Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
File: r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json)
Hash identifier: vAqrLoU8x/DKweaucORv7BJe5p6swRsGYypLf5mAl+w=
Subject key identifier: A6:95:CC:8F:12:1E:7B:2C:77:2F:E4:DF:18:13:6D:A4:69:C5:7C:3C
Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
Certificate issuer: /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Certificate serial: 0194C4D13E159C9BBCF0B38B42DA7F17EA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
Manifest number: 0984
Signing time: Sun 02 Feb 2025 04:00:34 +0000
Manifest this update: Sun 02 Feb 2025 04:00:34 +0000
Manifest next update: Mon 03 Feb 2025 04:00:34 +0000
Files and hashes: 1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: E3rX9NvLIdwQQVpMLAvgFOeqKguqaQ594RXdOPKg+Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:3e:15:9c:9b:bc:f0:b3:8b:42:da:7f:17:ea:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Validity
Not Before: Feb 2 04:00:34 2025 GMT
Not After : Feb 3 04:00:34 2025 GMT
Subject: CN=a695cc8f121e7b2c772fe4df18136da469c57c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:ee:46:0f:d8:1d:b6:7a:33:ed:1a:04:ea:
90:e0:93:38:c1:da:eb:34:c0:5d:b8:47:65:79:51:
88:39:44:4b:ce:46:d2:44:e0:c7:11:af:e2:3f:f5:
99:d9:07:fc:70:df:26:39:29:48:10:b2:29:77:d4:
f7:3a:cd:ea:e3:c1:e9:a8:97:c3:29:54:0d:69:21:
53:28:ce:28:43:08:9a:33:9d:57:28:8b:97:b4:9d:
73:5d:d3:05:13:1c:13:b5:9d:03:7c:4b:c0:2c:25:
84:b8:a6:e3:45:17:78:81:4d:1f:6c:4e:93:3f:19:
d6:fd:e5:da:ec:2e:06:69:6c:c6:1f:d4:46:7c:44:
25:76:38:e8:a0:46:d0:e9:1b:b9:2c:02:0e:34:19:
2a:d2:13:b4:24:49:b4:8b:59:9f:0d:38:cd:46:74:
b9:fb:23:ad:85:79:70:c4:9a:7f:66:9b:06:99:f7:
f1:b1:0c:c1:d8:d6:8b:5d:e0:e1:47:55:77:c6:dd:
d8:7e:f1:ed:1a:c6:4e:67:23:ae:cb:26:b1:a5:a7:
5f:c9:58:c6:84:e4:49:41:18:ca:02:41:83:b9:e6:
0c:08:e4:68:56:38:22:5c:bd:63:44:c0:87:b5:83:
0b:d9:15:6d:6b:bd:0f:e4:41:2f:b8:3a:08:ad:36:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:CC:8F:12:1E:7B:2C:77:2F:E4:DF:18:13:6D:A4:69:C5:7C:3C
X509v3 Authority Key Identifier:
keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a3:96:63:d4:62:b4:00:da:d7:4a:35:51:2f:35:d6:70:cb:
9e:31:bc:29:cf:d9:2b:9a:e5:3f:e9:be:81:61:55:89:86:74:
e0:d8:a1:32:38:6d:ea:dc:90:b4:1a:40:db:39:e2:8f:0e:8b:
de:ad:1e:6d:7b:a7:dc:c7:dd:a6:4e:d0:1c:26:31:8d:2e:35:
dc:be:f8:26:4a:1d:79:2b:28:7f:23:6a:45:38:59:e8:59:e1:
32:ad:eb:94:2f:b4:f8:32:af:e8:d1:d8:dd:66:08:a1:8a:ca:
5e:67:e2:91:c7:83:9c:22:b8:d6:63:3a:5c:0b:bd:fc:a3:5f:
03:79:01:aa:47:9b:e8:be:2b:50:8c:46:99:10:d4:c4:af:6b:
56:63:86:b7:2c:ed:00:03:cd:a5:24:bc:14:e8:b3:ab:e0:c6:
ac:87:93:71:3b:d2:06:63:0f:e1:30:ee:fa:b4:2b:0a:f8:18:
d4:85:a5:aa:8b:96:09:0b:c7:d5:f8:98:44:8a:f8:35:c2:2c:
e3:99:84:44:cc:af:17:64:95:af:67:5f:59:37:13:ca:b5:89:
23:99:c9:3d:b2:5e:6d:5d:7a:b9:c7:17:89:24:47:8d:ac:2b:
23:2d:62:bc:82:61:b0:2c:cb:62:70:eb:ad:a0:9c:68:83:8f:
8f:ca:a6:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0T4VnJu88LOLQtp/F+oKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmIwMWRkYzUxZDkyNzQyYzNjYzRhMmIzMWRjN2ZjMTgz
YmU1N2YwHhcNMjUwMjAyMDQwMDM0WhcNMjUwMjAzMDQwMDM0WjAzMTEwLwYDVQQD
EyhhNjk1Y2M4ZjEyMWU3YjJjNzcyZmU0ZGYxODEzNmRhNDY5YzU3YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHbuRg/YHbZ6M+0aBOqQ4JM4wdrr
NMBduEdleVGIOURLzkbSRODHEa/iP/WZ2Qf8cN8mOSlIELIpd9T3Os3q48HpqJfD
KVQNaSFTKM4oQwiaM51XKIuXtJ1zXdMFExwTtZ0DfEvALCWEuKbjRRd4gU0fbE6T
PxnW/eXa7C4GaWzGH9RGfEQldjjooEbQ6Ru5LAIONBkq0hO0JEm0i1mfDTjNRnS5
+yOthXlwxJp/ZpsGmffxsQzB2NaLXeDhR1V3xt3YfvHtGsZOZyOuyyaxpadfyVjG
hORJQRjKAkGDueYMCORoVjgiXL1jRMCHtYML2RVta70P5EEvuDoIrTZv3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaVzI8SHnssdy/k3xgTbaRpxXw8MB8GA1UdIwQY
MBaAFK9rAd3FHZJ0LDzEorMdx/wYO+V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zN2EwMDItMjA3MS00NGVjLWJmNTAt
MjljYTE2NTc2ZWRlLzEvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8zN2EwMDItMjA3MS00NGVjLWJmNTAtMjljYTE2NTc2ZWRl
LzEvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6OWY9Ri
tADa10o1US811nDLnjG8Kc/ZK5rlP+m+gWFViYZ04NihMjht6tyQtBpA2znijw6L
3q0ebXun3Mfdpk7QHCYxjS413L74JkodeSsofyNqRThZ6FnhMq3rlC+0+DKv6NHY
3WYIoYrKXmfikceDnCK41mM6XAu9/KNfA3kBqkeb6L4rUIxGmRDUxK9rVmOGtyzt
AAPNpSS8FOizq+DGrIeTcTvSBmMP4TDu+rQrCvgY1IWlqouWCQvH1fiYRIr4NcIs
45mERMyvF2SVr2dfWTcTyrWJI5nJPbJebV16uccXiSRHjawrIy1ivIJhsCzLYnDr
raCcaIOPj8qmHg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:39 2025 by rpki-client