Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: 1wY1ZqBhI8ZdWnCSVjIkW2w2r8rqprEhzrDDvukfbFw=
Subject key identifier: 0B:C6:23:1A:BA:60:93:96:92:20:D4:E6:A8:D6:15:4E:B6:54:EF:28
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 019511D99C3C88772AFA777D0FA2905302FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 016F
Signing time: Mon 17 Feb 2025 03:00:28 +0000
Manifest this update: Mon 17 Feb 2025 03:00:28 +0000
Manifest next update: Tue 18 Feb 2025 03:00:28 +0000
Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: C5eEoC9b8p5uX6u+2xEBH+E2/wD5XAMzS+NWzMBxHHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:9c:3c:88:77:2a:fa:77:7d:0f:a2:90:53:02:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Feb 17 03:00:28 2025 GMT
Not After : Feb 18 03:00:28 2025 GMT
Subject: CN=0bc6231aba6093969220d4e6a8d6154eb654ef28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:ae:84:a6:b7:45:c9:9f:be:fe:41:4c:bd:
66:6d:26:89:74:c2:5e:9d:8e:cd:24:ea:00:de:87:
46:b1:95:87:a6:35:f1:46:80:6e:91:91:e6:59:39:
c4:91:9a:ff:23:22:02:b3:5e:4f:96:01:de:79:a6:
06:6d:33:b8:6c:5b:f5:ee:24:c2:7e:87:67:b9:f4:
00:0a:76:f6:70:6c:76:42:9e:d7:80:62:af:80:22:
c4:e8:aa:f8:08:e5:6b:97:8e:3b:d0:db:28:2a:86:
28:f9:94:15:ab:1d:fb:bb:41:24:8c:ec:3c:ad:aa:
7f:b1:d5:5a:61:90:ce:95:7e:49:8b:7c:2c:b0:28:
e6:ed:ce:e7:f9:c3:de:97:07:4d:0b:cc:3c:8e:76:
1c:43:9f:4d:88:1a:c2:d0:d5:53:68:1b:90:a9:fd:
52:41:4f:e5:50:b8:fa:47:63:04:47:e4:f9:1d:fa:
00:c2:79:77:90:fc:97:fe:89:da:f9:ea:2a:8a:7b:
ff:41:47:95:c3:2c:e9:42:87:da:80:2a:bc:bd:7c:
34:a9:ee:6f:56:d4:f6:a8:12:86:27:48:8c:f2:ca:
55:5f:b1:06:b7:40:4a:23:7e:75:27:97:f5:13:2d:
50:51:cb:5a:e1:e3:25:51:88:65:13:0e:3f:bc:22:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C6:23:1A:BA:60:93:96:92:20:D4:E6:A8:D6:15:4E:B6:54:EF:28
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:87:e0:52:bf:ca:6f:32:90:ac:c3:27:3a:26:10:60:20:18:
12:22:73:80:4e:82:30:f7:57:51:1c:8c:27:e0:0b:cc:a9:26:
d2:9f:48:41:30:37:22:ac:99:c1:4d:29:14:91:fd:90:34:a5:
be:aa:5a:31:41:95:8d:b3:88:4d:9e:33:cb:3b:46:e1:3c:56:
88:50:6e:bc:8c:3f:83:8a:b0:11:90:38:f2:ea:16:e7:7b:9e:
ae:da:2c:a3:ce:f1:b9:d9:be:37:c3:1e:be:1d:bc:0c:b9:39:
fa:d1:21:02:2a:41:01:c0:67:c2:c5:61:77:a2:70:7e:23:28:
37:fe:d2:4c:15:f4:4f:32:9b:3e:6e:d6:f0:90:1b:d1:ef:67:
ce:ac:2c:b7:bb:b2:bb:bd:9e:29:39:8d:0b:9b:66:1c:08:fa:
35:08:dd:39:25:87:26:70:57:05:9d:4d:47:47:79:1a:9c:50:
93:17:28:e4:a8:1b:be:01:5d:47:90:c5:bd:be:4b:89:63:ee:
f5:b5:06:43:1d:cc:49:8e:ab:3d:0e:8d:10:ac:8c:de:a0:34:
96:df:53:f3:3c:aa:ce:a6:ad:b9:8d:07:99:94:8b:78:75:d0:
85:5f:77:2b:59:b8:12:99:9a:2e:db:46:56:dd:3a:9a:cc:56:
b8:96:1f:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2Zw8iHcq+nd9D6KQUwL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2NiOTdiNTIzYzczZjE0MDZkNjNjNzY3YzczZDljOTU3
ZDQzM2IwHhcNMjUwMjE3MDMwMDI4WhcNMjUwMjE4MDMwMDI4WjAzMTEwLwYDVQQD
EygwYmM2MjMxYWJhNjA5Mzk2OTIyMGQ0ZTZhOGQ2MTU0ZWI2NTRlZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGCuhKa3Rcmfvv5BTL1mbSaJdMJe
nY7NJOoA3odGsZWHpjXxRoBukZHmWTnEkZr/IyICs15PlgHeeaYGbTO4bFv17iTC
fodnufQACnb2cGx2Qp7XgGKvgCLE6Kr4COVrl4470NsoKoYo+ZQVqx37u0EkjOw8
rap/sdVaYZDOlX5Ji3wssCjm7c7n+cPelwdNC8w8jnYcQ59NiBrC0NVTaBuQqf1S
QU/lULj6R2MER+T5HfoAwnl3kPyX/ona+eoqinv/QUeVwyzpQofagCq8vXw0qe5v
VtT2qBKGJ0iM8spVX7EGt0BKI351J5f1Ey1QUcta4eMlUYhlEw4/vCJUFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvGIxq6YJOWkiDU5qjWFU62VO8oMB8GA1UdIwQY
MBaAFM18uXtSPHPxQG1jx2fHPZyVfUM7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEt
MDUxMTZjOWY4YWVmLzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEtMDUxMTZjOWY4YWVm
LzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4fgUr/K
bzKQrMMnOiYQYCAYEiJzgE6CMPdXURyMJ+ALzKkm0p9IQTA3IqyZwU0pFJH9kDSl
vqpaMUGVjbOITZ4zyztG4TxWiFBuvIw/g4qwEZA48uoW53uertoso87xudm+N8Me
vh28DLk5+tEhAipBAcBnwsVhd6JwfiMoN/7STBX0TzKbPm7W8JAb0e9nzqwst7uy
u72eKTmNC5tmHAj6NQjdOSWHJnBXBZ1NR0d5GpxQkxco5KgbvgFdR5DFvb5LiWPu
9bUGQx3MSY6rPQ6NEKyM3qA0lt9T8zyqzqatuY0HmZSLeHXQhV93K1m4EpmaLttG
Vt06msxWuJYfbw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:10 2025 by rpki-client