Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.mft (raw, json)
Hash identifier: JIARn9SiyS3timmtUODZLIlNN49zl5THdlAQ34f22To=
Subject key identifier: 1D:3E:A4:D2:3E:70:40:87:F8:25:EC:16:F3:2C:CB:A3:CF:B0:F3:66
Authority key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Certificate issuer: /CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Certificate serial: 0194BA84948EAD13012B6E69DF9D53F166A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 04:00:38 +0000
Manifest this update: Fri 31 Jan 2025 04:00:38 +0000
Manifest next update: Sat 01 Feb 2025 04:00:38 +0000
Files and hashes: 1: 4UYAGfiAaeNhThUQkhzH5E0cq-I.crl (hash: Tk9umAcPnO7PSPTepUTosgkhCGyRMrsNdaO31C14qP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:94:8e:ad:13:01:2b:6e:69:df:9d:53:f1:66:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Validity
Not Before: Jan 31 04:00:38 2025 GMT
Not After : Feb 1 04:00:38 2025 GMT
Subject: CN=1d3ea4d23e704087f825ec16f32ccba3cfb0f366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0a:88:b5:33:9a:74:61:7d:3f:8b:6d:5e:8e:
d4:29:ea:ea:9e:ff:d2:92:be:b1:e2:e0:db:09:0f:
67:d4:94:1e:05:79:4c:41:03:cd:4f:29:01:59:42:
13:2e:2b:92:c2:0c:b2:d7:b7:21:e4:43:bf:0f:4e:
56:9f:59:85:d3:33:d5:d2:e1:0c:86:c6:00:0a:54:
12:8e:bf:db:b1:bb:d9:cc:2b:98:11:a6:b6:d6:84:
2c:52:3a:7c:44:1b:66:e8:f4:d3:61:f3:8d:3e:bc:
20:38:4c:09:8a:87:fe:12:44:45:ef:72:be:3c:72:
52:61:99:65:af:bf:46:4a:b2:2d:3c:26:0c:eb:4e:
f9:fc:78:ee:8d:1d:ad:de:74:8d:d7:83:80:4c:24:
3f:9e:25:c9:86:1c:3f:32:30:23:89:7f:03:eb:ef:
06:6b:d9:93:6f:e9:46:74:a3:56:b1:0f:5d:64:95:
a4:58:79:ef:75:c8:2a:49:d8:91:b7:09:f4:d9:e9:
42:7d:1c:e1:01:09:e7:38:55:f5:98:68:1c:52:b2:
b4:98:78:05:c1:31:08:13:e7:f2:7f:a7:52:8b:75:
8a:7f:6a:82:e4:6b:15:e2:cf:4f:b8:1b:5d:a6:3c:
74:1f:21:bd:37:67:52:a1:8c:42:e2:f7:76:88:69:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3E:A4:D2:3E:70:40:87:F8:25:EC:16:F3:2C:CB:A3:CF:B0:F3:66
X509v3 Authority Key Identifier:
keyid:E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c8:38:5e:b8:07:c9:40:ca:96:bd:8d:05:48:f1:16:ad:09:
15:19:e1:84:6d:91:73:6f:54:a0:6a:fa:45:ed:fd:d5:4e:bc:
34:63:ab:19:f8:58:ff:dc:c6:c8:b6:18:9c:5f:5d:88:3c:f8:
3c:05:ef:56:fb:a8:37:6c:d5:a5:3d:17:58:00:f3:77:48:ec:
0b:05:5e:25:32:78:b2:58:a5:b4:5a:dc:d3:72:db:a5:3f:6f:
99:3a:6f:34:42:2a:4d:47:be:35:8c:2f:81:86:9f:96:0c:f5:
76:c2:34:0c:0b:0c:4c:ee:9c:29:d8:9a:fe:1b:00:73:b5:a3:
92:2f:bc:be:9d:3b:22:f2:42:9b:cf:b3:99:9d:ea:0d:b7:04:
a3:7b:95:e4:54:e6:59:09:e9:1a:75:ea:b5:db:10:0e:1b:3c:
4c:1d:d5:b0:40:73:9b:e7:f1:c5:6d:67:d9:bc:59:3d:d0:f9:
10:39:a6:b3:89:1f:b1:ed:f0:5b:c5:35:b7:48:66:17:02:53:
ad:31:f8:56:49:f8:5f:2f:72:4d:df:0b:34:2e:eb:05:01:7f:
29:c9:3f:a9:c7:6e:ff:74:bd:ab:a2:57:80:b6:f2:2c:66:db:
ba:c8:8f:a7:aa:f9:96:54:f7:59:1d:61:53:a4:68:a9:f3:8d:
ba:0d:a2:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hJSOrRMBK25p351T8WalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNDYwMDE5Zjg4MDY5ZTM2MTRlMTUxMDkyMWNjN2U0NGQx
Y2FiZTIwHhcNMjUwMTMxMDQwMDM4WhcNMjUwMjAxMDQwMDM4WjAzMTEwLwYDVQQD
EygxZDNlYTRkMjNlNzA0MDg3ZjgyNWVjMTZmMzJjY2JhM2NmYjBmMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQqItTOadGF9P4ttXo7UKerqnv/S
kr6x4uDbCQ9n1JQeBXlMQQPNTykBWUITLiuSwgyy17ch5EO/D05Wn1mF0zPV0uEM
hsYAClQSjr/bsbvZzCuYEaa21oQsUjp8RBtm6PTTYfONPrwgOEwJiof+EkRF73K+
PHJSYZllr79GSrItPCYM6075/HjujR2t3nSN14OATCQ/niXJhhw/MjAjiX8D6+8G
a9mTb+lGdKNWsQ9dZJWkWHnvdcgqSdiRtwn02elCfRzhAQnnOFX1mGgcUrK0mHgF
wTEIE+fyf6dSi3WKf2qC5GsV4s9PuBtdpjx0HyG9N2dSoYxC4vd2iGlnRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0+pNI+cECH+CXsFvMsy6PPsPNmMB8GA1UdIwQY
MBaAFOFGABn4gGnjYU4VEJIcx+RNHKviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVZQUdmaUFhZU5oVGhVUWtoekg1RTBjcS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8zZTQ0NGQtNjcyMC00NDRhLWFlNTQt
ZmNkMWE2M2M1YzQ1LzEvNFVZQUdmaUFhZU5oVGhVUWtoekg1RTBjcS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8zZTQ0NGQtNjcyMC00NDRhLWFlNTQtZmNkMWE2M2M1YzQ1
LzEvNFVZQUdmaUFhZU5oVGhVUWtoekg1RTBjcS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsg4XrgH
yUDKlr2NBUjxFq0JFRnhhG2Rc29UoGr6Re391U68NGOrGfhY/9zGyLYYnF9diDz4
PAXvVvuoN2zVpT0XWADzd0jsCwVeJTJ4sliltFrc03LbpT9vmTpvNEIqTUe+NYwv
gYaflgz1dsI0DAsMTO6cKdia/hsAc7Wjki+8vp07IvJCm8+zmZ3qDbcEo3uV5FTm
WQnpGnXqtdsQDhs8TB3VsEBzm+fxxW1n2bxZPdD5EDmms4kfse3wW8U1t0hmFwJT
rTH4Vkn4Xy9yTd8LNC7rBQF/Kck/qcdu/3S9q6JXgLbyLGbbusiPp6r5llT3WR1h
U6RoqfONug2ifw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:34 2025 by rpki-client on console-fra.rpki-client.org