Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier: jEgFaPHLSePx1x/QljrWxSSjxhyTnaMgLUD3WWSmQo0=
Subject key identifier: 9E:A1:18:6C:4A:CF:9B:67:59:49:50:47:87:DC:E2:3B:C5:7F:1B:E7
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial: 0194BB29441D188376FA289BABED0049398B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number: 06E9
Signing time: Fri 31 Jan 2025 07:00:31 +0000
Manifest this update: Fri 31 Jan 2025 07:00:31 +0000
Manifest next update: Sat 01 Feb 2025 07:00:31 +0000
Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: zJuLR9oZmk9PtapqiHPKPp+5RE4yqG/3pBXv5o3BU9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:44:1d:18:83:76:fa:28:9b:ab:ed:00:49:39:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Validity
Not Before: Jan 31 07:00:31 2025 GMT
Not After : Feb 1 07:00:31 2025 GMT
Subject: CN=9ea1186c4acf9b675949504787dce23bc57f1be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:6a:a8:b9:76:a6:9b:28:dc:1d:78:8c:27:
12:db:81:57:be:e4:37:3f:32:b0:b4:ef:31:3c:4c:
19:08:f2:c7:12:f8:7e:2b:de:be:aa:23:f0:5c:b3:
d1:de:91:f0:34:d7:93:89:f5:bf:d1:ad:ee:d7:4d:
42:62:c4:87:9e:28:d1:ce:b4:5b:2b:cf:60:bd:b4:
98:54:5c:aa:da:e7:25:c8:ae:3b:f7:9e:47:99:0d:
fe:d3:1e:c8:22:f0:61:e3:0f:a6:6a:ca:d7:df:bc:
76:f0:8f:f5:a7:f7:ad:c8:18:e2:05:0a:0e:ff:da:
62:77:b1:1a:f6:62:48:7c:d6:cf:6b:81:6c:08:ff:
c5:12:ba:af:17:c5:58:6b:6d:d5:0c:df:07:1b:3c:
00:de:17:f6:3a:b6:40:0d:f2:9c:96:52:5a:8c:fa:
cf:5b:4d:76:f3:2b:b0:67:b6:d3:a9:2b:89:51:46:
6f:91:d6:e9:7e:2d:b7:37:b8:b1:db:29:f2:a2:4b:
fe:17:5a:04:18:bb:c5:ee:e2:9f:59:47:a5:34:5b:
28:3c:d8:32:67:31:19:f2:88:a9:0b:13:7a:7d:db:
14:50:7f:92:66:9d:9b:bf:29:00:c5:bb:55:59:4c:
0b:f6:d7:d2:6a:be:7b:21:56:b6:a2:48:7e:55:54:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:18:6C:4A:CF:9B:67:59:49:50:47:87:DC:E2:3B:C5:7F:1B:E7
X509v3 Authority Key Identifier:
keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d5:07:b4:fb:44:22:3f:72:68:c7:19:f6:d5:27:09:4f:c0:
c7:f9:fb:6a:56:53:3d:37:6f:15:a0:52:97:20:07:cd:40:17:
e3:1f:f9:90:79:b7:01:b6:8c:e0:d8:a3:c0:77:d0:09:87:3d:
f9:27:ac:f8:37:a6:2a:8d:4f:17:5a:dd:d0:99:07:e3:05:68:
47:72:b4:85:a6:f7:be:f2:a3:b1:b8:11:bf:38:b3:0f:9a:d6:
d0:0e:1d:97:35:11:0f:a2:bf:7f:59:c5:fe:09:71:6a:fb:3a:
b1:a8:04:64:8f:e5:13:55:c2:14:29:7c:48:dc:08:c8:16:c6:
d2:64:50:5c:b5:7f:d8:09:d0:67:76:8f:58:d8:83:4b:a2:20:
d7:40:be:93:12:50:d7:5d:c1:a1:8b:4e:80:ee:fc:df:d3:df:
e3:6b:ea:a6:84:9f:b0:e5:09:a9:b7:48:3e:03:40:dc:c6:13:
9d:24:9e:57:b2:8c:5d:c4:eb:31:1a:c6:a0:f0:cb:d5:6d:fb:
e6:b7:26:90:74:14:62:a0:2c:79:33:cd:a7:ae:a2:c9:37:85:
d9:ab:31:ad:83:e4:d8:63:c2:ce:b8:6f:cf:47:f4:da:b4:6d:
68:ab:d4:64:a9:2d:42:82:e4:b8:5a:8c:c4:22:35:21:fa:56:
bc:fb:68:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KUQdGIN2+iibq+0ASTmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjlkMzUwNmI3N2MxYWVmNWIxMzcwZGFhMmJiNGJjZTM4
MDZjOTQwHhcNMjUwMTMxMDcwMDMxWhcNMjUwMjAxMDcwMDMxWjAzMTEwLwYDVQQD
Eyg5ZWExMTg2YzRhY2Y5YjY3NTk0OTUwNDc4N2RjZTIzYmM1N2YxYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVdqqLl2ppso3B14jCcS24FXvuQ3
PzKwtO8xPEwZCPLHEvh+K96+qiPwXLPR3pHwNNeTifW/0a3u101CYsSHnijRzrRb
K89gvbSYVFyq2uclyK47955HmQ3+0x7IIvBh4w+masrX37x28I/1p/etyBjiBQoO
/9pid7Ea9mJIfNbPa4FsCP/FErqvF8VYa23VDN8HGzwA3hf2OrZADfKcllJajPrP
W0128yuwZ7bTqSuJUUZvkdbpfi23N7ix2ynyokv+F1oEGLvF7uKfWUelNFsoPNgy
ZzEZ8oipCxN6fdsUUH+SZp2bvykAxbtVWUwL9tfSar57IVa2okh+VVRkzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6hGGxKz5tnWUlQR4fc4jvFfxvnMB8GA1UdIwQY
MBaAFJRp01Brd8Gu9bE3DaortLzjgGyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kYjQ4YTQtOTQyYi00NGQxLWIxYmEt
NzExNmEzMGRhOTQ1LzEvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kYjQ4YTQtOTQyYi00NGQxLWIxYmEtNzExNmEzMGRhOTQ1
LzEvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9UHtPtE
Ij9yaMcZ9tUnCU/Ax/n7alZTPTdvFaBSlyAHzUAX4x/5kHm3AbaM4NijwHfQCYc9
+Ses+DemKo1PF1rd0JkH4wVoR3K0hab3vvKjsbgRvzizD5rW0A4dlzURD6K/f1nF
/glxavs6sagEZI/lE1XCFCl8SNwIyBbG0mRQXLV/2AnQZ3aPWNiDS6Ig10C+kxJQ
113BoYtOgO7839Pf42vqpoSfsOUJqbdIPgNA3MYTnSSeV7KMXcTrMRrGoPDL1W37
5rcmkHQUYqAseTPNp66iyTeF2asxrYPk2GPCzrhvz0f02rRtaKvUZKktQoLkuFqM
xCI1IfpWvPtoKw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:04 2025 by rpki-client on console-fra.rpki-client.org