Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: Fuu9T6tSWcZAPyAcutFfMD9cMyr/spUgVNZ7BST3EYM=
Subject key identifier: 87:5F:F4:89:DF:8E:8B:44:03:7E:56:EC:42:71:45:8C:AC:3D:C1:F8
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 0194C3F57E030489D7C7136B6104468EDB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 113B
Signing time: Sun 02 Feb 2025 00:00:33 +0000
Manifest this update: Sun 02 Feb 2025 00:00:33 +0000
Manifest next update: Mon 03 Feb 2025 00:00:33 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: lbgZET01XTNzQB64FeGG9pXFZETWEZgzlVH5ERV5LWk=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:7e:03:04:89:d7:c7:13:6b:61:04:46:8e:db:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Feb 2 00:00:33 2025 GMT
Not After : Feb 3 00:00:33 2025 GMT
Subject: CN=875ff489df8e8b44037e56ec4271458cac3dc1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:65:de:d9:9f:e4:79:98:4e:85:39:ba:af:
8a:40:74:1c:9a:05:d8:13:57:3b:a6:b3:c3:be:a1:
1b:af:88:c0:77:8b:86:89:31:8a:ca:81:aa:ee:50:
15:56:57:7e:c2:e5:65:2a:d4:98:bf:2f:ed:e5:61:
d8:e4:60:78:43:e6:5e:6c:e8:59:a1:6f:c0:b2:60:
29:75:94:09:08:a4:6b:e7:a5:0d:1a:a8:22:e0:4e:
71:8d:24:db:21:98:6f:14:2d:4d:a9:02:aa:52:de:
42:0c:c2:47:29:06:3b:26:e8:9d:b8:f1:b6:19:98:
cc:84:a8:01:90:8a:d0:04:8f:39:65:b2:d8:27:eb:
01:57:a3:bd:05:51:3c:69:82:02:ad:77:db:50:8e:
62:19:56:9c:30:9b:c1:ea:8c:5a:58:15:3e:69:c8:
a0:49:69:ab:e2:0a:bd:31:01:1c:e4:d6:d6:cf:05:
8f:4e:e0:36:bd:16:f0:07:b0:0c:05:c4:cd:76:45:
84:f2:87:6c:3e:10:05:08:4c:57:0e:be:ee:ba:69:
36:6f:d3:b6:0f:e1:dd:a3:d6:4d:0f:7d:60:20:e4:
a3:5e:7d:f8:1f:f3:36:93:2d:73:86:c2:24:b4:cb:
27:d7:f0:94:90:35:90:e5:c2:a8:2c:7e:d2:89:61:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5F:F4:89:DF:8E:8B:44:03:7E:56:EC:42:71:45:8C:AC:3D:C1:F8
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:10:0f:44:d8:35:59:90:91:d7:44:08:9c:e8:3a:1b:77:27:
58:45:13:fa:14:49:c7:42:32:79:27:8a:a2:3f:64:08:03:b0:
1e:ee:f8:46:d5:3f:91:0d:51:af:fe:fd:78:e8:b3:ed:99:ea:
82:d5:18:3b:06:c7:95:1b:11:85:a9:81:7b:78:d8:23:9f:d7:
e5:cf:d3:8e:f1:a6:80:2e:e2:fb:cc:54:db:a4:24:f0:fa:0a:
b1:7c:8e:70:81:60:3f:ce:ca:13:72:30:82:43:5f:90:63:44:
0b:7d:26:a2:a5:fb:7c:bc:a1:a9:80:8b:e5:82:27:de:5f:cd:
4c:46:4b:22:28:98:51:7a:a1:e8:f8:6c:5c:e8:1b:9d:d7:d9:
8f:fd:2b:9c:78:1c:8c:8c:08:a3:d9:ab:3e:bc:5b:8e:b6:eb:
5f:c4:02:bc:b1:57:ee:ae:31:24:8a:52:79:1a:a5:50:ea:e6:
3a:15:a0:34:1e:25:7f:0d:88:8d:04:89:b0:23:4d:16:ce:90:
eb:d5:0e:67:7d:4f:54:8e:e6:1e:3c:5f:a3:2f:65:fd:27:5a:
76:3b:2d:b5:0f:5c:a4:1e:9c:5e:6b:51:af:12:de:70:ab:57:
d6:81:05:4d:95:af:13:df:5c:31:ce:72:a1:ea:af:c7:1a:91:
d8:10:51:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9X4DBInXxxNrYQRGjttqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjZiMzY4NjcyMzhhYTcxOGJlMTdlNmU3M2NlNDBhOTg5
NTc4YTAwHhcNMjUwMjAyMDAwMDMzWhcNMjUwMjAzMDAwMDMzWjAzMTEwLwYDVQQD
Eyg4NzVmZjQ4OWRmOGU4YjQ0MDM3ZTU2ZWM0MjcxNDU4Y2FjM2RjMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Fl3tmf5HmYToU5uq+KQHQcmgXY
E1c7prPDvqEbr4jAd4uGiTGKyoGq7lAVVld+wuVlKtSYvy/t5WHY5GB4Q+ZebOhZ
oW/AsmApdZQJCKRr56UNGqgi4E5xjSTbIZhvFC1NqQKqUt5CDMJHKQY7JuiduPG2
GZjMhKgBkIrQBI85ZbLYJ+sBV6O9BVE8aYICrXfbUI5iGVacMJvB6oxaWBU+acig
SWmr4gq9MQEc5NbWzwWPTuA2vRbwB7AMBcTNdkWE8odsPhAFCExXDr7uumk2b9O2
D+Hdo9ZND31gIOSjXn34H/M2ky1zhsIktMsn1/CUkDWQ5cKoLH7SiWEA7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdf9InfjotEA35W7EJxRYysPcH4MB8GA1UdIwQY
MBaAFFP2s2hnI4qnGL4X5uc85AqYlXigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOTFlMTEtZWUwYy00OWVjLTk1ZDct
NmRiYWQzMWRiYzQxLzEvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wOTFlMTEtZWUwYy00OWVjLTk1ZDctNmRiYWQzMWRiYzQx
LzEvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhAPRNg1
WZCR10QInOg6G3cnWEUT+hRJx0IyeSeKoj9kCAOwHu74RtU/kQ1Rr/79eOiz7Znq
gtUYOwbHlRsRhamBe3jYI5/X5c/TjvGmgC7i+8xU26Qk8PoKsXyOcIFgP87KE3Iw
gkNfkGNEC30moqX7fLyhqYCL5YIn3l/NTEZLIiiYUXqh6PhsXOgbndfZj/0rnHgc
jIwIo9mrPrxbjrbrX8QCvLFX7q4xJIpSeRqlUOrmOhWgNB4lfw2IjQSJsCNNFs6Q
69UOZ31PVI7mHjxfoy9l/SdadjsttQ9cpB6cXmtRrxLecKtX1oEFTZWvE99cMc5y
oeqvxxqR2BBRfw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:00 2025 by rpki-client