Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: WSdXultDlKd5j+2fC4yW8PxDwtU8w36/UF2N9atB3wQ=
Subject key identifier: 62:10:8D:24:90:25:FF:8B:67:AC:B1:2A:BA:C3:42:52:B2:B0:5C:0F
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 019510C77B40B43CDC67D70A44082518DE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:01:03 +0000
Manifest this update: Sun 16 Feb 2025 22:01:03 +0000
Manifest next update: Mon 17 Feb 2025 22:01:03 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: qXuzuIn5ro3lwXz2u44nJnDTx05VwSYqloSOWgfuAxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:7b:40:b4:3c:dc:67:d7:0a:44:08:25:18:de:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Feb 16 22:01:03 2025 GMT
Not After : Feb 17 22:01:03 2025 GMT
Subject: CN=62108d249025ff8b67acb12abac34252b2b05c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:10:41:7a:38:8e:f4:53:83:95:f9:58:e8:
99:db:39:96:de:13:db:7c:0f:c5:bd:b9:64:c4:ce:
fe:bd:f3:9d:9c:ea:07:19:79:45:19:7f:82:4b:40:
45:3a:dd:31:69:dd:02:dc:e9:b5:82:fb:e3:54:f8:
7a:0b:4f:95:00:57:9a:f8:a0:3e:26:96:f6:ad:4b:
ae:c4:a4:e2:22:f4:ad:69:9f:75:86:16:22:eb:3c:
26:ae:f0:6a:7e:18:96:c4:d7:f4:26:b9:62:a2:fa:
bd:56:e5:e5:ec:7d:5e:1f:8e:f3:91:e7:43:8e:4d:
2d:04:42:e7:ad:e1:c2:cf:78:1d:a0:5b:7f:7f:3b:
ae:f2:c9:d3:94:bb:15:8f:19:83:21:8f:7a:14:5c:
72:3c:5b:db:ea:f0:40:2f:bd:90:0b:b7:4e:ca:fa:
24:2b:f6:ee:c3:a1:31:2c:2a:b7:80:e5:1c:fd:2d:
7c:18:0e:90:59:21:7c:f5:ec:25:52:89:26:66:e9:
73:b2:6e:36:7c:30:72:c2:21:71:cb:24:77:31:5c:
e9:d9:0a:f5:23:a1:1e:7a:04:bd:72:06:3a:c4:3d:
85:c5:4d:8a:21:bc:f5:34:a3:97:82:a0:53:ff:ca:
bc:4d:c1:b7:97:4b:e6:8e:e3:ae:9d:ea:4e:09:7c:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:10:8D:24:90:25:FF:8B:67:AC:B1:2A:BA:C3:42:52:B2:B0:5C:0F
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:df:aa:73:a3:6c:4a:71:ae:a4:19:b3:4d:11:81:83:de:37:
12:f5:ea:80:ec:5a:bf:32:6c:de:08:7a:4f:42:85:28:fd:72:
25:76:59:90:37:20:b8:30:50:41:d6:30:d5:6f:64:cf:20:06:
a2:c6:f4:d6:ab:27:b4:4f:b7:e6:5e:2c:73:48:75:cb:39:68:
99:25:0e:49:e5:40:a5:f8:44:7f:58:36:54:b4:1a:f9:e6:ad:
19:03:d8:ea:88:1b:92:ef:3e:6b:0f:bc:68:6a:ba:c3:70:04:
6a:22:b6:35:75:71:d8:eb:1e:17:55:5d:f3:8b:a2:8f:f8:fd:
08:20:3f:25:54:75:1b:cc:df:10:5b:9e:ae:5c:69:6c:0d:fd:
e5:62:5e:74:29:1c:d5:82:f8:d5:5f:14:de:1d:b0:89:9a:ca:
03:1a:91:14:5a:94:5b:1d:59:8e:4d:6b:15:b0:00:3b:1e:e4:
fa:50:24:eb:0a:dd:66:1b:d3:e4:5f:4e:9f:f4:41:9b:18:fc:
e8:0e:47:9a:bf:74:b5:9d:74:4d:6c:c5:3f:fe:82:b1:c9:43:
57:8e:78:1b:3b:6e:df:30:92:49:75:9b:92:91:95:dc:a7:d0:
d4:7f:fa:0f:3e:8b:d3:d0:6f:dd:a0:80:31:c0:a8:6d:83:e3:
f1:46:4d:c3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZUQx3tAtDzcZ9cKRAglGN5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OWM5YTY5MjM0NTI3Yjc4Njk0OGIyZWI0YzY1MDlkYjBh
NGQ1YTgwHhcNMjUwMjE2MjIwMTAzWhcNMjUwMjE3MjIwMTAzWjAzMTEwLwYDVQQD
Eyg2MjEwOGQyNDkwMjVmZjhiNjdhY2IxMmFiYWMzNDI1MmIyYjA1YzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz80QQXo4jvRTg5X5WOiZ2zmW3hPb
fA/FvblkxM7+vfOdnOoHGXlFGX+CS0BFOt0xad0C3Om1gvvjVPh6C0+VAFea+KA+
Jpb2rUuuxKTiIvStaZ91hhYi6zwmrvBqfhiWxNf0Jrliovq9VuXl7H1eH47zkedD
jk0tBELnreHCz3gdoFt/fzuu8snTlLsVjxmDIY96FFxyPFvb6vBAL72QC7dOyvok
K/buw6ExLCq3gOUc/S18GA6QWSF89ewlUokmZulzsm42fDBywiFxyyR3MVzp2Qr1
I6EeegS9cgY6xD2FxU2KIbz1NKOXgqBT/8q8TcG3l0vmjuOunepOCXx6SwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGIQjSSQJf+LZ6yxKrrDQlKysFwPMB8GA1UdIwQY
MBaAFPicmmkjRSe3hpSLLrTGUJ2wpNWoMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KeWFhU05GSjdlR2xJc3V0TVpRbmJDazFhZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvOTk5MmMyLTBjZGQtNDM2MS05YzAz
LWMyY2NjZTZjNDdhNC8xLzEtSnlhYVNORko3ZUdsSXN1dE1aUW5iQ2sxYWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxLzk5OTJjMi0wY2RkLTQzNjEtOWMwMy1jMmNjY2U2YzQ3
YTQvMS8xLUp5YWFTTkZKN2VHbElzdXRNWlFuYkNrMWFnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIt+q
c6NsSnGupBmzTRGBg943EvXqgOxavzJs3gh6T0KFKP1yJXZZkDcguDBQQdYw1W9k
zyAGosb01qsntE+35l4sc0h1yzlomSUOSeVApfhEf1g2VLQa+eatGQPY6ogbku8+
aw+8aGq6w3AEaiK2NXVx2OseF1Vd84uij/j9CCA/JVR1G8zfEFuerlxpbA395WJe
dCkc1YL41V8U3h2wiZrKAxqRFFqUWx1Zjk1rFbAAOx7k+lAk6wrdZhvT5F9On/RB
mxj86A5Hmr90tZ10TWzFP/6CsclDV454Gztu3zCSSXWbkpGV3KfQ1H/6Dz6L09Bv
3aCAMcCobYPj8UZNww==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:04 2025 by rpki-client