Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.mft
File: _ocU-XQUakcmThHuhpWPRnj3Apg.mft (raw, json)
Hash identifier: Jq8ivWJ52ZAWJJ9tbud7YnTefd4VzhoeVJNb3mKJ0TQ=
Subject key identifier: 79:7E:63:40:38:D3:B4:40:E2:AF:01:A5:D4:34:36:7A:C4:3D:C9:CC
Authority key identifier: FE:87:14:F9:74:14:6A:47:26:4E:11:EE:86:95:8F:46:78:F7:02:98
Certificate issuer: /CN=fe8714f974146a47264e11ee86958f4678f70298
Certificate serial: 019510C6FA47DF7D097F89A790D1123F54C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ocU-XQUakcmThHuhpWPRnj3Apg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.mft
Manifest number: 0BFC
Signing time: Sun 16 Feb 2025 22:00:30 +0000
Manifest this update: Sun 16 Feb 2025 22:00:30 +0000
Manifest next update: Mon 17 Feb 2025 22:00:30 +0000
Files and hashes: 1: _ocU-XQUakcmThHuhpWPRnj3Apg.crl (hash: G147IGx7DtxHdOrwMgHBeDC4RBCl7PjyXahb7QqaERw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ocU-XQUakcmThHuhpWPRnj3Apg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:fa:47:df:7d:09:7f:89:a7:90:d1:12:3f:54:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8714f974146a47264e11ee86958f4678f70298
Validity
Not Before: Feb 16 22:00:30 2025 GMT
Not After : Feb 17 22:00:30 2025 GMT
Subject: CN=797e634038d3b440e2af01a5d434367ac43dc9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:7e:b2:6f:3f:b2:62:54:3f:52:ad:5d:86:
bf:e7:86:30:a3:38:cb:68:a4:6c:45:f3:84:da:ae:
91:18:9b:78:fa:d2:d1:74:97:87:50:aa:db:cb:d4:
3a:4f:d5:45:09:ce:00:7c:4a:42:6e:88:c7:29:18:
0d:9c:1d:e6:dc:1f:b9:6c:51:35:ff:24:40:2b:e6:
d3:e9:e6:7a:17:ad:61:c3:b2:d6:ba:13:f9:c1:90:
6e:74:c8:4c:20:82:13:62:a6:da:c7:57:7a:2e:2f:
c4:b4:6f:61:6a:88:81:28:1f:8f:ad:70:0c:f4:81:
86:63:bd:b7:01:dd:62:b3:44:ec:f6:f1:87:f4:c5:
82:22:f3:52:f2:38:d2:f9:bd:75:43:22:f3:d1:ec:
5f:0d:94:fa:4e:b3:d8:80:de:34:ad:78:a0:26:ca:
0b:46:27:91:47:86:bf:74:28:1b:fb:92:0e:6c:7a:
f3:44:e6:6b:21:16:66:a5:d8:e1:5a:d2:9f:2b:c3:
04:87:e3:4a:4b:cf:7c:b7:a4:db:7a:b4:22:26:56:
83:98:8a:7a:6a:ea:5b:6d:cc:b0:06:d0:50:4a:5b:
e4:c8:75:c3:46:68:2c:dd:87:db:54:7e:35:70:f5:
85:bf:0c:db:a8:89:c9:53:b5:01:b5:a8:92:52:ba:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7E:63:40:38:D3:B4:40:E2:AF:01:A5:D4:34:36:7A:C4:3D:C9:CC
X509v3 Authority Key Identifier:
keyid:FE:87:14:F9:74:14:6A:47:26:4E:11:EE:86:95:8F:46:78:F7:02:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ocU-XQUakcmThHuhpWPRnj3Apg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c4:f1:c7:ac:cf:58:60:e9:29:08:41:de:f0:4f:2b:9b:8e:
