Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json)
Hash identifier: P2tua3x6BEGInjIvQc2/0pVw1jWQSQ9ktQs/y+1oP40=
Subject key identifier: 66:68:76:0F:66:6C:BD:26:53:08:37:14:59:5D:B7:06:E4:8A:8B:75
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial: 0194BABB5237CA20A67B5A89A1F22951BF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
Manifest number: 11AF
Signing time: Fri 31 Jan 2025 05:00:25 +0000
Manifest this update: Fri 31 Jan 2025 05:00:25 +0000
Manifest next update: Sat 01 Feb 2025 05:00:25 +0000
Files and hashes: 1: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: 1YK9F+ZlEhVitSNpIVXwHrePbn14eB/bFnUpV5wiuIk=)
2: y0QaOJzLaOBuL0b8gdep3z45T1Q.roa (hash: XfEwQqQh0zUkbjw/Ka1eAvvyK361BK9TcqMDxt70nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:52:37:ca:20:a6:7b:5a:89:a1:f2:29:51:bf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Validity
Not Before: Jan 31 05:00:25 2025 GMT
Not After : Feb 1 05:00:25 2025 GMT
Subject: CN=6668760f666cbd2653083714595db706e48a8b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:0b:b0:37:4c:32:dd:f0:2e:95:a5:6a:64:
5b:47:f5:3a:98:59:bd:89:41:f9:c2:31:1d:a8:dd:
df:84:ae:50:56:ce:da:9d:33:df:3f:75:bb:0f:fd:
d6:e7:4a:a2:bd:0b:51:63:f0:71:97:42:0f:59:fa:
9c:a9:19:79:55:ff:88:0a:ec:1b:19:e8:03:21:f8:
0c:af:a3:1a:f2:ce:bd:ff:3b:62:8a:44:ef:69:bb:
e7:56:d1:39:44:3f:69:e3:e0:f1:dd:11:90:34:5d:
ef:9f:38:c2:04:70:4c:63:7c:81:87:3b:c6:0a:02:
be:29:53:bc:44:2e:fc:e3:a3:4d:f8:5c:5a:74:26:
2c:f4:ba:7c:60:0b:b8:88:b2:c2:04:66:b2:09:02:
16:50:04:e0:fd:12:4b:d2:c2:7d:e2:72:f5:d4:c1:
04:b9:00:5f:1e:76:35:74:1f:df:b1:e8:e9:53:ae:
df:c4:ba:c2:74:62:5e:10:fa:4d:69:d5:75:ed:0d:
72:a1:fa:a5:a4:c3:57:8a:2f:23:84:bb:62:56:a8:
8c:ef:de:f7:3a:6e:23:48:ef:8f:1d:9f:bc:be:60:
89:e7:31:a9:79:9a:28:f3:06:b6:e7:c1:5d:0f:e2:
83:d9:71:a0:de:98:3b:17:fe:4d:3d:6a:aa:d7:4a:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:68:76:0F:66:6C:BD:26:53:08:37:14:59:5D:B7:06:E4:8A:8B:75
X509v3 Authority Key Identifier:
keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1b:2b:bc:db:91:b7:c6:85:ed:ea:92:d1:44:e2:cd:46:db:
cf:b1:e3:bb:06:99:8e:4b:6d:1e:8a:39:54:bf:b5:59:93:65:
b5:f3:66:7a:38:fe:e3:3f:70:ed:72:c2:98:c6:26:ee:5e:c6:
08:dc:b6:98:cd:f8:28:9b:57:ba:fc:ff:c6:d7:eb:a9:33:a1:
af:8c:c0:f7:69:76:e3:7b:27:1a:5a:2a:86:62:ca:e2:a5:91:
72:37:11:fc:a9:ed:7b:22:d1:50:15:08:dd:e5:cc:de:1c:4c:
43:11:00:a9:5a:1c:75:70:e4:17:dc:5e:44:61:43:15:a4:7b:
90:b2:fe:c1:25:1d:b1:12:a5:31:84:a9:ea:29:97:fe:d0:f7:
5d:3b:c7:52:a9:4b:31:40:28:a3:48:c8:d0:38:e6:4e:9b:4c:
8c:32:2f:29:1d:f7:91:a7:af:5b:82:11:f6:c2:50:dd:c5:c8:
87:5b:6a:f7:bf:1e:dd:8f:93:15:57:08:c8:42:d5:c8:85:05:
69:2b:62:1b:c2:16:8c:6b:68:50:10:ad:f0:f9:92:0f:d1:24:
eb:c3:65:7f:d1:b9:6b:de:61:ec:13:5d:2b:da:19:51:3f:12:
12:1a:bf:cc:b3:79:23:10:51:e8:9a:69:14:48:67:74:c4:47:
66:ae:fc:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u1I3yiCme1qJofIpUb8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YjUzYjg2ZWIxZjE5ZDBhZTdjMDBiMTMyZTk3YzAzYTk0
YmZmNjEwHhcNMjUwMTMxMDUwMDI1WhcNMjUwMjAxMDUwMDI1WjAzMTEwLwYDVQQD
Eyg2NjY4NzYwZjY2NmNiZDI2NTMwODM3MTQ1OTVkYjcwNmU0OGE4Yjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq28LsDdMMt3wLpWlamRbR/U6mFm9
iUH5wjEdqN3fhK5QVs7anTPfP3W7D/3W50qivQtRY/Bxl0IPWfqcqRl5Vf+ICuwb
GegDIfgMr6Ma8s69/ztiikTvabvnVtE5RD9p4+Dx3RGQNF3vnzjCBHBMY3yBhzvG
CgK+KVO8RC7846NN+FxadCYs9Lp8YAu4iLLCBGayCQIWUATg/RJL0sJ94nL11MEE
uQBfHnY1dB/fsejpU67fxLrCdGJeEPpNadV17Q1yofqlpMNXii8jhLtiVqiM7973
Om4jSO+PHZ+8vmCJ5zGpeZoo8wa258FdD+KD2XGg3pg7F/5NPWqq10qz3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZodg9mbL0mUwg3FFldtwbkiot1MB8GA1UdIwQY
MBaAFJi1O4brHxnQrnwAsTLpfAOpS/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUt
Mjc1YzVmNzMxYjQ0LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUtMjc1YzVmNzMxYjQ0
LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRsrvNuR
t8aF7eqS0UTizUbbz7HjuwaZjkttHoo5VL+1WZNltfNmejj+4z9w7XLCmMYm7l7G
CNy2mM34KJtXuvz/xtfrqTOhr4zA92l243snGloqhmLK4qWRcjcR/KnteyLRUBUI
3eXM3hxMQxEAqVocdXDkF9xeRGFDFaR7kLL+wSUdsRKlMYSp6imX/tD3XTvHUqlL
MUAoo0jI0DjmTptMjDIvKR33kaevW4IR9sJQ3cXIh1tq978e3Y+TFVcIyELVyIUF
aStiG8IWjGtoUBCt8PmSD9Ek68Nlf9G5a95h7BNdK9oZUT8SEhq/zLN5IxBR6Jpp
FEhndMRHZq78CA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:48 2025 by rpki-client on console-fra.rpki-client.org