Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
File: 2qM7UIN5nEnPntwAhit8nCGMZhM.mft (raw, json)
Hash identifier: k+DJYWLNvteAyRxuAKZ3cp6Y4ZTA3WQt+ATR67f9D8Y=
Subject key identifier: AA:44:21:5A:33:99:56:A8:DC:84:43:A9:EB:C6:FF:65:50:87:62:A8
Authority key identifier: DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
Certificate issuer: /CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Certificate serial: 0194BB600444E5443D6CA0E64F8A976B27AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
Manifest number: 01B1
Signing time: Fri 31 Jan 2025 08:00:19 +0000
Manifest this update: Fri 31 Jan 2025 08:00:19 +0000
Manifest next update: Sat 01 Feb 2025 08:00:19 +0000
Files and hashes: 1: 2qM7UIN5nEnPntwAhit8nCGMZhM.crl (hash: 9htpcQubpoDEvf7AYa33SFBW0VjqKXFs0jlNoDl6L6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:04:44:e5:44:3d:6c:a0:e6:4f:8a:97:6b:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Validity
Not Before: Jan 31 08:00:19 2025 GMT
Not After : Feb 1 08:00:19 2025 GMT
Subject: CN=aa44215a339956a8dc8443a9ebc6ff65508762a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:45:83:2c:bd:bd:74:85:fa:0d:f9:14:cf:
33:45:b6:57:62:72:72:bf:90:c8:0f:f8:33:60:ef:
d6:15:86:e4:f6:4a:41:a8:48:d4:1f:f0:6f:79:38:
56:fb:5a:91:ff:8d:0a:11:0a:96:db:81:e8:6b:7b:
80:c5:d1:6d:24:f4:94:09:9f:0f:79:c9:be:ec:fe:
ce:58:1c:a5:5d:ec:3d:8f:e3:24:46:ad:a4:73:a3:
86:20:d6:a9:0b:b2:74:5c:2d:ae:c5:7e:05:39:fa:
75:01:ed:ad:4d:e5:63:57:bd:53:3b:82:38:1c:cc:
0a:be:e3:08:b4:21:a2:f9:ce:bd:7b:62:bd:e6:ec:
45:7a:ea:49:03:8c:09:cd:5e:7a:66:8b:89:09:0c:
9a:77:b8:04:ce:4d:91:31:a8:43:4c:fe:59:d8:7d:
5d:f0:35:3c:e8:b0:2d:6c:13:32:8b:34:c1:04:68:
e8:df:12:72:15:02:85:98:e5:bc:de:42:00:7c:02:
30:64:8e:d5:06:9a:be:88:a1:94:6b:81:61:3c:fa:
a3:6e:b1:89:5c:ba:9a:4b:d7:cb:17:61:30:d8:e7:
3d:f2:89:fe:58:d3:c1:f4:9f:d5:bd:c4:b6:ff:14:
f4:9c:ad:6b:9b:7b:2d:a0:87:b5:d2:3a:08:ba:f7:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:21:5A:33:99:56:A8:DC:84:43:A9:EB:C6:FF:65:50:87:62:A8
X509v3 Authority Key Identifier:
keyid:DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:85:c4:59:97:89:70:5c:e7:ed:fa:36:36:ce:16:90:cd:df:
a4:f6:dd:be:bd:e6:bf:7a:49:84:41:1e:a1:c2:7e:71:06:90:
25:36:ba:77:d3:8e:d2:df:88:67:2a:fb:5a:06:76:ea:5e:29:
