Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: mzsqKXgo3UCbJUL7TahaYFSZFkMPfD18H+lqKt6Mz1g=
Subject key identifier: D0:51:77:5A:12:48:03:A9:68:CC:80:9A:D0:58:5D:BC:9F:ED:1F:45
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 0194C3F553B4E8241A435043E36F7F044783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 142A
Signing time: Sun 02 Feb 2025 00:00:22 +0000
Manifest this update: Sun 02 Feb 2025 00:00:22 +0000
Manifest next update: Mon 03 Feb 2025 00:00:22 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: XXudDMV3MfYlcIYrvhzmE4LDe9lbFEDiJnXqNNaDO6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:53:b4:e8:24:1a:43:50:43:e3:6f:7f:04:47:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Feb 2 00:00:22 2025 GMT
Not After : Feb 3 00:00:22 2025 GMT
Subject: CN=d051775a124803a968cc809ad0585dbc9fed1f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:ee:ef:f7:16:9e:2e:12:50:4d:a1:80:6c:
2e:8d:35:c0:6f:a5:1d:5a:9b:8a:1f:a5:a7:9b:da:
31:9a:77:cf:92:01:f2:96:89:d1:fa:d1:db:fa:ee:
bc:96:72:23:05:41:88:ee:b7:b6:92:85:c9:9a:35:
77:91:b4:3f:9c:bb:dc:8f:58:a5:61:0f:3a:75:d2:
55:94:2e:08:f5:f5:00:84:8f:4a:da:2a:07:21:0f:
5b:8e:a2:8d:3c:ea:f5:51:f1:c3:93:a0:90:0a:8c:
97:9c:c5:9b:4b:0f:8b:e3:4e:b2:4b:b9:34:f7:51:
e7:de:99:a5:4a:89:03:85:c4:0f:66:c6:7d:83:d5:
58:e0:21:75:0a:22:f1:4d:e1:96:c5:df:78:17:c3:
19:df:cc:26:b8:d5:6d:02:e4:7c:00:04:b6:e2:1a:
4d:ab:b1:05:0b:27:2e:86:46:70:dc:a5:b9:51:87:
3b:e9:ed:19:b4:8a:87:2f:f1:cc:66:2c:c9:1e:2f:
e8:96:5c:5c:2e:3d:41:ce:22:eb:b1:df:b1:97:55:
34:79:df:90:21:f1:c3:c2:1e:d1:70:94:2b:77:f7:
69:50:5d:1e:da:d1:56:a0:aa:c2:1b:3b:3f:8a:3f:
4f:6a:9a:7f:49:6f:8b:f4:f5:a8:78:9d:10:d2:ad:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:51:77:5A:12:48:03:A9:68:CC:80:9A:D0:58:5D:BC:9F:ED:1F:45
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e0:f2:b9:41:3e:fd:fb:92:82:78:de:5f:e2:c9:d9:e7:a6:
9a:ea:3e:1e:61:48:be:74:99:1f:c1:db:24:4e:49:9d:a6:2d:
a8:5f:ce:0f:ff:3a:5b:bd:d2:be:30:0f:ca:2a:2e:49:c0:ee:
10:fb:c9:6d:39:05:02:e3:2b:45:b0:ba:82:ea:e2:77:9f:97:
d2:78:d3:7f:eb:d7:cf:5e:13:d9:34:1b:e2:86:ab:3f:88:b9:
32:43:e8:d5:90:24:9f:39:d0:51:20:14:bb:07:c1:4e:46:91:
fa:b3:31:d2:4d:95:58:5a:8e:e8:a9:a3:10:77:b7:4b:56:b7:
6a:7f:7c:c8:34:3e:bf:ff:48:3e:79:78:a6:19:5c:61:cb:bf:
58:e9:5f:5b:ae:a4:d1:47:8e:b3:b0:3b:cf:3e:5d:eb:63:7f:
fe:d1:f8:82:37:c4:cc:52:5c:a8:3f:0a:f5:f1:d8:9f:45:02:
91:57:c6:f0:20:ce:8d:67:cf:a2:e4:28:b2:ef:fb:7d:94:5d:
25:f9:5a:90:c4:14:c2:62:cd:a0:17:4a:8f:77:87:9d:22:56:
94:1e:32:de:00:c5:8d:07:7f:b5:81:2b:72:5c:66:04:7f:fa:
5e:ba:1a:03:45:3c:72:31:d7:c8:4a:61:94:c1:19:68:06:25:
84:3c:d0:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9VO06CQaQ1BD429/BEeDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OTYwODYxYjc5ZjRlYWI1MDc0MDgzNzhiYTkwODdjYzFl
NDRlMjcwHhcNMjUwMjAyMDAwMDIyWhcNMjUwMjAzMDAwMDIyWjAzMTEwLwYDVQQD
EyhkMDUxNzc1YTEyNDgwM2E5NjhjYzgwOWFkMDU4NWRiYzlmZWQxZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOLu7/cWni4SUE2hgGwujTXAb6Ud
WpuKH6Wnm9oxmnfPkgHylonR+tHb+u68lnIjBUGI7re2koXJmjV3kbQ/nLvcj1il
YQ86ddJVlC4I9fUAhI9K2ioHIQ9bjqKNPOr1UfHDk6CQCoyXnMWbSw+L406yS7k0
91Hn3pmlSokDhcQPZsZ9g9VY4CF1CiLxTeGWxd94F8MZ38wmuNVtAuR8AAS24hpN
q7EFCycuhkZw3KW5UYc76e0ZtIqHL/HMZizJHi/ollxcLj1BziLrsd+xl1U0ed+Q
IfHDwh7RcJQrd/dpUF0e2tFWoKrCGzs/ij9Papp/SW+L9PWoeJ0Q0q36VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBRd1oSSAOpaMyAmtBYXbyf7R9FMB8GA1UdIwQY
MBaAFCWWCGG3n06rUHQIN4upCHzB5E4nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUt
N2E5MDRmMjBmNTNjLzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUtN2E5MDRmMjBmNTNj
LzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquDyuUE+
/fuSgnjeX+LJ2eemmuo+HmFIvnSZH8HbJE5JnaYtqF/OD/86W73SvjAPyiouScDu
EPvJbTkFAuMrRbC6gurid5+X0njTf+vXz14T2TQb4oarP4i5MkPo1ZAknznQUSAU
uwfBTkaR+rMx0k2VWFqO6KmjEHe3S1a3an98yDQ+v/9IPnl4phlcYcu/WOlfW66k
0UeOs7A7zz5d62N//tH4gjfEzFJcqD8K9fHYn0UCkVfG8CDOjWfPouQosu/7fZRd
JflakMQUwmLNoBdKj3eHnSJWlB4y3gDFjQd/tYErclxmBH/6XroaA0U8cjHXyEph
lMEZaAYlhDzQxg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:17 2025 by rpki-client