Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier: kV68hGkn1rGsN9TbfeNP16+REXyFKETYcnEhkcNqUks=
Subject key identifier: 18:6F:D7:3E:6C:64:BC:6D:D9:FE:C9:2F:87:32:B7:6A:69:71:E3:89
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial: 0194BB2959FE7C57F23D8E09B6C0F81C308E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number: 0346
Signing time: Fri 31 Jan 2025 07:00:36 +0000
Manifest this update: Fri 31 Jan 2025 07:00:36 +0000
Manifest next update: Sat 01 Feb 2025 07:00:36 +0000
Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: 9+xYcR7Y1Ir0/KpkH3UboU567ZZs21/I9ZLHq4ieViY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:59:fe:7c:57:f2:3d:8e:09:b6:c0:f8:1c:30:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Validity
Not Before: Jan 31 07:00:36 2025 GMT
Not After : Feb 1 07:00:36 2025 GMT
Subject: CN=186fd73e6c64bc6dd9fec92f8732b76a6971e389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:6b:13:d7:82:c5:47:e6:21:a2:df:3c:fe:
f6:51:12:2f:c9:2b:53:14:fd:d4:b2:ac:6b:96:64:
0e:9d:53:2e:e4:0b:15:52:70:73:9d:a0:e6:9a:5f:
00:ee:f8:31:13:da:84:a2:c7:7a:f7:91:46:5e:c2:
da:31:41:76:d5:89:93:d7:3a:7c:f0:12:18:0b:b7:
86:33:dc:00:c0:4d:21:45:05:0b:a3:84:37:01:44:
a2:82:c1:7c:b0:de:01:79:ed:25:b4:e8:47:5c:a5:
51:28:69:1e:bc:d7:b6:bc:ca:4b:45:12:8b:81:fd:
fb:35:b1:f3:73:8a:9e:94:a4:12:2e:da:82:ad:51:
96:7e:9f:69:16:39:2f:8f:ba:3e:c0:b9:b8:d8:39:
ba:53:1d:6a:ff:e1:cf:99:80:3c:27:fe:38:73:6d:
32:c5:09:af:d4:30:28:ca:81:10:6a:46:f6:fb:78:
80:0d:6b:19:96:9d:ab:71:2a:af:fc:e1:fb:f0:86:
2f:85:c6:02:10:ea:05:30:37:43:62:f9:19:83:cc:
83:60:36:7a:cd:db:37:25:5b:7b:49:7f:02:f5:f4:
d8:99:12:be:c2:ad:f9:4b:e6:20:62:b5:a7:8b:0a:
f4:bf:72:f0:92:89:82:8f:77:b4:fc:29:25:7b:cc:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6F:D7:3E:6C:64:BC:6D:D9:FE:C9:2F:87:32:B7:6A:69:71:E3:89
X509v3 Authority Key Identifier:
keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:67:bf:d3:ba:ef:7a:ed:91:bc:a2:fe:06:3b:02:c3:e5:93:
b7:6d:89:fb:9e:d1:e6:be:90:65:fa:4e:ab:ad:cf:af:d2:0b:
fc:22:15:0a:27:06:94:e3:7a:c0:ce:4a:df:2c:22:e9:1b:3f:
d3:c5:a8:67:9b:a1:2e:3e:66:d0:ef:d3:3d:c5:e7:b9:0f:6a:
5b:85:2d:29:b7:61:6b:86:23:43:7e:c1:9f:a7:38:07:98:a4:
bc:7c:ab:28:3b:85:5c:03:6e:03:0c:51:44:96:79:18:69:c0:
c3:b5:7e:dc:a3:42:eb:84:19:eb:c9:29:03:54:0f:87:4c:69:
3e:4c:a9:5f:b4:1d:f8:07:cf:de:58:4b:9a:63:82:e0:bc:b7:
39:54:23:53:93:1a:75:30:6d:86:b9:cf:79:4f:d9:b5:12:ba:
bc:7b:e8:c5:03:2f:b0:65:b7:57:42:d6:e7:fa:69:ff:8b:b4:
03:86:df:29:2a:39:b1:37:9a:26:5e:05:86:2f:a5:95:33:b9:
10:2d:e5:8c:71:af:81:08:ff:6d:82:29:5f:9c:29:7b:56:60:
6b:9e:02:05:96:e2:ce:bf:f7:0c:ee:29:d1:69:20:b8:a5:9e:
b1:3d:97:9e:0a:83:3c:85:c8:51:84:83:22:ba:61:5c:1b:0b:
40:97:80:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KVn+fFfyPY4JtsD4HDCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmNkOTQ1NWUxZTU1YTVlMWQ2MDFiZDRhODU3NGI1YWZk
NTQwNzUwHhcNMjUwMTMxMDcwMDM2WhcNMjUwMjAxMDcwMDM2WjAzMTEwLwYDVQQD
EygxODZmZDczZTZjNjRiYzZkZDlmZWM5MmY4NzMyYjc2YTY5NzFlMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8trE9eCxUfmIaLfPP72URIvyStT
FP3UsqxrlmQOnVMu5AsVUnBznaDmml8A7vgxE9qEosd695FGXsLaMUF21YmT1zp8
8BIYC7eGM9wAwE0hRQULo4Q3AUSigsF8sN4Bee0ltOhHXKVRKGkevNe2vMpLRRKL
gf37NbHzc4qelKQSLtqCrVGWfp9pFjkvj7o+wLm42Dm6Ux1q/+HPmYA8J/44c20y
xQmv1DAoyoEQakb2+3iADWsZlp2rcSqv/OH78IYvhcYCEOoFMDdDYvkZg8yDYDZ6
zds3JVt7SX8C9fTYmRK+wq35S+YgYrWniwr0v3LwkomCj3e0/Ckle8zlBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhv1z5sZLxt2f7JL4cyt2ppceOJMB8GA1UdIwQY
MBaAFP682UVeHlWl4dYBvUqFdLWv1UB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZGY3MDEtMjBkMi00YzRmLWFjOTQt
MTYxMjdjOGE3ZWFjLzEvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ZGY3MDEtMjBkMi00YzRmLWFjOTQtMTYxMjdjOGE3ZWFj
LzEvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2e/07rv
eu2RvKL+BjsCw+WTt22J+57R5r6QZfpOq63Pr9IL/CIVCicGlON6wM5K3ywi6Rs/
08WoZ5uhLj5m0O/TPcXnuQ9qW4UtKbdha4YjQ37Bn6c4B5ikvHyrKDuFXANuAwxR
RJZ5GGnAw7V+3KNC64QZ68kpA1QPh0xpPkypX7Qd+AfP3lhLmmOC4Ly3OVQjU5Ma
dTBthrnPeU/ZtRK6vHvoxQMvsGW3V0LW5/pp/4u0A4bfKSo5sTeaJl4Fhi+llTO5
EC3ljHGvgQj/bYIpX5wpe1Zga54CBZbizr/3DO4p0WkguKWesT2XngqDPIXIUYSD
IrphXBsLQJeAfg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:34 2025 by rpki-client on console-fra.rpki-client.org