Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File: AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier: jhubWdFCGPFEviAKSugacHtbw2UBJnLPEBpI16KSDVk=
Subject key identifier: 4A:A5:A3:A3:C4:DD:EE:26:B2:B9:B9:76:BE:A1:82:47:3B:6D:12:EC
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer: /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial: 0194BB294D53252DCFE94DE7CC338EBB4265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number: 06E3
Signing time: Fri 31 Jan 2025 07:00:33 +0000
Manifest this update: Fri 31 Jan 2025 07:00:33 +0000
Manifest next update: Sat 01 Feb 2025 07:00:33 +0000
Files and hashes: 1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: WDGGiVgWrnTHABuwJZTNqPTg//wvRjSwU93K46xESg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:4d:53:25:2d:cf:e9:4d:e7:cc:33:8e:bb:42:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
Validity
Not Before: Jan 31 07:00:33 2025 GMT
Not After : Feb 1 07:00:33 2025 GMT
Subject: CN=4aa5a3a3c4ddee26b2b9b976bea182473b6d12ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:37:17:d6:59:ef:a3:c2:2b:47:42:1a:bb:
c9:d7:4f:9e:47:db:62:ba:2b:d5:53:7a:3b:ca:ec:
7f:05:be:19:61:9d:69:44:94:10:cf:d3:a3:07:a7:
b9:bf:08:16:fd:63:6f:26:70:02:64:c0:a1:ba:01:
0e:59:a3:18:d1:2a:e6:ad:25:bd:43:a5:92:cc:2d:
16:0c:26:46:a5:a1:65:c6:f3:41:dc:b1:2d:bc:0c:
19:62:ee:b0:4a:87:7b:5a:df:36:6e:08:a5:21:b2:
eb:01:a7:50:be:26:b8:1c:d7:1f:90:33:9c:37:e7:
65:79:8d:b1:4d:10:de:90:3f:33:f5:24:da:e6:b6:
9b:dc:4d:eb:61:6e:0f:74:69:50:be:51:88:61:51:
93:70:dd:c7:25:e2:d1:b7:0e:35:ae:e1:ce:7f:c3:
11:1a:cc:9d:16:42:53:4f:a1:db:ce:63:f4:36:bb:
47:a4:07:96:ec:40:6b:c5:c4:c1:99:7a:9f:7c:1b:
6a:c1:4e:b1:68:80:69:12:39:e4:f9:b0:40:48:bb:
a0:1d:23:04:f2:39:58:98:7e:a0:48:ae:74:3a:77:
a5:42:8d:b0:1d:cb:86:45:e5:ce:7d:89:b8:bf:19:
b6:08:3d:7f:1a:13:78:d2:bf:f0:45:90:53:9b:97:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A5:A3:A3:C4:DD:EE:26:B2:B9:B9:76:BE:A1:82:47:3B:6D:12:EC
X509v3 Authority Key Identifier:
keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:79:59:cf:8d:ec:e5:ee:24:47:f1:80:b2:56:ce:23:87:01:
ef:d4:cc:1c:c9:26:6e:1d:81:cd:a7:87:27:0e:af:59:f6:97:
75:8a:62:49:7f:9a:84:71:38:15:fd:1d:76:2e:3e:b8:0a:89:
ee:19:8c:ff:81:29:c5:d3:7b:3e:ef:95:8e:dc:dc:9c:02:40:
62:b9:f4:42:7c:36:58:ca:b0:ac:de:50:f6:43:ce:cf:e6:1d:
d8:b2:52:d2:66:e0:37:2f:8b:85:cf:b3:00:de:2a:79:99:07:
d7:d7:ec:62:ef:ba:ba:bd:88:46:a3:8c:65:1f:59:a0:4b:cb:
a0:47:31:0e:dc:40:d0:d8:96:66:68:ea:f2:4c:4a:f8:f4:02:
c8:d3:3a:d4:cc:b9:4e:1e:06:3f:6f:ba:03:e3:0b:95:14:f5:
bc:ea:05:09:49:2a:57:ff:70:97:50:ce:fa:26:77:1f:56:f9:
f8:75:ce:a0:2d:cb:7d:f2:73:cd:a2:37:88:e5:f7:cd:99:3d:
86:78:0c:a0:9f:30:12:bb:d5:9f:e7:dd:95:04:f9:c2:47:90:
a2:5e:41:7a:4b:c7:b2:87:34:d2:fe:ae:6f:06:6e:76:0c:da:
6f:a3:f4:43:96:8e:a3:60:33:26:e1:a6:e4:6f:7f:d8:c6:ed:
6a:4f:95:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KU1TJS3P6U3nzDOOu0JlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODBkNWFhYjhlZTcyZGFhMzUyODcxZmJhNzJlY2E0NTFh
NzBlZGMwHhcNMjUwMTMxMDcwMDMzWhcNMjUwMjAxMDcwMDMzWjAzMTEwLwYDVQQD
Eyg0YWE1YTNhM2M0ZGRlZTI2YjJiOWI5NzZiZWExODI0NzNiNmQxMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArik3F9ZZ76PCK0dCGrvJ10+eR9ti
uivVU3o7yux/Bb4ZYZ1pRJQQz9OjB6e5vwgW/WNvJnACZMChugEOWaMY0SrmrSW9
Q6WSzC0WDCZGpaFlxvNB3LEtvAwZYu6wSod7Wt82bgilIbLrAadQvia4HNcfkDOc
N+dleY2xTRDekD8z9STa5rab3E3rYW4PdGlQvlGIYVGTcN3HJeLRtw41ruHOf8MR
GsydFkJTT6HbzmP0NrtHpAeW7EBrxcTBmXqffBtqwU6xaIBpEjnk+bBASLugHSME
8jlYmH6gSK50OnelQo2wHcuGReXOfYm4vxm2CD1/GhN40r/wRZBTm5fs1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqlo6PE3e4msrm5dr6hgkc7bRLsMB8GA1UdIwQY
MBaAFAKA1aq47nLao1KHH7py7KRRpw7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEt
ZjQwNmUwODc4ZDU0LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEtZjQwNmUwODc4ZDU0
LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXlZz43s
5e4kR/GAslbOI4cB79TMHMkmbh2BzaeHJw6vWfaXdYpiSX+ahHE4Ff0ddi4+uAqJ
7hmM/4EpxdN7Pu+VjtzcnAJAYrn0Qnw2WMqwrN5Q9kPOz+Yd2LJS0mbgNy+Lhc+z
AN4qeZkH19fsYu+6ur2IRqOMZR9ZoEvLoEcxDtxA0NiWZmjq8kxK+PQCyNM61My5
Th4GP2+6A+MLlRT1vOoFCUkqV/9wl1DO+iZ3H1b5+HXOoC3LffJzzaI3iOX3zZk9
hngMoJ8wErvVn+fdlQT5wkeQol5BekvHsoc00v6ubwZudgzab6P0Q5aOo2AzJuGm
5G9/2Mbtak+VHQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:42 2025 by rpki-client on console-fra.rpki-client.org