33:6e:af:c0:b0:77:e0:10:86:06:71:27:ca:09:af:7c:f1:b4:
66:0d:3e:07:26:4e:97:55:e7:c9:4d:4e:67:1b:9d:fc:c2:19:
b5:17:eb:5b:c3:e8:cb:c3:8e:25:8a:d7:65:60:c9:16:b6:d1:
86:58:7b:1d:0e:de:6a:98:51:45:1b:8e:4c:14:67:0b:db:a8:
36:5c:35:1f:96:28:3e:35:c8:55:5e:d0:e2:a3:84:af:5b:64:
a0:b6:1e:81:ca:70:69:fc:ac:f0:e6:7e:99:ad:9c:c3:f5:a2:
2c:2d:b0:99:3c:3a:22:25:62:5d:95:0b:21:98:67:14:b5:d0:
ab:5b:2f:76:f1:b7:0b:92:bc:a6:12:b3:7d:b5:ec:e2:ce:26:
7b:a0:e4:7d:6f:17:1d:0d:af:e4:19:bd:eb:d6:ac:10:6a:70:
88:2d:bf:6e:bb:a9:69:2d:60:65:39:82:d1:71:db:af:fb:b1:
41:f9:d2:e4:10:0a:e7:7f:a1:df:23:86:b8:c2:7d:0d:60:d7:
31:01:a8:cf:c0:55:fe:7b:fe:dd:02:d7:db:1d:47:3c:58:9e:
94:36:22:21:b4:40:67:48:d5:92:a3:ed:cf:17:d8:c6:bb:22:
25:4e:07:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxvpH330Jf4mnkNESP1TIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlODcxNGY5NzQxNDZhNDcyNjRlMTFlZTg2OTU4ZjQ2Nzhm
NzAyOTgwHhcNMjUwMjE2MjIwMDMwWhcNMjUwMjE3MjIwMDMwWjAzMTEwLwYDVQQD
Eyg3OTdlNjM0MDM4ZDNiNDQwZTJhZjAxYTVkNDM0MzY3YWM0M2RjOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43p+sm8/smJUP1KtXYa/54YwozjL
aKRsRfOE2q6RGJt4+tLRdJeHUKrby9Q6T9VFCc4AfEpCbojHKRgNnB3m3B+5bFE1
/yRAK+bT6eZ6F61hw7LWuhP5wZBudMhMIIITYqbax1d6Li/EtG9haoiBKB+PrXAM
9IGGY723Ad1is0Ts9vGH9MWCIvNS8jjS+b11QyLz0exfDZT6TrPYgN40rXigJsoL
RieRR4a/dCgb+5IObHrzROZrIRZmpdjhWtKfK8MEh+NKS898t6TberQiJlaDmIp6
aupbbcywBtBQSlvkyHXDRmgs3YfbVH41cPWFvwzbqInJU7UBtaiSUrozBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl+Y0A407RA4q8BpdQ0NnrEPcnMMB8GA1UdIwQY
MBaAFP6HFPl0FGpHJk4R7oaVj0Z49wKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX29jVS1YUVVha2NtVGhIdWhwV1BSbmozQXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jZTNhMzktNWJhYS00YzhkLWFlNmYt
YzU1OTNkMTQ2MTdiLzEvX29jVS1YUVVha2NtVGhIdWhwV1BSbmozQXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jZTNhMzktNWJhYS00YzhkLWFlNmYtYzU1OTNkMTQ2MTdi
LzEvX29jVS1YUVVha2NtVGhIdWhwV1BSbmozQXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcTxx6zP
WGDpKQhB3vBPK5uOM26vwLB34BCGBnEnygmvfPG0Zg0+ByZOl1XnyU1OZxud/MIZ
tRfrW8Poy8OOJYrXZWDJFrbRhlh7HQ7eaphRRRuOTBRnC9uoNlw1H5YoPjXIVV7Q
4qOEr1tkoLYegcpwafys8OZ+ma2cw/WiLC2wmTw6IiViXZULIZhnFLXQq1svdvG3
C5K8phKzfbXs4s4me6DkfW8XHQ2v5Bm969asEGpwiC2/brupaS1gZTmC0XHbr/ux
QfnS5BAK53+h3yOGuMJ9DWDXMQGoz8BV/nv+3QLX2x1HPFielDYiIbRAZ0jVkqPt
zxfYxrsiJU4HXw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:30 2025 by rpki-client