Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
File: id8L4W7M0-twbmQXlLyQ1PfWeMk.mft (raw, json)
Hash identifier: Q4hD68K5ffDp/UcbE1dDey8ByPpNeV1pJjM/LmUIKQ0=
Subject key identifier: F5:A9:E2:41:62:3E:C2:AB:79:1C:3A:16:DF:E4:88:7E:8C:6F:96:3E
Authority key identifier: 89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
Certificate issuer: /CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Certificate serial: 0194BABB4894F2D4B33F3DB84F1F797C31AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 05:00:23 +0000
Manifest this update: Fri 31 Jan 2025 05:00:23 +0000
Manifest next update: Sat 01 Feb 2025 05:00:23 +0000
Files and hashes: 1: id8L4W7M0-twbmQXlLyQ1PfWeMk.crl (hash: SNo3cBgqJifEGdznAp7zo2Rd+yxuEaN+TizCQtPtGFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:48:94:f2:d4:b3:3f:3d:b8:4f:1f:79:7c:31:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Validity
Not Before: Jan 31 05:00:23 2025 GMT
Not After : Feb 1 05:00:23 2025 GMT
Subject: CN=f5a9e241623ec2ab791c3a16dfe4887e8c6f963e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:60:8e:45:b2:8a:cd:ef:c4:71:c3:7f:5f:
79:ee:69:b6:6c:6c:70:0d:68:74:04:ce:22:76:ea:
2b:0f:64:af:e4:4b:15:2a:43:2d:96:35:7a:3c:0e:
51:f7:d0:8d:b2:73:5c:6b:ed:b6:d7:e3:40:93:e4:
7d:a2:5e:32:d6:e8:de:b5:97:1e:9d:d8:0c:12:10:
a3:f6:f2:9b:55:94:75:3a:24:c8:08:a4:d8:bf:ab:
ff:2b:2c:9a:5d:65:f0:68:ef:55:92:09:cf:2d:85:
97:a4:5d:25:d5:92:ed:c4:0f:49:97:9d:16:98:c8:
49:66:4e:43:eb:0a:07:7c:a8:19:a2:b7:c0:77:6d:
4f:9a:0a:e6:4e:5c:3f:78:8c:dd:0e:92:4a:7c:0a:
93:c9:8e:51:b3:5f:23:24:9e:42:cd:a8:29:2d:47:
96:cb:bd:d8:c1:2e:2e:b8:c6:53:bc:0b:38:37:34:
7f:de:9b:9b:6d:a7:6f:c6:25:58:31:e6:b2:19:b2:
ab:cf:2b:d7:93:c7:5c:76:0d:ab:b0:9f:41:7b:77:
f9:c1:13:5b:f6:25:6a:76:cd:8e:39:fc:98:4f:51:
f5:7c:8e:14:32:1f:70:82:7c:c6:78:61:2b:bd:bc:
b7:f1:e9:83:51:26:a1:89:32:92:2e:ea:5e:bf:07:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:E2:41:62:3E:C2:AB:79:1C:3A:16:DF:E4:88:7E:8C:6F:96:3E
X509v3 Authority Key Identifier:
keyid:89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:84:2f:85:47:2f:d7:a3:dc:71:2f:9a:37:4b:0e:56:e2:d6:
1c:66:60:51:b7:3c:42:78:bd:c5:5b:6e:cc:e3:c1:c4:e2:ee:
6e:ea:54:44:e4:8d:4b:6c:d3:1d:30:cd:71:e0:ff:99:9b:24:
c8:82:d7:86:8e:06:11:54:41:35:ef:c0:05:12:fa:ae:88:2c:
de:2c:69:05:24:8c:f9:77:db:cf:5a:0b:2a:b2:76:3b:44:10:
2a:16:70:3c:37:cf:ec:d7:0d:00:a3:9e:38:95:d2:57:97:60:
79:c3:01:37:96:5c:03:ef:69:41:40:5e:29:1d:72:c7:3f:3c:
f5:8d:ee:e9:3d:60:70:da:9c:bf:31:65:72:1c:6d:aa:a3:bc:
a0:2a:ad:80:4d:16:c0:ae:80:8d:1b:ef:a3:b1:a3:c4:c9:77:
f3:8d:09:ad:17:8a:e0:8f:68:f1:a5:83:29:57:10:3e:2c:ac:
d9:45:7e:48:44:53:5d:78:69:d2:54:63:66:48:b2:20:98:5a:
58:0a:e9:0e:ee:69:47:10:42:9d:52:06:bc:85:21:7b:13:f8:
b9:63:c0:85:5c:3b:aa:1d:16:dc:2e:df:5f:de:30:61:d9:df:
91:64:ee:60:97:90:d4:22:89:67:ba:d7:38:96:81:46:f0:ab:
63:6d:52:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u0iU8tSzPz24Tx95fDGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGYwYmUxNmVjY2QzZWI3MDZlNjQxNzk0YmM5MGQ0Zjdk
Njc4YzkwHhcNMjUwMTMxMDUwMDIzWhcNMjUwMjAxMDUwMDIzWjAzMTEwLwYDVQQD
EyhmNWE5ZTI0MTYyM2VjMmFiNzkxYzNhMTZkZmU0ODg3ZThjNmY5NjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTRgjkWyis3vxHHDf1957mm2bGxw
DWh0BM4iduorD2Sv5EsVKkMtljV6PA5R99CNsnNca+221+NAk+R9ol4y1ujetZce
ndgMEhCj9vKbVZR1OiTICKTYv6v/KyyaXWXwaO9VkgnPLYWXpF0l1ZLtxA9Jl50W
mMhJZk5D6woHfKgZorfAd21PmgrmTlw/eIzdDpJKfAqTyY5Rs18jJJ5CzagpLUeW
y73YwS4uuMZTvAs4NzR/3pubbadvxiVYMeayGbKrzyvXk8dcdg2rsJ9Be3f5wRNb
9iVqds2OOfyYT1H1fI4UMh9wgnzGeGErvby38emDUSahiTKSLupevwd5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWp4kFiPsKreRw6Ft/kiH6Mb5Y+MB8GA1UdIwQY
MBaAFInfC+FuzNPrcG5kF5S8kNT31njJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWQ4TDRXN00wLXR3Ym1RWGxMeVExUGZXZU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC80ZjliZjItNjI1ZS00ZjdjLThmNGYt
MzA4MzllYzBlZWQ5LzEvaWQ4TDRXN00wLXR3Ym1RWGxMeVExUGZXZU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC80ZjliZjItNjI1ZS00ZjdjLThmNGYtMzA4MzllYzBlZWQ5
LzEvaWQ4TDRXN00wLXR3Ym1RWGxMeVExUGZXZU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIQvhUcv
16PccS+aN0sOVuLWHGZgUbc8Qni9xVtuzOPBxOLubupUROSNS2zTHTDNceD/mZsk
yILXho4GEVRBNe/ABRL6rogs3ixpBSSM+Xfbz1oLKrJ2O0QQKhZwPDfP7NcNAKOe
OJXSV5dgecMBN5ZcA+9pQUBeKR1yxz889Y3u6T1gcNqcvzFlchxtqqO8oCqtgE0W
wK6AjRvvo7GjxMl3840JrReK4I9o8aWDKVcQPiys2UV+SERTXXhp0lRjZkiyIJha
WArpDu5pRxBCnVIGvIUhexP4uWPAhVw7qh0W3C7fX94wYdnfkWTuYJeQ1CKJZ7rX
OJaBRvCrY21S5w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:43 2025 by rpki-client on console-fra.rpki-client.org