Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: aV7NZWLFBgN7KeBY99gS3MV+qg9iDvz8I0vIoAm4z3Y=
Subject key identifier: B9:6A:F4:7F:98:C9:A7:F9:80:18:9F:FA:0F:59:B6:35:CE:69:93:BD
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 019511A302782862C462D5CBA2DC04D1B61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:50 +0000
Manifest this update: Mon 17 Feb 2025 02:00:50 +0000
Manifest next update: Tue 18 Feb 2025 02:00:50 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: jfzsXFepfolwhiip+1xIxDueytyN3tovg9NLHhMecwo=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:02:78:28:62:c4:62:d5:cb:a2:dc:04:d1:b6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Feb 17 02:00:50 2025 GMT
Not After : Feb 18 02:00:50 2025 GMT
Subject: CN=b96af47f98c9a7f980189ffa0f59b635ce6993bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:22:8a:96:76:b4:44:3a:d5:cd:36:b5:f9:
75:72:7b:ae:22:ce:bf:f1:e5:15:f9:54:fe:b0:cd:
51:2b:7d:90:66:27:f1:f4:b2:09:9c:ce:a1:7a:42:
14:e9:c7:e3:2b:5e:f8:63:14:12:77:45:11:9c:69:
1d:e9:6f:18:6f:34:99:3c:cc:5a:d7:56:98:f4:92:
2c:f0:73:70:24:9a:be:61:5e:3f:18:0f:56:03:92:
6c:7e:a4:1b:94:57:55:34:29:75:5e:13:15:8d:b7:
24:2a:93:6f:ff:4c:3c:cc:2f:32:79:90:13:78:44:
38:9d:33:9c:2e:0d:67:08:82:ea:42:a1:02:26:e1:
cf:28:32:fb:35:47:72:7a:4f:6a:88:a7:ef:6a:cd:
8a:8c:75:b9:43:9a:63:80:b5:b7:65:c2:7c:50:43:
70:b1:19:cf:af:d5:ac:57:1a:be:8b:35:00:f1:5d:
3e:73:38:1f:ff:8c:58:9b:fd:00:48:de:1a:41:47:
89:b0:f7:05:8a:f2:28:77:d7:9c:c7:7e:2b:41:51:
87:aa:4e:39:cc:6d:4f:e1:9c:71:db:04:8c:05:d9:
c7:31:d5:76:17:9f:ac:79:7c:fc:70:97:e4:e7:db:
7f:a4:cc:ab:2a:47:1e:a6:e1:5e:72:04:f2:36:71:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:F4:7F:98:C9:A7:F9:80:18:9F:FA:0F:59:B6:35:CE:69:93:BD
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7e:a7:06:99:03:a8:e7:2a:61:33:78:2d:97:a0:c7:2c:20:
f8:a5:7e:f6:31:0f:05:08:74:7f:17:cb:b4:3d:b7:e4:cd:e4:
ba:a6:1d:7e:50:20:1b:e1:8e:19:6a:e9:42:aa:ba:85:e1:37:
cf:ee:f5:0f:83:8b:e3:f8:56:dd:88:5d:69:36:c1:53:32:bd:
24:1b:68:bf:f6:8e:27:e2:e7:bd:d6:6f:67:54:6a:62:dc:11:
5f:f2:1d:94:f8:69:02:5c:e7:19:9c:66:32:89:ec:62:93:b7:
0a:5f:12:ab:2d:b5:fb:42:69:b3:d5:1c:7e:15:18:1a:55:d2:
79:a2:fb:1c:13:49:d0:93:5f:e7:74:f9:91:69:ce:e5:66:b8:
8b:1d:af:4d:d9:87:02:79:d5:da:b8:25:ef:87:f6:1c:03:6c:
51:82:05:3e:dc:dc:93:4b:cb:30:e2:fe:95:33:83:78:c8:ec:
a1:3c:ac:4e:3a:e3:28:76:66:b6:b2:62:f7:24:e5:b2:6b:3f:
dc:d3:87:88:b5:60:b9:3f:c1:9b:12:09:ad:5e:6c:6a:f2:cb:
ca:75:f0:f1:90:3f:09:20:21:c8:ef:48:1b:45:28:c4:59:ab:
b6:1c:21:a0:05:b6:43:a7:f9:7e:2c:9f:5d:17:9d:c5:c6:62:
04:ce:71:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURowJ4KGLEYtXLotwE0bYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MWQ3MDlkOGIxODRjNWE1MGM5NDMxZGNjYWY2NDliYzg2
ODQ3MDQwHhcNMjUwMjE3MDIwMDUwWhcNMjUwMjE4MDIwMDUwWjAzMTEwLwYDVQQD
EyhiOTZhZjQ3Zjk4YzlhN2Y5ODAxODlmZmEwZjU5YjYzNWNlNjk5M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkAiipZ2tEQ61c02tfl1cnuuIs6/
8eUV+VT+sM1RK32QZifx9LIJnM6hekIU6cfjK174YxQSd0URnGkd6W8YbzSZPMxa
11aY9JIs8HNwJJq+YV4/GA9WA5JsfqQblFdVNCl1XhMVjbckKpNv/0w8zC8yeZAT
eEQ4nTOcLg1nCILqQqECJuHPKDL7NUdyek9qiKfvas2KjHW5Q5pjgLW3ZcJ8UENw
sRnPr9WsVxq+izUA8V0+czgf/4xYm/0ASN4aQUeJsPcFivIod9ecx34rQVGHqk45
zG1P4Zxx2wSMBdnHMdV2F5+seXz8cJfk59t/pMyrKkcepuFecgTyNnH4VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlq9H+Yyaf5gBif+g9ZtjXOaZO9MB8GA1UdIwQY
MBaAFOcdcJ2LGExaUMlDHcyvZJvIaEcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMt
MWM1YjEwMTJkMmMzLzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMtMWM1YjEwMTJkMmMz
LzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn6nBpkD
qOcqYTN4LZegxywg+KV+9jEPBQh0fxfLtD235M3kuqYdflAgG+GOGWrpQqq6heE3
z+71D4OL4/hW3YhdaTbBUzK9JBtov/aOJ+LnvdZvZ1RqYtwRX/IdlPhpAlznGZxm
MonsYpO3Cl8Sqy21+0Jps9UcfhUYGlXSeaL7HBNJ0JNf53T5kWnO5Wa4ix2vTdmH
AnnV2rgl74f2HANsUYIFPtzck0vLMOL+lTODeMjsoTysTjrjKHZmtrJi9yTlsms/
3NOHiLVguT/BmxIJrV5savLLynXw8ZA/CSAhyO9IG0UoxFmrthwhoAW2Q6f5fiyf
XRedxcZiBM5xdw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:04 2025 by rpki-client