Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json)
Hash identifier: zOK1tlHwJMA9hVKL3UWwySy9rg0SfWvl/4Y/tAWn84s=
Subject key identifier: 3E:0A:23:08:61:AE:6E:DE:2A:F2:31:D0:6C:44:59:EA:DD:7D:A7:D2
Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870
Certificate serial: 0195113548D593EFE6BCC23F814071C97937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
Manifest number: 1314
Signing time: Mon 17 Feb 2025 00:00:59 +0000
Manifest this update: Mon 17 Feb 2025 00:00:59 +0000
Manifest next update: Tue 18 Feb 2025 00:00:59 +0000
Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: +cMSE5g+hDxdb0OBuQ+lWmmmzUaB2z/haszKipb8DtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:48:d5:93:ef:e6:bc:c2:3f:81:40:71:c9:79:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3654207e547d379783414f2220d4a2d74465870
Validity
Not Before: Feb 17 00:00:59 2025 GMT
Not After : Feb 18 00:00:59 2025 GMT
Subject: CN=3e0a230861ae6ede2af231d06c4459eadd7da7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:19:00:5f:44:42:43:d2:e4:20:37:8d:bb:
44:f7:6b:1e:bc:f5:66:b2:f5:f0:59:a4:14:eb:95:
b9:54:d1:f1:e6:c2:45:8c:c3:ce:31:36:4c:a2:57:
33:03:3a:70:b4:5f:0a:e0:68:a0:3d:ec:1f:1e:f6:
f5:c5:bf:78:60:fe:6c:40:a2:91:b3:e5:29:b6:c1:
fe:f2:de:78:91:f5:89:b5:f5:ca:77:79:05:9b:a1:
b8:11:95:57:da:34:be:77:49:a5:4b:14:97:8c:95:
51:e7:40:2f:08:28:5e:62:ad:9f:98:bc:01:fa:00:
40:cb:4f:b2:d5:41:5d:4e:ef:3b:c3:c1:8d:f3:91:
25:ac:bf:7d:3e:35:e9:2d:1e:20:c4:f7:4c:fe:c0:
3b:2f:31:2d:af:9a:48:75:1b:ea:ac:f1:9a:5b:9a:
12:cc:46:77:f0:70:24:7a:87:9a:37:6c:76:f1:11:
52:bb:b0:88:1b:c0:55:c9:e8:ae:00:aa:6b:78:16:
3b:dd:42:a3:0e:b7:49:f8:be:36:ab:ac:1f:e9:55:
84:5e:ea:e6:ce:ce:e1:56:96:90:41:e8:14:fc:c5:
1b:76:49:a7:14:0e:d0:bc:2e:98:a2:78:6f:7e:1e:
9d:e9:a8:20:bd:67:8e:94:41:0d:e9:be:a0:87:cb:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0A:23:08:61:AE:6E:DE:2A:F2:31:D0:6C:44:59:EA:DD:7D:A7:D2
X509v3 Authority Key Identifier:
keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:13:0f:f8:8b:3a:23:64:08:bc:8b:ad:36:3f:35:65:65:ec:
dc:48:f3:2a:bf:eb:73:56:a8:33:13:91:a7:c8:a6:42:62:22:
e5:4e:37:38:bb:ce:a0:2f:4e:49:e5:77:c7:f4:49:7c:b7:04:
83:72:64:3c:79:f4:a3:b5:a6:94:aa:0e:95:bf:e2:bd:a5:45:
f8:41:fc:27:e8:48:14:9f:6e:b6:a1:3b:99:52:e3:98:53:d1:
0c:e3:82:37:a5:c1:32:16:55:c1:6e:03:93:06:52:a8:bf:68:
1d:eb:98:7a:e2:01:59:eb:87:46:75:7e:41:cf:8e:a4:25:d4:
f0:70:6c:05:37:f4:af:98:54:ec:16:fe:d2:ff:96:fb:c3:93:
e3:ae:78:f2:89:cd:ca:b2:d1:cf:90:7b:9d:eb:54:3f:70:62:
23:e6:4a:d9:7b:10:13:ab:9a:d1:73:14:f6:d3:c9:a4:5b:f5:
5f:5e:73:44:b2:6c:21:cb:ba:8c:f2:e1:bf:46:94:72:c6:fb:
0b:2f:0f:ba:f4:82:c3:c6:a4:eb:df:db:c0:6f:2a:49:44:f2:
7d:6e:03:3d:5f:ea:30:e9:77:b3:4e:ba:3e:4d:95:87:5d:66:
20:92:f7:6b:ff:a8:72:98:57:a8:08:1e:d1:a8:72:b1:e1:32:
0d:fe:70:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNUjVk+/mvMI/gUBxyXk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNjU0MjA3ZTU0N2QzNzk3ODM0MTRmMjIyMGQ0YTJkNzQ0
NjU4NzAwHhcNMjUwMjE3MDAwMDU5WhcNMjUwMjE4MDAwMDU5WjAzMTEwLwYDVQQD
EygzZTBhMjMwODYxYWU2ZWRlMmFmMjMxZDA2YzQ0NTllYWRkN2RhN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4UZAF9EQkPS5CA3jbtE92sevPVm
svXwWaQU65W5VNHx5sJFjMPOMTZMolczAzpwtF8K4GigPewfHvb1xb94YP5sQKKR
s+UptsH+8t54kfWJtfXKd3kFm6G4EZVX2jS+d0mlSxSXjJVR50AvCCheYq2fmLwB
+gBAy0+y1UFdTu87w8GN85ElrL99PjXpLR4gxPdM/sA7LzEtr5pIdRvqrPGaW5oS
zEZ38HAkeoeaN2x28RFSu7CIG8BVyeiuAKpreBY73UKjDrdJ+L42q6wf6VWEXurm
zs7hVpaQQegU/MUbdkmnFA7QvC6Yonhvfh6d6aggvWeOlEEN6b6gh8s+YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4KIwhhrm7eKvIx0GxEWerdfafSMB8GA1UdIwQY
MBaAFONlQgflR9N5eDQU8iINSi10RlhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAt
YzY0MTU5NTU5ZTI2LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAtYzY0MTU5NTU5ZTI2
LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBMP+Is6
I2QIvIutNj81ZWXs3EjzKr/rc1aoMxORp8imQmIi5U43OLvOoC9OSeV3x/RJfLcE
g3JkPHn0o7WmlKoOlb/ivaVF+EH8J+hIFJ9utqE7mVLjmFPRDOOCN6XBMhZVwW4D
kwZSqL9oHeuYeuIBWeuHRnV+Qc+OpCXU8HBsBTf0r5hU7Bb+0v+W+8OT46548onN
yrLRz5B7netUP3BiI+ZK2XsQE6ua0XMU9tPJpFv1X15zRLJsIcu6jPLhv0aUcsb7
Cy8PuvSCw8ak69/bwG8qSUTyfW4DPV/qMOl3s066Pk2Vh11mIJL3a/+ocphXqAge
0ahyseEyDf5wRQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:52 2025 by rpki-client