Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
File: yyDpqru2GRVGEQI1z3bEg4S0UdA.mft (raw, json)
Hash identifier: VBXk2Oul1dx6u3g1YRc7pQjWUo8HYOaIF/FLIHalnBE=
Subject key identifier: AD:A8:B3:63:3B:EE:2C:73:87:BD:B8:89:48:70:BA:00:15:B5:01:31
Authority key identifier: CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
Certificate issuer: /CN=cb20e9aabbb6191546110235cf76c48384b451d0
Certificate serial: 0194BB5FDE0D9053D177E01EF6F2D1CE177B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
Manifest number: 0376
Signing time: Fri 31 Jan 2025 08:00:09 +0000
Manifest this update: Fri 31 Jan 2025 08:00:09 +0000
Manifest next update: Sat 01 Feb 2025 08:00:09 +0000
Files and hashes: 1: yyDpqru2GRVGEQI1z3bEg4S0UdA.crl (hash: EYBBSmryKCjtrVp6Bc8xcXg2fmVO2CILfgT6T4b5KEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:de:0d:90:53:d1:77:e0:1e:f6:f2:d1:ce:17:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20e9aabbb6191546110235cf76c48384b451d0
Validity
Not Before: Jan 31 08:00:09 2025 GMT
Not After : Feb 1 08:00:09 2025 GMT
Subject: CN=ada8b3633bee2c7387bdb8894870ba0015b50131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:8e:65:79:d2:b3:50:4f:f6:e0:58:d9:34:
19:47:53:f6:e1:22:f6:14:c2:20:a5:67:56:05:0f:
dd:bf:43:44:a9:ea:56:bf:0e:ff:1f:9f:3a:e1:41:
af:4a:87:5c:69:c6:37:af:3d:bf:39:a4:46:cd:9e:
4f:8e:ac:cb:19:b4:8b:b5:6c:25:bc:46:8f:ef:f5:
d5:b6:41:a0:e8:ce:64:1c:4b:d1:a6:48:04:97:57:
21:b9:4d:96:66:cf:fc:43:f9:93:ab:16:8c:7e:73:
36:7a:b8:b2:3b:66:2f:d2:b9:9c:1b:fa:ac:96:b6:
13:01:99:f7:b4:1b:13:74:a5:f8:d6:57:e3:e7:5d:
bf:35:70:2b:5b:a0:b2:fb:3b:64:35:3e:8e:3c:a2:
1f:f0:58:71:cc:cf:90:bd:69:62:b0:ab:bf:a0:b3:
9d:54:8e:53:88:a7:e3:fc:6d:bd:79:7c:18:36:c3:
25:b6:30:3d:14:9a:09:0f:4c:0a:99:6a:ee:d0:bc:
fe:c3:cc:3a:5c:13:ad:2f:30:4d:56:77:7a:94:0d:
d7:a9:6c:bc:8b:5f:b9:4d:c4:02:6f:2d:47:b4:6f:
91:7c:c3:c2:d7:38:3d:09:7c:81:20:5e:01:8c:8b:
fb:3c:d1:a5:87:ae:47:f8:38:dc:da:28:f5:79:32:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A8:B3:63:3B:EE:2C:73:87:BD:B8:89:48:70:BA:00:15:B5:01:31
X509v3 Authority Key Identifier:
keyid:CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:34:b5:02:b0:23:9a:e3:00:f8:4e:30:41:28:d7:fc:28:1a:
7a:5f:30:a7:02:b0:73:dc:35:ff:5d:1c:14:76:85:a7:b2:c4:
d8:13:c5:27:1d:6d:0e:5a:51:80:ae:d0:7d:64:ee:98:32:e3:
