Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: +NBbRVCFZFIt5/ict2cD0oznK7P+ry8ppkMyNgEwofk=
Subject key identifier: A6:4D:E4:EB:AA:E1:3B:2E:2D:4D:8E:C8:25:6E:2B:3D:69:C5:EE:9D
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 0194BB295583B041DF4BC41E335DEB682539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 032A
Signing time: Fri 31 Jan 2025 07:00:35 +0000
Manifest this update: Fri 31 Jan 2025 07:00:35 +0000
Manifest next update: Sat 01 Feb 2025 07:00:35 +0000
Files and hashes: 1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: G2OdG5N7zyHcVMs6wmdPGCDOKKNw8duIyIlzILYNfgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:55:83:b0:41:df:4b:c4:1e:33:5d:eb:68:25:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: Jan 31 07:00:35 2025 GMT
Not After : Feb 1 07:00:35 2025 GMT
Subject: CN=a64de4ebaae13b2e2d4d8ec8256e2b3d69c5ee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:7a:bb:f7:c1:67:d1:22:05:2c:6b:12:2e:
8a:04:8a:b4:51:03:b2:75:4b:08:39:ad:12:07:06:
27:59:95:e2:d2:a1:a4:63:24:98:a6:4b:55:ab:60:
31:fb:c7:7d:88:92:31:b7:34:54:52:6d:15:e9:db:
ef:48:f0:9a:bd:7c:c9:b0:ca:d9:86:ea:80:a8:67:
2a:15:a4:4b:92:00:9a:5d:ba:5a:86:3b:12:a5:75:
80:0d:49:93:30:5d:e5:75:de:ad:78:9b:58:88:ea:
cc:17:98:3e:3c:5f:1b:24:a2:4c:bc:f6:ff:d5:2e:
ec:74:41:f2:85:a8:f1:33:52:c8:41:0c:44:94:ab:
0b:0e:22:24:3c:4c:12:4f:21:aa:ce:4f:19:ac:e3:
9c:c3:79:9a:34:15:c4:11:e6:ff:2e:a0:19:fe:39:
9c:a7:83:1f:a0:fb:ba:78:bf:31:2b:82:1a:ae:eb:
4a:9b:00:2e:3b:6c:3b:2a:1c:c6:8a:e0:ad:af:b3:
61:0a:20:b8:78:0e:42:dd:e6:94:6f:35:6c:34:0d:
87:03:06:fc:86:16:6a:66:35:d9:79:eb:e9:13:b1:
37:48:fa:fb:0e:e6:26:e6:7e:00:47:7b:49:65:62:
39:6d:35:ab:9d:68:48:15:56:33:dd:d4:5a:8d:f4:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4D:E4:EB:AA:E1:3B:2E:2D:4D:8E:C8:25:6E:2B:3D:69:C5:EE:9D
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ce:56:a9:4e:05:52:41:65:d5:72:fb:54:a1:77:1f:e6:3c:
9f:11:74:89:15:e6:70:75:55:38:ce:06:b6:5c:0b:57:86:83:
4d:68:46:4b:03:df:2f:75:78:db:b8:0c:2f:c3:a2:cb:8c:1b:
e3:51:40:b7:5f:55:f2:a8:a1:b8:7b:8d:3c:7c:9d:ab:a5:be:
a7:0e:9d:41:06:c4:7c:ff:e6:a1:f0:a8:a6:ac:46:41:37:29:
51:97:b7:a6:72:32:aa:28:69:c0:9f:10:33:de:db:2c:ef:c7:
4d:69:17:e4:9f:33:19:a3:9e:d5:74:84:c1:6d:fb:56:0c:fc:
89:66:c5:c3:94:6a:b8:06:ae:d6:10:76:35:b2:86:3f:51:cc:
b9:e0:e4:99:b9:cc:19:cf:78:01:f0:2f:8f:30:ab:e0:63:9a:
75:6b:2a:f7:e6:f0:9f:b1:5f:41:44:9d:e4:3a:d4:43:bc:d9:
30:c9:1a:38:74:29:5b:7e:b6:b1:b9:a0:7e:54:f1:c0:54:9f:
ae:11:5a:8e:f2:55:ea:b1:03:0a:7d:42:5a:75:c2:dd:3c:16:
c6:fd:4f:f9:c6:34:28:64:0f:b2:80:0a:2e:c0:c5:7d:10:b7:
5f:ca:f9:72:f7:04:33:15:c0:e1:43:a3:5c:21:f5:57:c7:5b:
2e:44:8c:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KVWDsEHfS8QeM13raCU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjBmOTEwMmRiMmViZTFhZjFkMDc1MTY4NDQzODZhNzk2
M2VmNWMwHhcNMjUwMTMxMDcwMDM1WhcNMjUwMjAxMDcwMDM1WjAzMTEwLwYDVQQD
EyhhNjRkZTRlYmFhZTEzYjJlMmQ0ZDhlYzgyNTZlMmIzZDY5YzVlZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim16u/fBZ9EiBSxrEi6KBIq0UQOy
dUsIOa0SBwYnWZXi0qGkYySYpktVq2Ax+8d9iJIxtzRUUm0V6dvvSPCavXzJsMrZ
huqAqGcqFaRLkgCaXbpahjsSpXWADUmTMF3ldd6teJtYiOrMF5g+PF8bJKJMvPb/
1S7sdEHyhajxM1LIQQxElKsLDiIkPEwSTyGqzk8ZrOOcw3maNBXEEeb/LqAZ/jmc
p4MfoPu6eL8xK4IarutKmwAuO2w7KhzGiuCtr7NhCiC4eA5C3eaUbzVsNA2HAwb8
hhZqZjXZeevpE7E3SPr7DuYm5n4AR3tJZWI5bTWrnWhIFVYz3dRajfSeHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZN5Ouq4TsuLU2OyCVuKz1pxe6dMB8GA1UdIwQY
MBaAFLvw+RAtsuvhrx0HUWhEOGp5Y+9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMt
MDcyNzM5NjgzMzQ2LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMtMDcyNzM5NjgzMzQ2
LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXM5WqU4F
UkFl1XL7VKF3H+Y8nxF0iRXmcHVVOM4GtlwLV4aDTWhGSwPfL3V427gML8Oiy4wb
41FAt19V8qihuHuNPHydq6W+pw6dQQbEfP/mofCopqxGQTcpUZe3pnIyqihpwJ8Q
M97bLO/HTWkX5J8zGaOe1XSEwW37Vgz8iWbFw5RquAau1hB2NbKGP1HMueDkmbnM
Gc94AfAvjzCr4GOadWsq9+bwn7FfQUSd5DrUQ7zZMMkaOHQpW362sbmgflTxwFSf
rhFajvJV6rEDCn1CWnXC3TwWxv1P+cY0KGQPsoAKLsDFfRC3X8r5cvcEMxXA4UOj
XCH1V8dbLkSMeA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:41 2025 by rpki-client on console-fra.rpki-client.org