Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: 3BuUlbRUFlbW7I2koazHKcVGRspXakt7Rab9YFnwBv8=
Subject key identifier: 11:57:FE:35:9C:A9:36:7E:F8:74:00:AB:D1:FF:25:24:5B:20:52:82
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 0194C4D17994F5A7952EF60FFC2FF2865B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 30
Signing time: Sun 02 Feb 2025 04:00:49 +0000
Manifest this update: Sun 02 Feb 2025 04:00:49 +0000
Manifest next update: Mon 03 Feb 2025 04:00:49 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: njVHudRsQ24cz123Ov2Wa0kHFebcLoYfAQmbfSVRsBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:79:94:f5:a7:95:2e:f6:0f:fc:2f:f2:86:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Feb 2 04:00:49 2025 GMT
Not After : Feb 3 04:00:49 2025 GMT
Subject: CN=1157fe359ca9367ef87400abd1ff25245b205282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:1a:5e:a6:b0:ac:15:03:1f:46:a8:a1:71:
ad:a4:81:c3:b4:f6:8f:6b:cb:b2:2c:5b:1a:26:6e:
0a:e5:5d:5a:d5:50:65:74:c3:67:0b:82:0d:3c:33:
c7:b4:da:41:88:56:1b:53:5f:44:ca:88:44:8f:4d:
25:7c:b5:70:59:cc:68:d4:c8:c7:3b:c8:3e:e2:43:
3d:ce:97:a4:94:bf:2c:96:a9:d9:5e:6d:c3:2f:0c:
02:5c:c3:e1:5b:65:65:d0:06:a6:11:42:41:72:bd:
3f:82:3f:8d:2a:bc:c5:05:f9:d1:15:44:11:cb:38:
5d:f8:4e:64:9a:45:68:ee:2b:f9:01:d8:44:be:94:
86:cc:36:b6:76:20:c0:67:f8:84:ce:db:7d:73:85:
3c:a1:4f:4d:bd:2c:63:44:e0:98:50:01:b9:11:08:
ef:c4:9a:25:07:68:8f:25:38:16:2d:ed:84:ff:cb:
7d:09:84:0e:28:b5:be:ff:57:40:a8:10:08:c7:a2:
9c:7f:3d:4c:b4:c2:c5:eb:da:f7:1d:5e:9b:0e:32:
4c:15:b5:43:d1:df:78:c5:c2:5a:28:04:66:73:41:
9b:29:5a:16:fa:41:57:77:ec:8e:c4:6d:78:4c:15:
b8:d4:5e:a9:16:0b:55:2d:fe:15:da:f0:62:1b:d8:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:57:FE:35:9C:A9:36:7E:F8:74:00:AB:D1:FF:25:24:5B:20:52:82
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ae:cb:5f:ec:6a:2d:de:64:c9:42:f7:ef:54:9d:f4:75:33:
5b:94:5f:59:f4:30:ca:ac:d5:3a:ee:77:b7:23:27:38:41:c2:
f3:f8:c7:25:79:5c:78:52:62:09:51:f8:cd:0d:95:b6:24:2e:
d2:69:34:9d:e2:b9:c6:b7:cc:c4:e5:04:6a:14:62:d2:94:01:
79:52:7d:ca:c4:8d:70:ce:31:52:93:7e:4d:d0:b7:f9:86:b4:
bf:09:a8:2d:e5:44:d2:96:78:c3:ff:af:4a:b9:43:d3:6a:33:
4e:37:87:fc:cd:34:b2:95:8d:6f:c0:8d:44:f0:46:7a:c9:79:
54:71:1b:ee:2c:68:70:7f:70:68:bd:7a:ce:32:c2:d7:21:55:
aa:8e:b6:5c:b7:b6:26:c1:6a:ed:c5:59:16:6a:ed:0f:b7:a9:
db:73:56:cc:aa:0c:b1:77:02:93:18:9c:b5:b7:79:33:be:b4:
78:fd:04:26:56:fa:56:31:67:9e:5b:fb:d3:b9:ed:58:4e:3e:
d0:d5:46:c8:65:0b:bc:09:98:f7:00:ca:7a:a7:17:0a:22:45:
32:cf:71:3c:da:6e:51:1d:38:63:82:80:c0:bb:06:8a:67:a0:
da:7d:30:41:ac:50:2f:2e:be:03:dd:65:92:fd:fc:b6:b2:20:
a2:59:1c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0XmU9aeVLvYP/C/yhlsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjkxNDk4ODE5NzZlZTI3M2M1MTEwNDNlNTgwYjdkMWQx
YmE3YzQwHhcNMjUwMjAyMDQwMDQ5WhcNMjUwMjAzMDQwMDQ5WjAzMTEwLwYDVQQD
EygxMTU3ZmUzNTljYTkzNjdlZjg3NDAwYWJkMWZmMjUyNDViMjA1MjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA8aXqawrBUDH0aooXGtpIHDtPaP
a8uyLFsaJm4K5V1a1VBldMNnC4INPDPHtNpBiFYbU19EyohEj00lfLVwWcxo1MjH
O8g+4kM9zpeklL8slqnZXm3DLwwCXMPhW2Vl0AamEUJBcr0/gj+NKrzFBfnRFUQR
yzhd+E5kmkVo7iv5AdhEvpSGzDa2diDAZ/iEztt9c4U8oU9NvSxjROCYUAG5EQjv
xJolB2iPJTgWLe2E/8t9CYQOKLW+/1dAqBAIx6Kcfz1MtMLF69r3HV6bDjJMFbVD
0d94xcJaKARmc0GbKVoW+kFXd+yOxG14TBW41F6pFgtVLf4V2vBiG9g5AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFX/jWcqTZ++HQAq9H/JSRbIFKCMB8GA1UdIwQY
MBaAFItpFJiBl27ic8URBD5YC30dG6fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYt
OTYyMDMyMmU0ZjE1LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYtOTYyMDMyMmU0ZjE1
LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK7LX+xq
Ld5kyUL371Sd9HUzW5RfWfQwyqzVOu53tyMnOEHC8/jHJXlceFJiCVH4zQ2VtiQu
0mk0neK5xrfMxOUEahRi0pQBeVJ9ysSNcM4xUpN+TdC3+Ya0vwmoLeVE0pZ4w/+v
SrlD02ozTjeH/M00spWNb8CNRPBGesl5VHEb7ixocH9waL16zjLC1yFVqo62XLe2
JsFq7cVZFmrtD7ep23NWzKoMsXcCkxictbd5M760eP0EJlb6VjFnnlv707ntWE4+
0NVGyGULvAmY9wDKeqcXCiJFMs9xPNpuUR04Y4KAwLsGimeg2n0wQaxQLy6+A91l
kv38trIgolkcJQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:06:29 2025 by rpki-client