Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
File: M3SaPCzREJZkQBHb8I7W2DmHLgc.mft (raw, json)
Hash identifier: Nhl8qgTpWU8z+368jwwNDnvBZQ5RWY8+StYobXFnlwk=
Subject key identifier: C6:E5:A6:89:6D:CE:66:8B:93:00:D3:6F:89:35:FE:84:B7:AB:C8:F2
Authority key identifier: 33:74:9A:3C:2C:D1:10:96:64:40:11:DB:F0:8E:D6:D8:39:87:2E:07
Certificate issuer: /CN=33749a3c2cd11096644011dbf08ed6d839872e07
Certificate serial: 019511A2EF91BA2E63502915F40E5DF6C0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3SaPCzREJZkQBHb8I7W2DmHLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
Manifest number: 10FB
Signing time: Mon 17 Feb 2025 02:00:45 +0000
Manifest this update: Mon 17 Feb 2025 02:00:45 +0000
Manifest next update: Tue 18 Feb 2025 02:00:45 +0000
Files and hashes: 1: M3SaPCzREJZkQBHb8I7W2DmHLgc.crl (hash: dVX11iVQI9UvQbjlD8Ong6qT2+BHzLn9TExg83YouOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3SaPCzREJZkQBHb8I7W2DmHLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ef:91:ba:2e:63:50:29:15:f4:0e:5d:f6:c0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33749a3c2cd11096644011dbf08ed6d839872e07
Validity
Not Before: Feb 17 02:00:45 2025 GMT
Not After : Feb 18 02:00:45 2025 GMT
Subject: CN=c6e5a6896dce668b9300d36f8935fe84b7abc8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:30:dd:ab:8d:2d:b5:e4:db:c4:52:a5:bc:
0a:15:5f:b1:0c:4e:59:a6:39:6e:27:99:3f:6e:f1:
60:90:20:d1:62:5a:4f:01:00:0b:72:1b:47:7f:2a:
ba:88:2c:ff:03:04:81:8e:b0:7a:af:35:50:c6:bd:
5a:22:0f:67:a4:fa:a6:3e:cc:bc:7b:a0:9a:fe:8b:
f9:b0:c4:b4:0b:b2:6c:fd:cb:a3:3b:56:b7:30:72:
ef:a6:79:79:db:af:54:40:e6:4c:09:d0:b7:80:8f:
b0:79:cb:95:4e:ee:d2:f3:2f:ed:9d:d9:b5:fe:8f:
70:a6:8d:d9:11:59:09:2b:31:29:7f:4f:86:3e:2c:
e0:ac:27:e3:a2:6d:bb:e3:07:a1:7f:3b:ea:34:78:
e8:b2:0d:e9:a3:f7:40:fa:71:61:f0:01:6e:58:58:
4e:d5:f7:b2:8c:47:86:7d:78:e8:23:86:c5:22:5f:
2f:48:42:6e:11:26:87:28:56:ea:82:94:70:73:45:
c6:9c:3c:12:06:ce:0b:7e:71:14:74:c5:06:44:73:
df:24:6b:47:d1:03:d2:e8:35:e5:f6:43:9b:c4:7e:
66:4f:fa:0e:e6:24:88:6d:94:87:47:3d:11:9e:c3:
6b:0d:98:ed:52:cd:13:28:39:09:b0:af:1d:90:ed:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E5:A6:89:6D:CE:66:8B:93:00:D3:6F:89:35:FE:84:B7:AB:C8:F2
X509v3 Authority Key Identifier:
keyid:33:74:9A:3C:2C:D1:10:96:64:40:11:DB:F0:8E:D6:D8:39:87:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3SaPCzREJZkQBHb8I7W2DmHLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e0:a5:79:45:87:98:cc:65:f9:2a:43:1c:4f:6c:2f:36:51:
