Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier: jEE9VAmkTF2si4SG24WzJQ4OgDbUaPEvz779D3o3p0c=
Subject key identifier: 13:45:AC:EC:A2:E8:5D:70:3C:0F:9A:3B:EB:0E:4C:A2:A9:AB:5A:DA
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial: 0194BAF236EB460F0BAD35EF9C6EB0E16130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number: 0375
Signing time: Fri 31 Jan 2025 06:00:23 +0000
Manifest this update: Fri 31 Jan 2025 06:00:23 +0000
Manifest next update: Sat 01 Feb 2025 06:00:23 +0000
Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: jH/EFt8YmH+gSE9fKtcN01o++oCN5fy1VosjJwvyCKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:36:eb:46:0f:0b:ad:35:ef:9c:6e:b0:e1:61:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
Validity
Not Before: Jan 31 06:00:23 2025 GMT
Not After : Feb 1 06:00:23 2025 GMT
Subject: CN=1345aceca2e85d703c0f9a3beb0e4ca2a9ab5ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:9a:55:ed:0a:63:dd:62:f7:9d:42:72:29:
47:c9:9d:9a:53:cd:13:a2:15:54:4e:30:77:d4:f3:
91:22:17:c9:5f:cb:d6:87:5b:84:96:b7:d7:d1:9e:
bc:d6:a3:0c:55:dd:51:3a:02:ab:57:5a:1c:2e:96:
c3:d2:21:b4:6a:bd:62:69:25:d4:fb:79:05:10:2a:
d0:39:8a:eb:38:77:71:19:52:29:f0:e1:af:02:1f:
18:aa:9e:8b:f2:a9:aa:42:2e:3a:35:56:1f:b0:0e:
dc:bc:b7:bc:b7:dc:af:71:64:5a:57:21:65:90:e3:
5c:c0:11:02:12:9d:48:8b:a5:df:fa:ff:d4:f8:59:
d0:d5:d7:b2:5a:ef:eb:1f:51:b6:a7:ac:c5:6d:6b:
b5:7c:70:de:18:ee:d3:d2:ef:22:35:05:7c:73:16:
e3:01:dd:23:d3:ad:90:7c:27:48:fa:fa:52:11:74:
65:99:32:fe:79:be:8b:fa:b5:62:d4:e9:89:82:2a:
2b:fc:69:66:10:dc:ad:63:6a:8c:a2:ba:c8:fe:e2:
6b:4a:6e:f4:f6:75:54:55:56:7e:49:40:83:1a:a6:
27:78:63:1a:e1:f8:44:42:f3:26:73:e2:d7:2a:29:
33:90:b0:d6:09:28:af:eb:1f:da:dc:64:bc:5c:6b:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:45:AC:EC:A2:E8:5D:70:3C:0F:9A:3B:EB:0E:4C:A2:A9:AB:5A:DA
X509v3 Authority Key Identifier:
keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:58:b5:6f:8d:a4:7f:69:35:52:a0:66:89:8b:9e:a4:ec:84:
6a:2b:f5:07:d8:29:b3:96:e3:7c:f2:36:05:e6:d4:75:de:5d:
c0:0a:84:b2:9d:13:79:b3:f2:7c:c9:bd:40:a5:ea:5f:27:54:
8c:6b:ee:da:c6:c8:b2:d7:87:f2:30:da:35:b2:bb:2d:8e:29:
9c:30:cd:ba:76:b8:6e:e5:1c:d4:a7:a6:8c:7f:20:77:30:f3:
e6:47:38:21:31:91:db:ee:22:8f:e5:af:ae:1b:6b:14:dc:b8:
10:38:9d:9c:8a:58:4f:5a:75:1a:3d:3a:3a:4d:ac:34:90:25:
17:98:63:33:d2:40:f4:74:34:40:9d:ed:99:b5:c2:15:10:a6:
c8:c3:02:5b:d2:1b:a6:fc:e5:c7:d7:b3:b8:9d:5f:cb:94:33:
72:0e:62:b8:87:ae:0d:db:34:35:6b:0e:0a:8f:5f:2a:04:32:
7c:10:82:67:c9:9e:79:81:15:1f:28:20:09:11:6f:6d:25:3e:
dc:99:c2:55:30:08:78:0e:83:83:98:fd:83:13:09:d4:8b:b9:
8b:c1:9d:53:2c:6b:2e:51:9d:db:03:97:da:3f:f1:6c:9f:3d:
bf:81:4d:1d:46:46:85:c4:ea:a4:2d:d7:02:9c:31:25:d3:af:
97:41:c8:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68jbrRg8LrTXvnG6w4WEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjE5M2U1NTYzODg2NGVkNjljZDk0N2I3NTBmMzIxNjc0
YTY0YTUwHhcNMjUwMTMxMDYwMDIzWhcNMjUwMjAxMDYwMDIzWjAzMTEwLwYDVQQD
EygxMzQ1YWNlY2EyZTg1ZDcwM2MwZjlhM2JlYjBlNGNhMmE5YWI1YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IuaVe0KY91i951CcilHyZ2aU80T
ohVUTjB31PORIhfJX8vWh1uElrfX0Z681qMMVd1ROgKrV1ocLpbD0iG0ar1iaSXU
+3kFECrQOYrrOHdxGVIp8OGvAh8Yqp6L8qmqQi46NVYfsA7cvLe8t9yvcWRaVyFl
kONcwBECEp1Ii6Xf+v/U+FnQ1deyWu/rH1G2p6zFbWu1fHDeGO7T0u8iNQV8cxbj
Ad0j062QfCdI+vpSEXRlmTL+eb6L+rVi1OmJgior/GlmENytY2qMorrI/uJrSm70
9nVUVVZ+SUCDGqYneGMa4fhEQvMmc+LXKikzkLDWCSiv6x/a3GS8XGvhXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNFrOyi6F1wPA+aO+sOTKKpq1raMB8GA1UdIwQY
MBaAFGlhk+VWOIZO1pzZR7dQ8yFnSmSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMt
N2Q0M2IzMzU3Y2Q3LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMtN2Q0M2IzMzU3Y2Q3
LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFi1b42k
f2k1UqBmiYuepOyEaiv1B9gps5bjfPI2BebUdd5dwAqEsp0TebPyfMm9QKXqXydU
jGvu2sbIsteH8jDaNbK7LY4pnDDNuna4buUc1KemjH8gdzDz5kc4ITGR2+4ij+Wv
rhtrFNy4EDidnIpYT1p1Gj06Ok2sNJAlF5hjM9JA9HQ0QJ3tmbXCFRCmyMMCW9Ib
pvzlx9ezuJ1fy5Qzcg5iuIeuDds0NWsOCo9fKgQyfBCCZ8meeYEVHyggCRFvbSU+
3JnCVTAIeA6Dg5j9gxMJ1Iu5i8GdUyxrLlGd2wOX2j/xbJ89v4FNHUZGhcTqpC3X
ApwxJdOvl0HISQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:41 2025 by rpki-client on console-fra.rpki-client.org