Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: /coEFV/KI6aFJ6hjk7jBra15DO68C98AYGBKEhsH1bE=
Subject key identifier: 28:F3:43:77:6E:79:7C:70:A6:85:0A:49:E4:A5:11:E6:69:48:54:01
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019511349665D78D8240CBC3F7D5DFBEE7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 00:00:13 +0000
Manifest this update: Mon 17 Feb 2025 00:00:13 +0000
Manifest next update: Tue 18 Feb 2025 00:00:13 +0000
Files and hashes: 1: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: X8TaXqDsGCVajI02UFQPlpCxnZUctnajEoxcV2sysrk=)
2: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:96:65:d7:8d:82:40:cb:c3:f7:d5:df:be:e7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Feb 17 00:00:13 2025 GMT
Not After : Feb 18 00:00:13 2025 GMT
Subject: CN=28f343776e797c70a6850a49e4a511e669485401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:66:25:ff:a9:5f:2b:95:9e:e9:b1:32:a5:
f2:3d:84:55:b7:1d:9d:78:14:6f:c9:e5:39:57:63:
0d:3b:26:45:0a:3e:80:41:85:3f:93:f9:b0:4e:e2:
f8:ed:74:48:cc:56:87:cc:1a:86:d0:da:20:86:90:
e3:ed:09:9d:95:46:1a:97:6a:ea:06:a4:75:08:ee:
7a:cb:a4:57:b1:cd:de:10:77:01:63:e7:d6:ea:ee:
96:03:34:4c:c8:a4:df:e6:75:a2:bd:fb:17:86:6f:
44:e0:fb:68:60:f6:c1:b2:d0:53:d6:10:c9:0e:44:
da:5e:50:4c:7a:6e:86:ab:53:92:26:c6:da:7c:d6:
61:8c:41:02:58:df:4a:28:80:c4:f2:69:99:5b:78:
20:60:90:f3:a2:6e:4b:bc:33:68:aa:ea:6d:61:96:
d6:0b:7b:4e:20:8a:d3:36:01:14:42:90:11:36:37:
97:4a:1f:f9:fc:6e:3c:bc:8b:c7:5f:8e:f6:e4:c4:
f8:70:60:b8:9e:23:29:3c:fc:51:19:1e:df:6e:e2:
ef:80:86:1e:91:ff:75:4d:23:42:b5:2d:76:89:3a:
2e:2f:65:bf:42:27:c6:b5:94:33:ad:3a:5e:8d:69:
a4:25:62:69:e5:ea:b5:5d:7e:33:fb:b6:e2:ce:10:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F3:43:77:6E:79:7C:70:A6:85:0A:49:E4:A5:11:E6:69:48:54:01
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c1:cc:97:38:b9:03:2b:71:ac:7b:b7:c8:8e:be:2e:cb:47:
8a:62:2d:3a:0f:14:b6:5e:b5:e9:4f:3d:06:42:be:f2:59:23:
a3:08:ca:9e:b0:a8:a5:31:49:3b:75:63:b7:84:80:73:44:8a:
77:12:4a:a4:66:ae:f3:79:88:5c:ec:09:77:f9:55:d2:43:00:
b1:be:b5:27:90:c5:69:23:2e:d8:99:91:c8:ba:ab:c6:f6:85:
de:aa:e0:e7:65:fb:5f:6b:2e:5d:fb:9d:f9:87:92:ee:b9:e3:
91:35:67:f0:90:be:de:fb:91:41:55:eb:52:da:0c:b5:e5:6d:
82:a6:ed:05:27:78:81:c6:1b:10:c3:2f:b2:ee:06:10:94:2a:
e5:e9:dd:86:91:46:de:b0:4d:6c:9a:46:27:a4:08:2a:1d:aa:
54:85:48:8c:10:5b:14:16:8d:13:37:a2:4f:f9:6f:03:d6:85:
bf:e6:37:71:45:aa:61:b9:65:9e:09:5f:f6:90:11:6a:35:09:
26:de:c5:d5:95:48:c6:7d:dc:60:f0:0a:72:f0:cb:49:de:26:
e8:c0:42:b5:ac:dd:db:84:30:2b:ad:cd:e0:5a:78:b0:91:2a:
f8:2c:14:bf:5b:8a:d5:8f:e1:78:7f:12:59:ff:bf:8b:56:d1:
97:da:3d:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNJZl142CQMvD99Xfvue/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDk5ZjQ5OTc4Yjk2MGZhMzFmODFhY2Y1NDY3MTI3M2Rj
N2ZmNjEwHhcNMjUwMjE3MDAwMDEzWhcNMjUwMjE4MDAwMDEzWjAzMTEwLwYDVQQD
EygyOGYzNDM3NzZlNzk3YzcwYTY4NTBhNDllNGE1MTFlNjY5NDg1NDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz5mJf+pXyuVnumxMqXyPYRVtx2d
eBRvyeU5V2MNOyZFCj6AQYU/k/mwTuL47XRIzFaHzBqG0NoghpDj7QmdlUYal2rq
BqR1CO56y6RXsc3eEHcBY+fW6u6WAzRMyKTf5nWivfsXhm9E4PtoYPbBstBT1hDJ
DkTaXlBMem6Gq1OSJsbafNZhjEECWN9KKIDE8mmZW3ggYJDzom5LvDNoquptYZbW
C3tOIIrTNgEUQpARNjeXSh/5/G48vIvHX4725MT4cGC4niMpPPxRGR7fbuLvgIYe
kf91TSNCtS12iTouL2W/QifGtZQzrTpejWmkJWJp5eq1XX4z+7bizhCpLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjzQ3dueXxwpoUKSeSlEeZpSFQBMB8GA1UdIwQY
MBaAFF8Jn0mXi5YPox+BrPVGcSc9x/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2Mt
ZjVkMmNiNzk0NTZkLzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2MtZjVkMmNiNzk0NTZk
LzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksHMlzi5
AytxrHu3yI6+LstHimItOg8Utl616U89BkK+8lkjowjKnrCopTFJO3Vjt4SAc0SK
dxJKpGau83mIXOwJd/lV0kMAsb61J5DFaSMu2JmRyLqrxvaF3qrg52X7X2suXfud
+YeS7rnjkTVn8JC+3vuRQVXrUtoMteVtgqbtBSd4gcYbEMMvsu4GEJQq5endhpFG
3rBNbJpGJ6QIKh2qVIVIjBBbFBaNEzeiT/lvA9aFv+Y3cUWqYbllnglf9pARajUJ
Jt7F1ZVIxn3cYPAKcvDLSd4m6MBCtazd24QwK63N4Fp4sJEq+CwUv1uK1Y/heH8S
Wf+/i1bRl9o9gg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:38 2025 by rpki-client