Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
File: aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json)
Hash identifier: wXQgxnDG7MN47CBChePOKL1gMZiHbWi4RHblOCtNt4o=
Subject key identifier: 1D:1F:14:14:9C:0B:BF:5C:74:D1:E8:57:00:36:D0:7E:27:1F:9B:22
Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
Certificate issuer: /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Certificate serial: 019510C78EF94E86F73589B2B84C31859B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
Manifest number: 10A6
Signing time: Sun 16 Feb 2025 22:01:08 +0000
Manifest this update: Sun 16 Feb 2025 22:01:08 +0000
Manifest next update: Mon 17 Feb 2025 22:01:08 +0000
Files and hashes: 1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: S78HeOgXMuh8bklyIrNxeP+isHwcHCO3VC1Cpt3tf/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:8e:f9:4e:86:f7:35:89:b2:b8:4c:31:85:9b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Validity
Not Before: Feb 16 22:01:08 2025 GMT
Not After : Feb 17 22:01:08 2025 GMT
Subject: CN=1d1f14149c0bbf5c74d1e8570036d07e271f9b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:d4:fc:2a:1f:30:54:af:95:f9:cf:df:80:
93:d2:c7:66:9c:74:32:e1:92:b6:be:dc:c3:b5:05:
c4:56:4c:0d:8a:9e:f7:22:c1:67:eb:40:66:2f:09:
7b:d9:62:9b:ea:c8:b6:3b:35:05:b7:f8:85:d5:87:
31:e3:33:b2:81:04:70:be:30:4b:0b:0e:9d:4b:0f:
4d:c6:3e:5d:63:4f:d0:0c:78:b8:fb:d3:d8:59:c8:
13:05:6f:70:01:c2:da:ea:4c:24:f3:1a:2e:0e:cd:
e1:44:02:ce:3c:89:2a:c1:c5:c5:34:90:8f:77:a0:
cd:0b:87:8f:17:69:b0:aa:43:b5:38:d3:86:6f:8e:
75:31:67:eb:a8:ac:9c:79:4a:58:5c:21:03:21:b0:
89:f3:8b:ab:dd:e5:62:66:67:b7:ff:60:d2:f7:51:
b2:54:91:61:d7:8a:31:98:ae:b4:e9:6f:64:14:37:
10:ac:38:8d:70:21:9f:e7:a3:5e:14:e5:93:ba:f8:
1e:a4:9e:c2:f4:23:f9:94:0a:c4:71:89:a4:a7:7b:
6f:ec:0b:35:fb:c5:9b:19:c7:c3:84:27:a2:ff:6e:
e1:58:da:4a:99:0d:b9:5f:81:4d:e6:9b:45:ea:b4:
1e:c2:23:09:94:a2:1a:eb:eb:32:84:bd:82:35:77:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:14:14:9C:0B:BF:5C:74:D1:E8:57:00:36:D0:7E:27:1F:9B:22
X509v3 Authority Key Identifier:
keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:89:51:a7:6d:58:98:07:49:a2:08:f2:20:06:fc:3b:9d:c8:
bb:6a:0f:4c:0d:5a:64:ad:60:aa:0c:00:2e:79:a1:2c:08:df:
c2:44:2b:aa:f1:1b:48:61:40:be:d6:54:68:cf:67:c4:a8:ed:
ea:c7:7b:ed:ca:c8:ff:31:f2:7d:b5:f8:32:23:49:f1:58:fb:
69:0e:71:9e:26:fe:93:63:3d:6a:98:ba:3f:79:08:ac:eb:41:
0e:52:ef:bd:c6:84:27:85:6f:db:e5:24:ac:49:fa:2a:4a:71:
74:51:52:29:17:a8:08:fe:62:d3:e2:e1:d9:a3:16:19:1e:0d:
02:22:b9:93:0c:81:c0:f5:df:f2:9c:53:b9:b4:5c:57:a5:90:
57:b0:f3:54:1c:dc:33:01:7a:be:e5:1f:56:d7:dd:77:e1:64:
96:05:da:a2:c9:55:7d:86:ed:a5:fe:0b:f3:0b:1c:b1:7a:cb:
4e:2b:c2:38:bf:30:88:69:0c:0e:6b:68:4c:5e:7a:c1:89:ca:
d2:81:19:0c:06:e5:b2:49:b8:4f:a3:83:61:5a:25:cc:68:23:
ed:a0:d4:d8:c5:22:17:bb:ac:27:52:09:f2:07:49:19:64:e0:
d2:39:96:4d:0d:2c:96:f5:81:51:59:47:a5:f5:a5:e5:d8:98:
86:e2:fd:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx475Tob3NYmyuEwxhZthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NWJmYWNiNWExMzRkMTM4MDVlZWY5NWZkOGZiZDEyZGU2
YTAxZjMwHhcNMjUwMjE2MjIwMTA4WhcNMjUwMjE3MjIwMTA4WjAzMTEwLwYDVQQD
EygxZDFmMTQxNDljMGJiZjVjNzRkMWU4NTcwMDM2ZDA3ZTI3MWY5YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIbU/CofMFSvlfnP34CT0sdmnHQy
4ZK2vtzDtQXEVkwNip73IsFn60BmLwl72WKb6si2OzUFt/iF1Ycx4zOygQRwvjBL
Cw6dSw9Nxj5dY0/QDHi4+9PYWcgTBW9wAcLa6kwk8xouDs3hRALOPIkqwcXFNJCP
d6DNC4ePF2mwqkO1ONOGb451MWfrqKyceUpYXCEDIbCJ84ur3eViZme3/2DS91Gy
VJFh14oxmK606W9kFDcQrDiNcCGf56NeFOWTuvgepJ7C9CP5lArEcYmkp3tv7As1
+8WbGcfDhCei/27hWNpKmQ25X4FN5ptF6rQewiMJlKIa6+syhL2CNXcvnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0fFBScC79cdNHoVwA20H4nH5siMB8GA1UdIwQY
MBaAFGlb+staE00TgF7vlf2PvRLeagHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEt
OTk0Y2NkMTBmYTQ0LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEtOTk0Y2NkMTBmYTQ0
LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABolRp21Y
mAdJogjyIAb8O53Iu2oPTA1aZK1gqgwALnmhLAjfwkQrqvEbSGFAvtZUaM9nxKjt
6sd77crI/zHyfbX4MiNJ8Vj7aQ5xnib+k2M9api6P3kIrOtBDlLvvcaEJ4Vv2+Uk
rEn6KkpxdFFSKReoCP5i0+Lh2aMWGR4NAiK5kwyBwPXf8pxTubRcV6WQV7DzVBzc
MwF6vuUfVtfdd+FklgXaoslVfYbtpf4L8wscsXrLTivCOL8wiGkMDmtoTF56wYnK
0oEZDAblskm4T6ODYVolzGgj7aDU2MUiF7usJ1IJ8gdJGWTg0jmWTQ0slvWBUVlH
pfWl5diYhuL9eA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:42 2025 by rpki-client