Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
File: xASkYSDKwffLHkNvWWnWxDaJoFA.mft (raw, json)
Hash identifier: WY2PESjKhX/CoNilQIh+a5J8kfF6z570VH3Ny6NoN3U=
Subject key identifier: EE:03:25:0F:85:0A:BF:39:7C:20:03:F8:15:12:52:CF:F1:A3:BB:D3
Authority key identifier: C4:04:A4:61:20:CA:C1:F7:CB:1E:43:6F:59:69:D6:C4:36:89:A0:50
Certificate issuer: /CN=c404a46120cac1f7cb1e436f5969d6c43689a050
Certificate serial: 0195116BC42F33DB0A0207B992522D73E8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xASkYSDKwffLHkNvWWnWxDaJoFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
Manifest number: 10D7
Signing time: Mon 17 Feb 2025 01:00:30 +0000
Manifest this update: Mon 17 Feb 2025 01:00:30 +0000
Manifest next update: Tue 18 Feb 2025 01:00:30 +0000
Files and hashes: 1: xASkYSDKwffLHkNvWWnWxDaJoFA.crl (hash: irWBTuXU8hRe0gfcuj/suZunTUXswgTklBK09h7QWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xASkYSDKwffLHkNvWWnWxDaJoFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c4:2f:33:db:0a:02:07:b9:92:52:2d:73:e8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c404a46120cac1f7cb1e436f5969d6c43689a050
Validity
Not Before: Feb 17 01:00:30 2025 GMT
Not After : Feb 18 01:00:30 2025 GMT
Subject: CN=ee03250f850abf397c2003f8151252cff1a3bbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:97:dd:c8:a1:6c:8a:bd:a4:e8:c3:d3:72:
f5:af:d3:da:35:40:10:e5:13:7c:64:7b:6d:2b:ca:
8b:25:f5:e0:b5:67:e9:08:55:93:92:e3:a0:a8:e8:
ee:ef:f9:18:1a:d2:73:98:04:34:67:f9:bd:a1:e3:
45:07:54:77:38:2c:b1:8a:03:2f:1d:d7:d7:bb:ce:
2e:b7:4a:74:59:67:ae:04:60:90:11:57:e3:c7:e8:
f7:9f:ea:97:0a:79:d6:a0:97:48:5b:b2:28:77:b9:
4f:c9:57:e2:61:1c:a2:2c:5f:da:af:ff:21:7b:e4:
3c:0c:09:84:3d:a4:d8:b9:b3:d1:4b:66:f3:61:f8:
fb:9d:e1:19:b2:97:9a:c3:76:4d:86:2d:ad:ce:9b:
ce:5e:72:5f:82:d8:7e:10:53:ed:15:f6:a6:fd:09:
c8:e5:fe:24:f1:9a:40:0a:9a:24:ea:7e:cf:61:80:
85:e3:53:6a:11:fb:83:4f:9a:bf:86:ad:d1:ec:45:
db:de:2d:72:41:cd:41:d1:25:e4:ef:7c:d2:51:0f:
9e:ea:7c:2e:3e:e6:17:70:53:fd:52:50:44:d9:b4:
de:90:93:ae:24:7a:75:8a:c8:cb:71:99:f5:50:c1:
9e:0b:f4:d3:e6:8f:fe:eb:71:07:42:4a:32:5f:d5:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:03:25:0F:85:0A:BF:39:7C:20:03:F8:15:12:52:CF:F1:A3:BB:D3
X509v3 Authority Key Identifier:
keyid:C4:04:A4:61:20:CA:C1:F7:CB:1E:43:6F:59:69:D6:C4:36:89:A0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xASkYSDKwffLHkNvWWnWxDaJoFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b2946-98d3-4dfd-986d-e1b0bd3d8e7a/1/xASkYSDKwffLHkNvWWnWxDaJoFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d0:b6:fb:40:44:7b:a5:91:29:12:81:aa:3f:b3:71:5a:d7:
