Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: 9VSzJzDzwcE4bJu27wfsHxztX0dNNXyzUd9rJPh5LDI=
Subject key identifier: 52:FE:D0:53:27:11:95:B8:18:0C:99:A1:E5:AB:77:B1:C1:0E:89:F3
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 01951134F2C29406962BA9E396B9F9796F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 08AF
Signing time: Mon 17 Feb 2025 00:00:37 +0000
Manifest this update: Mon 17 Feb 2025 00:00:37 +0000
Manifest next update: Tue 18 Feb 2025 00:00:37 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: KBoijG/Gr+JdGn0UqhIwXrU6ZjbGyb4TA1aSdr1LKKc=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:f2:c2:94:06:96:2b:a9:e3:96:b9:f9:79:6f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Feb 17 00:00:37 2025 GMT
Not After : Feb 18 00:00:37 2025 GMT
Subject: CN=52fed053271195b8180c99a1e5ab77b1c10e89f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:08:10:ab:ea:a4:fe:95:4f:a4:db:73:8d:
43:a9:21:8e:00:b2:cc:24:e6:74:03:98:48:b5:ff:
f0:20:9b:40:ca:b0:98:39:79:a2:5f:0e:c3:ab:f0:
c7:e1:1a:be:16:2e:a2:24:7f:35:99:de:ce:62:7c:
49:62:70:b8:13:a4:91:fe:ee:3a:6b:65:90:6d:6c:
b0:59:32:a0:53:01:7b:b7:36:de:60:cb:0e:7d:77:
15:b2:4c:67:bb:51:63:67:cc:a9:69:b8:81:a4:10:
fa:80:d4:82:8d:06:34:ce:6f:d6:bb:85:47:ab:85:
2a:f4:56:ff:56:a3:c8:d3:bd:d0:6e:3f:42:a0:07:
66:34:63:45:a8:24:ac:8e:87:24:8f:3d:93:60:f8:
f4:05:62:2c:3e:1d:19:f8:73:0b:71:79:5a:bd:d2:
77:d9:bb:91:71:54:84:8a:1f:e5:31:a2:5e:bf:f4:
80:01:b3:d9:6f:92:0a:d2:0c:da:e3:06:bd:9b:82:
76:49:25:c1:e7:de:25:44:9b:81:a7:96:41:ad:68:
e3:28:17:2d:e1:d1:bc:a5:f9:00:0f:dd:c5:36:87:
a7:ee:2a:60:ee:75:51:f4:b3:bf:ee:01:d2:f6:85:
50:94:57:95:fb:c3:7a:d9:d5:d4:59:8b:a2:06:0a:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FE:D0:53:27:11:95:B8:18:0C:99:A1:E5:AB:77:B1:C1:0E:89:F3
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7c:7a:3d:59:1b:6c:b1:9a:39:6e:54:3b:80:ef:1d:af:6b:
b5:a5:c0:20:56:8e:17:f5:26:76:b1:26:53:9d:ce:99:47:68:
93:6e:9f:dc:c2:9b:25:fb:3c:d7:62:f5:22:b9:9b:39:9f:33:
81:74:98:62:72:fb:84:64:b0:72:c5:fa:f2:b7:15:2f:b7:3c:
d2:17:1d:59:e8:b4:fd:ec:1c:45:07:e6:8d:6e:96:e1:72:b8:
87:02:ef:0f:8a:0c:bd:8d:cf:4a:03:85:4d:ec:04:47:3d:db:
2c:03:fa:bb:73:17:bc:60:21:98:b8:fb:53:43:e4:df:0e:b3:
b1:5f:39:0a:25:46:89:8c:bd:0d:6e:37:37:d4:3f:f6:e9:4d:
f1:e7:3d:95:c9:0d:88:68:a2:2e:df:80:05:7c:15:d6:5a:62:
6c:d5:3a:8b:11:38:5d:43:f7:a5:78:cf:33:04:34:67:81:cf:
27:95:2d:54:c4:5b:38:7f:f9:22:21:68:6f:a2:9f:8d:65:a6:
83:36:7a:22:47:e8:26:3f:bd:95:99:61:7c:24:65:c6:d5:9b:
b4:78:3d:7c:7e:20:a4:e7:61:05:b8:05:f8:14:da:43:84:7c:
9c:64:5e:33:84:fe:cc:80:6a:cf:13:0a:60:ff:cc:60:d5:c1:
ad:bf:2a:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNPLClAaWK6njlrn5eW8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGQyNzg0ODVmZmFlYTc5ZTkxMGEyNjI1MzNhODBiNWFi
OTFjOGEwHhcNMjUwMjE3MDAwMDM3WhcNMjUwMjE4MDAwMDM3WjAzMTEwLwYDVQQD
Eyg1MmZlZDA1MzI3MTE5NWI4MTgwYzk5YTFlNWFiNzdiMWMxMGU4OWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQYIEKvqpP6VT6Tbc41DqSGOALLM
JOZ0A5hItf/wIJtAyrCYOXmiXw7Dq/DH4Rq+Fi6iJH81md7OYnxJYnC4E6SR/u46
a2WQbWywWTKgUwF7tzbeYMsOfXcVskxnu1FjZ8ypabiBpBD6gNSCjQY0zm/Wu4VH
q4Uq9Fb/VqPI073Qbj9CoAdmNGNFqCSsjockjz2TYPj0BWIsPh0Z+HMLcXlavdJ3
2buRcVSEih/lMaJev/SAAbPZb5IK0gza4wa9m4J2SSXB594lRJuBp5ZBrWjjKBct
4dG8pfkAD93FNoen7ipg7nVR9LO/7gHS9oVQlFeV+8N62dXUWYuiBgobtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL+0FMnEZW4GAyZoeWrd7HBDonzMB8GA1UdIwQY
MBaAFPBNJ4SF/66nnpEKJiUzqAtauRyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjkt
NWMwZTMxNmQyOGI4LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjktNWMwZTMxNmQyOGI4
LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnx6PVkb
bLGaOW5UO4DvHa9rtaXAIFaOF/UmdrEmU53OmUdok26f3MKbJfs812L1IrmbOZ8z
gXSYYnL7hGSwcsX68rcVL7c80hcdWei0/ewcRQfmjW6W4XK4hwLvD4oMvY3PSgOF
TewERz3bLAP6u3MXvGAhmLj7U0Pk3w6zsV85CiVGiYy9DW43N9Q/9ulN8ec9lckN
iGiiLt+ABXwV1lpibNU6ixE4XUP3pXjPMwQ0Z4HPJ5UtVMRbOH/5IiFob6KfjWWm
gzZ6IkfoJj+9lZlhfCRlxtWbtHg9fH4gpOdhBbgF+BTaQ4R8nGReM4T+zIBqzxMK
YP/MYNXBrb8qhg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:36 2025 by rpki-client