Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: hMZV316vBlCiF5VOiFqFIWxPUX1IDQKBzXx+QipmnVs=
Subject key identifier: 29:20:7C:A4:6A:61:A2:44:C0:4B:34:EF:43:E1:C1:C7:96:3D:88:08
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019511D977FF38B8343FB1C437B43992A5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 03:00:19 +0000
Manifest this update: Mon 17 Feb 2025 03:00:19 +0000
Manifest next update: Tue 18 Feb 2025 03:00:19 +0000
Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=)
2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: deK6k1Lq+95fHC1LH8bHYlcbkmweJs6KTfOWLZGblyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:77:ff:38:b8:34:3f:b1:c4:37:b4:39:92:a5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Feb 17 03:00:19 2025 GMT
Not After : Feb 18 03:00:19 2025 GMT
Subject: CN=29207ca46a61a244c04b34ef43e1c1c7963d8808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:76:1c:c0:a8:72:4c:2e:ab:a6:3d:8d:c1:
29:fa:6b:42:57:31:06:ae:e7:1c:38:c2:50:78:c3:
55:81:04:01:57:f9:71:b6:31:04:51:1a:c4:b3:34:
ca:31:23:ee:7f:b4:97:ed:e8:53:42:44:d0:c3:8a:
14:2a:4a:f6:aa:b8:36:7c:e0:ac:61:29:69:44:46:
bf:45:35:55:b9:a7:b5:9a:f2:6e:84:28:21:f9:eb:
7c:28:b7:3f:9c:26:9e:de:a9:31:f3:a4:29:fa:5f:
61:fc:e2:42:b6:e9:27:68:2f:c1:de:c3:03:2a:af:
c5:5c:57:4c:3f:4d:00:46:2a:a8:c5:ea:09:50:b4:
fa:8f:70:43:2c:ae:9f:db:ed:08:7a:37:e7:b2:00:
76:09:b4:9c:da:39:3b:9b:11:ff:13:c3:fe:f6:1e:
23:04:24:6a:19:64:5f:70:bb:00:7a:87:e1:2d:b1:
1d:94:1c:5d:ac:93:e9:15:9e:40:bf:b6:8b:71:0b:
8e:e2:c6:3a:69:87:b3:a8:0b:22:1a:d5:0d:ba:1d:
ce:a9:98:dd:9a:40:6f:56:c2:81:06:94:5e:52:6b:
49:89:ee:5c:34:aa:05:65:ce:80:47:98:b1:b9:ae:
c1:c8:d1:55:76:0c:08:21:c4:40:0b:7b:4e:fe:47:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:20:7C:A4:6A:61:A2:44:C0:4B:34:EF:43:E1:C1:C7:96:3D:88:08
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:69:ee:38:ef:5e:a3:2a:aa:46:7f:01:0f:70:94:e6:e0:e0:
e6:02:30:f6:b1:84:09:1f:ac:9f:f5:f7:cd:cc:8f:ac:c1:74:
4d:f8:bf:a2:05:3d:56:72:0a:0c:92:67:b0:cc:a8:30:2f:8d:
8c:8a:3a:3f:86:9c:67:cc:e4:db:36:ec:38:28:a2:ff:95:d0:
8c:b8:6b:90:9f:d6:90:38:36:69:07:3f:ad:43:01:2c:fd:bc:
14:1b:05:cb:f2:d2:81:ba:d4:5d:21:f2:24:9c:78:3f:c3:11:
55:db:cb:02:40:e4:85:a6:e0:be:61:ec:cb:b8:e4:2b:9a:40:
02:2a:76:2d:de:5f:40:d9:35:34:bb:d5:2c:4f:dd:93:86:cc:
59:ee:bb:01:44:80:18:64:2c:d1:22:1b:03:8b:0b:61:74:ac:
2f:d6:f5:78:28:fe:54:ff:93:76:47:e1:e5:67:82:db:62:ff:
3c:96:a3:f6:ef:38:f1:90:e3:1d:dc:d3:92:05:ec:35:c0:49:
ec:01:d2:5a:31:68:f8:a8:5f:46:0e:76:b2:19:e8:aa:e3:e5:
5a:a5:66:57:02:7a:6e:b3:44:14:6e:51:8b:ca:a3:0c:c3:3c:
d8:ad:12:a1:76:38:f9:40:a5:b9:f2:96:99:c6:1a:9a:bc:c7:
c4:ee:46:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2Xf/OLg0P7HEN7Q5kqX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTkwZWVmOWUxZDFhZjhiNzJlNTE4ZWM2Y2NmNTljZDdm
NzUxZjUwHhcNMjUwMjE3MDMwMDE5WhcNMjUwMjE4MDMwMDE5WjAzMTEwLwYDVQQD
EygyOTIwN2NhNDZhNjFhMjQ0YzA0YjM0ZWY0M2UxYzFjNzk2M2Q4ODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuF2HMCockwuq6Y9jcEp+mtCVzEG
ruccOMJQeMNVgQQBV/lxtjEEURrEszTKMSPuf7SX7ehTQkTQw4oUKkr2qrg2fOCs
YSlpREa/RTVVuae1mvJuhCgh+et8KLc/nCae3qkx86Qp+l9h/OJCtuknaC/B3sMD
Kq/FXFdMP00ARiqoxeoJULT6j3BDLK6f2+0IejfnsgB2CbSc2jk7mxH/E8P+9h4j
BCRqGWRfcLsAeofhLbEdlBxdrJPpFZ5Av7aLcQuO4sY6aYezqAsiGtUNuh3OqZjd
mkBvVsKBBpReUmtJie5cNKoFZc6AR5ixua7ByNFVdgwIIcRAC3tO/kdKGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkgfKRqYaJEwEs070PhwceWPYgIMB8GA1UdIwQY
MBaAFAlZDu+eHRr4ty5RjsbM9ZzX91H1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYt
ZTRkOGNmNzMzZWM5LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYtZTRkOGNmNzMzZWM5
LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWnuOO9e
oyqqRn8BD3CU5uDg5gIw9rGECR+sn/X3zcyPrMF0Tfi/ogU9VnIKDJJnsMyoMC+N
jIo6P4acZ8zk2zbsOCii/5XQjLhrkJ/WkDg2aQc/rUMBLP28FBsFy/LSgbrUXSHy
JJx4P8MRVdvLAkDkhabgvmHsy7jkK5pAAip2Ld5fQNk1NLvVLE/dk4bMWe67AUSA
GGQs0SIbA4sLYXSsL9b1eCj+VP+Tdkfh5WeC22L/PJaj9u848ZDjHdzTkgXsNcBJ
7AHSWjFo+KhfRg52shnoquPlWqVmVwJ6brNEFG5Ri8qjDMM82K0SoXY4+UClufKW
mcYamrzHxO5GXA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:27 2025 by rpki-client