Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: j/gW8e6ixPmVLjYD7LHPXReEBgJDFGap9Ygn7Rottbk=
Subject key identifier: 5E:45:85:4F:CE:4C:42:E0:54:2C:5D:CA:83:D8:61:7E:E0:F9:EE:23
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 0194BB5FD894D087FE85DD3B76018DE4CA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 02F1
Signing time: Fri 31 Jan 2025 08:00:08 +0000
Manifest this update: Fri 31 Jan 2025 08:00:08 +0000
Manifest next update: Sat 01 Feb 2025 08:00:08 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: /a72XhQXc4e/uIi4KLWOlMF+lKUH3jMMJqydQvnK2j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:d8:94:d0:87:fe:85:dd:3b:76:01:8d:e4:ca:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Jan 31 08:00:08 2025 GMT
Not After : Feb 1 08:00:08 2025 GMT
Subject: CN=5e45854fce4c42e0542c5dca83d8617ee0f9ee23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:e3:14:46:be:e2:40:05:b5:ac:f1:9a:94:
4b:f8:f0:7c:bc:52:67:f4:62:fc:ae:32:6d:43:88:
84:cb:f8:61:51:ff:6c:f8:61:66:c8:92:02:e3:4c:
46:b7:b5:b5:78:8b:11:9e:5e:cb:1b:88:a0:56:1a:
75:9e:43:1b:01:a7:17:9b:ad:d2:47:8d:25:63:d5:
f2:92:cb:28:e6:92:ad:65:52:28:a8:73:1b:89:45:
64:e8:e9:99:69:51:8a:d1:ec:12:f3:96:40:fb:cb:
52:e9:84:47:ed:83:b5:56:e4:b8:c3:6a:c2:11:7b:
a4:ad:f6:4d:c3:17:ee:f0:6d:99:af:f6:7b:0f:01:
82:3f:f3:e6:cf:df:15:21:30:12:8e:3d:34:41:5f:
91:38:d4:ba:0b:3b:a1:68:94:41:0b:d0:4a:4c:80:
9b:48:54:f2:c4:93:4d:fa:7b:9b:47:35:35:d9:17:
86:08:ad:70:0e:db:c5:20:3a:44:be:0b:57:77:71:
59:e2:ca:6f:c7:db:da:62:0a:1a:3e:44:1e:fd:a1:
3c:e9:55:29:66:20:0c:ef:12:e0:97:ea:39:a4:fa:
5e:d9:2e:b0:58:60:26:4f:7e:3c:de:d9:ea:6f:97:
d8:43:53:c8:45:94:6b:38:94:8b:8f:76:f2:38:e9:
d7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:85:4F:CE:4C:42:E0:54:2C:5D:CA:83:D8:61:7E:E0:F9:EE:23
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:0a:26:56:50:31:da:e7:13:cc:66:3d:a0:df:48:53:f2:e9:
45:7b:ed:03:37:d2:ef:ea:eb:3b:29:5f:0b:23:ac:24:2c:6f:
6f:12:c8:14:4f:d3:c8:dd:2c:8a:7d:ab:f4:d3:a2:1b:e0:92:
66:e1:44:57:6b:cc:d7:80:2f:6e:f5:d8:85:c0:7c:fb:b6:d0:
1d:51:71:74:0b:85:c3:55:7a:f6:d3:7b:df:38:54:16:ac:3e:
ee:fe:55:33:1b:f0:f4:75:f8:fa:5e:67:7c:77:b0:c8:b8:9c:
ad:7b:76:c4:0c:06:52:06:84:6f:4a:8e:54:97:88:f6:d5:d9:
65:5a:f8:3d:8f:94:71:c1:ec:49:33:80:51:d3:27:24:0d:b9:
7d:18:ab:dc:9b:ac:b3:d0:f6:f1:bc:ba:e6:51:d1:1b:07:f8:
10:6d:8c:0d:c6:0c:8d:94:b1:16:be:19:30:6b:44:a4:4e:2d:
61:f1:37:5f:49:f3:74:76:31:27:db:cd:5e:7e:f8:95:39:91:
79:a2:d1:97:66:f3:26:4b:b1:94:12:fb:48:27:64:dc:e2:c2:
8b:2c:72:42:e1:67:29:ec:7c:44:54:92:53:bc:8c:84:1f:8e:
ab:cf:0c:db:b5:d2:42:4d:52:a0:63:5c:d1:4d:82:14:b9:3e:
9e:5b:c2:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X9iU0If+hd07dgGN5MqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGQ3ZmY0NTZmNWZkYzdkZTYxZmE0MjBlZTA4NmE3N2Ex
ZTYxZTUwHhcNMjUwMTMxMDgwMDA4WhcNMjUwMjAxMDgwMDA4WjAzMTEwLwYDVQQD
Eyg1ZTQ1ODU0ZmNlNGM0MmUwNTQyYzVkY2E4M2Q4NjE3ZWUwZjllZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPTjFEa+4kAFtazxmpRL+PB8vFJn
9GL8rjJtQ4iEy/hhUf9s+GFmyJIC40xGt7W1eIsRnl7LG4igVhp1nkMbAacXm63S
R40lY9Xyksso5pKtZVIoqHMbiUVk6OmZaVGK0ewS85ZA+8tS6YRH7YO1VuS4w2rC
EXukrfZNwxfu8G2Zr/Z7DwGCP/Pmz98VITASjj00QV+RONS6CzuhaJRBC9BKTICb
SFTyxJNN+nubRzU12ReGCK1wDtvFIDpEvgtXd3FZ4spvx9vaYgoaPkQe/aE86VUp
ZiAM7xLgl+o5pPpe2S6wWGAmT3483tnqb5fYQ1PIRZRrOJSLj3byOOnXvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5FhU/OTELgVCxdyoPYYX7g+e4jMB8GA1UdIwQY
MBaAFK5Nf/RW9f3H3mH6Qg7ghqd6HmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yYWNlMWUtNzBkYi00YTBhLTkzYzQt
MDdiMThlNTE4NTYxLzEvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yYWNlMWUtNzBkYi00YTBhLTkzYzQtMDdiMThlNTE4NTYx
LzEvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxgomVlAx
2ucTzGY9oN9IU/LpRXvtAzfS7+rrOylfCyOsJCxvbxLIFE/TyN0sin2r9NOiG+CS
ZuFEV2vM14AvbvXYhcB8+7bQHVFxdAuFw1V69tN73zhUFqw+7v5VMxvw9HX4+l5n
fHewyLicrXt2xAwGUgaEb0qOVJeI9tXZZVr4PY+UccHsSTOAUdMnJA25fRir3Jus
s9D28by65lHRGwf4EG2MDcYMjZSxFr4ZMGtEpE4tYfE3X0nzdHYxJ9vNXn74lTmR
eaLRl2bzJkuxlBL7SCdk3OLCiyxyQuFnKex8RFSSU7yMhB+Oq88M27XSQk1SoGNc
0U2CFLk+nlvCUA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:50 2025 by rpki-client on console-fra.rpki-client.org