Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json)
Hash identifier: F/aWLI26b9lDYHfG3GrgbANZyXtdfMT5lHwSsQX/z3w=
Subject key identifier: 17:AB:B1:CA:37:4F:BD:3D:95:25:29:47:FF:3C:83:0F:93:32:A1:E0
Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Certificate serial: 0194C46346EF7D634C94AA0380032D0175A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
Manifest number: 0341
Signing time: Sun 02 Feb 2025 02:00:27 +0000
Manifest this update: Sun 02 Feb 2025 02:00:27 +0000
Manifest next update: Mon 03 Feb 2025 02:00:27 +0000
Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: Hkf+weWwYfsgfAUyW21S1PTwyGA6mFxruotakmv/dKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:46:ef:7d:63:4c:94:aa:03:80:03:2d:01:75:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3
Validity
Not Before: Feb 2 02:00:27 2025 GMT
Not After : Feb 3 02:00:27 2025 GMT
Subject: CN=17abb1ca374fbd3d95252947ff3c830f9332a1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:c9:22:f0:3f:81:38:94:0f:a2:b3:e9:bc:
59:e4:e5:72:b4:f8:3f:28:3d:18:5f:3a:ac:53:16:
bd:76:1e:96:4f:ea:10:87:52:79:67:55:89:b5:eb:
88:13:eb:bf:35:db:9b:40:fa:94:93:e9:14:f7:71:
74:5e:1d:c4:e4:57:2f:ad:aa:4e:bf:d2:ff:45:09:
1d:74:b8:83:bf:f4:de:8b:3b:99:91:cf:5c:95:97:
a7:eb:04:8a:47:1d:98:65:f4:ac:af:b0:f5:2c:8c:
db:b6:fa:ed:a1:0c:76:e7:c0:a2:d5:f0:8f:a0:67:
a2:91:76:2f:ca:3f:17:18:22:f7:2f:17:28:8c:9d:
25:7a:a1:13:bf:37:29:ba:4b:4d:b9:3f:38:bc:ca:
cf:e3:08:cb:a3:7a:3e:de:17:3b:23:84:56:79:f9:
e2:0d:9a:c1:75:fa:62:4e:6e:b7:69:f2:1a:a0:80:
11:fb:ab:15:a8:17:9d:0e:13:a9:59:e0:0b:da:e4:
58:1f:99:a7:0f:3f:cf:f3:f6:9b:5d:c8:d7:a3:64:
e9:fb:48:fb:d5:75:40:28:e8:7b:1c:2e:3d:4f:92:
d0:be:48:70:55:64:73:61:7e:bb:ab:a0:9d:25:22:
58:66:cf:3f:4f:7b:ee:65:aa:3a:0e:f2:53:8c:8d:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:B1:CA:37:4F:BD:3D:95:25:29:47:FF:3C:83:0F:93:32:A1:E0
X509v3 Authority Key Identifier:
keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:02:e2:38:70:e2:c3:91:0a:c1:79:dc:01:6a:40:fd:9d:c1:
c9:70:97:24:ca:f0:c5:74:d4:62:f2:4c:86:65:dc:39:dd:c6:
31:30:99:ec:b1:5b:7e:9c:26:9c:2c:2a:52:74:82:4a:ac:e1:
71:ad:3b:9c:a5:ef:ec:df:5d:4b:b7:f6:f5:e4:09:b0:f2:14:
58:08:4d:ca:93:e9:df:d3:5c:d1:42:a0:85:c9:ba:9d:d5:4f:
24:be:72:16:98:28:22:54:c1:1f:8d:9b:44:f7:9f:97:2e:8f:
2d:70:58:4d:38:95:47:a9:71:97:70:c1:a8:8a:7c:16:e0:64:
95:d2:88:c1:22:7c:bb:bd:54:ca:41:4e:de:58:88:7d:d3:ea:
ce:c9:78:d6:b6:49:73:a3:99:82:17:80:2f:bb:9f:d6:a1:44:
d0:83:5a:53:79:19:a7:21:fd:e8:e4:36:a4:7c:d4:1f:66:a0:
ef:de:ed:a4:5a:6d:0d:39:07:94:35:d4:b9:16:79:8d:60:df:
8c:94:f4:f4:80:33:40:1a:e5:2d:60:fd:37:1e:70:85:c6:84:
39:55:eb:ac:51:76:5c:1f:03:e3:1d:c3:9e:0c:9d:95:21:c0:
7c:60:65:24:6d:d3:54:34:53:4a:96:21:c4:44:ec:e6:8c:4e:
dc:fc:1a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY0bvfWNMlKoDgAMtAXWpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YWU4OTM4ZjBlMGIxZWFiNjE0ODgzMzZkMjNjYTM5MTg3
ZDZlYTMwHhcNMjUwMjAyMDIwMDI3WhcNMjUwMjAzMDIwMDI3WjAzMTEwLwYDVQQD
EygxN2FiYjFjYTM3NGZiZDNkOTUyNTI5NDdmZjNjODMwZjkzMzJhMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZzJIvA/gTiUD6Kz6bxZ5OVytPg/
KD0YXzqsUxa9dh6WT+oQh1J5Z1WJteuIE+u/NdubQPqUk+kU93F0Xh3E5FcvrapO
v9L/RQkddLiDv/TeizuZkc9clZen6wSKRx2YZfSsr7D1LIzbtvrtoQx258Ci1fCP
oGeikXYvyj8XGCL3LxcojJ0leqETvzcpuktNuT84vMrP4wjLo3o+3hc7I4RWefni
DZrBdfpiTm63afIaoIAR+6sVqBedDhOpWeAL2uRYH5mnDz/P8/abXcjXo2Tp+0j7
1XVAKOh7HC49T5LQvkhwVWRzYX67q6CdJSJYZs8/T3vuZao6DvJTjI1ZSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBersco3T709lSUpR/88gw+TMqHgMB8GA1UdIwQY
MBaAFIeuiTjw4LHqthSIM20jyjkYfW6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYt
MjlkMGJhMTJlZGEyLzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYtMjlkMGJhMTJlZGEy
LzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQLiOHDi
w5EKwXncAWpA/Z3ByXCXJMrwxXTUYvJMhmXcOd3GMTCZ7LFbfpwmnCwqUnSCSqzh
ca07nKXv7N9dS7f29eQJsPIUWAhNypPp39Nc0UKghcm6ndVPJL5yFpgoIlTBH42b
RPefly6PLXBYTTiVR6lxl3DBqIp8FuBkldKIwSJ8u71UykFO3liIfdPqzsl41rZJ
c6OZgheAL7uf1qFE0INaU3kZpyH96OQ2pHzUH2ag797tpFptDTkHlDXUuRZ5jWDf
jJT09IAzQBrlLWD9Nx5whcaEOVXrrFF2XB8D4x3DngydlSHAfGBlJG3TVDRTSpYh
xETs5oxO3PwaRQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:43 2025 by rpki-client