Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
File: iOZzGonffpNxq6M-sU1y9h45gLk.mft (raw, json)
Hash identifier: FYWW7/LcjVA0NtsHHUM/Mm8ehDSiZU2c5W9GjddRNjg=
Subject key identifier: 22:1A:BA:6D:E6:FD:7E:BE:03:79:C2:DD:07:D1:D7:BB:F9:07:A1:5A
Authority key identifier: 88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9
Certificate issuer: /CN=88e6731a89df7e9371aba33eb14d72f61e3980b9
Certificate serial: 0194C387D6E78B80CFD4E4FF0702FBF500A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
Manifest number: 142C
Signing time: Sat 01 Feb 2025 22:00:46 +0000
Manifest this update: Sat 01 Feb 2025 22:00:46 +0000
Manifest next update: Sun 02 Feb 2025 22:00:46 +0000
Files and hashes: 1: iOZzGonffpNxq6M-sU1y9h45gLk.crl (hash: 6D+8FMTyBmatkq1uLWmgN8MgjXosx2vVtuG4LA7uXsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:d6:e7:8b:80:cf:d4:e4:ff:07:02:fb:f5:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e6731a89df7e9371aba33eb14d72f61e3980b9
Validity
Not Before: Feb 1 22:00:46 2025 GMT
Not After : Feb 2 22:00:46 2025 GMT
Subject: CN=221aba6de6fd7ebe0379c2dd07d1d7bbf907a15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:59:50:1e:63:82:bb:dc:a5:48:98:88:fa:
d1:09:5d:00:89:bb:e9:f8:2b:5c:82:2e:36:af:4f:
51:57:ad:49:f0:fb:1f:54:fc:71:78:6c:0f:fb:7a:
aa:17:c1:1e:4a:55:56:fa:f3:c7:71:98:41:15:bf:
d6:e0:da:59:07:72:d4:e3:09:d4:c6:80:14:35:fc:
e4:34:72:4e:cf:93:07:3f:02:18:11:f5:50:d7:70:
8a:36:a6:b4:0d:c1:bc:57:6e:be:5a:32:1e:4a:99:
c6:72:19:7a:8b:92:04:d6:ca:55:fe:7f:7c:7f:58:
92:09:36:ec:d2:b1:9a:cf:13:97:b7:3b:f0:91:0c:
d6:a3:3d:78:21:a3:1b:d9:1f:c1:ac:e4:29:55:4f:
85:ac:ac:61:6f:4d:bd:de:78:3a:fc:2b:1a:48:31:
b4:c9:41:85:ea:23:63:95:c0:44:92:10:ae:36:83:
67:28:58:6c:a6:28:f2:8d:d1:da:a1:89:66:9d:3e:
3d:a1:7e:d8:9a:0f:61:1a:86:a7:94:7c:96:a7:5c:
54:5f:bf:e1:ce:52:49:91:c2:59:16:d8:9d:60:61:
a6:bc:04:d7:4b:d6:2d:f8:00:8f:72:21:28:d7:f1:
5a:11:9d:37:28:95:19:6c:63:9e:6c:83:da:d9:65:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1A:BA:6D:E6:FD:7E:BE:03:79:C2:DD:07:D1:D7:BB:F9:07:A1:5A
X509v3 Authority Key Identifier:
keyid:88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c8:be:8f:9e:41:e6:ac:2b:2f:a2:9b:67:76:cb:2b:60:6f:
c1:c9:e9:d6:a3:32:8c:e7:aa:0d:88:23:53:1a:2b:70:b5:e7:
b4:7c:fe:d3:d1:87:02:d7:dd:f4:7d:b2:d2:74:ff:8f:79:a7:
