:bf:c2:5e:a9:
88:39:2f:a6:cd:d2:6b:61:a1:56:51:d9:5e:ce:d5:
7a:3b:dc:81:b3:bf:5d:e3:bb:63:18:cc:e1:d4:69:
ae:d7:6d:5e:94:b0:fc:45:5f:ea:0c:9e:a7:cd:12:
c1:c6:64:69:5e:3b:ef:83:dc:98:4a:0e:80:78:da:
5c:88:19:5d:b7:27:77:37:84:6e:0f:9d:3e:13:6a:
4c:f6:76:47:47:0e:5a:54:6d:d8:3b:d6:f5:d8:e2:
f8:8e:ae:eb:d9:7c:fb:e8:75:15:1d:a6:a0:dc:58:
8d:66:4e:cb:6d:f5:90:4c:d7:41:a0:db:4c:2f:ec:
5b:1e:cd:2e:66:a2:f7:fb:ff:44:fc:03:f0:c3:48:
64:85:15:f9:15:80:2b:11:28:55:3e:3f:4a:eb:ac:
f3:ae:a3:3b:31:df:77:bb:18:50:b9:c3:f0:21:2b:
18:ee:e3:e1:0f:9f:93:f9:8f:68:23:42:f3:b5:31:
2d:c7:84:b6:e4:3b:c3:fb:73:27:5e:53:4b:4d:83:
e2:1d:f1:64:d8:b3:13:e4:90:34:f3:c3:ce:86:aa:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6F:3D:4B:1F:0B:F9:83:57:B7:0E:FA:F3:A2:20:17:A8:73:F6:08
X509v3 Authority Key Identifier:
keyid:67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:84:22:4d:e5:db:94:8e:79:b0:fd:f1:8b:57:bf:e0:03:ce:
aa:b2:41:b7:31:26:2a:7f:1d:09:e3:76:93:3b:9a:6d:5e:bb:
0e:69:33:d3:a7:8f:f8:f8:28:07:5c:e4:d7:ed:32:44:8a:d8:
fe:eb:4b:11:0b:93:c4:ff:c9:73:4f:78:01:60:b0:8b:e3:d9:
79:17:5a:22:78:81:c9:4e:8d:d2:61:12:21:fc:4d:2e:c9:8a:
75:63:eb:57:61:7e:79:d6:9f:2c:12:e0:ba:aa:e4:e1:cf:6c:
8f:18:95:04:d3:e1:dd:58:2f:ef:28:44:6f:4e:30:f6:cb:5a:
29:a7:9e:57:cc:54:43:f4:75:5b:e8:f3:77:88:64:ed:84:40:
86:19:eb:70:72:5c:d3:4c:f4:59:b7:e7:50:d3:33:b6:ea:6c:
4c:30:51:b1:ca:2e:68:99:a1:8e:71:50:f4:38:16:76:d0:54:
f8:c3:b3:5b:2d:48:78:62:fb:3d:e4:eb:90:58:8e:b6:84:b2:
94:fa:2a:b4:85:74:37:52:2a:9c:36:f1:6c:40:8f:4d:5b:e0:
a1:2b:81:06:26:b1:67:a8:c7:bc:c1:3f:f2:7a:7a:bb:6e:4f:
12:95:4d:41:5f:dd:8b:a6:17:47:1a:da:ac:cc:dc:59:71:ab:
71:35:0e:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0WHmNOpcg8MkocQY6CbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YTk3OTU0NzY4N2U3ZjljZDA3YzE2MGE1NDljMGRmM2Iz
Y2MwZGYwHhcNMjUwMjAyMDQwMDQzWhcNMjUwMjAzMDQwMDQzWjAzMTEwLwYDVQQD
EyhkNDZmM2Q0YjFmMGJmOTgzNTdiNzBlZmFmM2EyMjAxN2E4NzNmNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIdWzCBfyNTNy42lkVSUc2cloYF2
DjgM9eOwARn4mqdfbMQsVG9HKL/CXqmIOS+mzdJrYaFWUdleztV6O9yBs79d47tj
GMzh1Gmu121elLD8RV/qDJ6nzRLBxmRpXjvvg9yYSg6AeNpciBldtyd3N4RuD50+
E2pM9nZHRw5aVG3YO9b12OL4jq7r2Xz76HUVHaag3FiNZk7LbfWQTNdBoNtML+xb
Hs0uZqL3+/9E/APww0hkhRX5FYArEShVPj9K66zzrqM7Md93uxhQucPwISsY7uPh
D5+T+Y9oI0LztTEtx4S25DvD+3MnXlNLTYPiHfFk2LMT5JA088POhqqXWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRvPUsfC/mDV7cO+vOiIBeoc/YIMB8GA1UdIwQY
MBaAFGepeVR2h+f5zQfBYKVJwN87PMDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjZsNVZIYUg1X25OQjhGZ3BVbkEzenM4d044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lMDhjZGMtYTNkNC00OTBiLThhMmIt
ZDljM2RmOGU5MmU3LzEvWjZsNVZIYUg1X25OQjhGZ3BVbkEzenM4d044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lMDhjZGMtYTNkNC00OTBiLThhMmItZDljM2RmOGU5MmU3
LzEvWjZsNVZIYUg1X25OQjhGZ3BVbkEzenM4d044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIQiTeXb
lI55sP3xi1e/4APOqrJBtzEmKn8dCeN2kzuabV67Dmkz06eP+PgoB1zk1+0yRIrY
/utLEQuTxP/Jc094AWCwi+PZeRdaIniByU6N0mESIfxNLsmKdWPrV2F+edafLBLg
uqrk4c9sjxiVBNPh3Vgv7yhEb04w9staKaeeV8xUQ/R1W+jzd4hk7YRAhhnrcHJc
00z0WbfnUNMztupsTDBRscouaJmhjnFQ9DgWdtBU+MOzWy1IeGL7PeTrkFiOtoSy
lPoqtIV0N1IqnDbxbECPTVvgoSuBBiaxZ6jHvME/8np6u25PEpVNQV/di6YXRxra
rMzcWXGrcTUODA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:45:05 2025 by rpki-client