Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json)
Hash identifier: Suq12a4VzZEToGX0FRzCT+yw0L/VA0JjS6CVJgzU+e8=
Subject key identifier: B0:93:38:05:EF:AB:B6:22:DD:08:69:6D:47:E6:FC:DF:9E:B1:45:A8
Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Certificate serial: 0194C3BE467C388E59A8C918CF9643343445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
Manifest number: FD
Signing time: Sat 01 Feb 2025 23:00:14 +0000
Manifest this update: Sat 01 Feb 2025 23:00:14 +0000
Manifest next update: Sun 02 Feb 2025 23:00:14 +0000
Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: HAOy0dGsbHdopwUtSOGd/hWIH3UEyzyLAL9NQQIcNUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:46:7c:38:8e:59:a8:c9:18:cf:96:43:34:34:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Validity
Not Before: Feb 1 23:00:14 2025 GMT
Not After : Feb 2 23:00:14 2025 GMT
Subject: CN=b0933805efabb622dd08696d47e6fcdf9eb145a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:ea:32:15:b3:6d:94:55:66:e7:e6:39:ff:
94:52:0e:6d:7d:8e:6f:d4:9c:a9:fd:92:75:10:e0:
dd:05:28:6a:36:3d:1d:de:d6:f6:06:b9:a8:2b:6e:
ab:ce:ab:8b:c7:55:cd:81:20:14:42:63:7e:c2:f0:
6b:4e:b2:c9:8f:d4:41:ae:56:c7:81:be:d5:dc:ac:
2a:94:da:e4:e8:3d:d7:d8:ad:ea:a9:d9:92:9c:01:
47:9b:cf:95:aa:2b:57:68:3a:e6:5f:59:26:c7:f7:
07:98:a4:b6:36:01:13:09:c9:77:d6:f2:3c:39:4f:
bd:df:ed:64:90:47:1e:51:11:b5:50:4e:27:0b:7c:
10:dd:91:3b:9f:7a:9e:32:93:74:14:44:79:53:7c:
2c:8f:2f:82:cb:b7:e6:11:76:d1:0a:38:8e:6b:56:
4e:84:b2:2a:5d:1a:ea:2b:63:7f:21:cb:d8:b6:3f:
ad:8c:fa:65:04:e0:42:d1:03:73:65:ec:9c:6c:54:
59:e0:8a:2c:0d:89:e5:06:25:a6:45:c1:b4:05:1d:
3a:f6:08:b5:3b:2c:65:2b:97:2a:e6:43:e0:3b:f5:
b0:85:e9:d1:6d:7b:15:ff:10:64:cf:07:9e:4e:14:
74:02:47:39:18:69:72:9d:fb:d6:f9:87:fe:e8:7e:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:93:38:05:EF:AB:B6:22:DD:08:69:6D:47:E6:FC:DF:9E:B1:45:A8
X509v3 Authority Key Identifier:
keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:36:dc:33:bb:9b:6b:df:96:00:c7:2d:8d:f3:56:0e:71:54:
b7:80:39:c1:96:40:88:99:c7:51:8c:fc:22:0c:01:89:86:b9:
b7:0f:6d:c5:34:5f:54:b3:07:43:8e:79:5b:ca:c5:44:df:e4:
33:35:12:98:4e:26:cf:30:6f:ee:81:7e:95:62:db:6f:80:18:
19:32:61:e9:c5:d2:51:2c:a3:72:f5:6b:09:52:28:ae:97:c9:
67:89:85:d9:a6:27:52:19:9c:7c:5b:9b:60:64:5d:c3:b6:01:
d7:82:d8:6b:9c:4c:0e:17:ce:87:af:0b:2f:e5:56:58:2b:a7:
93:4e:2d:eb:c9:be:44:76:55:1e:a7:44:d5:b6:95:de:68:58:
fb:93:24:1f:31:55:c2:d1:5b:c6:31:5c:82:e3:b5:28:5c:1b:
91:ae:45:cd:47:6a:f7:2d:b1:61:d3:68:a5:6d:8c:49:d8:12:
db:2b:f8:51:a5:6f:f0:7e:d7:95:5b:ae:9f:c8:c2:a4:84:ec:
4b:be:a6:79:7f:74:a7:b2:bc:db:f4:a1:83:cb:ff:7a:60:8b:
db:89:b1:62:d5:2e:d8:0e:1c:a6:ce:6d:ee:9d:44:6d:98:ec:
95:24:3a:25:74:38:d0:40:32:28:81:88:ff:1a:07:1b:cd:cd:
6b:1c:28:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvkZ8OI5ZqMkYz5ZDNDRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGVkZTY2MjIwM2Y0NTllOWIxOTZkMjMzODdhYzI5ZTRh
N2M0ZTUwHhcNMjUwMjAxMjMwMDE0WhcNMjUwMjAyMjMwMDE0WjAzMTEwLwYDVQQD
EyhiMDkzMzgwNWVmYWJiNjIyZGQwODY5NmQ0N2U2ZmNkZjllYjE0NWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGHqMhWzbZRVZufmOf+UUg5tfY5v
1Jyp/ZJ1EODdBShqNj0d3tb2BrmoK26rzquLx1XNgSAUQmN+wvBrTrLJj9RBrlbH
gb7V3KwqlNrk6D3X2K3qqdmSnAFHm8+VqitXaDrmX1kmx/cHmKS2NgETCcl31vI8
OU+93+1kkEceURG1UE4nC3wQ3ZE7n3qeMpN0FER5U3wsjy+Cy7fmEXbRCjiOa1ZO
hLIqXRrqK2N/IcvYtj+tjPplBOBC0QNzZeycbFRZ4IosDYnlBiWmRcG0BR069gi1
OyxlK5cq5kPgO/WwhenRbXsV/xBkzweeThR0Akc5GGlynfvW+Yf+6H66lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCTOAXvq7Yi3QhpbUfm/N+esUWoMB8GA1UdIwQY
MBaAFHkO3mYiA/RZ6bGW0jOHrCnkp8TlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMt
YzVkNGMxNzhlY2I1LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMtYzVkNGMxNzhlY2I1
LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjbcM7ub
a9+WAMctjfNWDnFUt4A5wZZAiJnHUYz8IgwBiYa5tw9txTRfVLMHQ455W8rFRN/k
MzUSmE4mzzBv7oF+lWLbb4AYGTJh6cXSUSyjcvVrCVIorpfJZ4mF2aYnUhmcfFub
YGRdw7YB14LYa5xMDhfOh68LL+VWWCunk04t68m+RHZVHqdE1baV3mhY+5MkHzFV
wtFbxjFcguO1KFwbka5FzUdq9y2xYdNopW2MSdgS2yv4UaVv8H7XlVuun8jCpITs
S76meX90p7K82/Shg8v/emCL24mxYtUu2A4cps5t7p1EbZjslSQ6JXQ40EAyKIGI
/xoHG83NaxwoNg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:55:26 2025 by rpki-client