Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File: R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier: HjKgwJSSY3hnPiuAym+u43NoTWo6vYSxjq1bO5fdDyw=
Subject key identifier: 3D:6D:F6:05:C9:23:03:98:7C:C7:5C:EE:51:FE:1F:9F:29:04:52:0E
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer: /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial: 019361B12BE857746009D216B7732BEBB81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number: 1B
Signing time: Mon 25 Nov 2024 05:00:21 +0000
Manifest this update: Mon 25 Nov 2024 05:00:21 +0000
Manifest next update: Tue 26 Nov 2024 05:00:21 +0000
Files and hashes: 1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: ntfGUSyaVL9G6rZFzv+wzYPtwrUylgpXMxa9IkQjCak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:b1:2b:e8:57:74:60:09:d2:16:b7:73:2b:eb:b8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Validity
Not Before: Nov 25 05:00:21 2024 GMT
Not After : Nov 26 05:00:21 2024 GMT
Subject: CN=3d6df605c92303987cc75cee51fe1f9f2904520e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:55:8a:cd:74:77:b2:f3:45:08:d6:c9:f9:d5:
50:9f:37:ec:18:aa:3a:9e:6e:e9:a5:97:2d:cc:7f:
12:e3:dd:23:51:32:0e:d7:5d:60:bf:90:e6:3e:9c:
c0:f1:bd:d3:c3:f9:a8:89:b1:c9:3d:f3:df:e7:d7:
a9:eb:7b:1a:1f:8b:c4:00:c9:77:d0:47:3a:62:c0:
06:1b:75:10:e1:46:33:d2:ba:ae:af:5d:42:f3:28:
6b:9e:b6:22:ee:ff:a6:a0:26:15:4a:1f:6c:ce:7f:
67:fc:ca:39:9f:64:92:cd:36:6b:51:63:1b:89:72:
e4:c4:b0:ab:44:6a:01:da:d2:d6:63:22:33:3d:dc:
da:db:90:f6:51:d3:c7:7d:27:13:20:23:9c:24:73:
b6:2d:53:e7:17:85:84:15:fe:fd:f9:47:35:ca:1a:
cb:da:be:81:da:04:ce:52:26:b1:42:2e:ea:cd:7f:
01:11:41:27:29:4e:3a:a3:85:c1:d2:1a:7e:c5:ae:
82:28:cf:ff:b8:e3:57:da:ee:14:69:f5:16:4f:df:
dc:db:41:17:ea:19:ef:aa:16:12:03:a0:52:88:cf:
ec:da:5b:e7:7c:3f:55:ce:77:79:eb:f5:0c:53:45:
4c:f8:70:f3:a8:2e:c9:6d:fc:46:51:72:b7:47:2a:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:F6:05:C9:23:03:98:7C:C7:5C:EE:51:FE:1F:9F:29:04:52:0E
X509v3 Authority Key Identifier:
keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:3c:75:a6:0f:40:da:1e:06:d4:b1:8d:28:0c:aa:17:9b:
31:8b:37:b5:98:cc:a8:4c:ac:a0:30:73:78:ea:ce:80:ed:8b:
ce:50:76:b6:e7:ed:e4:d5:66:5b:0f:36:2f:70:71:e0:b0:51:
98:fd:e7:77:1d:7c:8e:5f:10:14:89:fd:e5:fa:61:c1:1b:94:
ba:ec:1e:e2:e2:8c:0e:57:99:c0:04:30:2e:32:d9:b9:90:a8:
55:da:2f:95:2a:11:9c:d0:9a:d4:71:94:d8:b3:88:d8:23:10:
0d:0c:7b:63:12:cf:4b:89:a3:78:e3:be:6f:1b:e9:a4:ab:a7:
a6:aa:22:b1:20:3d:39:60:84:08:fc:f9:fd:6c:9e:b2:39:37:
51:03:e7:15:3f:37:3f:92:66:da:ae:7d:fe:10:33:cf:6a:bd:
d5:fe:a4:c8:bd:72:f0:78:c4:ba:25:c0:e7:71:ab:a8:c8:07:
55:70:0c:91:83:98:5a:f3:62:c0:7c:a4:9c:a9:1d:74:c3:83:
f1:7a:6c:77:e4:9b:52:92:5e:ca:a7:ac:bf:ce:26:16:e2:92:
3d:d2:33:f1:d2:70:30:b1:d6:39:8e:86:16:3d:95:d2:36:b2:
e0:77:2b:81:64:fd:7f:cc:75:df:b3:b1:4f:f5:92:4b:a3:67:
26:a4:43:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNhsSvoV3RgCdIWt3Mr67gaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YjcxODcyZWQ2NDVjOTY2NmQ1NTExYWJjNzhmMDdjNGQz
YWI4YWMwHhcNMjQxMTI1MDUwMDIxWhcNMjQxMTI2MDUwMDIxWjAzMTEwLwYDVQQD
EygzZDZkZjYwNWM5MjMwMzk4N2NjNzVjZWU1MWZlMWY5ZjI5MDQ1MjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FWKzXR3svNFCNbJ+dVQnzfsGKo6
nm7ppZctzH8S490jUTIO111gv5DmPpzA8b3Tw/moibHJPfPf59ep63saH4vEAMl3
0Ec6YsAGG3UQ4UYz0rqur11C8yhrnrYi7v+moCYVSh9szn9n/Mo5n2SSzTZrUWMb
iXLkxLCrRGoB2tLWYyIzPdza25D2UdPHfScTICOcJHO2LVPnF4WEFf79+Uc1yhrL
2r6B2gTOUiaxQi7qzX8BEUEnKU46o4XB0hp+xa6CKM//uONX2u4UafUWT9/c20EX
6hnvqhYSA6BSiM/s2lvnfD9Vznd56/UMU0VM+HDzqC7JbfxGUXK3Ryr0WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1t9gXJIwOYfMdc7lH+H58pBFIOMB8GA1UdIwQY
MBaAFEe3GHLtZFyWZtVRGrx48HxNOrisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85MDliN2ItZDQxMy00MmUxLWE2MGEt
ZWM4NGRkNWM2OWJmLzEvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85MDliN2ItZDQxMy00MmUxLWE2MGEtZWM4NGRkNWM2OWJm
LzEvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8I8daYP
QNoeBtSxjSgMqhebMYs3tZjMqEysoDBzeOrOgO2LzlB2tuft5NVmWw82L3Bx4LBR
mP3ndx18jl8QFIn95fphwRuUuuwe4uKMDleZwAQwLjLZuZCoVdovlSoRnNCa1HGU
2LOI2CMQDQx7YxLPS4mjeOO+bxvppKunpqoisSA9OWCECPz5/Wyesjk3UQPnFT83
P5Jm2q59/hAzz2q91f6kyL1y8HjEuiXA53GrqMgHVXAMkYOYWvNiwHyknKkddMOD
8Xpsd+SbUpJeyqesv84mFuKSPdIz8dJwMLHWOY6GFj2V0jay4HcrgWT9f8x137Ox
T/WSS6NnJqRD8A==
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:43:20 2024 by rpki-client on console-fra.rpki-client.org