Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json)
Hash identifier: JB+05SFnw7gt00B7wFP+k1PCWQSNR+5vexHihohGXGs=
Subject key identifier: F8:2D:6F:A9:0E:AA:3B:94:95:67:C1:0E:E8:2C:50:D7:7C:EF:3F:B7
Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1
Certificate serial: 0194BA841BEEFEA47154E93B244F9C3B1C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
Manifest number: 12AB
Signing time: Fri 31 Jan 2025 04:00:07 +0000
Manifest this update: Fri 31 Jan 2025 04:00:07 +0000
Manifest next update: Sat 01 Feb 2025 04:00:07 +0000
Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: TYS0c3MdiIJ4o8OWlhjvp/UaIm4n6aSAzrmWYmR+jFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:1b:ee:fe:a4:71:54:e9:3b:24:4f:9c:3b:1c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1
Validity
Not Before: Jan 31 04:00:07 2025 GMT
Not After : Feb 1 04:00:07 2025 GMT
Subject: CN=f82d6fa90eaa3b949567c10ee82c50d77cef3fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:fe:ab:b2:d4:01:5d:e0:5e:f1:13:68:66:
05:16:0c:7a:1c:d0:29:26:f5:a1:27:87:62:29:67:
0f:dd:8d:7d:0f:b9:aa:77:5b:41:b6:dc:26:1c:64:
f4:33:61:b3:39:61:d3:85:33:d9:24:9b:bf:c0:48:
7d:f1:34:3e:87:f5:ca:41:a8:2f:0d:95:2d:a1:a8:
7f:7f:6a:8e:3f:1f:3a:62:bc:1a:19:ae:97:ad:e4:
eb:9a:7f:3c:2e:a2:ca:39:38:69:43:9a:1e:5a:70:
77:db:7e:7d:bb:77:87:d2:ee:47:5f:d1:88:c4:8b:
ed:1f:53:b2:11:25:58:d8:4c:70:4d:94:e1:11:61:
ad:af:2f:4d:84:8a:9d:7f:ec:85:a8:7b:38:a4:99:
2d:e3:2b:52:be:1e:91:11:6a:55:eb:05:4a:16:45:
6b:64:e8:fa:5f:a0:c5:9a:b9:d5:8f:df:40:df:9e:
c1:50:fe:1a:50:b8:2f:5e:11:02:56:6f:03:89:fc:
78:e0:69:41:d7:4d:c9:83:e7:e2:d9:51:3c:74:25:
8b:c6:c7:58:18:e1:d5:fe:ad:53:d9:19:95:77:9e:
fb:4a:25:1d:4d:a4:ff:87:05:58:08:ee:c8:e7:48:
8f:e7:43:ae:f3:44:4d:6d:7c:e0:cf:bb:fd:61:66:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2D:6F:A9:0E:AA:3B:94:95:67:C1:0E:E8:2C:50:D7:7C:EF:3F:B7
X509v3 Authority Key Identifier:
keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fd:87:cb:00:53:de:8d:92:89:51:ec:32:37:5d:e7:d3:7f:
f3:f5:b7:b6:c7:c2:66:65:97:78:63:36:4b:26:5d:67:27:c5:
2e:aa:39:1e:61:a8:ed:6c:9b:32:c1:e4:36:34:54:f2:bc:b2:
2b:0f:05:e4:f0:41:1a:55:47:ac:fc:13:e4:f0:6d:c3:19:88:
36:4e:92:09:e0:a4:41:a2:06:2b:91:37:c8:a5:2c:09:45:9d:
4f:fa:3c:c0:f7:c2:f6:0c:fe:86:fe:4a:0f:23:fb:c0:f7:6a:
39:a5:11:4d:5b:b9:bc:38:c5:72:f6:d2:c4:4e:b0:60:ad:b0:
4e:b4:75:fb:46:29:6c:a0:d8:db:d1:29:97:78:0d:ad:f0:42:
8f:12:5d:0c:75:70:c8:ba:65:72:83:0f:ff:f7:b4:32:d4:d4:
cb:9b:71:50:92:ae:b7:54:9e:b7:38:55:29:1a:96:c0:a2:25:
93:74:42:92:51:e3:83:2b:8e:77:41:62:8e:e2:f3:64:37:61:
65:18:3d:dc:2c:b1:65:4c:17:5c:dd:ae:01:b5:f7:8a:d1:ff:
af:0c:3a:2f:93:55:b7:e9:55:75:3e:74:e9:c6:33:ae:c3:6d:
d2:2e:aa:a7:43:59:7a:f7:a8:ae:10:79:81:ff:ac:8a:5b:c4:
b9:c6:57:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hBvu/qRxVOk7JE+cOxxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzgzNmUzOTZiYzUwNjQ0MzYwNmI5ZmQ3MzM3YTkyMGU3
MWRlZDEwHhcNMjUwMTMxMDQwMDA3WhcNMjUwMjAxMDQwMDA3WjAzMTEwLwYDVQQD
EyhmODJkNmZhOTBlYWEzYjk0OTU2N2MxMGVlODJjNTBkNzdjZWYzZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt27+q7LUAV3gXvETaGYFFgx6HNAp
JvWhJ4diKWcP3Y19D7mqd1tBttwmHGT0M2GzOWHThTPZJJu/wEh98TQ+h/XKQagv
DZUtoah/f2qOPx86YrwaGa6XreTrmn88LqLKOThpQ5oeWnB32359u3eH0u5HX9GI
xIvtH1OyESVY2ExwTZThEWGtry9NhIqdf+yFqHs4pJkt4ytSvh6REWpV6wVKFkVr
ZOj6X6DFmrnVj99A357BUP4aULgvXhECVm8Difx44GlB103Jg+fi2VE8dCWLxsdY
GOHV/q1T2RmVd577SiUdTaT/hwVYCO7I50iP50Ou80RNbXzgz7v9YWa9NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgtb6kOqjuUlWfBDugsUNd87z+3MB8GA1UdIwQY
MBaAFGw4NuOWvFBkQ2Brn9czepIOcd7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMzk5NGUtMGIxMC00MzgzLWIzNGMt
ZWI2YjEzYzVlMjY4LzEvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMzk5NGUtMGIxMC00MzgzLWIzNGMtZWI2YjEzYzVlMjY4
LzEvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXv2HywBT
3o2SiVHsMjdd59N/8/W3tsfCZmWXeGM2SyZdZyfFLqo5HmGo7WybMsHkNjRU8ryy
Kw8F5PBBGlVHrPwT5PBtwxmINk6SCeCkQaIGK5E3yKUsCUWdT/o8wPfC9gz+hv5K
DyP7wPdqOaURTVu5vDjFcvbSxE6wYK2wTrR1+0YpbKDY29Epl3gNrfBCjxJdDHVw
yLplcoMP//e0MtTUy5txUJKut1SetzhVKRqWwKIlk3RCklHjgyuOd0FijuLzZDdh
ZRg93CyxZUwXXN2uAbX3itH/rww6L5NVt+lVdT506cYzrsNt0i6qp0NZeveorhB5
gf+silvEucZXrg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:56 2025 by rpki-client on console-fra.rpki-client.org