0f:05:b7:20:90:5a:7e:7f:16:0c:29:58:14:3a:7e:4b:92:15:
4e:b2:2e:33:45:1e:04:92:51:6f:1b:ba:b2:7d:d6:ce:e5:7e:
c6:3d:88:ec:6e:0b:d0:9f:b4:63:59:9b:31:ea:f5:65:89:27:
1b:b8:22:48:63:38:f9:ff:b3:3e:ee:f8:a0:15:82:a6:a2:79:
26:2f:5f:c7:82:57:fa:2f:55:9e:cc:90:63:ea:c8:f8:3a:b0:
59:e3:60:e7:23:0f:9f:6c:ed:d0:ea:ac:27:37:d9:1d:cc:c1:
64:fe:13:ca:70:94:eb:ce:ef:c2:87:9e:d3:96:e3:e2:a4:19:
fb:86:3d:36:7e:58:aa:01:61:d7:ce:26:a3:e3:43:2d:b6:ce:
61:d3:e8:e8:82:61:f4:fb:c9:1d:55:00:f2:6d:b9:f8:65:48:
ab:d1:ae:0d:2a:2c:c0:af:03:b0:c1:c3:39:54:5a:f8:14:de:
ba:00:69:1e:15:47:c2:f4:30:ab:d1:43:38:69:b6:b5:42:a9:
70:c6:71:00:34:16:11:7d:d2:3e:14:57:b1:65:0d:93:e0:50:
26:72:86:67:23:b7:79:cb:e8:fd:e9:09:83:c9:79:57:14:c6:
f3:a2:30:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa8QvM9sKAge5klItc+j6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MDRhNDYxMjBjYWMxZjdjYjFlNDM2ZjU5NjlkNmM0MzY4
OWEwNTAwHhcNMjUwMjE3MDEwMDMwWhcNMjUwMjE4MDEwMDMwWjAzMTEwLwYDVQQD
EyhlZTAzMjUwZjg1MGFiZjM5N2MyMDAzZjgxNTEyNTJjZmYxYTNiYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCeX3cihbIq9pOjD03L1r9PaNUAQ
5RN8ZHttK8qLJfXgtWfpCFWTkuOgqOju7/kYGtJzmAQ0Z/m9oeNFB1R3OCyxigMv
HdfXu84ut0p0WWeuBGCQEVfjx+j3n+qXCnnWoJdIW7Iod7lPyVfiYRyiLF/ar/8h
e+Q8DAmEPaTYubPRS2bzYfj7neEZspeaw3ZNhi2tzpvOXnJfgth+EFPtFfam/QnI
5f4k8ZpACpok6n7PYYCF41NqEfuDT5q/hq3R7EXb3i1yQc1B0SXk73zSUQ+e6nwu
PuYXcFP9UlBE2bTekJOuJHp1isjLcZn1UMGeC/TT5o/+63EHQkoyX9UGNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4DJQ+FCr85fCAD+BUSUs/xo7vTMB8GA1UdIwQY
MBaAFMQEpGEgysH3yx5Db1lp1sQ2iaBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEFTa1lTREt3ZmZMSGtOdldXbld4RGFKb0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wYjI5NDYtOThkMy00ZGZkLTk4NmQt
ZTFiMGJkM2Q4ZTdhLzEveEFTa1lTREt3ZmZMSGtOdldXbld4RGFKb0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wYjI5NDYtOThkMy00ZGZkLTk4NmQtZTFiMGJkM2Q4ZTdh
LzEveEFTa1lTREt3ZmZMSGtOdldXbld4RGFKb0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdC2+0BE
e6WRKRKBqj+zcVrXDwW3IJBafn8WDClYFDp+S5IVTrIuM0UeBJJRbxu6sn3WzuV+
xj2I7G4L0J+0Y1mbMer1ZYknG7giSGM4+f+zPu74oBWCpqJ5Ji9fx4JX+i9VnsyQ
Y+rI+DqwWeNg5yMPn2zt0OqsJzfZHczBZP4TynCU687vwoee05bj4qQZ+4Y9Nn5Y
qgFh184mo+NDLbbOYdPo6IJh9PvJHVUA8m25+GVIq9GuDSoswK8DsMHDOVRa+BTe
ugBpHhVHwvQwq9FDOGm2tUKpcMZxADQWEX3SPhRXsWUNk+BQJnKGZyO3ecvo/ekJ
g8l5VxTG86IwvQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:54 2025 by rpki-client