Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File: E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier: OCzbV18dNDyWh/4W3hw+o1ONYy7sU6svTReLoBF81jU=
Subject key identifier: 4A:BB:31:07:20:CE:9D:CA:E2:AD:CC:14:F0:93:35:02:2F:F2:F5:2E
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer: /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial: 019511A264CE85FC4F48D9738C269B699E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 02:00:10 +0000
Manifest this update: Mon 17 Feb 2025 02:00:10 +0000
Manifest next update: Tue 18 Feb 2025 02:00:10 +0000
Files and hashes: 1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: sMsAZ5RrxR+5jrOoSzdsNng5QOq3XGy/gqsRg3xQ5Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:64:ce:85:fc:4f:48:d9:73:8c:26:9b:69:9e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Validity
Not Before: Feb 17 02:00:10 2025 GMT
Not After : Feb 18 02:00:10 2025 GMT
Subject: CN=4abb310720ce9dcae2adcc14f09335022ff2f52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:77:6a:8a:16:93:ea:0c:ad:52:9e:21:3f:
12:bc:48:9d:55:72:f4:82:26:e3:45:73:a1:38:e8:
06:0c:ea:51:f3:0d:31:12:43:30:32:9d:b9:e6:65:
ac:01:f9:5f:d9:38:8e:c3:dd:2e:45:5d:21:46:cb:
57:19:76:ac:97:b6:d6:26:7b:7c:a2:06:72:55:34:
21:7a:54:d6:16:08:91:14:67:69:ef:50:f7:e8:e1:
5c:53:9a:e8:19:43:9c:6b:f2:16:e6:14:3b:14:7e:
4b:07:61:e9:c6:62:8e:f3:29:8d:01:f3:90:20:8d:
0f:eb:4d:09:5d:39:27:be:d4:97:68:c0:7c:82:80:
84:be:3a:6e:e9:ad:c3:74:d6:7b:a3:8c:dc:f1:20:
aa:11:e4:b9:76:fd:66:b3:ae:d4:81:a4:f9:8b:fb:
f6:89:b3:c9:f7:e7:2d:56:0b:b8:71:f1:9d:07:c2:
95:3e:8d:1b:a5:13:a5:4e:f0:32:aa:d6:38:9a:0a:
98:cf:5a:a8:73:a1:07:d2:50:cc:b4:6f:ec:f5:fd:
bb:79:67:4c:bf:e0:e9:6e:36:a5:0e:c5:bf:16:87:
38:8f:26:9f:18:00:67:77:cc:a8:60:0a:e4:d1:48:
12:1e:ae:5c:2c:5d:33:01:b4:17:c6:03:c1:51:2a:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BB:31:07:20:CE:9D:CA:E2:AD:CC:14:F0:93:35:02:2F:F2:F5:2E
X509v3 Authority Key Identifier:
keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:04:60:43:03:52:1c:2b:18:16:17:ef:ce:e4:cf:36:95:fc:
49:76:22:0b:14:0c:67:52:3a:ff:43:6b:9a:e0:c3:77:e2:6c:
e1:90:93:7e:70:b2:e7:3f:57:3e:c2:5b:02:e9:5a:9b:39:95:
63:3d:4d:86:d8:6d:d4:c3:bd:b1:95:65:bf:a1:d1:a4:90:2f:
a7:48:e7:73:0b:73:06:92:b0:49:fb:a9:d9:82:f6:a3:ca:ef:
96:c0:cb:94:45:d2:14:8d:22:9b:60:e2:8c:44:9e:3b:42:1a:
7c:6f:4f:a4:5e:c4:72:30:d6:34:31:fe:27:7f:6a:90:aa:ff:
7f:19:4b:a6:a8:db:b0:57:74:59:e4:1c:1e:22:e1:b4:cd:86:
0f:61:59:ad:54:67:c2:56:b9:2c:0d:19:88:e8:8d:0c:4a:21:
15:91:12:a2:24:3b:d7:f2:0a:8c:f5:dc:24:e0:83:86:b8:8c:
25:74:7b:93:25:93:7c:cb:e3:b1:06:f6:a9:7a:7c:54:6b:81:
e2:fd:c9:1b:a3:aa:74:6b:c2:90:08:fb:e9:cc:ac:5e:10:85:
6f:f8:36:61:5e:5e:37:2a:28:06:58:bd:f4:d1:25:43:05:d4:
b9:d5:af:e7:b2:56:69:b3:ea:77:8e:3c:34:69:7c:b1:e8:2d:
ee:b8:de:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURomTOhfxPSNlzjCabaZ48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjdhNTkyMWE0ZjE0OGM3OGFhNmMyMWY4NGYyY2ZjOGQ4
OGU5YzkwHhcNMjUwMjE3MDIwMDEwWhcNMjUwMjE4MDIwMDEwWjAzMTEwLwYDVQQD
Eyg0YWJiMzEwNzIwY2U5ZGNhZTJhZGNjMTRmMDkzMzUwMjJmZjJmNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkp3aooWk+oMrVKeIT8SvEidVXL0
gibjRXOhOOgGDOpR8w0xEkMwMp255mWsAflf2TiOw90uRV0hRstXGXasl7bWJnt8
ogZyVTQhelTWFgiRFGdp71D36OFcU5roGUOca/IW5hQ7FH5LB2HpxmKO8ymNAfOQ
II0P600JXTknvtSXaMB8goCEvjpu6a3DdNZ7o4zc8SCqEeS5dv1ms67UgaT5i/v2
ibPJ9+ctVgu4cfGdB8KVPo0bpROlTvAyqtY4mgqYz1qoc6EH0lDMtG/s9f27eWdM
v+DpbjalDsW/Foc4jyafGABnd8yoYArk0UgSHq5cLF0zAbQXxgPBUSrIGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEq7MQcgzp3K4q3MFPCTNQIv8vUuMB8GA1UdIwQY
MBaAFBNnpZIaTxSMeKpsIfhPLPyNiOnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kYjc1NWEtMWRiOS00YTY5LWE5YmQt
NGY1ZWIyYzg4YzI4LzEvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kYjc1NWEtMWRiOS00YTY5LWE5YmQtNGY1ZWIyYzg4YzI4
LzEvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgRgQwNS
HCsYFhfvzuTPNpX8SXYiCxQMZ1I6/0NrmuDDd+Js4ZCTfnCy5z9XPsJbAulamzmV
Yz1Nhtht1MO9sZVlv6HRpJAvp0jncwtzBpKwSfup2YL2o8rvlsDLlEXSFI0im2Di
jESeO0IafG9PpF7EcjDWNDH+J39qkKr/fxlLpqjbsFd0WeQcHiLhtM2GD2FZrVRn
wla5LA0ZiOiNDEohFZESoiQ71/IKjPXcJOCDhriMJXR7kyWTfMvjsQb2qXp8VGuB
4v3JG6OqdGvCkAj76cysXhCFb/g2YV5eNyooBli99NElQwXUudWv57JWabPqd448
NGl8segt7rjekA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:40 2025 by rpki-client