Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
File: 3k_14NZGWzwsc6LG4Q5WovpzFic.mft (raw, json)
Hash identifier: 4ovGHp1oWPZQTx/giXX92BhP+Hqc27z/+sskGXFF1LU=
Subject key identifier: 2A:A2:7F:07:8B:71:37:70:B3:F2:24:84:3C:B2:51:0E:B4:C5:05:E0
Authority key identifier: DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
Certificate issuer: /CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Certificate serial: 0194BB29350E8A7A128098CD5F7AE28FA732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
Manifest number: 0BC2
Signing time: Fri 31 Jan 2025 07:00:27 +0000
Manifest this update: Fri 31 Jan 2025 07:00:27 +0000
Manifest next update: Sat 01 Feb 2025 07:00:27 +0000
Files and hashes: 1: 3k_14NZGWzwsc6LG4Q5WovpzFic.crl (hash: wQqKjo4H/msSkc/sopBrEfw3UUrZSLin6X3rY/Jy1sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:35:0e:8a:7a:12:80:98:cd:5f:7a:e2:8f:a7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Validity
Not Before: Jan 31 07:00:27 2025 GMT
Not After : Feb 1 07:00:27 2025 GMT
Subject: CN=2aa27f078b713770b3f224843cb2510eb4c505e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:98:ea:cc:64:81:21:48:15:85:83:44:77:
7b:9a:f6:4f:9c:6c:4d:70:f4:b1:e1:07:fb:86:83:
bb:49:68:1c:d0:99:f5:5d:fc:0e:1a:1b:ec:18:a4:
00:26:24:3e:98:c0:c6:a1:f8:a3:69:fc:3d:5e:b8:
83:2e:21:c4:d3:a6:82:c1:15:c6:7d:0c:8b:40:27:
ea:9b:d5:95:24:5d:73:d2:32:13:5a:c5:0a:39:18:
c4:a7:cb:2f:04:49:c9:96:f1:a2:da:21:d1:86:5c:
89:ee:a7:17:d6:b1:48:a6:69:52:c6:32:df:a9:20:
21:a2:ae:2a:5b:ca:db:99:18:b7:18:8f:29:05:77:
7d:1e:ce:e6:c0:87:6a:c6:59:fb:6c:2e:f2:9b:92:
bc:c9:d2:c4:86:a7:ff:73:2b:19:41:e4:46:4d:35:
21:59:e9:7d:a9:12:62:10:0a:d2:f3:89:1b:92:e4:
e3:27:0b:3c:e6:63:c3:ad:dd:65:7d:e7:0a:a5:ad:
ed:a2:d0:3e:81:2d:71:a2:58:35:7d:cf:69:38:59:
aa:37:38:7b:05:f3:cd:00:1d:c0:d8:30:2a:6d:94:
18:da:5d:de:42:57:c0:f5:43:f3:7e:0b:42:af:84:
a6:76:68:99:3d:60:50:5e:07:8c:1e:5a:eb:4e:55:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A2:7F:07:8B:71:37:70:B3:F2:24:84:3C:B2:51:0E:B4:C5:05:E0
X509v3 Authority Key Identifier:
keyid:DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cd:84:54:b2:2a:38:2d:82:12:9c:d6:09:23:49:66:da:12:
47:f2:28:ed:e4:8d:5c:99:c6:4c:ff:66:08:bf:29:d2:58:eb:
07:5b:b2:bd:26:db:56:07:52:8f:ce:b0:bf:b5:2d:db:74:47:
2d:46:9e:7e:1a:fd:9e:1d:2c:ec:f9:7d:86:32:6e:d9:5a:7d:
e5:1c:46:33:60:45:d4:20:b5:24:64:f3:39:38:f3:e4:95:fd:
a6:12:e6:cd:bf:54:66:94:12:bc:ab:53:04:59:c3:a0:73:5d:
fd:1b:97:8e:09:41:3c:36:63:01:60:90:b2:70:bd:57:14:73:
c2:b2:93:77:db:4b:32:5b:95:5e:69:4f:97:12:02:4c:f5:3d:
8d:8a:f8:40:57:4c:da:07:24:80:19:99:3a:8a:4e:36:07:d4:
08:02:35:77:f8:e5:54:80:d3:5e:a3:e5:69:44:cd:8a:92:48:
73:9d:ab:b7:fc:76:18:9c:62:e2:83:e0:64:b2:9a:16:88:3a:
ef:e5:54:bd:93:5e:34:35:82:80:98:24:ad:85:a0:51:6c:5c:
de:0e:6c:04:8d:c9:55:bb:28:0c:f8:ef:57:82:20:36:5a:89:
0e:12:8c:65:60:a4:38:2c:b1:97:7c:68:ec:1f:e5:bf:10:31:
6f:2c:2b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KTUOinoSgJjNX3rij6cyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNGZmNWUwZDY0NjViM2MyYzczYTJjNmUxMGU1NmEyZmE3
MzE2MjcwHhcNMjUwMTMxMDcwMDI3WhcNMjUwMjAxMDcwMDI3WjAzMTEwLwYDVQQD
EygyYWEyN2YwNzhiNzEzNzcwYjNmMjI0ODQzY2IyNTEwZWI0YzUwNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk2Y6sxkgSFIFYWDRHd7mvZPnGxN
cPSx4Qf7hoO7SWgc0Jn1XfwOGhvsGKQAJiQ+mMDGofijafw9XriDLiHE06aCwRXG
fQyLQCfqm9WVJF1z0jITWsUKORjEp8svBEnJlvGi2iHRhlyJ7qcX1rFIpmlSxjLf
qSAhoq4qW8rbmRi3GI8pBXd9Hs7mwIdqxln7bC7ym5K8ydLEhqf/cysZQeRGTTUh
Wel9qRJiEArS84kbkuTjJws85mPDrd1lfecKpa3totA+gS1xolg1fc9pOFmqNzh7
BfPNAB3A2DAqbZQY2l3eQlfA9UPzfgtCr4SmdmiZPWBQXgeMHlrrTlUKVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqifweLcTdws/IkhDyyUQ60xQXgMB8GA1UdIwQY
MBaAFN5P9eDWRls8LHOixuEOVqL6cxYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2tfMTROWkdXendzYzZMRzRRNVdvdnB6RmljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kNmE2NDgtMjI4Ni00MjlmLTk4ZmEt
ODg0ZTgxYTE3ODZhLzEvM2tfMTROWkdXendzYzZMRzRRNVdvdnB6RmljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kNmE2NDgtMjI4Ni00MjlmLTk4ZmEtODg0ZTgxYTE3ODZh
LzEvM2tfMTROWkdXendzYzZMRzRRNVdvdnB6RmljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY82EVLIq
OC2CEpzWCSNJZtoSR/Io7eSNXJnGTP9mCL8p0ljrB1uyvSbbVgdSj86wv7Ut23RH
LUaefhr9nh0s7Pl9hjJu2Vp95RxGM2BF1CC1JGTzOTjz5JX9phLmzb9UZpQSvKtT
BFnDoHNd/RuXjglBPDZjAWCQsnC9VxRzwrKTd9tLMluVXmlPlxICTPU9jYr4QFdM
2gckgBmZOopONgfUCAI1d/jlVIDTXqPlaUTNipJIc52rt/x2GJxi4oPgZLKaFog6
7+VUvZNeNDWCgJgkrYWgUWxc3g5sBI3JVbsoDPjvV4IgNlqJDhKMZWCkOCyxl3xo
7B/lvxAxbywrMQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:05 2025 by rpki-client on console-fra.rpki-client.org