15:be:b7:00:f3:32:25:ae:3c:f1:cd:8f:64:29:31:5e:68:e9:
9d:0a:22:db:a1:a7:af:0f:47:ac:76:9b:bc:e3:09:32:bb:aa:
99:55:88:04:83:05:ae:90:c7:4a:36:e2:27:87:4f:07:58:24:
ae:7d:ca:e5:b3:28:79:97:fe:5b:89:02:6c:9e:5c:80:e7:1c:
09:49:f5:ed:a0:20:7e:82:5d:c7:5d:23:75:b1:5b:de:bd:5c:
91:f8:db:82:ae:db:cd:3c:cd:f7:8b:91:b8:e0:4e:97:a5:e7:
e6:d3:2c:d2:0c:df:f9:ed:0b:9c:54:0e:b3:b3:8f:7c:2c:3c:
d5:1e:8d:8c:8e:02:7f:70:fe:42:b9:f1:41:30:95:75:e0:c8:
75:58:ac:3f:05:97:d2:fa:96:87:be:a0:83:f6:08:7a:87:bf:
0c:19:de:4f:7e:9b:b6:26:d8:9d:d3:62:db:ff:74:c6:20:a0:
dd:c5:85:d0:d9:a9:91:4a:a4:35:58:b3:7b:00:95:5d:8d:93:
fd:1b:80:a7:f8:53:19:5d:46:86:37:95:8b:7d:76:39:fd:1f:
0f:d8:d0:8c:02:cc:dd:80:a4:95:93:cd:f1:f9:c1:24:4e:2b:
51:e7:a3:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURou+Rui5jUCkV9A5d9sDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNzQ5YTNjMmNkMTEwOTY2NDQwMTFkYmYwOGVkNmQ4Mzk4
NzJlMDcwHhcNMjUwMjE3MDIwMDQ1WhcNMjUwMjE4MDIwMDQ1WjAzMTEwLwYDVQQD
EyhjNmU1YTY4OTZkY2U2NjhiOTMwMGQzNmY4OTM1ZmU4NGI3YWJjOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXAw3auNLbXk28RSpbwKFV+xDE5Z
pjluJ5k/bvFgkCDRYlpPAQALchtHfyq6iCz/AwSBjrB6rzVQxr1aIg9npPqmPsy8
e6Ca/ov5sMS0C7Js/cujO1a3MHLvpnl5269UQOZMCdC3gI+wecuVTu7S8y/tndm1
/o9wpo3ZEVkJKzEpf0+GPizgrCfjom274wehfzvqNHjosg3po/dA+nFh8AFuWFhO
1feyjEeGfXjoI4bFIl8vSEJuESaHKFbqgpRwc0XGnDwSBs4LfnEUdMUGRHPfJGtH
0QPS6DXl9kObxH5mT/oO5iSIbZSHRz0RnsNrDZjtUs0TKDkJsK8dkO2f9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMblpoltzmaLkwDTb4k1/oS3q8jyMB8GA1UdIwQY
MBaAFDN0mjws0RCWZEAR2/CO1tg5hy4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTNTYVBDelJFSlprUUJIYjhJN1cyRG1ITGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MzMzNGYtM2ZmMi00MjRiLThiMzMt
YTVmZmY5MDk1ZDhlLzEvTTNTYVBDelJFSlprUUJIYjhJN1cyRG1ITGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80MzMzNGYtM2ZmMi00MjRiLThiMzMtYTVmZmY5MDk1ZDhl
LzEvTTNTYVBDelJFSlprUUJIYjhJN1cyRG1ITGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeCleUWH
mMxl+SpDHE9sLzZRFb63APMyJa488c2PZCkxXmjpnQoi26Gnrw9HrHabvOMJMruq
mVWIBIMFrpDHSjbiJ4dPB1gkrn3K5bMoeZf+W4kCbJ5cgOccCUn17aAgfoJdx10j
dbFb3r1ckfjbgq7bzTzN94uRuOBOl6Xn5tMs0gzf+e0LnFQOs7OPfCw81R6NjI4C
f3D+QrnxQTCVdeDIdVisPwWX0vqWh76gg/YIeoe/DBneT36btibYndNi2/90xiCg
3cWF0NmpkUqkNVizewCVXY2T/RuAp/hTGV1GhjeVi312Of0fD9jQjALM3YCklZPN
8fnBJE4rUeej/g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:08 2025 by rpki-client