Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
File: U7gc6zN9LdQOYwonBEfAmVk5jBE.mft (raw, json)
Hash identifier: DBC4XEBNyTzDNyPrKy3aEk9UkEBJ6m8MJwYEVgDTfvA=
Subject key identifier: 23:AB:88:F9:F8:C0:4F:D5:17:D9:CC:0E:6B:DF:46:BF:EA:48:2E:BE
Authority key identifier: 53:B8:1C:EB:33:7D:2D:D4:0E:63:0A:27:04:47:C0:99:59:39:8C:11
Certificate issuer: /CN=53b81ceb337d2dd40e630a270447c09959398c11
Certificate serial: 0195116BB26E8EF8279C3B0931494BDB7277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7gc6zN9LdQOYwonBEfAmVk5jBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
Manifest number: 091E
Signing time: Mon 17 Feb 2025 01:00:25 +0000
Manifest this update: Mon 17 Feb 2025 01:00:25 +0000
Manifest next update: Tue 18 Feb 2025 01:00:25 +0000
Files and hashes: 1: U7gc6zN9LdQOYwonBEfAmVk5jBE.crl (hash: +4Z9jRWS/C3LrSpKXrMzD1kFZl5Zru7tBqLorN5iz8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7gc6zN9LdQOYwonBEfAmVk5jBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b2:6e:8e:f8:27:9c:3b:09:31:49:4b:db:72:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b81ceb337d2dd40e630a270447c09959398c11
Validity
Not Before: Feb 17 01:00:25 2025 GMT
Not After : Feb 18 01:00:25 2025 GMT
Subject: CN=23ab88f9f8c04fd517d9cc0e6bdf46bfea482ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:ce:3f:3e:43:52:af:f9:90:6f:fa:95:9e:
2a:b2:50:db:04:77:80:26:78:dd:63:1f:66:87:ce:
52:a7:bf:3e:e5:4b:e1:9d:75:77:f2:0d:b8:c1:6b:
f8:3e:2d:43:7b:64:23:24:bf:4d:97:96:67:10:4f:
47:dd:31:f2:56:6e:35:26:ba:2f:b7:9a:b9:01:fa:
a5:68:78:76:1a:88:04:0e:9e:ee:d3:78:d9:bc:b0:
95:80:76:84:c5:0f:5b:2f:a3:f9:96:0e:3c:6d:99:
ad:a6:61:85:80:83:d5:e7:51:77:37:1e:c0:9f:bc:
2b:f6:52:45:fa:c6:12:6d:d9:54:a8:34:59:80:e8:
ff:15:6b:4f:c4:45:40:b3:be:a6:2a:37:96:5f:01:
2c:e0:b6:11:dc:73:03:3c:4a:5d:39:2e:71:67:b4:
04:6c:24:87:b3:93:0f:be:e0:73:a8:dd:b6:b3:d0:
f1:81:54:91:26:75:d6:af:70:96:38:39:b6:aa:c7:
35:21:fa:b3:df:86:49:fe:07:f4:0d:b3:99:4a:a8:
f9:c2:c8:47:75:92:5c:25:62:bd:de:a5:93:76:94:
4d:98:1f:88:ba:24:22:f5:f5:1b:21:ed:a4:80:7f:
18:fd:20:36:64:19:f7:3e:65:33:32:d2:8e:a1:38:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AB:88:F9:F8:C0:4F:D5:17:D9:CC:0E:6B:DF:46:BF:EA:48:2E:BE
X509v3 Authority Key Identifier:
keyid:53:B8:1C:EB:33:7D:2D:D4:0E:63:0A:27:04:47:C0:99:59:39:8C:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7gc6zN9LdQOYwonBEfAmVk5jBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fc:db:4f:fe:e3:96:c1:e2:0a:d1:e4:af:4b:98:6b:83:72:
