Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier: 0pivYTQkDf4qXLEmpzfMzYxqyYGzDU2BuDFTAXQk9+k=
Subject key identifier: 5F:7D:F8:C2:A0:F7:BB:30:CF:BF:94:9B:82:FC:19:13:AA:3F:09:0C
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial: 0194BA846B074957B66EE7A01E5DB6932EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number: 13B7
Signing time: Fri 31 Jan 2025 04:00:27 +0000
Manifest this update: Fri 31 Jan 2025 04:00:27 +0000
Manifest next update: Sat 01 Feb 2025 04:00:27 +0000
Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: /+FaeI196xFF41IxEwPJyAIXnCH7qIkC1BbWoQBww4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6b:07:49:57:b6:6e:e7:a0:1e:5d:b6:93:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Validity
Not Before: Jan 31 04:00:27 2025 GMT
Not After : Feb 1 04:00:27 2025 GMT
Subject: CN=5f7df8c2a0f7bb30cfbf949b82fc1913aa3f090c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:56:9a:db:59:2b:e5:4b:c8:d5:fb:15:e4:
cc:6a:01:ef:a6:e5:e0:bb:0a:c9:3a:d8:29:e6:b6:
1a:e0:9f:aa:30:d7:17:e6:c1:53:89:1b:96:68:37:
16:94:7b:d8:eb:75:48:27:4f:d9:81:34:32:d0:76:
34:25:87:e4:65:8c:9a:f5:e2:dc:de:cd:32:11:08:
9b:cf:3c:f3:8e:58:2f:84:de:0a:e4:53:10:0c:12:
18:42:12:d4:b7:d3:df:d5:91:42:1f:75:df:d7:dc:
07:33:ac:e1:9d:ee:4e:a4:e7:1c:03:94:73:13:68:
6b:56:a6:da:77:1d:ea:98:0d:d2:53:a4:67:86:84:
ff:35:3a:c6:60:7f:54:b7:59:d0:8c:e4:d2:29:99:
75:63:68:36:bc:bd:00:fe:15:41:99:75:f2:04:1f:
0a:1d:8f:e5:e3:b2:5a:c5:00:82:b9:5a:d6:d6:df:
86:02:e2:f2:d8:c8:b6:b2:a8:02:dc:86:0a:d1:1a:
df:d0:cc:83:32:6f:96:31:6b:58:7b:8e:72:d7:db:
fa:1e:73:e6:74:e1:f3:18:e1:aa:a2:03:7a:de:53:
16:1a:05:74:99:66:a9:71:87:34:8b:5e:eb:6b:66:
d4:39:20:1d:4c:94:3b:ff:92:a1:d9:83:36:49:0e:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7D:F8:C2:A0:F7:BB:30:CF:BF:94:9B:82:FC:19:13:AA:3F:09:0C
X509v3 Authority Key Identifier:
keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2b:5d:08:3b:a7:be:f7:ac:06:fb:54:e9:b5:3b:8a:bc:dd:
c8:db:d4:d5:3a:07:b7:22:0e:a0:fd:f4:d0:d3:50:39:42:9c:
91:3a:52:bd:5e:dc:27:f0:27:05:06:8e:92:5a:cc:71:9a:09:
4e:d8:cd:33:7a:b8:1b:22:7e:3e:1f:95:fb:27:a4:f9:9a:4e:
34:5a:b2:01:30:b1:e9:bf:31:73:1e:3c:52:79:31:2d:9e:4b:
ee:67:75:61:3d:11:a2:3b:9f:8e:7d:43:e3:54:8d:7c:86:8d:
8f:2c:c5:03:55:24:33:c6:6d:32:89:ee:38:c4:70:1f:4c:f3:
45:73:4c:1b:60:0d:01:00:fd:79:90:37:78:64:0c:3d:fc:1a:
27:50:c5:f3:c6:56:bd:e1:6a:6a:10:7e:ee:23:29:cf:cd:b8:
42:c0:b4:c5:ec:e7:3a:32:06:e4:27:64:f3:59:0d:e2:72:7b:
36:65:46:f5:bc:d0:06:53:9c:37:fc:45:22:ab:c0:42:c0:33:
b9:f0:42:a4:42:7f:99:a7:81:f9:f5:9d:5c:8c:c9:21:c3:05:
be:e4:c3:c8:fb:b7:89:c1:d0:f1:82:f6:79:97:be:c1:a2:a3:
bc:68:7f:0d:ed:07:32:65:b5:a6:54:0f:ef:b0:d6:f6:59:8b:
19:a1:b2:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hGsHSVe2buegHl22ky62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDA2ZDYwZWNjYzE3YzU4NjMzN2EwZTM2NGQ3YmU5ODAx
ZGU5ZjEwHhcNMjUwMTMxMDQwMDI3WhcNMjUwMjAxMDQwMDI3WjAzMTEwLwYDVQQD
Eyg1ZjdkZjhjMmEwZjdiYjMwY2ZiZjk0OWI4MmZjMTkxM2FhM2YwOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8FWmttZK+VLyNX7FeTMagHvpuXg
uwrJOtgp5rYa4J+qMNcX5sFTiRuWaDcWlHvY63VIJ0/ZgTQy0HY0JYfkZYya9eLc
3s0yEQibzzzzjlgvhN4K5FMQDBIYQhLUt9Pf1ZFCH3Xf19wHM6zhne5OpOccA5Rz
E2hrVqbadx3qmA3SU6RnhoT/NTrGYH9Ut1nQjOTSKZl1Y2g2vL0A/hVBmXXyBB8K
HY/l47JaxQCCuVrW1t+GAuLy2Mi2sqgC3IYK0Rrf0MyDMm+WMWtYe45y19v6HnPm
dOHzGOGqogN63lMWGgV0mWapcYc0i17ra2bUOSAdTJQ7/5Kh2YM2SQ6ljwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF99+MKg97swz7+Um4L8GROqPwkMMB8GA1UdIwQY
MBaAFLEAbWDszBfFhjN6DjZNe+mAHenxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FCdFlPek1GOFdHTTNvT05rMTc2WUFkNmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kNWQ5YTAtZTY1NS00NWRhLTk0NDIt
NTY1OTE1NzFkMTYxLzEvc1FCdFlPek1GOFdHTTNvT05rMTc2WUFkNmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9kNWQ5YTAtZTY1NS00NWRhLTk0NDItNTY1OTE1NzFkMTYx
LzEvc1FCdFlPek1GOFdHTTNvT05rMTc2WUFkNmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATStdCDun
vvesBvtU6bU7irzdyNvU1ToHtyIOoP300NNQOUKckTpSvV7cJ/AnBQaOklrMcZoJ
TtjNM3q4GyJ+Ph+V+yek+ZpONFqyATCx6b8xcx48UnkxLZ5L7md1YT0Rojufjn1D
41SNfIaNjyzFA1UkM8ZtMonuOMRwH0zzRXNMG2ANAQD9eZA3eGQMPfwaJ1DF88ZW
veFqahB+7iMpz824QsC0xeznOjIG5Cdk81kN4nJ7NmVG9bzQBlOcN/xFIqvAQsAz
ufBCpEJ/maeB+fWdXIzJIcMFvuTDyPu3icHQ8YL2eZe+waKjvGh/De0HMmW1plQP
77DW9lmLGaGylQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:35 2025 by rpki-client on console-fra.rpki-client.org