7c:89:71:c1:37:5a:34:9f:f5:9c:81:6b:79:fb:a6:58:7f:3e:
fb:bb:47:2d:f3:dd:c5:ce:8e:0f:89:5e:be:79:7e:40:d5:27:
77:a9:c3:14:3e:5a:cc:1f:c8:49:3f:53:d1:ac:07:09:7b:98:
a6:67:f3:6f:6b:5e:65:d4:8e:46:46:f2:58:0f:11:af:7e:29:
02:58:e9:0d:82:a4:5b:a2:fa:91:99:bd:cc:90:12:c9:02:76:
0d:67:9a:71:82:3f:05:d5:c5:b3:5f:69:1a:60:4f:f2:a4:88:
bc:49:ac:25:0b:e5:55:67:07:17:00:f8:e1:80:11:a2:6e:b4:
57:03:e4:80:7a:83:15:a2:54:0e:b3:03:f5:b7:9e:ef:17:33:
48:ef:07:82:0d:6f:00:22:5f:a5:5e:77:e8:f8:df:e3:9f:c0:
bb:08:b2:e8:fe:a7:af:89:84:15:61:e0:b1:81:50:6e:1f:6b:
b9:67:86:2d:ef:4a:a4:9c:53:60:b6:6a:12:80:97:18:4e:8d:
f0:73:54:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X94NkFPRd+Ae9vLRzhd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjBlOWFhYmJiNjE5MTU0NjExMDIzNWNmNzZjNDgzODRi
NDUxZDAwHhcNMjUwMTMxMDgwMDA5WhcNMjUwMjAxMDgwMDA5WjAzMTEwLwYDVQQD
EyhhZGE4YjM2MzNiZWUyYzczODdiZGI4ODk0ODcwYmEwMDE1YjUwMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXGOZXnSs1BP9uBY2TQZR1P24SL2
FMIgpWdWBQ/dv0NEqepWvw7/H5864UGvSodcacY3rz2/OaRGzZ5PjqzLGbSLtWwl
vEaP7/XVtkGg6M5kHEvRpkgEl1chuU2WZs/8Q/mTqxaMfnM2eriyO2Yv0rmcG/qs
lrYTAZn3tBsTdKX41lfj512/NXArW6Cy+ztkNT6OPKIf8FhxzM+QvWlisKu/oLOd
VI5TiKfj/G29eXwYNsMltjA9FJoJD0wKmWru0Lz+w8w6XBOtLzBNVnd6lA3XqWy8
i1+5TcQCby1HtG+RfMPC1zg9CXyBIF4BjIv7PNGlh65H+Djc2ij1eTK+JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2os2M77ixzh724iUhwugAVtQExMB8GA1UdIwQY
MBaAFMsg6aq7thkVRhECNc92xIOEtFHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlEcHFydTJHUlZHRVFJMXozYkVnNFMwVWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84ZDliYjUtYjRlNS00MzQ0LTg5MWIt
MDgwN2Y5NmNhNGEyLzEveXlEcHFydTJHUlZHRVFJMXozYkVnNFMwVWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84ZDliYjUtYjRlNS00MzQ0LTg5MWItMDgwN2Y5NmNhNGEy
LzEveXlEcHFydTJHUlZHRVFJMXozYkVnNFMwVWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTS1ArAj
muMA+E4wQSjX/Cgael8wpwKwc9w1/10cFHaFp7LE2BPFJx1tDlpRgK7QfWTumDLj
fIlxwTdaNJ/1nIFrefumWH8++7tHLfPdxc6OD4levnl+QNUnd6nDFD5azB/IST9T
0awHCXuYpmfzb2teZdSORkbyWA8Rr34pAljpDYKkW6L6kZm9zJASyQJ2DWeacYI/
BdXFs19pGmBP8qSIvEmsJQvlVWcHFwD44YARom60VwPkgHqDFaJUDrMD9bee7xcz
SO8Hgg1vACJfpV536Pjf45/Auwiy6P6nr4mEFWHgsYFQbh9ruWeGLe9KpJxTYLZq
EoCXGE6N8HNU7Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:27 2025 by rpki-client on console-fra.rpki-client.org