Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier: GUK9veNoDixc20JFsksI5tjfGQRNLoqf4O8D2d+Xud0=
Subject key identifier: C7:9E:DD:AC:78:E6:FD:58:78:13:AE:75:B7:5D:99:18:40:83:FF:38
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 0194C3876BFCA807F1DE18185B43490B5CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number: 1169
Signing time: Sat 01 Feb 2025 22:00:19 +0000
Manifest this update: Sat 01 Feb 2025 22:00:19 +0000
Manifest next update: Sun 02 Feb 2025 22:00:19 +0000
Files and hashes: 1: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: kslRqAdmmuT10pCi/j+1C5fNAfYUmopOQ6jmJ78jrO8=)
2: pXEOVL3s29ntjLGWnEad02SClcY.roa (hash: 5uijVm/LhBI/XgHLC1W0ZRQPeN6iEyHoyVbJwCUVIKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:6b:fc:a8:07:f1:de:18:18:5b:43:49:0b:5c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Feb 1 22:00:19 2025 GMT
Not After : Feb 2 22:00:19 2025 GMT
Subject: CN=c79eddac78e6fd587813ae75b75d99184083ff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:e7:e6:5c:49:95:ee:d4:cf:ca:08:95:94:
18:09:ea:b3:14:2d:e9:f1:05:5f:2b:56:7c:3b:6c:
c8:5e:2c:eb:47:94:1e:0b:f3:8e:33:dc:9a:d9:40:
45:33:cc:f6:94:1f:f5:d4:1b:29:22:8c:98:2b:13:
f7:23:48:9a:44:60:1f:f4:66:3e:21:0e:2b:15:80:
9a:4e:ec:eb:2e:d9:11:35:8c:73:58:e6:ff:99:3c:
e0:26:25:bb:b5:7a:60:f9:2e:0d:b1:14:05:9a:bc:
62:67:8d:c2:f1:9e:ec:00:ff:33:29:41:e0:4e:c2:
69:2b:a2:96:24:3c:06:01:a5:f0:5c:c1:8b:00:97:
17:19:c4:7d:e4:4f:80:3c:e0:c0:1f:d2:0b:1e:05:
4a:51:b8:4d:1b:a4:14:55:de:08:67:1b:c9:ca:74:
56:b3:0e:44:85:34:5e:15:93:28:c4:91:60:7b:42:
68:28:8f:4b:e5:84:8c:23:09:e9:99:a6:46:fc:5e:
23:ea:5c:0e:9e:4e:23:cf:15:04:1b:9c:02:bc:de:
00:df:92:40:dd:a9:db:5f:91:0e:62:21:18:b6:d2:
b1:71:ef:d1:50:05:8b:3b:58:56:21:66:16:5a:01:
5c:cf:b3:e0:5a:68:da:7a:6a:da:69:dd:12:d8:e8:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9E:DD:AC:78:E6:FD:58:78:13:AE:75:B7:5D:99:18:40:83:FF:38
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:51:af:9c:b6:b2:c0:9d:21:f9:aa:53:89:0c:02:88:a4:aa:
03:e4:b6:2e:75:7f:2b:3c:93:1a:1b:40:4e:ec:ef:eb:0c:f7:
4e:b0:21:86:66:0f:01:d0:98:8f:b7:52:c3:25:ac:82:e5:d5:
ec:6f:d2:6b:20:15:be:48:c0:22:0c:ef:d8:02:a7:e8:de:8f:
4f:1e:5e:d9:91:62:6e:bc:06:6d:53:50:87:4b:d6:78:2c:dd:
27:b0:c4:a3:34:2c:7f:77:9d:f0:30:6f:5c:6e:9f:f2:30:7e:
50:35:8c:20:bb:98:23:4f:54:11:38:ea:56:37:06:1d:83:ed:
9d:57:8e:09:38:fc:ee:54:80:8b:be:3e:72:27:66:46:16:4d:
2e:0d:7c:13:f2:34:cd:03:02:9b:6d:65:48:4f:35:b4:27:50:
b4:b8:59:a7:be:dc:e2:b0:82:50:0b:9e:f2:2a:f2:b1:fd:69:
7a:af:71:67:88:53:10:9d:a2:fb:24:0d:20:79:7b:48:d0:67:
d2:de:35:11:f6:7f:89:84:e9:71:3a:a2:4b:9a:bc:9d:91:13:
a9:60:28:03:b1:f6:2c:ba:99:66:f6:11:b5:bf:dd:00:10:2b:
47:bc:37:13:9d:a6:d7:88:80:03:89:8c:07:36:79:c6:66:3e:
3f:68:27:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh2v8qAfx3hgYW0NJC1zWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNTYzNWRkMzgwMjE1YTAzYzkzMDdkYTU2MjA2YzU2NmIz
OGEzY2YwHhcNMjUwMjAxMjIwMDE5WhcNMjUwMjAyMjIwMDE5WjAzMTEwLwYDVQQD
EyhjNzllZGRhYzc4ZTZmZDU4NzgxM2FlNzViNzVkOTkxODQwODNmZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Hn5lxJle7Uz8oIlZQYCeqzFC3p
8QVfK1Z8O2zIXizrR5QeC/OOM9ya2UBFM8z2lB/11BspIoyYKxP3I0iaRGAf9GY+
IQ4rFYCaTuzrLtkRNYxzWOb/mTzgJiW7tXpg+S4NsRQFmrxiZ43C8Z7sAP8zKUHg
TsJpK6KWJDwGAaXwXMGLAJcXGcR95E+APODAH9ILHgVKUbhNG6QUVd4IZxvJynRW
sw5EhTReFZMoxJFge0JoKI9L5YSMIwnpmaZG/F4j6lwOnk4jzxUEG5wCvN4A35JA
3anbX5EOYiEYttKxce/RUAWLO1hWIWYWWgFcz7PgWmjaemraad0S2OgjjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMee3ax45v1YeBOudbddmRhAg/84MB8GA1UdIwQY
MBaAFGtWNd04AhWgPJMH2lYgbFZrOKPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFZMTNUZ0NGYUE4a3dmYVZpQnNWbXM0bzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hYzE3MzgtNmM2Ny00MjA0LTg5MDEt
NzQ3NDhiYzkzYmNhLzEvYTFZMTNUZ0NGYUE4a3dmYVZpQnNWbXM0bzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hYzE3MzgtNmM2Ny00MjA0LTg5MDEtNzQ3NDhiYzkzYmNh
LzEvYTFZMTNUZ0NGYUE4a3dmYVZpQnNWbXM0bzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFGvnLay
wJ0h+apTiQwCiKSqA+S2LnV/KzyTGhtATuzv6wz3TrAhhmYPAdCYj7dSwyWsguXV
7G/SayAVvkjAIgzv2AKn6N6PTx5e2ZFibrwGbVNQh0vWeCzdJ7DEozQsf3ed8DBv
XG6f8jB+UDWMILuYI09UETjqVjcGHYPtnVeOCTj87lSAi74+cidmRhZNLg18E/I0
zQMCm21lSE81tCdQtLhZp77c4rCCUAue8irysf1peq9xZ4hTEJ2i+yQNIHl7SNBn
0t41EfZ/iYTpcTqiS5q8nZETqWAoA7H2LLqZZvYRtb/dABArR7w3E52m14iAA4mM
BzZ5xmY+P2gnyQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:12 2025 by rpki-client