Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
File: v74mhOFXoAYDw7KrDcUlKF6_64k.mft (raw, json)
Hash identifier: NXQK0hTxfdxo7NPpsIj32ajzy5lEjb5fWeZ3VkiqCB4=
Subject key identifier: 5A:47:86:18:70:DD:06:EA:85:66:44:F3:45:CF:6F:BA:F9:FF:EA:00
Authority key identifier: BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
Certificate issuer: /CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Certificate serial: 0194BBCE578807CAAC4E5B935E0F50641697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
Manifest number: 0103
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: v74mhOFXoAYDw7KrDcUlKF6_64k.crl (hash: xFD0ku1duSwra3YUKgffJ3UnmB7SVXhkt9Fa6Sh+7oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:57:88:07:ca:ac:4e:5b:93:5e:0f:50:64:16:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=5a47861870dd06ea856644f345cf6fbaf9ffea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:0b:02:f7:4b:92:13:40:fb:4e:6b:55:a9:
83:0c:db:8f:1d:af:9e:61:8e:d3:fe:9a:5c:dd:ea:
ff:d6:da:b1:ed:10:31:3d:17:cf:ae:4a:37:78:61:
32:b6:da:b0:15:c8:14:52:02:d2:3f:55:5e:91:78:
90:ca:e0:14:f8:2e:ac:a5:63:6e:f9:06:d3:43:34:
0a:cd:95:d5:63:cf:68:b6:5b:5d:d0:ef:0f:3b:e9:
b6:1d:69:a6:10:e5:5c:26:5f:be:11:2e:1f:ed:e4:
9f:06:49:68:f4:bc:7c:f2:cf:d4:ed:d0:23:2f:71:
86:53:5b:29:97:65:a1:25:7f:eb:ee:1c:54:b0:2b:
9f:4a:c8:9e:dc:d8:4f:34:de:d8:71:6b:de:c9:5a:
8e:81:1c:ed:77:f2:ab:97:fc:09:c4:37:c7:9f:e8:
77:23:f9:cc:01:9c:ad:2b:36:aa:5b:eb:b8:3c:e3:
cd:e7:9f:df:54:00:a5:86:42:7e:03:31:7e:4d:08:
dc:c5:22:3a:15:39:71:fe:bb:87:b3:00:dc:5f:2a:
cd:b2:74:8b:51:52:4a:cd:30:50:8d:22:81:b0:e3:
ca:76:68:3e:3b:0b:c7:f2:21:0f:96:29:e7:ce:dc:
57:c5:b8:92:7e:58:30:6b:c3:55:85:da:de:61:91:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:47:86:18:70:DD:06:EA:85:66:44:F3:45:CF:6F:BA:F9:FF:EA:00
X509v3 Authority Key Identifier:
keyid:BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:72:db:10:8c:4d:5e:94:5e:51:c8:27:6a:f5:73:a1:de:c7:
d5:6a:f3:cb:a6:f7:d2:5b:19:bb:f8:fe:cd:7f:8f:c9:e1:4c:
f8:b8:7a:80:df:6f:0f:fb:1d:e9:66:28:b5:5c:3f:f7:e1:16:
f3:30:df:c8:ed:c4:9b:06:59:78:14:35:ee:90:b1:20:32:61:
31:45:74:0c:5b:f2:aa:f0:7c:7c:b4:22:a1:cf:12:0a:b1:31:
1e:5a:76:e4:a2:f4:1c:43:9b:15:5c:d2:10:36:ef:c8:1e:17:
20:e5:76:03:96:51:4a:c8:ac:84:3e:86:7b:a2:9c:8c:7f:19:
6d:61:16:df:31:dc:ac:3e:e9:bd:e9:53:8e:19:24:dd:87:8e:
6a:3d:05:aa:05:47:b5:55:d8:69:95:9e:8a:e1:1e:70:ed:ca:
33:4a:64:13:2d:2b:02:4c:17:5c:9c:30:03:7b:88:02:7e:c5:
b5:b9:28:58:c7:48:fc:cd:56:46:36:1d:11:9b:73:6b:5c:0b:
80:9b:a2:d6:ec:92:b8:9b:34:fb:a1:a1:67:28:83:30:b2:9f:
4a:b7:a8:ca:9d:89:77:5f:6f:fc:a2:20:34:76:7b:18:2c:62:
48:68:ff:cb:2f:e5:e7:f1:b0:84:b4:85:6e:69:eb:5c:95:10:
95:91:dc:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zleIB8qsTluTXg9QZBaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmUyNjg0ZTE1N2EwMDYwM2MzYjJhYjBkYzUyNTI4NWVi
ZmViODkwHhcNMjUwMTMxMTAwMDQ5WhcNMjUwMjAxMTAwMDQ5WjAzMTEwLwYDVQQD
Eyg1YTQ3ODYxODcwZGQwNmVhODU2NjQ0ZjM0NWNmNmZiYWY5ZmZlYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQILAvdLkhNA+05rVamDDNuPHa+e
YY7T/ppc3er/1tqx7RAxPRfPrko3eGEyttqwFcgUUgLSP1VekXiQyuAU+C6spWNu
+QbTQzQKzZXVY89otltd0O8PO+m2HWmmEOVcJl++ES4f7eSfBklo9Lx88s/U7dAj
L3GGU1spl2WhJX/r7hxUsCufSsie3NhPNN7YcWveyVqOgRztd/Krl/wJxDfHn+h3
I/nMAZytKzaqW+u4POPN55/fVAClhkJ+AzF+TQjcxSI6FTlx/ruHswDcXyrNsnSL
UVJKzTBQjSKBsOPKdmg+OwvH8iEPlinnztxXxbiSflgwa8NVhdreYZG8NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpHhhhw3QbqhWZE80XPb7r5/+oAMB8GA1UdIwQY
MBaAFL++JoThV6AGA8Oyqw3FJShev+uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZDM2MDQtMWI5NC00MjAwLWFlYTQt
ZDhkNDJiOGIzYmEyLzEvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80ZDM2MDQtMWI5NC00MjAwLWFlYTQtZDhkNDJiOGIzYmEy
LzEvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3LbEIxN
XpReUcgnavVzod7H1Wrzy6b30lsZu/j+zX+PyeFM+Lh6gN9vD/sd6WYotVw/9+EW
8zDfyO3EmwZZeBQ17pCxIDJhMUV0DFvyqvB8fLQioc8SCrExHlp25KL0HEObFVzS
EDbvyB4XIOV2A5ZRSsishD6Ge6KcjH8ZbWEW3zHcrD7pvelTjhkk3YeOaj0FqgVH
tVXYaZWeiuEecO3KM0pkEy0rAkwXXJwwA3uIAn7FtbkoWMdI/M1WRjYdEZtza1wL
gJui1uySuJs0+6GhZyiDMLKfSreoyp2Jd19v/KIgNHZ7GCxiSGj/yy/l5/GwhLSF
bmnrXJUQlZHcxw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:49 2025 by rpki-client on console-fra.rpki-client.org