Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
File: lnRtO9Pi3eYWQCDesLXYkixkdm0.mft (raw, json)
Hash identifier: D+kyT199zMN4voZBfIABhOjIkMqk9V4WhYn1me1tOog=
Subject key identifier: 6B:C8:CF:B6:F6:AB:91:2A:73:83:79:B2:8E:93:43:B8:7B:EB:51:E7
Authority key identifier: 96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
Certificate issuer: /CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Certificate serial: 0194C42C2BC9F885273DC9DCA32210F8C297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
Manifest number: E4
Signing time: Sun 02 Feb 2025 01:00:16 +0000
Manifest this update: Sun 02 Feb 2025 01:00:16 +0000
Manifest next update: Mon 03 Feb 2025 01:00:16 +0000
Files and hashes: 1: lnRtO9Pi3eYWQCDesLXYkixkdm0.crl (hash: 3Konot1lZeEBYCWIiNcf3iW58VsgTGY388iY9Zert7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:2b:c9:f8:85:27:3d:c9:dc:a3:22:10:f8:c2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Validity
Not Before: Feb 2 01:00:16 2025 GMT
Not After : Feb 3 01:00:16 2025 GMT
Subject: CN=6bc8cfb6f6ab912a738379b28e9343b87beb51e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:7f:23:91:cf:3b:62:25:0e:8f:20:a6:c5:
ae:07:2e:a0:eb:9c:eb:3d:56:7f:fb:df:e0:37:7a:
c7:fe:8f:47:13:33:dd:20:96:43:e3:13:21:3a:3d:
e9:95:1d:3a:7d:e9:ad:71:61:c3:c3:7e:e8:01:7c:
56:37:ed:d9:29:ad:11:3c:32:05:c1:38:75:27:37:
e0:ac:21:b5:19:c7:57:b1:37:ba:21:ae:c6:4a:58:
df:c5:19:80:d2:77:5a:ba:24:c9:23:4e:c8:c4:f7:
af:64:fa:67:b5:97:43:c0:a8:97:dc:d4:9f:02:92:
47:b7:7b:d3:1e:3e:b2:79:49:a9:84:84:6c:e5:ba:
ec:0f:d0:39:16:aa:d4:eb:e5:4c:3c:28:a3:c1:70:
39:e2:0b:1f:dc:36:7e:c7:00:a7:90:c0:c2:6c:7c:
10:92:19:67:98:3f:19:b4:7f:13:75:18:10:15:fe:
2d:07:f4:04:7b:76:be:f1:aa:46:c2:75:fa:02:f8:
ba:fd:84:a5:ce:0b:e8:8f:23:83:29:94:27:ef:23:
9a:31:46:13:af:01:51:4a:f8:f6:de:25:13:55:56:
53:08:cd:8b:74:ca:4a:e2:06:d6:57:c5:4f:1a:21:
56:bf:92:f3:15:a7:d3:d9:22:19:c2:4e:d4:04:d4:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C8:CF:B6:F6:AB:91:2A:73:83:79:B2:8E:93:43:B8:7B:EB:51:E7
X509v3 Authority Key Identifier:
keyid:96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:89:bb:ea:a3:a9:19:66:fd:bc:f0:30:c7:48:ea:ee:50:32:
68:e3:92:a2:24:81:33:71:9a:97:ec:ed:14:76:37:97:0a:01:
3d:9e:bf:e6:78:d7:77:1c:de:90:99:02:7f:a7:db:88:7d:81:
fa:08:dd:5e:43:fe:aa:1c:6f:1c:e4:41:dd:7a:c8:d6:4b:78:
c8:80:9a:be:d3:e0:4d:b4:29:06:c1:00:3d:e4:fa:9d:39:34:
2c:03:51:94:c4:2a:72:c3:da:8d:0b:4d:db:dd:2c:4b:74:c0:
ec:d5:9c:ad:40:92:f8:e0:ac:53:f1:bd:5c:63:18:cd:e0:90:
c3:1e:d1:61:89:60:da:b9:bb:c4:3b:3d:52:b8:b4:ff:9a:db:
fa:e6:67:ec:81:48:12:43:a4:5d:85:93:7d:8e:c5:47:b7:a1:
72:4d:47:ab:dd:23:fb:00:0c:4f:6f:19:26:42:34:9f:9e:df:
da:0f:ee:42:ae:0d:ac:50:ef:8f:0c:7b:99:93:ab:32:70:0f:
5f:3e:ee:c6:72:50:62:81:38:c4:2c:ed:52:b7:09:c5:06:f7:
b9:96:c0:31:e5:61:a4:93:e6:fe:19:fa:c8:f3:a1:75:b8:20:
65:e2:6f:e6:ed:aa:2a:31:71:72:8c:69:af:82:68:61:fc:56:
3a:76:2e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELCvJ+IUnPcncoyIQ+MKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NzQ2ZDNiZDNlMmRkZTYxNjQwMjBkZWIwYjVkODkyMmM2
NDc2NmQwHhcNMjUwMjAyMDEwMDE2WhcNMjUwMjAzMDEwMDE2WjAzMTEwLwYDVQQD
Eyg2YmM4Y2ZiNmY2YWI5MTJhNzM4Mzc5YjI4ZTkzNDNiODdiZWI1MWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl49/I5HPO2IlDo8gpsWuBy6g65zr
PVZ/+9/gN3rH/o9HEzPdIJZD4xMhOj3plR06femtcWHDw37oAXxWN+3ZKa0RPDIF
wTh1JzfgrCG1GcdXsTe6Ia7GSljfxRmA0ndauiTJI07IxPevZPpntZdDwKiX3NSf
ApJHt3vTHj6yeUmphIRs5brsD9A5FqrU6+VMPCijwXA54gsf3DZ+xwCnkMDCbHwQ
khlnmD8ZtH8TdRgQFf4tB/QEe3a+8apGwnX6Avi6/YSlzgvojyODKZQn7yOaMUYT
rwFRSvj23iUTVVZTCM2LdMpK4gbWV8VPGiFWv5LzFafT2SIZwk7UBNRwUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvIz7b2q5Eqc4N5so6TQ7h761HnMB8GA1UdIwQY
MBaAFJZ0bTvT4t3mFkAg3rC12JIsZHZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9lMWYxNzEtYTg4OS00Mzk1LTljZmMt
MDgwNTQxOWQ3MjFhLzEvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9lMWYxNzEtYTg4OS00Mzk1LTljZmMtMDgwNTQxOWQ3MjFh
LzEvbG5SdE85UGkzZVlXUUNEZXNMWFlraXhrZG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnom76qOp
GWb9vPAwx0jq7lAyaOOSoiSBM3Gal+ztFHY3lwoBPZ6/5njXdxzekJkCf6fbiH2B
+gjdXkP+qhxvHORB3XrI1kt4yICavtPgTbQpBsEAPeT6nTk0LANRlMQqcsPajQtN
290sS3TA7NWcrUCS+OCsU/G9XGMYzeCQwx7RYYlg2rm7xDs9Uri0/5rb+uZn7IFI
EkOkXYWTfY7FR7ehck1Hq90j+wAMT28ZJkI0n57f2g/uQq4NrFDvjwx7mZOrMnAP
Xz7uxnJQYoE4xCztUrcJxQb3uZbAMeVhpJPm/hn6yPOhdbggZeJv5u2qKjFxcoxp
r4JoYfxWOnYu/w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:59:20 2025 by rpki-client