Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: IlHGv6qHvWc8SzLCPEms2LEQrQCPUCIdkqNfRnEZioU=
Subject key identifier: 22:26:CF:C9:80:92:08:66:A0:46:D5:C4:F6:F7:38:37:F1:29:5C:18
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 0195124735856779A5A83E72D899C10E025D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 05:00:11 +0000
Manifest this update: Mon 17 Feb 2025 05:00:11 +0000
Manifest next update: Tue 18 Feb 2025 05:00:11 +0000
Files and hashes: 1: Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa (hash: mac69omVU5l4vKMkEn8yNVakFQh8bBKDgGibhl+5Pew=)
2: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: pnx7qY4xJtjeLswzw0McWO/BUregPSGxQpFP6nlW1cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:35:85:67:79:a5:a8:3e:72:d8:99:c1:0e:02:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Feb 17 05:00:11 2025 GMT
Not After : Feb 18 05:00:11 2025 GMT
Subject: CN=2226cfc980920866a046d5c4f6f73837f1295c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:44:3b:3a:d9:5c:1a:fb:3e:b0:4d:b6:08:
47:80:de:bb:a9:2a:7e:16:7c:93:34:3f:cc:3c:92:
73:54:2b:90:cf:51:16:0a:82:90:1e:fb:42:58:9e:
93:83:6c:8d:a5:91:e2:04:32:a4:53:3b:b2:58:ee:
b8:15:ee:47:3c:69:8b:86:9d:1c:83:db:3b:18:05:
06:98:17:36:96:2e:86:08:d6:ba:59:b4:f7:43:69:
9c:f8:73:d0:55:3e:99:e9:cc:0e:df:f6:65:3d:d2:
b0:d7:19:06:48:0e:86:9a:00:30:6b:e3:2f:16:bb:
fa:1c:1b:1e:5d:5f:31:ed:3a:15:10:ae:1f:a7:64:
cd:90:da:19:7c:dc:e8:3c:61:4d:62:9a:37:ca:1a:
3e:aa:bc:57:ad:83:eb:8e:26:17:30:9d:99:51:de:
96:60:05:1d:70:42:a7:14:54:52:a2:49:e0:32:a3:
df:e0:97:0d:f9:91:3b:8f:47:5c:61:8f:c1:4c:55:
8e:7a:35:9d:50:3e:e5:8a:09:82:a2:0c:50:0b:20:
b5:39:b3:55:2e:ca:71:a8:3c:85:5f:b9:89:e7:67:
dd:e8:04:b1:0b:f2:2b:07:28:6e:97:e0:0f:80:57:
e3:02:56:e5:a3:1c:8e:b1:37:9a:8e:1a:c9:73:1c:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:CF:C9:80:92:08:66:A0:46:D5:C4:F6:F7:38:37:F1:29:5C:18
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1b:c8:2f:04:e9:dc:8a:9d:c4:91:a6:e3:59:04:17:c0:f2:
ca:ad:fc:b9:8b:66:65:8e:5d:0b:7f:30:d1:0f:fe:e8:c2:17:
cb:fd:cd:57:b8:2a:96:d7:d0:ad:b1:d5:60:e8:f2:a6:e2:7e:
e8:7d:b0:72:03:7b:13:93:9c:c7:7d:16:1c:91:7f:2f:f1:c6:
1e:0d:9d:0c:2d:32:4f:21:ac:8b:38:7c:92:79:5f:8c:dd:76:
79:6b:64:fd:20:0c:14:9c:1d:52:d1:c3:e5:f6:5f:33:ef:0f:
c0:7b:a2:36:8d:a2:df:c1:7d:4e:75:ec:b5:29:e2:57:d2:fd:
1a:35:32:e9:d1:6f:1d:4c:4f:ce:a3:dd:61:ad:b1:95:75:de:
2a:c3:d2:34:6d:6a:8a:67:6c:8f:59:00:f3:69:a8:4b:3e:9f:
6e:d5:88:6f:c2:1d:82:86:79:40:95:1b:ae:2b:db:07:dc:03:
14:61:12:36:7e:20:59:76:8f:41:32:2a:23:0b:f2:d5:65:83:
42:f8:be:2c:44:0f:f4:14:af:ed:f2:25:77:d4:58:a0:56:ba:
f3:6a:e9:e2:ec:c6:9c:5e:43:71:5e:69:d6:2f:3b:87:dc:4d:
f6:14:1e:56:63:0a:d3:07:3a:8a:eb:98:8a:7d:ea:ce:3c:28:
42:c8:fa:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSRzWFZ3mlqD5y2JnBDgJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjExYTE4MGRmMTc5OTRlNDhhZDMzMTg3MmNmZDAwYWQ5
YWJhMDQwHhcNMjUwMjE3MDUwMDExWhcNMjUwMjE4MDUwMDExWjAzMTEwLwYDVQQD
EygyMjI2Y2ZjOTgwOTIwODY2YTA0NmQ1YzRmNmY3MzgzN2YxMjk1YzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K5EOzrZXBr7PrBNtghHgN67qSp+
FnyTND/MPJJzVCuQz1EWCoKQHvtCWJ6Tg2yNpZHiBDKkUzuyWO64Fe5HPGmLhp0c
g9s7GAUGmBc2li6GCNa6WbT3Q2mc+HPQVT6Z6cwO3/ZlPdKw1xkGSA6GmgAwa+Mv
Frv6HBseXV8x7ToVEK4fp2TNkNoZfNzoPGFNYpo3yho+qrxXrYPrjiYXMJ2ZUd6W
YAUdcEKnFFRSokngMqPf4JcN+ZE7j0dcYY/BTFWOejWdUD7ligmCogxQCyC1ObNV
LspxqDyFX7mJ52fd6ASxC/IrByhul+APgFfjAlbloxyOsTeajhrJcxwpnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCImz8mAkghmoEbVxPb3ODfxKVwYMB8GA1UdIwQY
MBaAFF3xGhgN8XmU5IrTMYcs/QCtmroEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTct
NmJjZTc3OTljYmVhLzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTctNmJjZTc3OTljYmVh
LzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxvILwTp
3IqdxJGm41kEF8Dyyq38uYtmZY5dC38w0Q/+6MIXy/3NV7gqltfQrbHVYOjypuJ+
6H2wcgN7E5Ocx30WHJF/L/HGHg2dDC0yTyGsizh8knlfjN12eWtk/SAMFJwdUtHD
5fZfM+8PwHuiNo2i38F9TnXstSniV9L9GjUy6dFvHUxPzqPdYa2xlXXeKsPSNG1q
imdsj1kA82moSz6fbtWIb8IdgoZ5QJUbrivbB9wDFGESNn4gWXaPQTIqIwvy1WWD
Qvi+LEQP9BSv7fIld9RYoFa682rp4uzGnF5DcV5p1i87h9xN9hQeVmMK0wc6iuuY
in3qzjwoQsj62w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:39 2025 by rpki-client