Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
File: U1zc9HjqgOsXXEwwd-efy3DF0jA.mft (raw, json)
Hash identifier: HC31ml885gN0XJeGc9a552/qKmXo16Qbcdoxvth6RVc=
Subject key identifier: 3B:D6:5E:91:8E:39:E7:BB:14:96:71:44:2C:FB:D7:2F:39:6B:E2:D3
Authority key identifier: 53:5C:DC:F4:78:EA:80:EB:17:5C:4C:30:77:E7:9F:CB:70:C5:D2:30
Certificate issuer: /CN=535cdcf478ea80eb175c4c3077e79fcb70c5d230
Certificate serial: 0194C3883CAD49ED02B5C258566045422678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
Manifest number: 0885
Signing time: Sat 01 Feb 2025 22:01:13 +0000
Manifest this update: Sat 01 Feb 2025 22:01:13 +0000
Manifest next update: Sun 02 Feb 2025 22:01:13 +0000
Files and hashes: 1: U1zc9HjqgOsXXEwwd-efy3DF0jA.crl (hash: 8XacYygHWHLtHRmvp/f0/SG7zQUlZZA9wuRzhLQdTnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:3c:ad:49:ed:02:b5:c2:58:56:60:45:42:26:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535cdcf478ea80eb175c4c3077e79fcb70c5d230
Validity
Not Before: Feb 1 22:01:13 2025 GMT
Not After : Feb 2 22:01:13 2025 GMT
Subject: CN=3bd65e918e39e7bb149671442cfbd72f396be2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:ee:6c:be:f3:c8:81:d0:99:d6:4c:fa:53:
54:9f:c9:a0:8d:e4:a5:91:6d:f8:d7:d6:0d:44:6f:
76:d3:29:91:02:1c:87:e7:7a:9d:27:93:69:d6:1d:
d2:bb:6f:47:b8:88:88:df:4a:2e:bf:e1:5b:3f:ed:
3b:71:86:04:05:4f:87:c6:11:be:c8:3b:87:6d:b0:
e6:95:8e:5f:a5:57:80:cb:60:e0:4a:ba:ef:e1:ba:
14:09:5a:30:00:46:61:e6:b4:f8:7a:3e:97:c8:c2:
d2:45:fa:20:97:d9:33:20:e9:41:e6:c4:04:a4:6e:
c6:97:e0:76:14:02:87:00:c2:58:cf:ac:48:d5:ec:
7b:56:7b:3f:65:0b:49:2c:06:68:ee:48:ef:5a:21:
ee:08:78:1d:f3:4e:c0:c2:10:ce:8f:e5:ea:5e:81:
d1:76:77:b8:6b:b0:78:ec:31:ea:a9:ae:02:65:5d:
6b:dd:e6:e4:71:e9:2c:8b:01:19:20:42:a6:d8:96:
b6:ed:15:a8:7b:ee:c1:96:67:9b:47:48:a3:0f:24:
db:30:4b:36:e1:64:e3:a5:3e:13:cc:48:21:9c:76:
31:06:3b:09:d8:c5:30:e1:11:03:82:57:81:b5:84:
7f:c9:1c:8b:8b:e0:53:ed:bb:58:1a:96:2e:31:a1:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D6:5E:91:8E:39:E7:BB:14:96:71:44:2C:FB:D7:2F:39:6B:E2:D3
X509v3 Authority Key Identifier:
keyid:53:5C:DC:F4:78:EA:80:EB:17:5C:4C:30:77:E7:9F:CB:70:C5:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:10:b6:ea:1e:49:60:1a:63:ca:fc:68:4d:d3:5c:18:34:28:
43:82:74:18:80:a7:a1:6a:c3:37:5d:a1:37:82:b6:0b:5f:f4:
b2:13:45:fe:9b:48:98:cb:b4:30:48:12:c1:63:58:69:e2:60:
f4:39:cd:a6:9f:50:08:f8:2a:fd:06:af:3f:79:e2:76:15:2d:
75:04:89:18:17:3b:7b:d0:9f:e2:a9:d8:92:3a:c8:a9:f2:d3:
87:27:d6:53:a1:9a:b4:ac:13:f6:4c:dd:97:da:40:8e:a6:05:
38:c9:5d:e8:c8:f7:90:a8:f9:e5:79:c8:63:c1:d9:69:91:ba:
64:d3:e7:7e:8f:2e:a8:75:42:bd:a0:1a:fe:9f:7d:61:99:ac:
f2:16:c7:23:9f:6d:75:f4:de:01:f5:bb:3e:91:0d:14:6b:a6:
82:91:54:24:8b:68:ec:9f:cf:07:78:69:7e:1b:c7:bd:a1:7e:
e0:77:c2:2f:0a:8c:15:9a:b9:f8:49:c8:4b:a2:81:11:ee:7a:
a3:85:06:f5:f3:aa:7e:1f:e9:37:10:a2:65:01:ee:1d:e5:ba:
e0:f6:34:2b:98:25:7b:58:ce:05:4c:63:b1:65:3f:20:fd:c0:
24:a9:78:d0:b9:3c:78:b7:7e:a9:d7:be:5d:34:05:c7:e1:b7:
be:98:77:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiDytSe0CtcJYVmBFQiZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWNkY2Y0NzhlYTgwZWIxNzVjNGMzMDc3ZTc5ZmNiNzBj
NWQyMzAwHhcNMjUwMjAxMjIwMTEzWhcNMjUwMjAyMjIwMTEzWjAzMTEwLwYDVQQD
EygzYmQ2NWU5MThlMzllN2JiMTQ5NjcxNDQyY2ZiZDcyZjM5NmJlMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W/ubL7zyIHQmdZM+lNUn8mgjeSl
kW3419YNRG920ymRAhyH53qdJ5Np1h3Su29HuIiI30ouv+FbP+07cYYEBU+HxhG+
yDuHbbDmlY5fpVeAy2DgSrrv4boUCVowAEZh5rT4ej6XyMLSRfogl9kzIOlB5sQE
pG7Gl+B2FAKHAMJYz6xI1ex7Vns/ZQtJLAZo7kjvWiHuCHgd807AwhDOj+XqXoHR
dne4a7B47DHqqa4CZV1r3ebkceksiwEZIEKm2Ja27RWoe+7BlmebR0ijDyTbMEs2
4WTjpT4TzEghnHYxBjsJ2MUw4REDgleBtYR/yRyLi+BT7btYGpYuMaFhVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvWXpGOOee7FJZxRCz71y85a+LTMB8GA1UdIwQY
MBaAFFNc3PR46oDrF1xMMHfnn8twxdIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTF6YzlIanFnT3NYWEV3d2QtZWZ5M0RGMGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMjNjNzctZjRhZC00MGJhLWI4NTAt
OTg5ZjUzYjJjYWUwLzEvVTF6YzlIanFnT3NYWEV3d2QtZWZ5M0RGMGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hMjNjNzctZjRhZC00MGJhLWI4NTAtOTg5ZjUzYjJjYWUw
LzEvVTF6YzlIanFnT3NYWEV3d2QtZWZ5M0RGMGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURC26h5J
YBpjyvxoTdNcGDQoQ4J0GICnoWrDN12hN4K2C1/0shNF/ptImMu0MEgSwWNYaeJg
9DnNpp9QCPgq/QavP3nidhUtdQSJGBc7e9Cf4qnYkjrIqfLThyfWU6GatKwT9kzd
l9pAjqYFOMld6Mj3kKj55XnIY8HZaZG6ZNPnfo8uqHVCvaAa/p99YZms8hbHI59t
dfTeAfW7PpENFGumgpFUJIto7J/PB3hpfhvHvaF+4HfCLwqMFZq5+EnIS6KBEe56
o4UG9fOqfh/pNxCiZQHuHeW64PY0K5gle1jOBUxjsWU/IP3AJKl40Lk8eLd+qde+
XTQFx+G3vph3DQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:57:17 2025 by rpki-client