Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: IxTf0x2izMS5EvWRmGedlD+REnktKt1Zv+XKrHOVuow=
Subject key identifier: 09:98:E7:37:DA:13:22:AC:01:8E:C9:63:29:1E:CC:41:A1:A7:08:AE
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 0195113528F4DF5315202E71E0C0A4377D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0650
Signing time: Mon 17 Feb 2025 00:00:51 +0000
Manifest this update: Mon 17 Feb 2025 00:00:51 +0000
Manifest next update: Tue 18 Feb 2025 00:00:51 +0000
Files and hashes: 1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=)
2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=)
3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: Q+5O/kvum+HOIP77vfhYkLL8Cqtpd84GyeqBd7rIDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:28:f4:df:53:15:20:2e:71:e0:c0:a4:37:7d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Feb 17 00:00:51 2025 GMT
Not After : Feb 18 00:00:51 2025 GMT
Subject: CN=0998e737da1322ac018ec963291ecc41a1a708ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:d6:cd:3c:92:bf:b8:a8:53:8c:9e:cf:12:
c4:34:39:19:d2:f2:38:60:bf:a9:7f:42:b9:83:85:
5c:f8:10:b6:ff:d5:95:36:08:c2:6b:43:32:4d:76:
70:b8:16:a4:6a:96:b9:1c:a5:1c:5c:b2:16:0b:78:
9f:37:8a:8f:3a:0e:4e:a1:79:e9:90:79:e6:13:3a:
58:e8:31:08:61:be:61:e4:83:4d:f0:ac:8e:2b:a6:
29:82:27:b3:12:be:8d:b1:a8:f0:99:bf:68:b9:60:
dc:3e:a3:54:c9:3f:68:b1:92:25:30:f3:59:0f:a1:
23:70:5a:75:eb:d6:03:5b:a3:aa:8a:df:52:4d:d8:
0b:da:23:71:a2:99:51:44:a1:85:b7:b6:81:cb:1b:
38:4b:7f:bd:04:29:1e:8a:bd:ad:c3:c8:70:b8:97:
ac:71:3d:13:a4:c7:42:71:84:b1:87:03:f8:1b:70:
94:e1:aa:21:ad:80:ec:31:a2:0d:8c:51:23:d8:ea:
ec:44:5c:01:6d:84:84:b7:91:b1:97:eb:01:e4:cb:
71:c9:5d:c2:de:fe:7e:17:16:00:76:6c:60:97:62:
e8:ec:03:95:0e:2e:b5:ec:a4:3b:90:80:f4:4c:64:
ed:42:48:2f:a0:3e:e1:17:be:d9:dd:9c:75:5f:e4:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:98:E7:37:DA:13:22:AC:01:8E:C9:63:29:1E:CC:41:A1:A7:08:AE
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:81:93:9d:6f:72:54:3a:db:a6:25:16:08:24:d9:18:de:d9:
96:d4:9f:21:d2:52:ed:cd:93:65:aa:57:18:57:00:c5:ce:71:
db:7a:34:4e:73:97:c1:af:b7:3d:62:d3:e3:9d:e6:b0:a8:35:
19:7b:17:ba:e5:42:ab:64:69:06:10:a9:13:f5:3c:1e:ba:a7:
66:fc:fc:f9:af:8a:a0:b8:7e:78:10:3b:ee:79:e3:ab:86:a0:
97:98:79:b0:9f:eb:53:c2:72:b6:7d:42:8f:d8:83:56:26:b1:
1d:42:db:f0:60:66:25:66:79:92:0a:4e:e6:a4:98:72:82:39:
00:9f:57:4c:1e:ac:be:67:f4:e4:d9:89:1b:a2:70:04:1c:e0:
9d:5e:55:3f:5a:1f:9a:e9:81:8d:f2:ff:92:a6:2a:ac:9d:fa:
22:90:a2:8b:55:e1:d1:e7:1b:32:fa:59:3d:ee:e3:0f:ff:49:
d5:da:dc:f7:16:ce:92:e4:54:ec:e2:fd:8f:9f:fc:f1:7e:b0:
f3:bb:a2:92:69:ed:65:65:4d:fe:63:1f:aa:0a:43:c7:6d:00:
9f:82:5f:4d:08:d0:ce:39:8d:f7:4b:47:ce:d2:05:b3:77:71:
a2:51:0a:99:fb:16:45:2a:d7:21:5f:3c:0c:3f:94:21:7e:f7:
33:6d:67:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNSj031MVIC5x4MCkN31sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODEyNzNkY2IwM2MzNDU3Yjc5MjUwYmUxMDllMTlhNWU3
NGYwZmQwHhcNMjUwMjE3MDAwMDUxWhcNMjUwMjE4MDAwMDUxWjAzMTEwLwYDVQQD
EygwOTk4ZTczN2RhMTMyMmFjMDE4ZWM5NjMyOTFlY2M0MWExYTcwOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBPWzTySv7ioU4yezxLENDkZ0vI4
YL+pf0K5g4Vc+BC2/9WVNgjCa0MyTXZwuBakapa5HKUcXLIWC3ifN4qPOg5OoXnp
kHnmEzpY6DEIYb5h5INN8KyOK6YpgiezEr6Nsajwmb9ouWDcPqNUyT9osZIlMPNZ
D6EjcFp169YDW6Oqit9STdgL2iNxoplRRKGFt7aByxs4S3+9BCkeir2tw8hwuJes
cT0TpMdCcYSxhwP4G3CU4aohrYDsMaINjFEj2OrsRFwBbYSEt5Gxl+sB5MtxyV3C
3v5+FxYAdmxgl2Lo7AOVDi617KQ7kID0TGTtQkgvoD7hF77Z3Zx1X+R0owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmY5zfaEyKsAY7JYykezEGhpwiuMB8GA1UdIwQY
MBaAFEyBJz3LA8NFe3klC+EJ4ZpedPD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYt
Nzc3OTRmYmZkMmU0LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYtNzc3OTRmYmZkMmU0
LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoGTnW9y
VDrbpiUWCCTZGN7ZltSfIdJS7c2TZapXGFcAxc5x23o0TnOXwa+3PWLT453msKg1
GXsXuuVCq2RpBhCpE/U8HrqnZvz8+a+KoLh+eBA77nnjq4agl5h5sJ/rU8Jytn1C
j9iDViaxHULb8GBmJWZ5kgpO5qSYcoI5AJ9XTB6svmf05NmJG6JwBBzgnV5VP1of
mumBjfL/kqYqrJ36IpCii1Xh0ecbMvpZPe7jD/9J1drc9xbOkuRU7OL9j5/88X6w
87uikmntZWVN/mMfqgpDx20An4JfTQjQzjmN90tHztIFs3dxolEKmfsWRSrXIV88
DD+UIX73M21nMg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:02 2025 by rpki-client