d4:2c:2c:74:e1:21:e1:f3:58:c2:bd:79:54:a9:b2:16:4c:f1:
8a:e5:7b:57:dd:c6:18:33:aa:fe:fc:fe:f7:8a:b1:93:38:ca:
47:81:b1:9f:7e:42:c7:ab:4e:79:ca:f5:1a:5b:89:0c:64:e3:
8d:9e:e3:fa:3d:aa:a1:9a:2c:0a:3d:62:3f:9c:96:a1:91:08:
85:99:65:58:74:ca:68:e6:1d:8c:1f:21:c8:4a:7c:a8:51:ab:
bc:2d:dd:f5:37:ef:a5:07:d5:dc:1c:8b:68:8a:a4:0a:d5:5d:
0e:20:ff:d7:fd:90:bd:4d:3f:45:fd:c5:df:bf:52:b9:3f:b4:
7a:02:ef:e0:bb:ac:f9:0a:1f:3c:63:4d:7b:cf:13:fd:3c:7d:
26:66:68:f6:41:fd:ff:7a:7d:3b:ce:23:bc:ce:0d:76:d4:dc:
40:73:b4:fa:a7:dd:6f:8c:9f:c9:db:b0:50:8c:62:24:31:85:
fa:94:16:b2:7b:9f:03:2d:dd:06:48:aa:36:2b:ba:38:b3:eb:
0d:3c:b2:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YARE5UQ9bKDmT4qXayesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTMzYjUwODM3OTljNDljZjllZGMwMDg2MmI3YzljMjE4
YzY2MTMwHhcNMjUwMTMxMDgwMDE5WhcNMjUwMjAxMDgwMDE5WjAzMTEwLwYDVQQD
EyhhYTQ0MjE1YTMzOTk1NmE4ZGM4NDQzYTllYmM2ZmY2NTUwODc2MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiBFgyy9vXSF+g35FM8zRbZXYnJy
v5DID/gzYO/WFYbk9kpBqEjUH/BveThW+1qR/40KEQqW24Hoa3uAxdFtJPSUCZ8P
ecm+7P7OWBylXew9j+MkRq2kc6OGINapC7J0XC2uxX4FOfp1Ae2tTeVjV71TO4I4
HMwKvuMItCGi+c69e2K95uxFeupJA4wJzV56ZouJCQyad7gEzk2RMahDTP5Z2H1d
8DU86LAtbBMyizTBBGjo3xJyFQKFmOW83kIAfAIwZI7VBpq+iKGUa4FhPPqjbrGJ
XLqaS9fLF2Ew2Oc98on+WNPB9J/VvcS2/xT0nK1rm3stoIe10joIuvfHawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpEIVozmVao3IRDqevG/2VQh2KoMB8GA1UdIwQY
MBaAFNqjO1CDeZxJz57cAIYrfJwhjGYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFNN1VJTjVuRW5QbnR3QWhpdDhuQ0dNWmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jZjMxOGUtODk1MS00ZTFlLWJiZTMt
MTZmNDNkYmEyYWJjLzEvMnFNN1VJTjVuRW5QbnR3QWhpdDhuQ0dNWmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jZjMxOGUtODk1MS00ZTFlLWJiZTMtMTZmNDNkYmEyYWJj
LzEvMnFNN1VJTjVuRW5QbnR3QWhpdDhuQ0dNWmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4XEWZeJ
cFzn7fo2Ns4WkM3fpPbdvr3mv3pJhEEeocJ+cQaQJTa6d9OO0t+IZyr7WgZ26l4p
1CwsdOEh4fNYwr15VKmyFkzxiuV7V93GGDOq/vz+94qxkzjKR4Gxn35Cx6tOecr1
GluJDGTjjZ7j+j2qoZosCj1iP5yWoZEIhZllWHTKaOYdjB8hyEp8qFGrvC3d9Tfv
pQfV3ByLaIqkCtVdDiD/1/2QvU0/Rf3F379SuT+0egLv4Lus+QofPGNNe88T/Tx9
JmZo9kH9/3p9O84jvM4NdtTcQHO0+qfdb4yfyduwUIxiJDGF+pQWsnufAy3dBkiq
Niu6OLPrDTyyYg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:14 2025 by rpki-client on console-fra.rpki-client.org