Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File: fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier: Q/busjbwf869jpbp7pLXfNr8FCwPCnjAo/4W/Q2MyOE=
Subject key identifier: 25:16:BB:41:41:A5:86:72:3A:C6:00:95:9C:54:AF:54:03:45:69:B9
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer: /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial: 0194C42C694FD5C8F7EA28D8B7B25EB6F6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number: 6D
Signing time: Sun 02 Feb 2025 01:00:32 +0000
Manifest this update: Sun 02 Feb 2025 01:00:32 +0000
Manifest next update: Mon 03 Feb 2025 01:00:32 +0000
Files and hashes: 1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: 1rl/U+X3UdKsNga4EJKypdo/NIImjbpZznySPfP8Sog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:69:4f:d5:c8:f7:ea:28:d8:b7:b2:5e:b6:f6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Validity
Not Before: Feb 2 01:00:32 2025 GMT
Not After : Feb 3 01:00:32 2025 GMT
Subject: CN=2516bb4141a586723ac600959c54af54034569b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:57:85:d2:21:86:6c:c0:47:c7:45:8f:83:
8f:ee:e5:4f:e3:38:83:ba:cf:ad:47:54:79:6f:e0:
6c:33:b7:91:5b:18:57:d2:a1:ff:02:88:83:a7:5e:
6c:84:1c:e4:4b:9c:79:3f:71:4d:44:89:e6:36:8d:
00:4b:78:8a:05:87:c2:b6:5a:b5:c9:18:cf:f3:97:
aa:b6:99:08:57:ab:6e:22:4e:50:34:22:59:f4:0d:
5e:71:72:48:1b:6b:ae:67:17:a4:c0:6b:7b:30:6a:
78:d0:f8:eb:d9:df:eb:96:dc:5d:33:37:06:ee:e7:
6d:22:a8:70:5c:75:c1:12:30:81:44:7a:89:26:81:
f7:19:33:72:8d:7f:e7:74:ae:22:39:1e:55:ff:d7:
f5:d7:05:7f:08:2d:f5:83:2b:eb:43:7c:a7:bf:10:
86:c9:b6:2b:3f:53:a2:b5:7d:23:ad:31:39:a9:e6:
7e:06:dd:fc:bd:37:2b:f8:30:1a:1b:4e:ef:48:3e:
1c:8e:c6:43:fb:15:af:41:58:bd:19:cb:7a:82:23:
6b:25:c9:54:7c:40:91:2e:9f:2a:fb:00:c3:57:44:
c5:b7:e6:a1:aa:8a:56:31:da:d8:8f:0a:c9:a0:2c:
ff:80:d1:30:ec:52:8a:c8:fa:5d:c7:e9:fe:8a:b2:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:16:BB:41:41:A5:86:72:3A:C6:00:95:9C:54:AF:54:03:45:69:B9
X509v3 Authority Key Identifier:
keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:32:6d:b1:e4:5b:5e:e1:75:f9:de:40:32:ba:9a:bc:ab:ec:
43:39:ac:09:31:56:c5:8e:56:64:96:9b:e8:a9:d7:9c:37:c4:
b2:08:73:6f:27:35:99:85:f1:b1:c7:d2:59:d0:49:50:82:fc:
59:62:6a:bb:62:60:0c:8c:53:23:23:92:5a:a9:03:09:21:a2:
39:67:66:78:ba:bd:26:d9:17:81:1a:b3:02:a3:1f:fc:d9:26:
4b:bb:bf:39:b4:5b:09:a3:05:d5:37:df:39:97:13:a2:d1:9c:
14:29:22:13:dd:c9:f1:c1:4e:ae:06:7c:2d:47:4d:20:92:96:
e8:25:58:d6:c1:55:fd:01:a7:b9:b3:44:4f:a7:32:aa:c5:c3:
3b:de:29:33:ac:ca:cd:91:21:4a:85:1f:24:a0:c2:ce:dd:94:
2c:65:fb:60:a8:2a:e6:bd:29:eb:24:68:19:51:7d:88:e8:ad:
2a:86:08:7f:cb:27:56:cd:ac:8d:fe:5b:e4:92:d3:76:dd:3f:
03:31:32:86:dd:f8:a3:51:5d:dd:6d:4a:01:a3:46:d9:d2:36:
27:a5:97:b6:a0:3e:2b:4c:63:fa:d3:de:88:e2:5d:ab:0f:90:
a2:bf:50:c6:b4:80:cb:be:cd:2c:21:ad:ac:f1:c6:f7:fc:44:
b2:82:20:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELGlP1cj36ijYt7Jetva/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTQ5Yzk1ZDBjY2Q5OWM4NWVjMDcyMTA3NjQ0YzhjYzhk
MWUxNzgwHhcNMjUwMjAyMDEwMDMyWhcNMjUwMjAzMDEwMDMyWjAzMTEwLwYDVQQD
EygyNTE2YmI0MTQxYTU4NjcyM2FjNjAwOTU5YzU0YWY1NDAzNDU2OWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09xXhdIhhmzAR8dFj4OP7uVP4ziD
us+tR1R5b+BsM7eRWxhX0qH/AoiDp15shBzkS5x5P3FNRInmNo0AS3iKBYfCtlq1
yRjP85eqtpkIV6tuIk5QNCJZ9A1ecXJIG2uuZxekwGt7MGp40Pjr2d/rltxdMzcG
7udtIqhwXHXBEjCBRHqJJoH3GTNyjX/ndK4iOR5V/9f11wV/CC31gyvrQ3ynvxCG
ybYrP1OitX0jrTE5qeZ+Bt38vTcr+DAaG07vSD4cjsZD+xWvQVi9Gct6giNrJclU
fECRLp8q+wDDV0TFt+ahqopWMdrYjwrJoCz/gNEw7FKKyPpdx+n+irJebQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUWu0FBpYZyOsYAlZxUr1QDRWm5MB8GA1UdIwQY
MBaAFH6UnJXQzNmchewHIQdkTIzI0eF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTIt
ZGQ4ZjY1MjhlYzExLzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTItZGQ4ZjY1MjhlYzEx
LzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDJtseRb
XuF1+d5AMrqavKvsQzmsCTFWxY5WZJab6KnXnDfEsghzbyc1mYXxscfSWdBJUIL8
WWJqu2JgDIxTIyOSWqkDCSGiOWdmeLq9JtkXgRqzAqMf/NkmS7u/ObRbCaMF1Tff
OZcTotGcFCkiE93J8cFOrgZ8LUdNIJKW6CVY1sFV/QGnubNET6cyqsXDO94pM6zK
zZEhSoUfJKDCzt2ULGX7YKgq5r0p6yRoGVF9iOitKoYIf8snVs2sjf5b5JLTdt0/
AzEyht34o1Fd3W1KAaNG2dI2J6WXtqA+K0xj+tPeiOJdqw+Qor9QxrSAy77NLCGt
rPHG9/xEsoIg5g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:41 2025 by rpki-client