Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: MLyRx5RclLNCPG/vsbLJFPWKs0nUI0la5kA5iG23Q7A=
Subject key identifier: A3:8E:E7:0A:4C:41:D4:62:E4:09:C8:0F:5B:6E:10:A7:32:C9:E0:D1
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 01951135469DA3FA8F0ABE8D9781F7C65BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 0798
Signing time: Mon 17 Feb 2025 00:00:58 +0000
Manifest this update: Mon 17 Feb 2025 00:00:58 +0000
Manifest next update: Tue 18 Feb 2025 00:00:58 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: uPXuxGC4uElzkW/Jin+WbzykeKhcdAjG9d+w9eVWTW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:46:9d:a3:fa:8f:0a:be:8d:97:81:f7:c6:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Feb 17 00:00:58 2025 GMT
Not After : Feb 18 00:00:58 2025 GMT
Subject: CN=a38ee70a4c41d462e409c80f5b6e10a732c9e0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:31:12:57:1f:5d:48:62:49:87:9d:b5:d0:
0d:f9:00:d8:8a:bf:4c:ba:f4:50:45:d5:b5:d0:4e:
14:aa:25:dc:f8:3a:58:21:55:c2:e1:57:bc:b9:f3:
04:e4:04:52:1c:eb:d6:09:f7:47:61:7f:84:58:7a:
44:01:0e:29:67:b0:81:0a:48:fc:a8:cd:87:34:cf:
8d:3c:b6:f0:24:8b:26:c1:14:be:8e:3d:af:43:9b:
a0:57:61:89:39:95:64:b3:78:18:16:1c:2d:69:4b:
98:73:3a:64:a7:82:dd:aa:4a:aa:37:33:03:f2:17:
d3:e4:e5:bd:96:9d:1b:35:59:2e:25:ca:62:33:82:
d1:ff:1a:3b:d4:d5:16:aa:00:24:1b:57:c4:ea:fa:
ec:4b:1a:d5:24:a4:dd:f2:41:81:32:99:53:74:5f:
a6:81:1d:df:59:71:e2:0f:84:a0:d0:ce:c8:47:43:
17:70:6f:ba:77:80:7d:aa:ac:8c:f3:14:1e:21:4f:
57:56:42:22:ce:b4:df:76:bd:95:4b:c8:8a:05:df:
11:00:76:11:32:59:77:c2:de:fe:10:1d:a7:75:7d:
2b:9b:41:75:c7:8d:62:7b:16:98:3e:82:4f:f7:18:
aa:83:39:f0:c2:b9:0e:4e:86:f5:12:32:8d:14:d4:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:E7:0A:4C:41:D4:62:E4:09:C8:0F:5B:6E:10:A7:32:C9:E0:D1
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fd:3b:20:47:02:69:3e:23:80:44:73:42:72:04:b4:1d:43:
75:8c:39:89:05:8b:da:7c:da:04:4c:8a:5d:2f:c3:f6:a8:12:
8d:fe:18:7c:b2:f9:c2:0b:35:5e:40:ea:dc:67:88:eb:08:96:
8b:77:21:91:d0:a1:cb:85:83:73:52:b6:5b:3e:1a:87:4c:b4:
7b:30:6b:76:f1:36:46:13:21:ab:67:33:70:ec:a0:8c:07:1e:
cc:ad:e0:1f:14:19:b0:4a:4c:e4:92:6f:3d:c7:8b:89:33:c2:
59:1f:e8:fe:96:6d:6e:e3:09:0c:c9:f6:0b:cb:dd:47:13:d9:
c4:8a:f4:9e:38:39:07:26:17:3a:d0:9f:fd:5e:09:0e:20:6e:
e0:77:13:53:13:64:f9:b5:88:e5:00:23:52:15:a1:03:6f:4d:
be:af:29:31:c1:da:cc:28:a4:db:a4:c4:5a:7f:3e:13:9a:7a:
41:8f:c2:07:50:94:c3:a0:97:e8:01:c0:f0:f4:cc:02:89:c6:
22:56:db:ac:b1:f6:5b:b8:19:0e:2a:a1:98:0e:b8:8c:5c:b7:
31:f0:9c:37:d6:0c:43:0d:5f:d9:b9:6d:a5:ca:fd:75:7c:c0:
be:b1:db:44:e6:86:a4:b2:f7:81:72:ac:06:7b:b0:18:93:bd:
ef:cf:2f:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNUado/qPCr6Nl4H3xlvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MWExYzNjMjU5MDcxYzJiY2JjMjdmNzkxZmQxZTIwZjU4
MGE5NmEwHhcNMjUwMjE3MDAwMDU4WhcNMjUwMjE4MDAwMDU4WjAzMTEwLwYDVQQD
EyhhMzhlZTcwYTRjNDFkNDYyZTQwOWM4MGY1YjZlMTBhNzMyYzllMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JExElcfXUhiSYedtdAN+QDYir9M
uvRQRdW10E4UqiXc+DpYIVXC4Ve8ufME5ARSHOvWCfdHYX+EWHpEAQ4pZ7CBCkj8
qM2HNM+NPLbwJIsmwRS+jj2vQ5ugV2GJOZVks3gYFhwtaUuYczpkp4LdqkqqNzMD
8hfT5OW9lp0bNVkuJcpiM4LR/xo71NUWqgAkG1fE6vrsSxrVJKTd8kGBMplTdF+m
gR3fWXHiD4Sg0M7IR0MXcG+6d4B9qqyM8xQeIU9XVkIizrTfdr2VS8iKBd8RAHYR
Mll3wt7+EB2ndX0rm0F1x41iexaYPoJP9xiqgznwwrkOTob1EjKNFNSGfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOO5wpMQdRi5AnID1tuEKcyyeDRMB8GA1UdIwQY
MBaAFNYaHDwlkHHCvLwn95H9HiD1gKlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NmNkODYtNmRlMS00YzNkLWIwZjct
ODU3MTQwNjY5N2FkLzEvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80NmNkODYtNmRlMS00YzNkLWIwZjctODU3MTQwNjY5N2Fk
LzEvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPf07IEcC
aT4jgERzQnIEtB1DdYw5iQWL2nzaBEyKXS/D9qgSjf4YfLL5wgs1XkDq3GeI6wiW
i3chkdChy4WDc1K2Wz4ah0y0ezBrdvE2RhMhq2czcOygjAcezK3gHxQZsEpM5JJv
PceLiTPCWR/o/pZtbuMJDMn2C8vdRxPZxIr0njg5ByYXOtCf/V4JDiBu4HcTUxNk
+bWI5QAjUhWhA29Nvq8pMcHazCik26TEWn8+E5p6QY/CB1CUw6CX6AHA8PTMAonG
IlbbrLH2W7gZDiqhmA64jFy3MfCcN9YMQw1f2bltpcr9dXzAvrHbROaGpLL3gXKs
BnuwGJO9788vsw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:57 2025 by rpki-client