90:c2:e2:63:78:97:e2:9a:66:94:f3:1a:84:39:0f:37:1a:de:
2f:a6:e4:0b:05:54:72:1a:8e:b2:bb:69:f9:e7:24:17:24:0d:
f1:e5:b9:b6:5b:21:be:66:aa:1f:84:b2:a0:77:af:16:8c:d8:
fb:4d:28:a6:34:e8:63:60:cd:17:81:c1:82:f3:02:19:05:81:
89:cd:b4:70:28:ce:2e:21:76:9e:c7:f7:d5:7c:de:2c:c7:51:
f0:92:22:92:db:20:0c:d0:e0:e4:a9:c9:2c:54:f1:c2:61:d6:
3f:88:16:c2:a8:cd:34:02:cb:c5:39:cf:a5:aa:7a:c3:4c:b5:
fe:d2:6b:45:9b:ac:0d:ef:9a:f7:51:08:c8:70:65:6f:cb:d3:
61:dc:e2:0b:38:22:4a:68:c5:b1:05:b3:87:85:71:61:b2:07:
37:73:eb:87:d6:71:39:9b:59:68:03:85:ec:3b:d6:dc:cb:72:
69:6d:04:0f:b2:6c:ad:40:58:27:ee:3b:93:6e:0d:34:28:6c:
9e:2c:17:8d:ab:91:9f:47:b6:2a:69:bc:64:c1:38:02:04:46:
0f:7a:40:f0:df:46:5e:f4:e5:0b:59:37:ee:86:81:c0:75:6a:
73:c4:04:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa7JujvgnnDsJMUlL23J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjgxY2ViMzM3ZDJkZDQwZTYzMGEyNzA0NDdjMDk5NTkz
OThjMTEwHhcNMjUwMjE3MDEwMDI1WhcNMjUwMjE4MDEwMDI1WjAzMTEwLwYDVQQD
EygyM2FiODhmOWY4YzA0ZmQ1MTdkOWNjMGU2YmRmNDZiZmVhNDgyZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvbOPz5DUq/5kG/6lZ4qslDbBHeA
JnjdYx9mh85Sp78+5UvhnXV38g24wWv4Pi1De2QjJL9Nl5ZnEE9H3THyVm41Jrov
t5q5AfqlaHh2GogEDp7u03jZvLCVgHaExQ9bL6P5lg48bZmtpmGFgIPV51F3Nx7A
n7wr9lJF+sYSbdlUqDRZgOj/FWtPxEVAs76mKjeWXwEs4LYR3HMDPEpdOS5xZ7QE
bCSHs5MPvuBzqN22s9DxgVSRJnXWr3CWODm2qsc1Ifqz34ZJ/gf0DbOZSqj5wshH
dZJcJWK93qWTdpRNmB+IuiQi9fUbIe2kgH8Y/SA2ZBn3PmUzMtKOoTirrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOriPn4wE/VF9nMDmvfRr/qSC6+MB8GA1UdIwQY
MBaAFFO4HOszfS3UDmMKJwRHwJlZOYwRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdnYzZ6TjlMZFFPWXdvbkJFZkFtVms1akJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85OThlNTktMWZlMi00MzQ2LTgyYTgt
ZGNkMTUxMTJjNmQ3LzEvVTdnYzZ6TjlMZFFPWXdvbkJFZkFtVms1akJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85OThlNTktMWZlMi00MzQ2LTgyYTgtZGNkMTUxMTJjNmQ3
LzEvVTdnYzZ6TjlMZFFPWXdvbkJFZkFtVms1akJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPzbT/7j
lsHiCtHkr0uYa4NykMLiY3iX4ppmlPMahDkPNxreL6bkCwVUchqOsrtp+eckFyQN
8eW5tlshvmaqH4SyoHevFozY+00opjToY2DNF4HBgvMCGQWBic20cCjOLiF2nsf3
1XzeLMdR8JIiktsgDNDg5KnJLFTxwmHWP4gWwqjNNALLxTnPpap6w0y1/tJrRZus
De+a91EIyHBlb8vTYdziCzgiSmjFsQWzh4VxYbIHN3Prh9ZxOZtZaAOF7DvW3Mty
aW0ED7JsrUBYJ+47k24NNChsniwXjauRn0e2Kmm8ZME4AgRGD3pA8N9GXvTlC1k3
7oaBwHVqc8QEeg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:21 2025 by rpki-client