Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier: zRetDnv2FWnAYQts5FF4Jh3bTEuCWLO2gP/wUrgFOc0=
Subject key identifier: F9:58:03:10:4E:62:3E:03:A8:9C:25:91:67:3F:95:56:85:A2:C7:24
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial: 0195121090020CA26C2F627118A75A8C3561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 04:00:30 +0000
Manifest this update: Mon 17 Feb 2025 04:00:30 +0000
Manifest next update: Tue 18 Feb 2025 04:00:30 +0000
Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: o69onYNI3Mq9sEWe1nEv04GQvZnFgGW4tms/NUOvpgs=)
2: 2dNcgj6MvN9n_fYFlGVJH7IP5P0.roa (hash: NdXmI8eBdfB68znJPh1CIG8Aqd8Jvbrd0RbmQ639jeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:90:02:0c:a2:6c:2f:62:71:18:a7:5a:8c:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Validity
Not Before: Feb 17 04:00:30 2025 GMT
Not After : Feb 18 04:00:30 2025 GMT
Subject: CN=f95803104e623e03a89c2591673f955685a2c724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:35:26:b0:37:04:d9:ef:49:41:aa:08:93:
9a:e7:77:b4:9e:5d:78:f6:ab:e5:e8:b1:5c:67:c5:
82:e0:28:a6:94:d1:a7:bf:f9:0a:c5:68:0e:e7:c5:
05:79:1e:01:ae:a4:b9:c0:b8:9d:5a:d3:06:c4:2a:
1a:65:ac:b7:6e:06:98:2a:67:f8:96:4d:51:44:30:
c7:92:80:ce:87:fb:48:83:2d:34:fb:20:22:f6:de:
0e:f1:c9:25:bd:1d:7f:08:15:ae:b8:a6:d3:3e:43:
68:87:3c:b7:3a:04:ab:1d:f1:be:54:8a:a7:b9:ca:
6a:bf:f0:b0:ef:37:5b:b0:59:c3:d9:09:b6:61:bf:
f5:5a:e6:5c:b2:49:5c:f4:d8:2d:4e:40:34:4e:60:
69:31:21:a2:45:5b:8a:e2:92:1b:ba:05:93:6e:7e:
04:e1:40:9f:5a:aa:82:c6:02:1f:f4:47:b2:31:71:
36:2d:17:24:68:8b:0a:16:5f:ec:04:63:ad:e1:36:
41:52:1a:5f:98:90:0e:90:57:a7:7b:5f:14:df:8d:
c5:07:c7:51:e7:22:9d:6b:82:23:31:c3:2a:45:a6:
dc:a2:36:30:dd:d2:f2:32:f2:3a:5d:80:42:bf:62:
6f:72:97:f6:95:9c:e3:04:28:b3:cc:f3:4b:42:38:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:03:10:4E:62:3E:03:A8:9C:25:91:67:3F:95:56:85:A2:C7:24
X509v3 Authority Key Identifier:
keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:36:a9:44:38:e5:84:17:ea:59:09:e6:bb:6d:dc:79:39:b0:
b2:ce:be:23:0c:5a:67:6e:67:4f:c3:a7:5f:04:3b:1c:2a:62:
04:7f:48:b6:d4:a3:4c:e0:a7:3c:82:7a:df:a7:6e:3c:81:06:
dc:dd:2c:6b:77:01:f3:09:ac:6d:2c:04:97:82:e5:a2:5e:dd:
77:ed:4f:e3:19:af:2a:82:c3:01:c6:42:22:bd:52:c0:83:bb:
49:10:ae:ee:a6:d4:4c:22:fd:32:55:91:1e:12:c9:a5:78:81:
77:3f:db:6e:e2:b0:b6:c5:aa:c9:13:12:c4:a4:ab:35:68:a1:
d5:fc:8a:43:1c:55:5d:43:80:be:3f:5b:6b:c7:1c:51:8a:29:
ee:69:67:8a:ca:14:61:af:84:ed:3d:43:e6:ef:ab:c1:a5:bc:
24:87:12:8a:bc:99:5e:6a:bf:90:f7:6a:84:60:79:a2:d0:a5:
c8:41:6c:1a:07:11:ad:70:03:1d:10:0d:67:66:8c:58:e9:f1:
65:3b:8a:49:68:4a:ac:d1:cd:c1:b0:35:3b:09:7d:e4:f1:81:
34:9c:8d:f1:c1:a8:ae:17:8a:a5:22:8e:17:30:58:01:d2:79:
92:e0:d6:e3:bb:85:cd:bd:98:05:92:23:ec:e9:de:29:e4:27:
04:b4:4a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEJACDKJsL2JxGKdajDVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzI2N2JmMjNiMjk3MWE0Nzk1YTgzZWY4NDc4YTgyMWJh
ZmIxZGIwHhcNMjUwMjE3MDQwMDMwWhcNMjUwMjE4MDQwMDMwWjAzMTEwLwYDVQQD
EyhmOTU4MDMxMDRlNjIzZTAzYTg5YzI1OTE2NzNmOTU1Njg1YTJjNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgs1JrA3BNnvSUGqCJOa53e0nl14
9qvl6LFcZ8WC4CimlNGnv/kKxWgO58UFeR4BrqS5wLidWtMGxCoaZay3bgaYKmf4
lk1RRDDHkoDOh/tIgy00+yAi9t4O8cklvR1/CBWuuKbTPkNohzy3OgSrHfG+VIqn
ucpqv/Cw7zdbsFnD2Qm2Yb/1WuZcsklc9NgtTkA0TmBpMSGiRVuK4pIbugWTbn4E
4UCfWqqCxgIf9EeyMXE2LRckaIsKFl/sBGOt4TZBUhpfmJAOkFene18U343FB8dR
5yKda4IjMcMqRabcojYw3dLyMvI6XYBCv2Jvcpf2lZzjBCizzPNLQjiXmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlYAxBOYj4DqJwlkWc/lVaFosckMB8GA1UdIwQY
MBaAFNByZ78jspcaR5WoPvhHioIbr7HbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQt
ZjQ2NzNiYTUyYzAwLzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQtZjQ2NzNiYTUyYzAw
LzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjapRDjl
hBfqWQnmu23ceTmwss6+IwxaZ25nT8OnXwQ7HCpiBH9IttSjTOCnPIJ636duPIEG
3N0sa3cB8wmsbSwEl4Llol7dd+1P4xmvKoLDAcZCIr1SwIO7SRCu7qbUTCL9MlWR
HhLJpXiBdz/bbuKwtsWqyRMSxKSrNWih1fyKQxxVXUOAvj9ba8ccUYop7mlnisoU
Ya+E7T1D5u+rwaW8JIcSiryZXmq/kPdqhGB5otClyEFsGgcRrXADHRANZ2aMWOnx
ZTuKSWhKrNHNwbA1Owl95PGBNJyN8cGorheKpSKOFzBYAdJ5kuDW47uFzb2YBZIj
7OneKeQnBLRKQQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:06 2025 by rpki-client