Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json)
Hash identifier: TPfVY6UcssP5QyO6q7yXwrXJ1Xw8QbhF9vYqv3giJiU=
Subject key identifier: BE:FC:E0:E7:07:AB:B4:1B:5D:8F:EC:60:F8:1F:E4:F4:17:D1:AF:E0
Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Certificate serial: 0195116B9524EA6A18689EA2DD90A9DBAC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
Manifest number: 062C
Signing time: Mon 17 Feb 2025 01:00:17 +0000
Manifest this update: Mon 17 Feb 2025 01:00:17 +0000
Manifest next update: Tue 18 Feb 2025 01:00:17 +0000
Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: yLrOFy007LaIwML0cI8jM/hqVoY6PTLvN1t0/FmmA38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:95:24:ea:6a:18:68:9e:a2:dd:90:a9:db:ac:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Validity
Not Before: Feb 17 01:00:17 2025 GMT
Not After : Feb 18 01:00:17 2025 GMT
Subject: CN=befce0e707abb41b5d8fec60f81fe4f417d1afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:f1:06:55:64:48:e6:e1:dd:11:8b:8f:65:
3e:89:0f:cc:80:df:8c:c4:34:ef:84:74:80:4c:0c:
07:ba:a9:08:9b:de:ac:dc:ca:02:7d:98:f1:74:75:
de:91:a7:22:44:39:b4:f7:e2:ea:fd:73:cd:8b:ba:
7f:1a:ce:05:db:88:e4:c0:cd:35:8b:e0:04:c2:ba:
ca:f0:67:0e:8a:1a:f9:f8:87:3c:34:0f:76:ed:71:
fe:56:ca:b8:ad:9f:da:3b:01:96:9d:e8:73:89:21:
b2:ad:f8:f7:07:62:b2:cf:f1:27:19:af:62:ba:2c:
59:c1:22:a0:75:a0:2a:dd:6d:62:0e:ed:20:d7:a8:
81:d7:91:e3:c3:f3:1c:6f:cc:dd:e1:c7:d1:72:94:
52:63:13:26:b5:4e:62:90:b4:a4:9a:40:d2:ea:39:
da:1c:3c:25:35:11:7e:97:5e:43:38:69:fe:c1:b7:
7c:44:8f:13:07:c3:e1:f3:3a:f1:53:43:8b:11:b5:
30:05:18:94:37:2f:b6:7b:05:df:d4:9f:88:dc:05:
bb:19:a7:08:12:24:88:a4:90:f0:8d:dd:47:3d:bb:
42:33:3b:4a:68:7c:1f:13:eb:06:31:13:55:d5:48:
fc:8c:f3:56:54:04:01:83:58:c3:eb:92:ce:ab:66:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FC:E0:E7:07:AB:B4:1B:5D:8F:EC:60:F8:1F:E4:F4:17:D1:AF:E0
X509v3 Authority Key Identifier:
keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e6:87:6c:45:dd:f8:2a:09:a1:7d:51:79:05:69:ba:8f:6a:
ff:57:63:11:25:37:73:30:c1:4a:d2:9e:11:6e:7b:75:e5:98:
4b:5c:32:8c:ff:c9:53:db:d8:72:55:3c:75:e5:64:bc:4c:99:
cb:d1:1d:50:54:8d:c7:5d:01:b5:f5:f1:74:be:d4:7b:41:83:
7e:89:e2:7a:c3:ea:3c:f6:82:cd:67:6a:1a:5a:d1:da:c1:7c:
30:d6:0a:92:ff:9a:8d:a5:0b:de:98:df:3e:2c:42:9a:b5:c3:
72:9f:7a:16:9a:0e:d7:1e:e7:8d:a1:2d:5b:e8:bc:35:8f:6d:
4e:fe:2a:bc:da:7f:bd:de:f4:c0:e7:1a:69:23:69:1f:03:7c:
77:e5:64:01:6a:93:c1:c2:8e:e7:f6:21:8f:81:5b:ad:71:1b:
17:3e:fd:4b:4e:ac:7f:0b:5f:d3:b7:28:39:f2:2c:9e:c4:0c:
7b:24:29:a4:4e:fb:a3:53:51:b2:37:87:d0:36:8a:c6:99:11:
17:38:77:f2:9d:41:65:59:54:25:fb:f1:b2:29:93:db:87:1a:
45:e0:8e:29:ff:86:98:90:00:7f:a9:80:07:65:21:1b:1e:62:
da:25:02:78:14:b4:12:c3:c0:e4:27:2c:f1:1d:ed:8b:95:ab:
19:8e:be:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa5Uk6moYaJ6i3ZCp26w9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YjhkZTU1Mjg1MGFjZTg1ZmM4YzBlMTY4NTJjYzczZGYx
MDE2OWQwHhcNMjUwMjE3MDEwMDE3WhcNMjUwMjE4MDEwMDE3WjAzMTEwLwYDVQQD
EyhiZWZjZTBlNzA3YWJiNDFiNWQ4ZmVjNjBmODFmZTRmNDE3ZDFhZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0zxBlVkSObh3RGLj2U+iQ/MgN+M
xDTvhHSATAwHuqkIm96s3MoCfZjxdHXekaciRDm09+Lq/XPNi7p/Gs4F24jkwM01
i+AEwrrK8GcOihr5+Ic8NA927XH+Vsq4rZ/aOwGWnehziSGyrfj3B2Kyz/EnGa9i
uixZwSKgdaAq3W1iDu0g16iB15Hjw/Mcb8zd4cfRcpRSYxMmtU5ikLSkmkDS6jna
HDwlNRF+l15DOGn+wbd8RI8TB8Ph8zrxU0OLEbUwBRiUNy+2ewXf1J+I3AW7GacI
EiSIpJDwjd1HPbtCMztKaHwfE+sGMRNV1Uj8jPNWVAQBg1jD65LOq2YlTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL784OcHq7QbXY/sYPgf5PQX0a/gMB8GA1UdIwQY
MBaAFMa43lUoUKzoX8jA4WhSzHPfEBadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZjVkOTEtOTJiYS00MDJlLWJlMWMt
ZDI0MGQzNjExMDU4LzEveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZjVkOTEtOTJiYS00MDJlLWJlMWMtZDI0MGQzNjExMDU4
LzEveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+aHbEXd
+CoJoX1ReQVpuo9q/1djESU3czDBStKeEW57deWYS1wyjP/JU9vYclU8deVkvEyZ
y9EdUFSNx10BtfXxdL7Ue0GDfoniesPqPPaCzWdqGlrR2sF8MNYKkv+ajaUL3pjf
PixCmrXDcp96FpoO1x7njaEtW+i8NY9tTv4qvNp/vd70wOcaaSNpHwN8d+VkAWqT
wcKO5/Yhj4FbrXEbFz79S06sfwtf07coOfIsnsQMeyQppE77o1NRsjeH0DaKxpkR
Fzh38p1BZVlUJfvxsimT24caReCOKf+GmJAAf6mAB2UhGx5i2iUCeBS0EsPA5Ccs
8R3ti5WrGY6+TQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:21 2025 by rpki-client