Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
File: sTSesOfbZTbKeYKWH_rJsykWXF8.mft (raw, json)
Hash identifier: osh+8IcMt7bybQvPSc9QjG4M5XRYrR1XDlRMTovHn1I=
Subject key identifier: 4C:F5:21:69:73:A7:61:9D:CD:E7:40:D0:0D:B6:CB:E3:C6:CD:06:CD
Authority key identifier: B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
Certificate issuer: /CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Certificate serial: 0194BB604E7D496D431548C6923AE10EEA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
Manifest number: DE
Signing time: Fri 31 Jan 2025 08:00:38 +0000
Manifest this update: Fri 31 Jan 2025 08:00:38 +0000
Manifest next update: Sat 01 Feb 2025 08:00:38 +0000
Files and hashes: 1: sTSesOfbZTbKeYKWH_rJsykWXF8.crl (hash: Sz4sjifomtTGpbbghOL+MO2/yucmgAgCTq0lH8j827Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:4e:7d:49:6d:43:15:48:c6:92:3a:e1:0e:ea:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Validity
Not Before: Jan 31 08:00:38 2025 GMT
Not After : Feb 1 08:00:38 2025 GMT
Subject: CN=4cf5216973a7619dcde740d00db6cbe3c6cd06cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:2e:e0:fc:59:d1:14:dd:d0:56:e0:26:b0:
19:cb:a2:99:bd:19:5f:bc:82:a7:3a:29:64:71:e0:
ff:19:7d:f4:b3:9c:d8:c2:00:e9:0c:2e:22:75:e9:
46:6d:45:14:50:83:59:a6:1e:9f:9a:2d:13:a8:a0:
ea:68:05:fa:df:c1:eb:80:77:cc:43:8e:5c:85:2e:
95:90:8e:c6:98:e6:4b:ad:f5:9d:f1:6c:2d:f5:e8:
1a:ee:90:5a:bf:ad:da:3e:c8:bf:85:0a:e9:b5:da:
e6:8f:ee:9f:6b:d4:4b:89:30:e5:9b:69:4f:b5:e9:
07:a1:c7:a4:55:c5:de:75:99:34:bb:01:27:25:d5:
6f:95:19:7e:94:df:01:4f:de:99:df:df:43:c3:2b:
ed:33:f7:b4:2b:96:9e:21:1d:75:41:95:8c:b5:47:
e8:c9:fa:84:1a:d4:bf:a3:16:e0:00:ea:d3:66:84:
92:b1:0a:dc:7d:f2:ae:47:15:fb:92:63:72:c0:f9:
8b:cb:0e:6e:00:15:19:2b:ab:39:e0:e8:dc:d3:ac:
b2:2f:d6:1b:e3:4f:66:1a:09:15:a0:94:fd:f2:57:
ba:b7:87:eb:0b:85:f5:fa:eb:1f:b4:61:81:5f:cf:
08:66:5e:65:7b:ab:b3:f1:bc:76:f5:aa:eb:a5:3e:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F5:21:69:73:A7:61:9D:CD:E7:40:D0:0D:B6:CB:E3:C6:CD:06:CD
X509v3 Authority Key Identifier:
keyid:B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:17:66:e4:50:b0:40:6f:a8:2c:d9:57:05:c6:bb:8c:5b:fb:
a9:2d:c3:0b:83:d7:91:c5:88:93:93:43:ea:67:7b:14:95:7c:
79:9e:1a:9a:63:0e:8e:41:67:7b:97:5b:3c:a2:8f:81:0e:12:
4e:55:49:de:9b:15:15:39:9a:06:14:a2:d9:19:8d:b3:e5:6b:
b6:c7:54:0d:2f:5e:5c:2d:23:34:ce:26:1a:21:f0:ad:73:9f:
98:5b:6d:3b:bc:43:72:95:9a:85:af:19:2c:67:06:98:b6:ff:
8f:35:e7:6b:91:f2:83:45:a9:d8:4b:9d:11:a9:d6:fd:5a:fd:
b2:ee:6f:84:06:4b:ac:b8:9a:32:13:11:0e:01:5e:aa:3d:59:
08:5a:ae:21:65:54:48:50:41:33:e1:c7:f9:7a:9c:4c:8c:3a:
53:30:ba:7e:43:d2:15:37:0c:1b:19:d1:c3:c2:bc:93:f5:77:
df:91:f0:d8:cb:47:32:de:fe:2f:27:c1:08:b1:f5:5a:c7:09:
21:df:d7:21:e4:cc:22:e2:c7:fb:75:69:95:3a:49:d6:2e:b4:
e9:a9:62:15:a3:25:fc:9e:fd:08:7c:8b:62:82:c6:b6:fd:55:
90:6a:4e:e3:87:f2:87:34:e4:23:8d:7e:f4:8b:4a:08:27:cc:
93:39:ed:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YE59SW1DFUjGkjrhDuo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzQ5ZWIwZTdkYjY1MzZjYTc5ODI5NjFmZmFjOWIzMjkx
NjVjNWYwHhcNMjUwMTMxMDgwMDM4WhcNMjUwMjAxMDgwMDM4WjAzMTEwLwYDVQQD
Eyg0Y2Y1MjE2OTczYTc2MTlkY2RlNzQwZDAwZGI2Y2JlM2M2Y2QwNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXsu4PxZ0RTd0FbgJrAZy6KZvRlf
vIKnOilkceD/GX30s5zYwgDpDC4idelGbUUUUINZph6fmi0TqKDqaAX638HrgHfM
Q45chS6VkI7GmOZLrfWd8Wwt9ega7pBav63aPsi/hQrptdrmj+6fa9RLiTDlm2lP
tekHocekVcXedZk0uwEnJdVvlRl+lN8BT96Z399DwyvtM/e0K5aeIR11QZWMtUfo
yfqEGtS/oxbgAOrTZoSSsQrcffKuRxX7kmNywPmLyw5uABUZK6s54Ojc06yyL9Yb
409mGgkVoJT98le6t4frC4X1+usftGGBX88IZl5le6uz8bx29arrpT6W6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz1IWlzp2GdzedA0A22y+PGzQbNMB8GA1UdIwQY
MBaAFLE0nrDn22U2ynmClh/6ybMpFlxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RTZXNPZmJaVGJLZVlLV0hfckpzeWtXWEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYjMwYmYtYmNjNy00Nzc3LTkxNDYt
N2EzMGJlNWNlY2MwLzEvc1RTZXNPZmJaVGJLZVlLV0hfckpzeWtXWEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xYjMwYmYtYmNjNy00Nzc3LTkxNDYtN2EzMGJlNWNlY2Mw
LzEvc1RTZXNPZmJaVGJLZVlLV0hfckpzeWtXWEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5xdm5FCw
QG+oLNlXBca7jFv7qS3DC4PXkcWIk5ND6md7FJV8eZ4ammMOjkFne5dbPKKPgQ4S
TlVJ3psVFTmaBhSi2RmNs+VrtsdUDS9eXC0jNM4mGiHwrXOfmFttO7xDcpWaha8Z
LGcGmLb/jzXna5Hyg0Wp2EudEanW/Vr9su5vhAZLrLiaMhMRDgFeqj1ZCFquIWVU
SFBBM+HH+XqcTIw6UzC6fkPSFTcMGxnRw8K8k/V335Hw2MtHMt7+LyfBCLH1WscJ
Id/XIeTMIuLH+3VplTpJ1i606aliFaMl/J79CHyLYoLGtv1VkGpO44fyhzTkI41+
9ItKCCfMkzntRw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:09 2025 by rpki-client on console-fra.rpki-client.org