Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8091a2-8a2d-458c-98a4-c6fcbac770f5/1/eiq2IdNR_j8HPogZQO680cht8-k.mft
File: eiq2IdNR_j8HPogZQO680cht8-k.mft (raw, json)
Hash identifier: z5ZMWHLTnZa6NQ9YVmaZWx7sM7JmyonHkdHJ121vy3g=
Subject key identifier: 8E:4E:E7:7C:BB:30:C5:ED:2F:1F:5C:92:92:DE:C9:36:0B:64:E0:A3
Authority key identifier: 7A:2A:B6:21:D3:51:FE:3F:07:3E:88:19:40:EE:BC:D1:C8:6D:F3:E9
Certificate issuer: /CN=7a2ab621d351fe3f073e881940eebcd1c86df3e9
Certificate serial: 0194BA846C90FDECBEFBA3B81980321888EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eiq2IdNR_j8HPogZQO680cht8-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8091a2-8a2d-458c-98a4-c6fcbac770f5/1/eiq2IdNR_j8HPogZQO680cht8-k.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 04:00:28 +0000
Manifest this update: Fri 31 Jan 2025 04:00:28 +0000
Manifest next update: Sat 01 Feb 2025 04:00:28 +0000
Files and hashes: 1: eiq2IdNR_j8HPogZQO680cht8-k.crl (hash: wIwD99sROst9W/snEamQe4WCsmFm1Ovlep0d3UfmPkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8091a2-8a2d-458c-98a4-c6fcbac770f5/1/eiq2IdNR_j8HPogZQO680cht8-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8091a2-8a2d-458c-98a4-c6fcbac770f5/1/eiq2IdNR_j8HPogZQO680cht8-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eiq2IdNR_j8HPogZQO680cht8-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6c:90:fd:ec:be:fb:a3:b8:19:80:32:18:88:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a2ab621d351fe3f073e881940eebcd1c86df3e9
Validity
Not Before: Jan 31 04:00:28 2025 GMT
Not After : Feb 1 04:00:28 2025 GMT
Subject: CN=8e4ee77cbb30c5ed2f1f5c9292dec9360b64e0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:96:ea:0d:f0:fa:a1:22:a5:14:15:98:0d:29:
e6:61:8a:91:aa:7a:63:c5:8e:10:cd:f1:b1:0c:b2:
d5:6c:87:68:a1:e9:38:ca:c2:dc:4a:75:34:34:ff:
99:35:ea:d6:89:d6:ab:45:4b:ad:04:d8:62:e9:64:
2b:ba:a4:6f:c0:e2:ba:34:db:a2:46:34:5e:df:35:
d9:28:5d:8e:1b:18:9c:1d:d2:84:28:af:ec:55:89:
e2:21:f5:d5:e5:7d:03:e4:3d:02:78:57:31:05:3c:
2b:18:87:9d:03:2a:36:b2:2c:be:38:18:ff:f7:2e:
df:12:42:3a:26:22:46:04:bc:83:54:0e:a7:86:9f:
89:c0:d1:ee:22:4c:9e:85:fc:7a:d6:21:45:73:96:
88:38:93:61:26:97:f8:47:6a:af:18:15:f5:cc:ff:
d2:d7:f8:58:f9:50:bd:66:05:fb:5f:21:ec:7e:3a:
06:32:f4:d1:9e:98:da:bc:8c:30:fc:35:db:0d:51:
83:76:69:98:33:eb:87:1c:42:fa:2a:2d:15:fe:48:
b4:1e:67:94:34:bb:39:9e:05:39:1b:d5:a7:60:2b:
32:f0:25:72:e2:fa:63:cb:99:a6:b8:03:ff:39:bd:
11:7e:47:b4:9b:f4:6c:f6:e5:f2:6c:3a:4e:f0:c5:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4E:E7:7C:BB:30:C5:ED:2F:1F:5C:92:92:DE:C9:36:0B:64:E0:A3
X509v3 Authority Key Identifier:
keyid:7A:2A:B6:21:D3:51:FE:3F:07:3E:88:19:40:EE:BC:D1:C8:6D:F3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiq2IdNR_j8HPogZQO680cht8-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8091a2-8a2d-458c-98a4-c6fcbac770f5/1/eiq2IdNR_j8HPogZQO680cht8-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8091a2-8a2d-458c-98a4-c6fcbac770f5/1/eiq2IdNR_j8HPogZQO680cht8-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f1:7f:f9:b6:30:91:e9:db:4e:6e:b1:1e:20:37:cf:8c:36:
bc:13:40:33:36:9a:3b:3e:1a:81:b4:e0:a4:77:d1:4a:a5:cd:
b7:cb:f7:c9:16:70:4a:b7:49:cb:3a:95:0a:aa:c1:c8:b9:5f:
56:7d:50:b5:d3:f3:94:92:ac:09:b3:fd:c9:2b:f8:13:5b:c6:
19:c7:55:89:7e:ea:7f:c1:d0:ca:41:d0:93:f6:f3:cf:ac:6e:
2c:3a:9e:02:16:d7:af:82:aa:f2:62:e4:77:5d:c4:d0:af:de:
30:43:b9:53:43:40:a6:4d:9a:5d:9c:b7:80:9c:4c:d6:5d:12:
16:dd:f8:50:86:e3:13:94:18:04:25:2d:cd:93:05:07:cf:dc:
08:b1:be:f7:ec:54:2d:d7:4c:f6:87:cf:61:80:42:ed:8c:ab:
2e:a3:7f:90:1d:70:bb:22:6d:8b:35:29:59:bb:20:75:43:49:
1b:d8:1d:1f:35:d5:32:8e:1b:2f:2c:7f:db:7c:ee:70:1d:37:
8f:9c:52:d3:6a:9a:aa:b4:63:af:74:08:d1:97:a3:e4:90:2b:
b8:a9:39:5e:21:eb:f6:4b:4a:46:dd:a8:1a:74:28:bc:b2:a5:
d3:5e:e2:e3:41:c7:cb:c3:bd:68:35:5b:76:a8:a3:b9:97:c4:
a1:83:4b:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hGyQ/ey++6O4GYAyGIjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMmFiNjIxZDM1MWZlM2YwNzNlODgxOTQwZWViY2QxYzg2
ZGYzZTkwHhcNMjUwMTMxMDQwMDI4WhcNMjUwMjAxMDQwMDI4WjAzMTEwLwYDVQQD
Eyg4ZTRlZTc3Y2JiMzBjNWVkMmYxZjVjOTI5MmRlYzkzNjBiNjRlMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pbqDfD6oSKlFBWYDSnmYYqRqnpj
xY4QzfGxDLLVbIdooek4ysLcSnU0NP+ZNerWidarRUutBNhi6WQruqRvwOK6NNui
RjRe3zXZKF2OGxicHdKEKK/sVYniIfXV5X0D5D0CeFcxBTwrGIedAyo2siy+OBj/
9y7fEkI6JiJGBLyDVA6nhp+JwNHuIkyehfx61iFFc5aIOJNhJpf4R2qvGBX1zP/S
1/hY+VC9ZgX7XyHsfjoGMvTRnpjavIww/DXbDVGDdmmYM+uHHEL6Ki0V/ki0HmeU
NLs5ngU5G9WnYCsy8CVy4vpjy5mmuAP/Ob0Rfke0m/Rs9uXybDpO8MWehQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5O53y7MMXtLx9ckpLeyTYLZOCjMB8GA1UdIwQY
MBaAFHoqtiHTUf4/Bz6IGUDuvNHIbfPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWlxMklkTlJfajhIUG9nWlFPNjgwY2h0OC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84MDkxYTItOGEyZC00NThjLTk4YTQt
YzZmY2JhYzc3MGY1LzEvZWlxMklkTlJfajhIUG9nWlFPNjgwY2h0OC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi84MDkxYTItOGEyZC00NThjLTk4YTQtYzZmY2JhYzc3MGY1
LzEvZWlxMklkTlJfajhIUG9nWlFPNjgwY2h0OC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvF/+bYw
kenbTm6xHiA3z4w2vBNAMzaaOz4agbTgpHfRSqXNt8v3yRZwSrdJyzqVCqrByLlf
Vn1QtdPzlJKsCbP9ySv4E1vGGcdViX7qf8HQykHQk/bzz6xuLDqeAhbXr4Kq8mLk
d13E0K/eMEO5U0NApk2aXZy3gJxM1l0SFt34UIbjE5QYBCUtzZMFB8/cCLG+9+xU
LddM9ofPYYBC7YyrLqN/kB1wuyJtizUpWbsgdUNJG9gdHzXVMo4bLyx/23zucB03
j5xS02qaqrRjr3QI0Zej5JAruKk5XiHr9ktKRt2oGnQovLKl017i40HHy8O9aDVb
dqijuZfEoYNL0w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:34 2025 by rpki-client on console-fra.rpki-client.org