Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: LNONxeYTgVLsXk1zc4Grk7fPfy4d9PGBUeIao7GBVMo=
Subject key identifier: 89:A2:E3:E2:C2:E7:56:7E:ED:C5:7A:57:DF:40:4E:39:91:D2:F5:65
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 0194BA846414A4DAF67B07BE07AE41FA1FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 04:00:26 +0000
Manifest this update: Fri 31 Jan 2025 04:00:26 +0000
Manifest next update: Sat 01 Feb 2025 04:00:26 +0000
Files and hashes: 1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: 8GYXSLnjvAPsfMVOM1T5gSzvFtd7Jfogrbk2PVz4jWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:64:14:a4:da:f6:7b:07:be:07:ae:41:fa:1f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Jan 31 04:00:26 2025 GMT
Not After : Feb 1 04:00:26 2025 GMT
Subject: CN=89a2e3e2c2e7567eedc57a57df404e3991d2f565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:90:22:ee:40:75:1d:fa:50:8c:bd:3e:f8:
ef:be:79:d0:30:15:c0:7e:99:93:38:22:f4:98:71:
26:1a:29:04:c6:63:a8:df:77:36:a0:e1:93:ff:43:
72:47:dc:9d:24:a1:46:1b:a8:8a:3a:06:37:21:69:
a9:1b:a5:3d:81:0d:32:1b:c9:c3:3d:4c:70:bc:5a:
80:46:02:ac:07:5b:a2:e0:f0:d4:42:d1:22:21:3e:
e4:48:08:9b:94:e5:75:38:f4:a2:7e:8d:c9:f9:b7:
c7:23:0f:32:6f:dd:25:26:a2:2c:80:ba:41:58:1f:
74:68:1d:4e:c7:43:7b:18:e0:dd:60:56:e1:b2:a0:
7b:1a:4b:af:7a:1e:40:7d:2d:72:0c:68:23:a1:92:
90:dd:85:b4:a9:b1:ef:f1:2a:e2:ee:00:02:fc:ea:
b8:05:21:61:44:22:fa:0c:03:ce:bf:10:50:61:5e:
03:ee:7f:12:fc:34:d2:6b:69:3a:f5:52:f1:7f:0f:
d8:a8:d8:0c:25:ac:90:b4:a6:1a:7c:28:99:aa:9d:
3b:35:15:0a:c7:bf:81:e7:1e:78:cf:e0:51:a2:a5:
9c:61:7c:b3:9c:9e:09:55:bd:f3:89:40:36:20:6f:
f9:b1:c0:7e:6a:c7:a5:ca:49:9c:32:f3:44:99:4f:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A2:E3:E2:C2:E7:56:7E:ED:C5:7A:57:DF:40:4E:39:91:D2:F5:65
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e7:1f:70:9f:76:45:ce:9a:ad:e0:59:4f:51:99:a6:3b:02:
4f:30:8b:0f:00:5f:63:3e:88:36:36:1c:5e:1c:9f:e9:9f:42:
50:a1:9a:19:75:06:9e:fc:7c:6c:cb:4b:dd:76:04:38:2e:3a:
0c:d7:38:61:fe:47:03:ea:02:f5:64:f4:74:0f:55:52:cc:a7:
78:c1:86:15:51:89:18:8a:92:3a:ae:c8:b5:1a:27:4a:a5:7b:
4c:20:2a:cb:d7:ac:1f:ab:a7:99:50:76:c0:45:7e:e8:48:00:
e0:3e:2e:16:02:ea:4b:ee:b1:e8:f2:1e:e9:6f:cc:29:0f:58:
eb:ec:79:7b:22:07:14:de:0d:b9:d1:7e:94:5d:ba:78:94:7c:
64:3a:cd:ab:15:1a:c1:8a:1b:26:85:be:9e:1b:8e:e8:2e:7a:
a6:2f:a1:05:20:99:c1:a8:d7:f9:6e:99:b4:15:c1:eb:62:26:
a9:4f:28:18:5b:cd:71:a3:ee:03:dc:e2:90:89:4c:13:9b:66:
0f:a2:95:38:3b:ec:af:ac:f0:55:f1:19:42:df:fa:68:d4:f3:
d9:a6:cf:d9:0d:b8:e2:10:39:94:77:bd:0a:b1:f6:05:8e:85:
9e:85:10:ab:5f:cd:7b:79:6d:4f:b9:0c:5f:98:66:41:fc:6b:
f2:ad:29:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hGQUpNr2ewe+B65B+h/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGNmMDdjN2QwNTkzMDJiNTYwNjZhYWY2Y2JlZWMxMzUx
ODZhNDQwHhcNMjUwMTMxMDQwMDI2WhcNMjUwMjAxMDQwMDI2WjAzMTEwLwYDVQQD
Eyg4OWEyZTNlMmMyZTc1NjdlZWRjNTdhNTdkZjQwNGUzOTkxZDJmNTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkviQIu5AdR36UIy9PvjvvnnQMBXA
fpmTOCL0mHEmGikExmOo33c2oOGT/0NyR9ydJKFGG6iKOgY3IWmpG6U9gQ0yG8nD
PUxwvFqARgKsB1ui4PDUQtEiIT7kSAiblOV1OPSifo3J+bfHIw8yb90lJqIsgLpB
WB90aB1Ox0N7GODdYFbhsqB7Gkuveh5AfS1yDGgjoZKQ3YW0qbHv8Sri7gAC/Oq4
BSFhRCL6DAPOvxBQYV4D7n8S/DTSa2k69VLxfw/YqNgMJayQtKYafCiZqp07NRUK
x7+B5x54z+BRoqWcYXyznJ4JVb3ziUA2IG/5scB+aselykmcMvNEmU93JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImi4+LC51Z+7cV6V99ATjmR0vVlMB8GA1UdIwQY
MBaAFABM8Hx9BZMCtWBmqvbL7sE1GGpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTIt
NmU1NDViNmM0M2IwLzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTItNmU1NDViNmM0M2Iw
LzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+cfcJ92
Rc6areBZT1GZpjsCTzCLDwBfYz6INjYcXhyf6Z9CUKGaGXUGnvx8bMtL3XYEOC46
DNc4Yf5HA+oC9WT0dA9VUsyneMGGFVGJGIqSOq7ItRonSqV7TCAqy9esH6unmVB2
wEV+6EgA4D4uFgLqS+6x6PIe6W/MKQ9Y6+x5eyIHFN4NudF+lF26eJR8ZDrNqxUa
wYobJoW+nhuO6C56pi+hBSCZwajX+W6ZtBXB62ImqU8oGFvNcaPuA9zikIlME5tm
D6KVODvsr6zwVfEZQt/6aNTz2abP2Q244hA5lHe9CrH2BY6FnoUQq1/Ne3ltT7kM
X5hmQfxr8q0pPQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:31 2025 by rpki-client on console-fra.rpki-client.org