Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
File: _JfnqMJOB2HT5dydVjmLxH0m08A.mft (raw, json)
Hash identifier: eJM2g8ch9be/l3A3r/zCoCiFChJDQo3RsSRK3TJbq8o=
Subject key identifier: 98:90:34:F0:87:5F:25:16:62:4A:F4:B5:6F:22:04:6D:F4:17:31:60
Authority key identifier: FC:97:E7:A8:C2:4E:07:61:D3:E5:DC:9D:56:39:8B:C4:7D:26:D3:C0
Certificate issuer: /CN=fc97e7a8c24e0761d3e5dc9d56398bc47d26d3c0
Certificate serial: 0194BB9713E2349D20A7701BB898D8938122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
Manifest number: 0357
Signing time: Fri 31 Jan 2025 09:00:27 +0000
Manifest this update: Fri 31 Jan 2025 09:00:27 +0000
Manifest next update: Sat 01 Feb 2025 09:00:27 +0000
Files and hashes: 1: _JfnqMJOB2HT5dydVjmLxH0m08A.crl (hash: 1vfoMXH70hK9dLXQfRntOtIdkKih6MhIbvSyYbHC0vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:13:e2:34:9d:20:a7:70:1b:b8:98:d8:93:81:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc97e7a8c24e0761d3e5dc9d56398bc47d26d3c0
Validity
Not Before: Jan 31 09:00:27 2025 GMT
Not After : Feb 1 09:00:27 2025 GMT
Subject: CN=989034f0875f2516624af4b56f22046df4173160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:87:6b:f0:12:d1:f5:71:ae:44:91:45:79:
5c:38:52:b0:0b:5b:28:17:eb:02:85:44:e4:b7:0f:
0b:77:66:8e:55:43:9d:9f:57:43:51:25:83:f0:72:
69:76:3a:63:65:18:97:85:4a:33:2a:3f:3d:28:85:
05:da:6f:39:5c:6f:33:96:84:ea:8e:40:3a:4d:93:
d2:07:28:68:d4:23:90:22:fd:7e:42:f9:4c:ba:63:
85:52:6a:76:3c:a1:53:61:30:25:e0:23:69:07:11:
02:8f:6e:ed:6d:d9:5c:22:8a:79:24:7a:3a:96:c9:
92:8d:60:fb:44:a5:8f:2f:15:6a:af:11:a3:8c:f7:
99:55:7d:80:24:b8:72:1f:f7:65:f5:ff:f1:d1:b7:
a7:cc:b2:4c:75:d5:b1:9b:a9:79:f6:19:fb:bd:d0:
61:e2:f3:12:97:56:a4:30:85:99:51:9e:cd:37:9d:
0f:a0:84:70:c2:e1:b7:cc:8e:34:12:4f:f6:15:36:
13:01:b0:84:44:69:67:ce:76:05:97:27:6f:81:22:
cc:25:54:70:31:4d:b8:3e:3f:2c:2d:a3:d5:bd:5c:
97:e9:40:f4:35:27:18:66:7c:2b:d9:e2:d0:f1:48:
a0:31:e7:e7:78:90:72:25:24:96:9d:f8:78:c6:82:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:90:34:F0:87:5F:25:16:62:4A:F4:B5:6F:22:04:6D:F4:17:31:60
X509v3 Authority Key Identifier:
keyid:FC:97:E7:A8:C2:4E:07:61:D3:E5:DC:9D:56:39:8B:C4:7D:26:D3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:78:e6:6c:89:59:d4:e8:83:8a:fa:e6:de:e7:93:44:13:eb:
90:fa:6d:15:07:29:7c:8f:f2:49:db:47:2e:88:24:08:84:a7:
cf:f3:eb:2c:13:d4:fd:ac:21:4a:8c:df:d3:08:f9:86:8e:7f:
f5:63:5b:88:85:c9:06:f7:70:2a:e9:56:91:d0:9f:66:ec:cb:
ec:32:a2:e2:c7:f6:18:1c:b7:5b:b9:20:d7:73:73:07:d1:4a:
20:73:1f:98:90:e5:05:50:98:80:03:b4:22:f6:04:0b:c4:55:
88:6d:56:38:21:8b:f7:83:46:e5:4d:6f:1a:07:9f:a2:65:3f:
02:b8:9e:b2:47:6e:cf:82:a1:be:0d:e4:97:f0:1c:0c:9c:e3:
b7:6e:fa:35:9b:35:02:c8:03:f2:89:b7:9d:28:8b:9d:ea:26:
8e:6e:ed:dd:19:1d:8d:72:32:22:a9:9e:59:ac:ae:1b:85:31:
d8:79:19:a9:f2:26:d0:3e:0e:50:07:53:a6:b0:5e:46:3f:e0:
5e:7e:59:e7:a9:4f:c3:22:7b:d3:62:d9:43:b9:a8:ee:87:82:
9a:ff:39:29:92:82:d3:d7:8e:c3:02:78:76:6a:48:3c:40:0d:
0d:b4:26:5b:d0:b2:e8:91:71:7e:bd:29:4f:cf:32:03:9c:d1:
db:2e:ba:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lxPiNJ0gp3AbuJjYk4EiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTdlN2E4YzI0ZTA3NjFkM2U1ZGM5ZDU2Mzk4YmM0N2Qy
NmQzYzAwHhcNMjUwMTMxMDkwMDI3WhcNMjUwMjAxMDkwMDI3WjAzMTEwLwYDVQQD
Eyg5ODkwMzRmMDg3NWYyNTE2NjI0YWY0YjU2ZjIyMDQ2ZGY0MTczMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvyHa/AS0fVxrkSRRXlcOFKwC1so
F+sChUTktw8Ld2aOVUOdn1dDUSWD8HJpdjpjZRiXhUozKj89KIUF2m85XG8zloTq
jkA6TZPSByho1COQIv1+QvlMumOFUmp2PKFTYTAl4CNpBxECj27tbdlcIop5JHo6
lsmSjWD7RKWPLxVqrxGjjPeZVX2AJLhyH/dl9f/x0benzLJMddWxm6l59hn7vdBh
4vMSl1akMIWZUZ7NN50PoIRwwuG3zI40Ek/2FTYTAbCERGlnznYFlydvgSLMJVRw
MU24Pj8sLaPVvVyX6UD0NScYZnwr2eLQ8UigMefneJByJSSWnfh4xoK1PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiQNPCHXyUWYkr0tW8iBG30FzFgMB8GA1UdIwQY
MBaAFPyX56jCTgdh0+XcnVY5i8R9JtPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pmbnFNSk9CMkhUNWR5ZFZqbUx4SDBtMDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lMzUyOWYtMzc5NC00Yjk0LTkzMTct
M2E1OWM3MGMwYTk5LzEvX0pmbnFNSk9CMkhUNWR5ZFZqbUx4SDBtMDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lMzUyOWYtMzc5NC00Yjk0LTkzMTctM2E1OWM3MGMwYTk5
LzEvX0pmbnFNSk9CMkhUNWR5ZFZqbUx4SDBtMDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3jmbIlZ
1OiDivrm3ueTRBPrkPptFQcpfI/ySdtHLogkCISnz/PrLBPU/awhSozf0wj5ho5/
9WNbiIXJBvdwKulWkdCfZuzL7DKi4sf2GBy3W7kg13NzB9FKIHMfmJDlBVCYgAO0
IvYEC8RViG1WOCGL94NG5U1vGgefomU/Arieskduz4Khvg3kl/AcDJzjt276NZs1
AsgD8om3nSiLneomjm7t3RkdjXIyIqmeWayuG4Ux2HkZqfIm0D4OUAdTprBeRj/g
Xn5Z56lPwyJ702LZQ7mo7oeCmv85KZKC09eOwwJ4dmpIPEANDbQmW9Cy6JFxfr0p
T88yA5zR2y66kA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:57 2025 by rpki-client on console-fra.rpki-client.org