Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: aD7ozofQ1o7ayS0JAv43p7/NKfh9f4cyKBdDPDI7LcU=
Subject key identifier: B4:BA:CE:FD:95:1B:D8:08:47:9A:F8:43:BC:EE:8F:7F:27:AC:DC:88
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 0194C42C58078DB9B194FF40E5C5B82B15BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 01:00:27 +0000
Manifest this update: Sun 02 Feb 2025 01:00:27 +0000
Manifest next update: Mon 03 Feb 2025 01:00:27 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: BgXupVhrdPF6kpYDgQQDuQru6dLkVAErRW4yIjuPO38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:58:07:8d:b9:b1:94:ff:40:e5:c5:b8:2b:15:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Feb 2 01:00:27 2025 GMT
Not After : Feb 3 01:00:27 2025 GMT
Subject: CN=b4bacefd951bd808479af843bcee8f7f27acdc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:52:5a:4a:b9:f0:8a:cd:5c:03:c5:57:21:
e2:75:28:90:ad:bf:59:49:b9:04:a7:28:6f:8e:a5:
af:77:3c:31:56:cc:d2:1e:b0:89:5d:f4:9b:55:29:
1b:a9:e1:f4:64:c6:3d:89:ff:91:f0:00:c4:ce:4d:
c1:41:c3:8d:e5:58:9e:9f:5a:a4:fc:86:2a:a2:4e:
09:89:17:c1:f7:8d:12:7e:3d:32:0d:46:e4:28:26:
56:a8:a2:26:4b:b4:e0:79:ba:6f:09:6a:dd:a3:c6:
55:35:d5:b3:a2:01:e9:a0:61:01:08:17:fb:2f:e1:
b8:8e:97:78:27:5a:41:4c:eb:8d:e7:7a:c2:d9:b9:
19:86:c7:01:31:f9:48:af:69:af:87:de:e5:d2:6c:
24:01:6f:fe:bb:09:c0:b4:d1:67:e1:65:7d:cf:35:
c2:07:3e:7e:bc:e3:8e:e0:3c:b3:c8:8a:ba:96:b2:
cf:ad:ef:b9:0b:1c:30:cb:97:ce:c2:4a:89:6a:05:
b8:48:b5:1b:70:99:3d:29:18:d5:4a:67:52:a3:75:
72:ae:42:f6:0c:b3:de:e7:b5:a7:da:f1:48:fe:17:
52:18:23:d3:66:b9:fb:8d:a6:bf:70:97:e9:e4:39:
14:f1:e9:80:94:26:5b:7d:eb:bb:e7:35:28:69:2c:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:CE:FD:95:1B:D8:08:47:9A:F8:43:BC:EE:8F:7F:27:AC:DC:88
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:10:5b:3c:d5:f2:59:26:4f:90:d4:55:5d:df:b4:8c:36:c1:
67:14:c4:6c:33:90:ca:a4:cf:f0:67:73:04:bd:43:9e:61:bc:
8a:f6:cd:a8:a3:44:63:c3:f3:0a:4b:00:4e:9b:30:e8:5c:e4:
39:dc:33:d4:19:8f:13:be:b3:8a:e9:fe:34:c9:a3:80:44:cb:
d4:9c:9a:20:d8:f6:98:92:01:da:43:f9:c8:54:08:f8:e8:60:
63:4d:aa:53:0c:e0:92:22:bc:c4:d4:2f:08:3f:ca:8f:41:bd:
48:8f:c2:43:bf:8d:23:35:b2:2d:0d:ac:11:b6:a2:c6:aa:e0:
63:68:b7:90:1b:7f:52:01:c1:26:e0:f3:21:e6:74:f4:a7:57:
4e:c5:a3:e9:a3:d8:29:18:3b:43:35:d4:97:b9:96:db:9d:b6:
c2:99:28:77:cd:4e:61:88:d6:07:2e:35:6d:5d:80:6b:28:da:
eb:16:26:0d:18:f3:3f:a7:e4:0e:30:d7:c0:32:e5:ee:19:3d:
43:02:5d:4f:c3:95:13:b1:e1:f1:c4:27:06:a9:e9:b2:a7:35:
8e:2a:9b:b9:e9:86:3b:ea:d9:70:a4:d5:86:a1:71:75:61:bc:
ee:fa:53:a5:0f:03:ec:59:93:70:34:c2:2b:24:7a:8b:41:4e:
14:69:87:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELFgHjbmxlP9A5cW4KxW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMTUxYTlhMThjOGE5MmI0Yjc2NzhkYzk2MGNjMmExYmI5
MDgwNTEwHhcNMjUwMjAyMDEwMDI3WhcNMjUwMjAzMDEwMDI3WjAzMTEwLwYDVQQD
EyhiNGJhY2VmZDk1MWJkODA4NDc5YWY4NDNiY2VlOGY3ZjI3YWNkYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkVSWkq58IrNXAPFVyHidSiQrb9Z
SbkEpyhvjqWvdzwxVszSHrCJXfSbVSkbqeH0ZMY9if+R8ADEzk3BQcON5Vien1qk
/IYqok4JiRfB940Sfj0yDUbkKCZWqKImS7TgebpvCWrdo8ZVNdWzogHpoGEBCBf7
L+G4jpd4J1pBTOuN53rC2bkZhscBMflIr2mvh97l0mwkAW/+uwnAtNFn4WV9zzXC
Bz5+vOOO4DyzyIq6lrLPre+5Cxwwy5fOwkqJagW4SLUbcJk9KRjVSmdSo3VyrkL2
DLPe57Wn2vFI/hdSGCPTZrn7jaa/cJfp5DkU8emAlCZbfeu75zUoaSz0tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS6zv2VG9gIR5r4Q7zuj38nrNyIMB8GA1UdIwQY
MBaAFHIVGpoYyKkrS3Z43JYMwqG7kIBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2hVYW1oaklxU3RMZG5qY2xnekNvYnVRZ0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNGZkYmMtM2M4OC00MGI1LThkNzUt
Y2JmOTRhMDBjYzgzLzEvY2hVYW1oaklxU3RMZG5qY2xnekNvYnVRZ0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNGZkYmMtM2M4OC00MGI1LThkNzUtY2JmOTRhMDBjYzgz
LzEvY2hVYW1oaklxU3RMZG5qY2xnekNvYnVRZ0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRBbPNXy
WSZPkNRVXd+0jDbBZxTEbDOQyqTP8GdzBL1DnmG8ivbNqKNEY8PzCksATpsw6Fzk
Odwz1BmPE76ziun+NMmjgETL1JyaINj2mJIB2kP5yFQI+OhgY02qUwzgkiK8xNQv
CD/Kj0G9SI/CQ7+NIzWyLQ2sEbaixqrgY2i3kBt/UgHBJuDzIeZ09KdXTsWj6aPY
KRg7QzXUl7mW2522wpkod81OYYjWBy41bV2Aayja6xYmDRjzP6fkDjDXwDLl7hk9
QwJdT8OVE7Hh8cQnBqnpsqc1jiqbuemGO+rZcKTVhqFxdWG87vpTpQ8D7FmTcDTC
KyR6i0FOFGmHUg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:45 2025 by rpki-client