Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: Xc6nnF4JcD9Exegi4VimvW6TkzwtGFoyd6Os2Cutc9Y=
Subject key identifier: 22:36:90:A5:38:EE:9C:3F:73:FB:21:CA:72:A8:84:F7:5B:CF:3D:E1
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 0194C387FAD415808508EA7765D6633DF05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 03D2
Signing time: Sat 01 Feb 2025 22:00:56 +0000
Manifest this update: Sat 01 Feb 2025 22:00:56 +0000
Manifest next update: Sun 02 Feb 2025 22:00:56 +0000
Files and hashes: 1: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: MOZFYPb5qE/i5di1M1Qfy4xyl6LGaVnE2Bhlk/RkMOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:fa:d4:15:80:85:08:ea:77:65:d6:63:3d:f0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Feb 1 22:00:56 2025 GMT
Not After : Feb 2 22:00:56 2025 GMT
Subject: CN=223690a538ee9c3f73fb21ca72a884f75bcf3de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:d0:40:fa:d6:e9:af:14:d1:10:a2:a1:71:
52:e7:87:54:b2:ce:f8:69:45:98:dd:17:50:0e:4a:
5e:dd:3c:c0:5e:b1:c1:08:ef:64:7d:51:6b:c2:7c:
de:b4:02:32:9f:18:5b:c6:8b:ec:bb:40:26:66:e9:
a1:53:d9:27:32:1d:f7:84:9d:aa:a4:c7:47:71:9d:
8b:c6:93:39:c4:04:e6:92:f2:d6:b3:86:ea:fb:e8:
6c:4f:a1:78:c8:1b:ba:76:c5:5a:26:10:be:5c:dc:
12:59:51:2c:a2:a4:d4:ae:15:52:db:44:02:29:88:
c3:21:13:56:0d:a4:e7:b8:c0:63:e6:ce:27:6f:75:
e1:31:09:17:25:46:c6:09:0d:64:62:ca:0b:a7:1e:
62:a3:2b:7c:ea:ab:d1:ca:3a:52:ed:47:bb:48:59:
8b:76:68:22:47:69:d7:19:93:8a:45:15:71:0a:be:
d7:39:43:cc:48:5e:44:59:bd:e4:95:20:64:19:25:
11:4b:4e:9f:e5:67:8b:55:d1:88:9c:24:4f:c1:b5:
ed:24:90:52:1b:a2:09:87:d0:f3:7b:25:5e:6f:a6:
98:f5:bf:16:d8:c0:f0:92:1a:5d:60:a4:c4:48:22:
14:39:70:6a:c2:be:41:67:23:4d:e3:ab:3d:f1:72:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:36:90:A5:38:EE:9C:3F:73:FB:21:CA:72:A8:84:F7:5B:CF:3D:E1
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bc:dd:9f:8c:45:fc:6a:cd:41:84:4d:c0:78:52:35:b1:ee:
81:76:55:60:68:7e:a9:f9:89:dd:2a:ae:35:45:a5:96:ce:68:
95:ee:84:5e:2e:73:94:5b:a3:90:ae:79:a4:82:e1:8b:2e:b6:
b0:0a:94:a2:a4:0e:c3:b9:be:80:30:a1:90:d4:4e:3c:76:aa:
35:83:22:59:42:77:d1:34:0b:f6:25:0e:ae:15:0f:be:28:d2:
f8:be:08:bf:50:b3:3e:f4:cf:fb:c4:d6:aa:86:d0:62:b9:dd:
90:68:72:fd:77:a0:ed:d8:86:e8:55:62:1c:a4:b7:11:14:cb:
5f:7c:7a:ce:14:6e:d6:ce:30:14:6f:62:3a:8e:6b:65:c5:11:
49:41:82:ce:f0:1b:6c:98:ff:49:e6:b9:fd:f4:fa:88:d5:be:
43:b9:21:65:ea:79:df:16:8d:80:bc:82:7d:44:46:3f:2c:bb:
ab:1b:ea:6b:90:ca:88:b9:17:3f:29:92:92:86:9f:f6:6f:24:
e8:c4:0a:14:4d:87:29:67:72:18:7d:15:25:54:6e:e4:5e:2c:
08:e2:1a:13:95:13:25:bf:18:21:e3:e7:bd:48:b6:e5:ba:a0:
85:14:d4:4a:a1:72:a4:47:57:b7:22:72:cb:aa:46:7a:77:b7:
08:d8:10:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh/rUFYCFCOp3ZdZjPfBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTU5ODMyMmE2OTkwNWE1YzZlMDI5NWEwY2ExZmI1NTY2
NmMxNGIwHhcNMjUwMjAxMjIwMDU2WhcNMjUwMjAyMjIwMDU2WjAzMTEwLwYDVQQD
EygyMjM2OTBhNTM4ZWU5YzNmNzNmYjIxY2E3MmE4ODRmNzViY2YzZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKvQQPrW6a8U0RCioXFS54dUss74
aUWY3RdQDkpe3TzAXrHBCO9kfVFrwnzetAIynxhbxovsu0AmZumhU9knMh33hJ2q
pMdHcZ2LxpM5xATmkvLWs4bq++hsT6F4yBu6dsVaJhC+XNwSWVEsoqTUrhVS20QC
KYjDIRNWDaTnuMBj5s4nb3XhMQkXJUbGCQ1kYsoLpx5ioyt86qvRyjpS7Ue7SFmL
dmgiR2nXGZOKRRVxCr7XOUPMSF5EWb3klSBkGSURS06f5WeLVdGInCRPwbXtJJBS
G6IJh9DzeyVeb6aY9b8W2MDwkhpdYKTESCIUOXBqwr5BZyNN46s98XINkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI2kKU47pw/c/shynKohPdbzz3hMB8GA1UdIwQY
MBaAFHylmDIqaZBaXG4ClaDKH7VWZsFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktXWU1pcHBrRnBjYmdLVm9Nb2Z0Vlptd1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kYTY2YzAtYjlmOC00MDk0LWE5MzUt
NTgwZDg3Njg4NWExLzEvZktXWU1pcHBrRnBjYmdLVm9Nb2Z0Vlptd1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kYTY2YzAtYjlmOC00MDk0LWE5MzUtNTgwZDg3Njg4NWEx
LzEvZktXWU1pcHBrRnBjYmdLVm9Nb2Z0Vlptd1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrzdn4xF
/GrNQYRNwHhSNbHugXZVYGh+qfmJ3SquNUWlls5ole6EXi5zlFujkK55pILhiy62
sAqUoqQOw7m+gDChkNROPHaqNYMiWUJ30TQL9iUOrhUPvijS+L4Iv1CzPvTP+8TW
qobQYrndkGhy/Xeg7diG6FViHKS3ERTLX3x6zhRu1s4wFG9iOo5rZcURSUGCzvAb
bJj/Sea5/fT6iNW+Q7khZep53xaNgLyCfURGPyy7qxvqa5DKiLkXPymSkoaf9m8k
6MQKFE2HKWdyGH0VJVRu5F4sCOIaE5UTJb8YIePnvUi25bqghRTUSqFypEdXtyJy
y6pGene3CNgQFw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:20 2025 by rpki-client