Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: E7yqx04BeuOfOm/C/+sGz7hJIIiW7o+bM50eYvePzOQ=
Subject key identifier: C1:51:4E:BD:EB:D0:F7:36:22:75:56:24:0A:0E:2B:36:08:72:C0:4D
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 01951090299E508EBC5C0DEB7180FB9D0AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0BBB
Signing time: Sun 16 Feb 2025 21:00:38 +0000
Manifest this update: Sun 16 Feb 2025 21:00:38 +0000
Manifest next update: Mon 17 Feb 2025 21:00:38 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: WpniQO019OO0qHhK2irWgoHnukOuAPO+S0oyTyAcOmU=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:29:9e:50:8e:bc:5c:0d:eb:71:80:fb:9d:0a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Feb 16 21:00:38 2025 GMT
Not After : Feb 17 21:00:38 2025 GMT
Subject: CN=c1514ebdebd0f736227556240a0e2b360872c04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:dd:5c:95:73:52:71:51:ad:59:6b:28:96:
70:21:94:8b:80:cf:70:a5:05:80:0e:c2:98:d9:e1:
d5:89:b3:8f:8f:81:00:6f:17:6a:c8:14:13:a3:b6:
c0:b5:12:c7:c6:9f:31:f4:1a:1f:79:20:4f:68:44:
51:e6:c5:39:fd:cb:97:e8:31:9b:44:94:61:a9:b8:
99:e6:f4:76:1d:9b:53:c6:53:57:2d:59:ff:06:66:
3b:f4:af:8f:d9:25:d4:46:99:91:27:ad:0e:51:51:
cf:f1:c0:b7:17:dd:68:69:78:d8:3d:5b:ee:52:99:
56:76:e1:e5:6a:83:e4:19:02:a7:f8:b8:06:be:11:
12:a8:46:6f:45:52:c8:40:d2:ff:4b:ea:8a:6d:b3:
97:37:2e:ab:7d:09:34:bd:c0:be:27:10:07:f6:46:
c4:12:52:2c:08:dc:0b:33:a3:4f:c6:ce:5a:58:05:
8e:2f:39:0c:46:22:01:b6:34:09:d7:9a:22:58:ef:
6a:6a:49:e6:6e:d1:27:cf:ab:aa:b1:27:68:6d:e2:
02:2c:65:5a:a7:43:76:f8:8a:bd:35:6f:22:84:36:
a3:c1:fe:73:36:92:47:c1:93:29:6d:ed:d3:ab:fb:
74:9e:79:91:fd:62:7d:3c:09:ac:cb:f9:89:b7:58:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:51:4E:BD:EB:D0:F7:36:22:75:56:24:0A:0E:2B:36:08:72:C0:4D
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4d:eb:c1:0d:c8:6b:6e:31:cf:56:78:4a:79:5e:87:d0:d0:
7b:d9:55:37:0b:9e:cc:03:ee:42:2d:6d:d3:dd:1a:2e:2f:3b:
4a:17:ec:8e:99:ab:5a:fd:3d:e3:ad:4d:82:be:4d:5d:f4:df:
1f:06:32:81:1b:4e:dd:7b:30:a3:fe:da:6c:d6:ce:73:f9:b4:
af:e9:2b:3f:a2:50:f9:0b:06:18:27:f9:81:ed:77:f9:87:97:
9c:67:3c:5c:61:c3:e0:4f:91:56:a5:e0:8f:b4:f6:93:70:cf:
52:91:66:ec:d6:2d:8b:4c:e5:a6:a5:9b:31:9a:5e:f2:23:28:
c6:2b:6b:96:84:9e:f2:88:cb:43:96:5b:01:db:de:56:25:0f:
ea:e1:ec:20:c7:1e:f5:14:48:37:05:3f:e7:8a:50:1a:e8:b9:
18:41:30:ea:57:26:ce:75:9b:1d:47:52:c5:b2:04:ad:34:47:
95:5b:8b:b3:39:e0:4a:52:74:f6:a3:12:2c:8a:bb:d5:f4:a0:
4c:53:d6:75:69:0e:24:de:a3:a1:b4:16:c5:c4:62:b8:71:e3:
20:43:b2:3b:e9:93:61:37:70:d6:d9:5f:97:6a:10:1b:73:5b:
b5:8f:8c:87:8a:eb:f9:16:e3:02:1f:c2:22:d8:0b:d9:e5:86:
ec:d2:9f:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQkCmeUI68XA3rcYD7nQrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx
ZDVjYTgwHhcNMjUwMjE2MjEwMDM4WhcNMjUwMjE3MjEwMDM4WjAzMTEwLwYDVQQD
EyhjMTUxNGViZGViZDBmNzM2MjI3NTU2MjQwYTBlMmIzNjA4NzJjMDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurTdXJVzUnFRrVlrKJZwIZSLgM9w
pQWADsKY2eHVibOPj4EAbxdqyBQTo7bAtRLHxp8x9BofeSBPaERR5sU5/cuX6DGb
RJRhqbiZ5vR2HZtTxlNXLVn/BmY79K+P2SXURpmRJ60OUVHP8cC3F91oaXjYPVvu
UplWduHlaoPkGQKn+LgGvhESqEZvRVLIQNL/S+qKbbOXNy6rfQk0vcC+JxAH9kbE
ElIsCNwLM6NPxs5aWAWOLzkMRiIBtjQJ15oiWO9qaknmbtEnz6uqsSdobeICLGVa
p0N2+Iq9NW8ihDajwf5zNpJHwZMpbe3Tq/t0nnmR/WJ9PAmsy/mJt1gcAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFRTr3r0Pc2InVWJAoOKzYIcsBNMB8GA1UdIwQY
MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct
M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi
LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHU3rwQ3I
a24xz1Z4Snleh9DQe9lVNwuezAPuQi1t090aLi87ShfsjpmrWv09461Ngr5NXfTf
HwYygRtO3Xswo/7abNbOc/m0r+krP6JQ+QsGGCf5ge13+YeXnGc8XGHD4E+RVqXg
j7T2k3DPUpFm7NYti0zlpqWbMZpe8iMoxitrloSe8ojLQ5ZbAdveViUP6uHsIMce
9RRINwU/54pQGui5GEEw6lcmznWbHUdSxbIErTRHlVuLszngSlJ09qMSLIq71fSg
TFPWdWkOJN6jobQWxcRiuHHjIEOyO+mTYTdw1tlfl2oQG3NbtY+Mh4rr+RbjAh/C
ItgL2eWG7NKfAA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:05 2025 by rpki-client