e6:b8:86:3d:93:64:d6:b5:0b:b1:15:59:41:a9:65:fc:eb:f3:
d7:d9:f4:09:89:c2:83:cc:38:81:91:f0:fa:47:7f:3c:5a:44:
68:e8:df:42:18:86:ff:2c:86:8d:38:a2:34:cd:8a:f9:47:2f:
df:b0:d8:12:2a:94:b2:2e:24:c0:c6:33:ed:b9:48:c7:bb:13:
59:1c:4c:36:33:46:f3:79:2f:20:64:4c:f2:f0:b5:2b:ac:ff:
26:a5:cc:5c:7d:08:87:95:21:98:17:a4:4a:0d:f7:55:68:6b:
69:d4:ca:76:38:a7:cb:18:95:bc:21:7b:5f:bf:43:7e:04:47:
e9:7b:28:1b:86:e6:de:ad:8c:3b:52:6f:1f:1d:fd:f8:80:46:
44:3a:38:e8:ac:71:5a:24:27:2e:60:ee:51:0f:0f:a6:4f:d3:
6e:97:66:0b:90:29:31:c5:1f:3e:89:6b:99:11:26:85:f9:bd:
0f:f1:81:92:bb:e4:ee:91:60:23:dd:0d:74:8b:c4:2d:c7:58:
95:6e:cf:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh9bni4DP1OT/BwL79QCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZTY3MzFhODlkZjdlOTM3MWFiYTMzZWIxNGQ3MmY2MWUz
OTgwYjkwHhcNMjUwMjAxMjIwMDQ2WhcNMjUwMjAyMjIwMDQ2WjAzMTEwLwYDVQQD
EygyMjFhYmE2ZGU2ZmQ3ZWJlMDM3OWMyZGQwN2QxZDdiYmY5MDdhMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeJZUB5jgrvcpUiYiPrRCV0Aibvp
+Ctcgi42r09RV61J8PsfVPxxeGwP+3qqF8EeSlVW+vPHcZhBFb/W4NpZB3LU4wnU
xoAUNfzkNHJOz5MHPwIYEfVQ13CKNqa0DcG8V26+WjIeSpnGchl6i5IE1spV/n98
f1iSCTbs0rGazxOXtzvwkQzWoz14IaMb2R/BrOQpVU+FrKxhb0293ng6/CsaSDG0
yUGF6iNjlcBEkhCuNoNnKFhspijyjdHaoYlmnT49oX7Ymg9hGoanlHyWp1xUX7/h
zlJJkcJZFtidYGGmvATXS9Yt+ACPciEo1/FaEZ03KJUZbGOebIPa2WWeLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIaum3m/X6+A3nC3QfR17v5B6FaMB8GA1UdIwQY
MBaAFIjmcxqJ336TcaujPrFNcvYeOYC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9aekdvbmZmcE54cTZNLXNVMXk5aDQ1Z0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMzZjYjMtZjRmNy00ZDhhLTk1Y2Ut
NmJjZjRhNDJhYzdkLzEvaU9aekdvbmZmcE54cTZNLXNVMXk5aDQ1Z0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMzZjYjMtZjRmNy00ZDhhLTk1Y2UtNmJjZjRhNDJhYzdk
LzEvaU9aekdvbmZmcE54cTZNLXNVMXk5aDQ1Z0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMi+j55B
5qwrL6KbZ3bLK2Bvwcnp1qMyjOeqDYgjUxorcLXntHz+09GHAtfd9H2y0nT/j3mn
5riGPZNk1rULsRVZQall/Ovz19n0CYnCg8w4gZHw+kd/PFpEaOjfQhiG/yyGjTii
NM2K+Ucv37DYEiqUsi4kwMYz7blIx7sTWRxMNjNG83kvIGRM8vC1K6z/JqXMXH0I
h5UhmBekSg33VWhradTKdjinyxiVvCF7X79DfgRH6XsoG4bm3q2MO1JvHx39+IBG
RDo46KxxWiQnLmDuUQ8Ppk/TbpdmC5ApMcUfPolrmREmhfm9D/GBkrvk7pFgI90N
dIvELcdYlW7PHw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:52:11 2025 by rpki-client