Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: 8FXLUZEGi+LznKETVE1r0treAZHiXMmRH/+Do2UT/Sk=
Subject key identifier: FC:49:19:34:F1:3C:DF:03:D1:78:D5:A2:91:9A:FF:F6:94:49:AB:92
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 0194C49A5B8EE16850FF7C6D3E0BED83048C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 041B
Signing time: Sun 02 Feb 2025 03:00:37 +0000
Manifest this update: Sun 02 Feb 2025 03:00:37 +0000
Manifest next update: Mon 03 Feb 2025 03:00:37 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: 6wnHYFa6JdkcGISPF5U1tk95Fz0qqtM+3aipxN5Rv5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:5b:8e:e1:68:50:ff:7c:6d:3e:0b:ed:83:04:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Feb 2 03:00:37 2025 GMT
Not After : Feb 3 03:00:37 2025 GMT
Subject: CN=fc491934f13cdf03d178d5a2919afff69449ab92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:e0:80:e7:ab:d6:9d:43:e1:21:aa:ec:3b:
79:cf:a5:6a:64:98:88:41:6e:9f:b8:f3:42:c9:88:
77:7d:04:5a:12:81:7c:17:64:69:59:b1:25:a0:d6:
28:3d:06:bd:82:11:9f:8b:66:e5:80:4e:18:c1:4a:
19:18:ee:ad:07:89:72:ab:ec:f3:a1:70:bc:42:51:
ad:7a:b4:1b:9f:d4:88:78:5e:14:73:9c:f3:ea:08:
0d:60:fd:c9:da:2f:69:60:5f:d3:7c:81:be:12:e8:
19:58:77:12:fe:ba:c5:c4:ea:a1:e4:23:1c:35:5e:
d8:7c:0b:bf:25:e1:d0:b6:58:95:7a:32:99:5b:1c:
84:92:b1:11:89:7d:84:f3:ec:d5:74:77:38:4f:ed:
c8:fc:3b:37:a9:97:08:9a:b2:2a:1a:2c:4b:bd:0b:
ba:72:e5:d6:70:aa:11:04:08:6b:c9:ba:60:c2:38:
9b:81:c4:44:0f:af:d1:71:dc:2e:9e:9a:6f:67:eb:
04:1f:d1:8a:05:7b:94:0c:6c:1c:8b:09:e3:b5:eb:
82:66:50:c9:6e:2c:b4:00:2d:8e:8b:ea:4c:de:3c:
17:00:9a:e6:00:c5:97:0d:23:64:0f:37:46:00:4c:
aa:1b:00:8d:26:6e:1d:60:ea:50:f8:0d:e4:b0:f8:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:49:19:34:F1:3C:DF:03:D1:78:D5:A2:91:9A:FF:F6:94:49:AB:92
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:15:a6:a3:01:37:98:76:92:67:50:73:ca:f3:3e:60:4c:e6:
55:2b:44:e8:f7:b5:2d:38:f0:28:78:f7:10:c6:9e:08:bf:de:
50:62:fc:2a:a0:85:a2:50:eb:5d:47:1a:bb:72:3b:c3:58:99:
80:c3:f5:60:2f:b3:d4:37:cd:fc:f9:61:97:e2:1f:95:40:11:
33:04:6e:41:0c:ce:d1:13:a1:fc:c2:4a:85:ec:b0:39:a3:07:
a3:0f:a9:dd:80:d5:ee:7e:c4:02:73:87:ab:df:07:f6:ef:7b:
55:62:52:c2:53:cf:be:79:07:d2:70:e6:b6:87:e7:14:09:03:
94:aa:4b:79:ca:4b:a4:7e:00:62:5b:44:8a:5c:d3:58:0d:a9:
5b:9f:16:c9:90:0f:df:88:cb:1e:b0:48:59:4d:02:73:9c:2a:
3d:77:ef:cf:3d:a3:9e:c1:c2:79:9c:c5:b3:0b:dc:42:44:90:
78:37:56:ec:cb:92:c4:8f:c7:81:41:4d:d8:e9:13:d9:7d:c0:
3d:29:0b:0d:9f:95:2e:28:80:33:17:4e:31:92:80:7c:b7:42:
b1:38:b6:db:43:56:ab:88:7d:7a:2c:af:7d:d1:f8:a3:91:b6:
47:bd:42:68:a2:58:e3:d6:30:64:e0:ad:83:dc:8a:ed:a7:6e:
ff:c8:b9:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEmluO4WhQ/3xtPgvtgwSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTdmYWM1MTBhM2UxZTg3MzllMzgxMmZjMGE1Y2FlMDI1
N2RmMjYwHhcNMjUwMjAyMDMwMDM3WhcNMjUwMjAzMDMwMDM3WjAzMTEwLwYDVQQD
EyhmYzQ5MTkzNGYxM2NkZjAzZDE3OGQ1YTI5MTlhZmZmNjk0NDlhYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqvggOer1p1D4SGq7Dt5z6VqZJiI
QW6fuPNCyYh3fQRaEoF8F2RpWbEloNYoPQa9ghGfi2blgE4YwUoZGO6tB4lyq+zz
oXC8QlGterQbn9SIeF4Uc5zz6ggNYP3J2i9pYF/TfIG+EugZWHcS/rrFxOqh5CMc
NV7YfAu/JeHQtliVejKZWxyEkrERiX2E8+zVdHc4T+3I/Ds3qZcImrIqGixLvQu6
cuXWcKoRBAhrybpgwjibgcRED6/RcdwunppvZ+sEH9GKBXuUDGwciwnjteuCZlDJ
biy0AC2Oi+pM3jwXAJrmAMWXDSNkDzdGAEyqGwCNJm4dYOpQ+A3ksPhsIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxJGTTxPN8D0XjVopGa//aUSauSMB8GA1UdIwQY
MBaAFF+X+sUQo+Hoc544EvwKXK4CV98mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85Y2U1OTctYzdmNy00MjRhLTk3YjQt
NzFhNzg1MDU4NWU1LzEvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85Y2U1OTctYzdmNy00MjRhLTk3YjQtNzFhNzg1MDU4NWU1
LzEvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRWmowE3
mHaSZ1BzyvM+YEzmVStE6Pe1LTjwKHj3EMaeCL/eUGL8KqCFolDrXUcau3I7w1iZ
gMP1YC+z1DfN/Plhl+IflUARMwRuQQzO0ROh/MJKheywOaMHow+p3YDV7n7EAnOH
q98H9u97VWJSwlPPvnkH0nDmtofnFAkDlKpLecpLpH4AYltEilzTWA2pW58WyZAP
34jLHrBIWU0Cc5wqPXfvzz2jnsHCeZzFswvcQkSQeDdW7MuSxI/HgUFN2OkT2X3A
PSkLDZ+VLiiAMxdOMZKAfLdCsTi220NWq4h9eiyvfdH4o5G2R71CaKJY49YwZOCt
g9yK7adu/8i5QQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:55 2025 by rpki-client