Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: vEc/yNgFyp6IwlMe+owBUaBa8L9fzQj/ekTZO0FyFqE=
Subject key identifier: A3:17:BF:00:40:BC:55:FD:FF:42:22:9B:B1:FE:4F:12:57:E1:EE:B3
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 0194BABB9FB74DDB6E7F6F44008B9B050C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 0323
Signing time: Fri 31 Jan 2025 05:00:45 +0000
Manifest this update: Fri 31 Jan 2025 05:00:45 +0000
Manifest next update: Sat 01 Feb 2025 05:00:45 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: sSeQgcRcj8MTlqjdNPnOfscfU2rwc6DKq/yXyb9fc8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:9f:b7:4d:db:6e:7f:6f:44:00:8b:9b:05:0c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: Jan 31 05:00:45 2025 GMT
Not After : Feb 1 05:00:45 2025 GMT
Subject: CN=a317bf0040bc55fdff42229bb1fe4f1257e1eeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:97:89:4f:b9:15:56:44:30:56:b9:61:83:
11:4b:51:34:94:41:99:db:47:1c:8c:33:09:fe:d8:
b0:7f:60:67:4c:00:4a:f5:97:8a:60:9d:94:65:54:
18:ca:28:11:df:c5:72:8e:90:3a:26:71:7c:11:03:
e5:73:3e:4d:0a:70:df:da:fa:45:6d:46:69:bb:ac:
17:b5:11:8c:d4:4e:df:1e:ee:df:e7:7c:ac:af:f0:
12:dd:6c:c2:ae:42:f2:f5:8f:20:ed:11:83:16:ab:
22:b0:b0:47:a9:0d:98:7c:8f:5e:c0:b1:21:76:28:
25:85:14:ce:4d:cb:9a:4b:0b:a5:cd:0b:a0:bb:55:
94:de:cc:82:7e:d6:05:b9:74:bd:36:27:c1:61:c2:
5f:0c:82:c5:52:37:9b:f0:e4:5e:2e:a5:b2:77:e7:
a7:ca:e9:b1:45:c4:b7:88:df:78:a1:46:d4:4b:23:
fc:cf:c0:9e:0f:33:d8:f5:c0:15:2d:a2:4d:b0:09:
7e:70:1d:03:8a:66:64:77:9c:11:43:17:f0:80:61:
4a:fa:f1:a9:41:5c:2d:c8:11:ef:30:b4:06:9b:63:
a7:d4:d4:15:91:ed:5b:3e:23:23:b5:d2:d4:ec:a1:
f1:a1:81:1f:5c:fa:9d:f3:5c:2e:60:80:a1:cf:f8:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:17:BF:00:40:BC:55:FD:FF:42:22:9B:B1:FE:4F:12:57:E1:EE:B3
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:aa:f0:9e:ee:93:72:7c:f9:bc:6a:57:50:65:e6:47:59:df:
4b:73:5d:f9:e8:d3:d1:1f:2e:6f:c2:01:e8:e7:74:4a:f6:aa:
5d:68:19:72:36:f7:6f:e6:9e:69:fa:c6:73:72:b5:b3:1e:14:
ea:77:23:7b:13:77:14:94:08:04:70:38:7f:24:a9:80:10:28:
3b:dc:ac:29:ec:a5:68:e1:46:2e:ae:df:7b:ab:76:f5:12:35:
64:b8:f1:e7:01:5e:34:73:a1:93:56:aa:50:fe:8c:8d:0b:f7:
6b:d9:93:96:30:af:50:6d:05:99:3f:05:7a:00:f7:84:f6:18:
05:26:45:45:4f:c5:58:fe:61:4c:2a:9a:e4:13:d2:70:15:67:
69:b2:0f:29:37:3c:cf:e3:63:80:67:d0:43:7f:ea:9b:ce:95:
8d:b7:c8:f4:5c:ed:9b:2c:02:f2:3d:70:59:72:67:ce:39:56:
56:a7:1a:d5:c0:81:9e:d8:8b:00:5e:98:9c:4f:2a:64:d7:27:
65:7b:ea:41:ca:d4:a5:ed:9f:71:36:8a:32:e9:a1:15:be:75:
19:f1:43:ff:3a:23:8c:84:98:54:50:6e:82:a9:fc:36:d8:2c:
cb:6b:0b:1c:10:2f:3e:d5:b4:84:28:da:db:a6:ca:ec:e4:9e:
82:6b:b1:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u5+3Tdtuf29EAIubBQwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZWM1OGEwMDI0OTVkMDNhZDVkOWQxMWRkMTQyMWYxOTUx
Mjg1MjQwHhcNMjUwMTMxMDUwMDQ1WhcNMjUwMjAxMDUwMDQ1WjAzMTEwLwYDVQQD
EyhhMzE3YmYwMDQwYmM1NWZkZmY0MjIyOWJiMWZlNGYxMjU3ZTFlZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshiXiU+5FVZEMFa5YYMRS1E0lEGZ
20ccjDMJ/tiwf2BnTABK9ZeKYJ2UZVQYyigR38VyjpA6JnF8EQPlcz5NCnDf2vpF
bUZpu6wXtRGM1E7fHu7f53ysr/AS3WzCrkLy9Y8g7RGDFqsisLBHqQ2YfI9ewLEh
diglhRTOTcuaSwulzQugu1WU3syCftYFuXS9NifBYcJfDILFUjeb8OReLqWyd+en
yumxRcS3iN94oUbUSyP8z8CeDzPY9cAVLaJNsAl+cB0DimZkd5wRQxfwgGFK+vGp
QVwtyBHvMLQGm2On1NQVke1bPiMjtdLU7KHxoYEfXPqd81wuYIChz/jRNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMXvwBAvFX9/0Iim7H+TxJX4e6zMB8GA1UdIwQY
MBaAFK3sWKACSV0DrV2dEd0UIfGVEoUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgt
NzQ1ZTUwMGQ4ZmNmLzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgtNzQ1ZTUwMGQ4ZmNm
LzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKrwnu6T
cnz5vGpXUGXmR1nfS3Nd+ejT0R8ub8IB6Od0SvaqXWgZcjb3b+aeafrGc3K1sx4U
6ncjexN3FJQIBHA4fySpgBAoO9ysKeylaOFGLq7fe6t29RI1ZLjx5wFeNHOhk1aq
UP6MjQv3a9mTljCvUG0FmT8FegD3hPYYBSZFRU/FWP5hTCqa5BPScBVnabIPKTc8
z+NjgGfQQ3/qm86VjbfI9FztmywC8j1wWXJnzjlWVqca1cCBntiLAF6YnE8qZNcn
ZXvqQcrUpe2fcTaKMumhFb51GfFD/zojjISYVFBugqn8Ntgsy2sLHBAvPtW0hCja
26bK7OSegmuxjA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:39 2025 by rpki-client on console-fra.rpki-client.org