Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: Fa18baqPxB6wx5MOvWDqz2uhuNOFRu7CqyDIkEkCWNM=
Subject key identifier: 8A:EF:4B:21:C8:85:C5:28:86:F1:70:7B:6D:22:8F:7C:28:3A:8C:A0
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 019511A2D808A1E1E18E95A1345816125D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 1178
Signing time: Mon 17 Feb 2025 02:00:39 +0000
Manifest this update: Mon 17 Feb 2025 02:00:39 +0000
Manifest next update: Tue 18 Feb 2025 02:00:39 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: OKRaMghvoIdS3Dik6aYFpzyAKGRacSJP2CbXF5kbzbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:d8:08:a1:e1:e1:8e:95:a1:34:58:16:12:5d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Feb 17 02:00:39 2025 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=8aef4b21c885c52886f1707b6d228f7c283a8ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:d1:02:9d:06:dc:c6:25:3c:3b:e7:0f:78:
eb:eb:96:40:66:16:c2:a2:8f:0e:62:a4:7d:ca:b4:
dc:c0:98:9d:32:00:3d:41:44:d3:e3:8f:15:7b:ed:
12:7d:6c:eb:02:40:27:c5:69:8f:d2:62:3b:8e:2c:
bf:7b:dd:b6:1b:c3:56:c2:02:68:83:7d:a3:67:c9:
63:3d:88:d1:ce:03:0a:36:91:cc:36:90:7d:f4:73:
c0:7d:02:25:25:d7:91:72:4f:a6:d2:27:df:71:96:
92:70:b5:c6:4f:49:84:c5:98:2a:de:e8:b6:71:d7:
41:bc:c6:00:90:ba:50:7c:81:df:96:d9:7a:15:1f:
b4:f3:88:b9:12:b4:7b:05:41:63:c1:0e:34:ff:1e:
e9:e3:d8:47:8d:cc:f5:be:e8:d9:55:27:5c:9f:6b:
48:e2:f8:f8:df:ea:64:f0:25:c4:fa:2f:6f:01:c2:
9c:fa:bc:24:e2:92:48:b2:37:76:a7:78:9a:25:82:
e1:a1:2e:85:64:df:cf:2b:3a:f2:df:e7:0f:c7:17:
99:3b:51:5d:e7:de:df:72:73:df:39:a1:85:a8:74:
3d:49:c3:e3:e1:6c:0d:ce:ed:0c:0e:a0:b8:47:3b:
a2:4e:49:97:73:28:fa:9d:e1:28:d9:f0:8b:b7:b9:
4e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EF:4B:21:C8:85:C5:28:86:F1:70:7B:6D:22:8F:7C:28:3A:8C:A0
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:a5:04:57:ba:8b:28:aa:56:4b:bc:fb:a7:5d:72:be:1b:b6:
94:81:8a:9a:78:4b:b3:ac:d7:55:7a:11:10:de:9b:0d:f2:04:
2c:fc:1b:1b:76:f2:f1:79:5c:65:c8:c4:c8:93:ea:08:21:7c:
39:94:c2:73:11:47:df:2b:d8:79:50:54:c8:f6:cd:02:df:8c:
44:e1:2a:23:48:f5:1c:1b:72:37:ac:f7:7b:71:54:24:8d:91:
c4:31:38:30:41:79:a3:e1:fe:82:07:45:bc:09:4c:ee:b7:78:
fb:35:d7:b2:f3:3a:94:93:da:80:c3:d8:ba:26:1d:36:3a:94:
dd:9b:d8:1a:16:78:31:6c:58:4e:eb:1a:28:ce:94:d0:fa:b8:
8e:f6:2b:c8:af:0d:f2:55:65:20:cf:27:2a:91:79:ce:12:c0:
a6:bb:8c:0b:34:f7:e3:36:f3:cf:91:91:b9:6c:b5:05:04:ba:
c5:2b:a0:cc:f4:c5:37:bd:2c:9d:67:d6:08:e0:e4:9f:8a:fc:
9d:0e:fe:20:c0:19:c1:13:95:1e:e5:db:c6:bf:1c:de:5f:69:
96:59:77:ff:7f:43:92:5f:ec:05:8c:fe:8f:66:99:56:9a:ee:
3b:e6:73:ca:40:58:f1:4e:24:58:4a:11:44:fe:4b:12:63:ef:
b0:8b:79:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURotgIoeHhjpWhNFgWEl0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGZmYTA0NWIzNWIxNmRjOTk0MTllM2UwZTZlMTZlNmVk
YjQ3ZTkwHhcNMjUwMjE3MDIwMDM5WhcNMjUwMjE4MDIwMDM5WjAzMTEwLwYDVQQD
Eyg4YWVmNGIyMWM4ODVjNTI4ODZmMTcwN2I2ZDIyOGY3YzI4M2E4Y2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueTRAp0G3MYlPDvnD3jr65ZAZhbC
oo8OYqR9yrTcwJidMgA9QUTT448Ve+0SfWzrAkAnxWmP0mI7jiy/e922G8NWwgJo
g32jZ8ljPYjRzgMKNpHMNpB99HPAfQIlJdeRck+m0iffcZaScLXGT0mExZgq3ui2
cddBvMYAkLpQfIHfltl6FR+084i5ErR7BUFjwQ40/x7p49hHjcz1vujZVSdcn2tI
4vj43+pk8CXE+i9vAcKc+rwk4pJIsjd2p3iaJYLhoS6FZN/PKzry3+cPxxeZO1Fd
597fcnPfOaGFqHQ9ScPj4WwNzu0MDqC4RzuiTkmXcyj6neEo2fCLt7lOIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrvSyHIhcUohvFwe20ij3woOoygMB8GA1UdIwQY
MBaAFNmP+gRbNbFtyZQZ4+Dm4W5u20fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAt
ZWUyNWQyYzViNDEwLzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAtZWUyNWQyYzViNDEw
LzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2aUEV7qL
KKpWS7z7p11yvhu2lIGKmnhLs6zXVXoREN6bDfIELPwbG3by8XlcZcjEyJPqCCF8
OZTCcxFH3yvYeVBUyPbNAt+MROEqI0j1HBtyN6z3e3FUJI2RxDE4MEF5o+H+ggdF
vAlM7rd4+zXXsvM6lJPagMPYuiYdNjqU3ZvYGhZ4MWxYTusaKM6U0Pq4jvYryK8N
8lVlIM8nKpF5zhLApruMCzT34zbzz5GRuWy1BQS6xSugzPTFN70snWfWCODkn4r8
nQ7+IMAZwROVHuXbxr8c3l9plll3/39Dkl/sBYz+j2aZVpruO+ZzykBY8U4kWEoR
RP5LEmPvsIt55g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:45 2025 by rpki-client