Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: GHiqwhK6jGMRnZ6wI2NXREwztvUrgxaQVxKdMcXpUuw=
Subject key identifier: A9:D1:E1:86:CC:D3:37:4A:C0:EE:C4:60:BB:97:C7:55:9A:B6:5F:09
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 0194BABBD08E0C940976E1BDA26BF9493A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 05:00:58 +0000
Manifest this update: Fri 31 Jan 2025 05:00:58 +0000
Manifest next update: Sat 01 Feb 2025 05:00:58 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: HkzWnnjlqkWLM2zRFwxLNchXq5xmq830c4GFR9ZX9Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:d0:8e:0c:94:09:76:e1:bd:a2:6b:f9:49:3a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: Jan 31 05:00:58 2025 GMT
Not After : Feb 1 05:00:58 2025 GMT
Subject: CN=a9d1e186ccd3374ac0eec460bb97c7559ab65f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:59:40:35:e2:a0:09:41:35:61:ec:b9:bf:
91:cf:70:fd:c9:02:a5:88:e9:5e:76:9c:40:1b:e4:
f8:2b:5d:54:da:cb:06:93:b9:85:8b:ff:14:cb:c8:
76:cd:60:40:db:06:e8:68:09:d1:5b:6e:b1:7a:a3:
cf:cd:39:6e:ab:22:6e:d3:47:ec:8b:af:34:f4:6f:
af:ba:f1:8e:1f:86:d6:0c:3c:9c:d2:86:32:a6:f0:
47:64:0e:db:ed:50:39:7e:4c:f8:17:55:ca:b7:20:
19:f6:ca:2a:85:cf:2d:5e:d2:63:34:de:3b:c8:9b:
11:d9:83:33:9c:a2:d0:48:41:27:79:d3:f8:26:f0:
09:ba:32:b2:ca:e2:e1:12:7e:52:3e:1f:b7:d1:7a:
4a:94:45:24:97:77:8c:36:75:08:6b:1a:67:51:3d:
d5:f0:77:44:2b:fa:b9:7f:b0:71:ca:5b:d1:c1:bb:
f7:42:28:f2:9f:00:83:60:29:89:e2:24:b6:eb:e9:
59:23:8e:63:0b:39:cc:e3:3f:0d:ed:3e:92:67:6a:
f4:75:ad:49:91:12:b3:40:ed:91:49:be:ab:49:42:
96:5b:a9:5d:42:e1:95:26:4a:60:2d:0c:df:16:f2:
83:56:d0:72:5b:3d:29:c0:fe:c1:ee:ca:94:17:37:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D1:E1:86:CC:D3:37:4A:C0:EE:C4:60:BB:97:C7:55:9A:B6:5F:09
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:04:77:4e:57:b5:9f:de:a3:01:d3:fc:82:10:55:01:cb:ab:
81:f5:c4:7d:1d:c8:f5:51:64:74:ba:b3:0c:c2:5c:d2:a4:41:
24:8c:93:10:34:a1:ba:39:34:57:69:3a:0f:a5:78:76:dc:c5:
76:50:ee:ed:bb:38:e6:1d:91:31:dd:0f:72:0c:ad:7c:d8:38:
88:9b:de:dd:32:d6:04:a4:fe:3a:77:2e:b8:bf:fd:6e:80:53:
c5:e8:e4:83:c4:fd:9d:9a:ac:82:24:6e:20:d0:7b:7d:83:78:
4e:83:20:48:0a:8d:c2:90:5b:9e:0e:56:3c:3a:ce:4b:70:0a:
6b:43:cf:cc:65:44:9b:f4:5a:9a:1a:6d:6d:ec:04:f1:d9:5c:
1f:49:5a:18:60:25:08:2b:a4:57:ec:1b:75:e4:52:ad:3e:32:
5f:f3:12:dd:73:33:4a:14:34:6e:63:7d:12:79:15:5d:5d:23:
b9:a9:2e:23:2f:14:72:db:a9:a8:f2:3a:15:3d:ed:42:63:11:
af:f2:16:06:65:b0:36:51:f5:27:a2:59:e6:ba:08:09:df:43:
12:5e:99:9b:da:01:cc:c8:33:9e:6f:b4:ec:3e:31:59:9d:4e:
68:78:0d:0f:b1:e6:5e:9b:72:8c:b8:b0:ee:a5:f0:21:5a:3e:
4c:28:08:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u9CODJQJduG9omv5SToxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Yjc1NWFkMWEzYzdhNDUwMmJiYzNlYTM0Yzc1YjZiY2U2
MWM5NGMwHhcNMjUwMTMxMDUwMDU4WhcNMjUwMjAxMDUwMDU4WjAzMTEwLwYDVQQD
EyhhOWQxZTE4NmNjZDMzNzRhYzBlZWM0NjBiYjk3Yzc1NTlhYjY1ZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVBZQDXioAlBNWHsub+Rz3D9yQKl
iOledpxAG+T4K11U2ssGk7mFi/8Uy8h2zWBA2wboaAnRW26xeqPPzTluqyJu00fs
i6809G+vuvGOH4bWDDyc0oYypvBHZA7b7VA5fkz4F1XKtyAZ9soqhc8tXtJjNN47
yJsR2YMznKLQSEEnedP4JvAJujKyyuLhEn5SPh+30XpKlEUkl3eMNnUIaxpnUT3V
8HdEK/q5f7BxylvRwbv3QijynwCDYCmJ4iS26+lZI45jCznM4z8N7T6SZ2r0da1J
kRKzQO2RSb6rSUKWW6ldQuGVJkpgLQzfFvKDVtByWz0pwP7B7sqUFzc7RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnR4YbM0zdKwO7EYLuXx1Watl8JMB8GA1UdIwQY
MBaAFPW3Va0aPHpFArvD6jTHW2vOYclMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgt
MGJiZGU4ODRlODEyLzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgtMGJiZGU4ODRlODEy
LzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAR3Tle1
n96jAdP8ghBVAcurgfXEfR3I9VFkdLqzDMJc0qRBJIyTEDShujk0V2k6D6V4dtzF
dlDu7bs45h2RMd0PcgytfNg4iJve3TLWBKT+OncuuL/9boBTxejkg8T9nZqsgiRu
INB7fYN4ToMgSAqNwpBbng5WPDrOS3AKa0PPzGVEm/RamhptbewE8dlcH0laGGAl
CCukV+wbdeRSrT4yX/MS3XMzShQ0bmN9EnkVXV0juakuIy8UctupqPI6FT3tQmMR
r/IWBmWwNlH1J6JZ5roICd9DEl6Zm9oBzMgznm+07D4xWZ1OaHgND7HmXptyjLiw
7qXwIVo+TCgIUg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:09 2025 by rpki-client on console-fra.rpki-client.org