Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File: 7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier: oHbyACu79ThwM5VjT0c03bzhXoSY/axbWI0NU21wsU0=
Subject key identifier: B1:58:34:60:0E:51:EA:F9:E4:5F:B0:4F:8D:C5:84:C5:5A:CF:79:4F
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer: /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial: 0194BABBB0EB4299E9EF558BD1C8CBDC46A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:50 +0000
Manifest this update: Fri 31 Jan 2025 05:00:50 +0000
Manifest next update: Sat 01 Feb 2025 05:00:50 +0000
Files and hashes: 1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: yDc0RpxRj21JX0fDO/YGTonxSNCeDuwsxpd4hvTKbDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:b0:eb:42:99:e9:ef:55:8b:d1:c8:cb:dc:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Validity
Not Before: Jan 31 05:00:50 2025 GMT
Not After : Feb 1 05:00:50 2025 GMT
Subject: CN=b15834600e51eaf9e45fb04f8dc584c55acf794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:db:89:43:37:a2:8a:cd:79:77:95:1b:9e:
39:45:a1:6e:6b:b3:a1:37:24:ce:98:d6:01:79:04:
83:8f:dc:ac:05:4d:c0:1e:e4:e9:bd:1a:d8:7c:80:
98:56:32:8d:23:e7:0a:fd:43:61:54:ea:67:7e:4d:
3b:87:f8:94:eb:68:98:66:3a:9a:5a:20:3e:04:98:
48:30:95:c4:6f:b2:29:0c:46:f7:64:58:7f:2b:cd:
b8:95:ad:95:c4:cd:d6:56:ca:7b:1f:16:f5:a7:f0:
a7:8a:24:4c:18:d6:9f:9d:e8:f8:5e:da:ae:f4:51:
06:b5:64:64:6c:54:2c:30:f1:8e:e7:08:d8:c7:45:
79:6d:eb:16:c0:5f:d3:47:72:82:cb:9c:ba:72:c7:
b4:40:53:8f:17:65:8d:fc:fd:47:fa:94:09:8e:37:
e2:2e:ea:5f:1d:aa:c8:14:c1:76:7d:b0:95:94:59:
2a:72:48:cb:65:83:01:1a:6e:19:98:01:e9:39:73:
34:9d:5a:da:d8:9b:75:22:ed:b1:4b:29:42:b1:e9:
22:e6:ad:b9:36:e3:a0:96:4f:74:5d:40:55:72:8c:
37:5f:9b:98:94:55:08:78:63:cf:f3:ed:30:5b:bb:
d5:43:39:e2:5c:e3:aa:4e:7b:aa:10:fd:4d:24:45:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:58:34:60:0E:51:EA:F9:E4:5F:B0:4F:8D:C5:84:C5:5A:CF:79:4F
X509v3 Authority Key Identifier:
keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:10:6a:70:7b:ab:b3:2a:b5:e5:f8:df:58:68:db:93:7d:d8:
e1:58:99:1b:9d:f9:e0:1f:9a:bf:d8:c8:cd:bb:a1:a5:5f:27:
eb:c1:59:e0:b2:c9:79:2f:29:eb:38:34:7e:46:2f:2d:c6:b8:
07:64:6f:b2:82:07:b9:2b:5f:04:39:07:67:81:0e:94:6d:e6:
66:7a:13:b4:6b:44:de:0e:ae:48:cd:d5:a5:c0:90:36:05:62:
cd:81:ac:f4:cf:76:36:8e:37:24:55:83:e3:e6:f8:15:cf:b6:
c8:16:74:31:8d:d7:c3:1b:ec:bc:6b:12:a6:59:5c:74:ab:d3:
25:60:05:6d:7b:03:86:f9:a8:8c:77:56:cd:40:f6:b6:14:49:
da:f2:19:32:01:b7:7e:47:c8:7f:e5:5e:92:97:a8:69:72:df:
29:f8:ce:ea:3c:e8:37:0c:e8:60:1f:dd:e2:9d:63:5a:29:b3:
0b:4f:11:3b:96:b6:f4:65:98:85:d4:5e:19:9a:8e:4d:c4:63:
c8:87:39:9f:94:71:9d:8f:ff:7b:f0:16:fd:80:6b:be:52:b0:
70:98:00:01:67:71:f2:83:8c:e2:d9:80:13:21:90:4d:c4:f1:
cb:2a:4a:38:44:fe:4b:53:ac:7a:6b:36:47:6e:1b:86:2e:b3:
d1:32:84:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u7DrQpnp71WL0cjL3EakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjA3OGY3NWVhM2Q1MzU4ZmNjYTQ2NmM3NTVkNzVkMTIz
MGY4ZDgwHhcNMjUwMTMxMDUwMDUwWhcNMjUwMjAxMDUwMDUwWjAzMTEwLwYDVQQD
EyhiMTU4MzQ2MDBlNTFlYWY5ZTQ1ZmIwNGY4ZGM1ODRjNTVhY2Y3OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yfbiUM3oorNeXeVG545RaFua7Oh
NyTOmNYBeQSDj9ysBU3AHuTpvRrYfICYVjKNI+cK/UNhVOpnfk07h/iU62iYZjqa
WiA+BJhIMJXEb7IpDEb3ZFh/K824la2VxM3WVsp7Hxb1p/CniiRMGNafnej4Xtqu
9FEGtWRkbFQsMPGO5wjYx0V5besWwF/TR3KCy5y6cse0QFOPF2WN/P1H+pQJjjfi
LupfHarIFMF2fbCVlFkqckjLZYMBGm4ZmAHpOXM0nVra2Jt1Iu2xSylCseki5q25
NuOglk90XUBVcow3X5uYlFUIeGPP8+0wW7vVQzniXOOqTnuqEP1NJEVfXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFYNGAOUer55F+wT43FhMVaz3lPMB8GA1UdIwQY
MBaAFO6wePdeo9U1j8ykZsdV110SMPjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMt
ODIxNzA3ZTJjMDAyLzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMtODIxNzA3ZTJjMDAy
LzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1xBqcHur
syq15fjfWGjbk33Y4ViZG5354B+av9jIzbuhpV8n68FZ4LLJeS8p6zg0fkYvLca4
B2RvsoIHuStfBDkHZ4EOlG3mZnoTtGtE3g6uSM3VpcCQNgVizYGs9M92No43JFWD
4+b4Fc+2yBZ0MY3XwxvsvGsSpllcdKvTJWAFbXsDhvmojHdWzUD2thRJ2vIZMgG3
fkfIf+VekpeoaXLfKfjO6jzoNwzoYB/d4p1jWimzC08RO5a29GWYhdReGZqOTcRj
yIc5n5RxnY//e/AW/YBrvlKwcJgAAWdx8oOM4tmAEyGQTcTxyypKOET+S1Osems2
R24bhi6z0TKE9w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:02 2025 by rpki-client on console-fra.rpki-client.org