Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier: XRo3OXxLiiIdqOmdns//rmJfX0ETu5zvDtUiMeeDRSk=
Subject key identifier: 94:AB:D1:12:D6:0B:24:8D:9E:88:A0:C7:3B:CD:05:EF:C5:86:93:B3
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial: 0195116BD946D1F3D56A0C87560784DCE63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number: 13E5
Signing time: Mon 17 Feb 2025 01:00:35 +0000
Manifest this update: Mon 17 Feb 2025 01:00:35 +0000
Manifest next update: Tue 18 Feb 2025 01:00:35 +0000
Files and hashes: 1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: E7CZHe6UTzbWhYsNK74zCzGSz0K70mZQtN9/6Y8Uoa0=)
2: fv18O4bn8ClOlAw3EqxhUtMaRVY.roa (hash: MbAls5bVgABIPeLPzkQqKtmDDsHJg+H22oDVZlLG+lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:d9:46:d1:f3:d5:6a:0c:87:56:07:84:dc:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Validity
Not Before: Feb 17 01:00:35 2025 GMT
Not After : Feb 18 01:00:35 2025 GMT
Subject: CN=94abd112d60b248d9e88a0c73bcd05efc58693b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:68:1f:77:0f:37:76:6a:62:da:ac:02:13:
e5:65:4f:89:c5:e2:f1:9b:6b:92:e3:93:65:15:de:
98:5e:e8:2e:3d:94:2a:94:b6:5f:8c:9f:a1:bd:5d:
3b:07:02:d1:e5:63:4c:1c:03:dc:01:bc:ad:f0:78:
ae:62:cb:8b:fa:4e:54:ba:2d:63:6e:63:54:b9:e4:
ab:50:15:57:30:15:85:25:63:ef:4b:6d:54:89:c2:
84:4b:3a:7b:bc:47:ef:6e:c5:e5:b2:14:f8:91:2d:
d7:25:ee:8d:0e:62:83:c9:14:d1:35:e7:52:6c:bd:
9e:cc:d3:fc:88:6d:fb:d8:db:59:09:b6:13:97:3e:
bc:64:bc:35:6a:82:68:d0:60:19:9c:b4:9d:6e:ec:
4c:1a:f0:b0:31:8d:74:9e:00:ba:6c:16:80:b7:50:
16:7f:1c:2d:10:a3:66:1d:98:c7:1f:90:27:6c:8e:
3a:a2:54:9a:87:b2:ea:43:aa:74:1c:be:4c:df:67:
45:27:75:f9:c8:0a:2e:9d:a4:53:f6:88:13:3c:37:
75:59:8a:7b:58:e6:42:84:a1:d0:1b:41:71:bf:23:
6c:17:77:b2:51:83:1c:bd:0b:49:51:31:9f:e3:32:
43:7d:d6:97:10:62:68:8c:3d:f4:84:e7:e1:e2:f4:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AB:D1:12:D6:0B:24:8D:9E:88:A0:C7:3B:CD:05:EF:C5:86:93:B3
X509v3 Authority Key Identifier:
keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:51:02:ea:b5:6a:72:0c:bc:e9:7e:86:6a:e6:f2:5a:55:7a:
e7:42:98:5c:46:cd:59:67:40:52:24:97:f1:64:74:fb:61:09:
29:71:50:09:ed:d5:7e:e8:2f:5d:31:53:1e:a5:c0:1d:b5:7d:
31:ac:d5:c3:d6:47:23:59:07:d5:6b:c3:96:d9:7e:d9:cd:6a:
66:41:4b:2f:84:07:66:10:12:9c:39:a2:ec:49:02:37:aa:f5:
1c:25:54:fb:24:c8:43:07:f5:26:04:89:fb:b7:df:08:0a:8f:
22:57:93:73:80:b6:60:1e:1e:9e:2a:31:77:e5:f9:57:1e:0d:
69:8d:31:4a:61:98:09:a5:2f:f2:ba:af:e8:62:a5:c0:1d:a9:
19:8b:ad:8e:cb:58:ed:eb:02:fd:ad:2f:72:3f:f0:60:66:1d:
5b:3b:18:30:be:9d:32:bc:f8:ff:7e:5f:58:db:4f:42:75:54:
74:76:14:41:9b:0c:4e:bc:67:02:3b:c5:6d:88:3a:8a:7e:21:
5e:3f:1b:55:77:f5:66:d0:5e:4a:2f:2f:cd:be:11:f3:ff:b9:
0a:db:65:12:ee:13:79:0b:6c:57:b8:85:3e:62:2d:bd:30:30:
e3:85:8e:60:8d:43:a8:d6:2c:95:a2:89:ef:70:a5:99:95:ea:
80:ec:e3:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa9lG0fPVagyHVgeE3OY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVhNWZiMzViNTEyZjkxMDA5NGRjNjI0NTljMTY3OWI1
ODNlM2YwHhcNMjUwMjE3MDEwMDM1WhcNMjUwMjE4MDEwMDM1WjAzMTEwLwYDVQQD
Eyg5NGFiZDExMmQ2MGIyNDhkOWU4OGEwYzczYmNkMDVlZmM1ODY5M2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBpoH3cPN3ZqYtqsAhPlZU+JxeLx
m2uS45NlFd6YXuguPZQqlLZfjJ+hvV07BwLR5WNMHAPcAbyt8HiuYsuL+k5Uui1j
bmNUueSrUBVXMBWFJWPvS21UicKESzp7vEfvbsXlshT4kS3XJe6NDmKDyRTRNedS
bL2ezNP8iG372NtZCbYTlz68ZLw1aoJo0GAZnLSdbuxMGvCwMY10ngC6bBaAt1AW
fxwtEKNmHZjHH5AnbI46olSah7LqQ6p0HL5M32dFJ3X5yAounaRT9ogTPDd1WYp7
WOZChKHQG0FxvyNsF3eyUYMcvQtJUTGf4zJDfdaXEGJojD30hOfh4vTAcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSr0RLWCySNnoigxzvNBe/FhpOzMB8GA1UdIwQY
MBaAFNbupfs1tRL5EAlNxiRZwWebWD4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQt
NThmYzk0ZDBkNDE0LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQtNThmYzk0ZDBkNDE0
LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1EC6rVq
cgy86X6GaubyWlV650KYXEbNWWdAUiSX8WR0+2EJKXFQCe3VfugvXTFTHqXAHbV9
MazVw9ZHI1kH1WvDltl+2c1qZkFLL4QHZhASnDmi7EkCN6r1HCVU+yTIQwf1JgSJ
+7ffCAqPIleTc4C2YB4enioxd+X5Vx4NaY0xSmGYCaUv8rqv6GKlwB2pGYutjstY
7esC/a0vcj/wYGYdWzsYML6dMrz4/35fWNtPQnVUdHYUQZsMTrxnAjvFbYg6in4h
Xj8bVXf1ZtBeSi8vzb4R8/+5CttlEu4TeQtsV7iFPmItvTAw44WOYI1DqNYslaKJ
73ClmZXqgOzj2w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:07 2025 by rpki-client