Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier: l5SQnqotn5ndyRhz/aeWtNfRqXSft/Yd5lWRaI40PCA=
Subject key identifier: 43:20:F0:B6:A3:83:C8:F2:4A:23:B5:BD:40:5F:A4:E3:35:21:19:8E
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 019511D94433A6D4071FC6B6395404C03B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number: 0864
Signing time: Mon 17 Feb 2025 03:00:06 +0000
Manifest this update: Mon 17 Feb 2025 03:00:06 +0000
Manifest next update: Tue 18 Feb 2025 03:00:06 +0000
Files and hashes: 1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=)
2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: eZwvP2Exn/W+KUCPHkCddBEBRKwZY8CfTJbLb8N0SMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:44:33:a6:d4:07:1f:c6:b6:39:54:04:c0:3b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Feb 17 03:00:06 2025 GMT
Not After : Feb 18 03:00:06 2025 GMT
Subject: CN=4320f0b6a383c8f24a23b5bd405fa4e33521198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:03:44:b1:65:30:4e:90:a8:c6:db:fb:5a:
27:4f:5b:f0:9e:c0:8b:07:9b:98:56:2c:10:05:ed:
5a:03:b8:de:08:b5:31:08:b1:aa:27:71:2c:86:6d:
bc:a1:bb:b8:16:88:62:ab:ed:b1:48:1c:0f:81:4b:
80:f6:92:1f:d2:0e:44:c3:3d:ca:52:21:c0:10:93:
a8:d6:a4:67:7e:cf:21:1a:48:e0:0d:4c:02:4c:12:
a8:c4:b7:aa:ac:74:1b:33:f2:d8:f4:3d:91:fa:93:
8d:53:1e:72:d1:87:a3:55:2c:b6:26:ae:7e:ac:94:
e5:e0:0b:8d:cc:ff:a6:bb:93:69:da:86:0c:a1:c2:
ed:1f:29:c1:cb:d4:b7:43:f7:ef:1c:ba:b1:79:30:
2a:17:03:f9:78:34:d1:bd:c4:a6:c4:e6:82:87:43:
3f:08:63:df:17:0f:9f:ba:fb:f5:f2:c0:66:09:af:
a0:b2:58:b2:ee:c6:79:d2:b9:e1:c9:ed:e5:68:82:
33:25:08:87:f5:b2:60:44:cc:b4:a9:c4:e6:34:58:
ac:f4:81:7d:73:af:52:7f:70:fd:74:ca:a0:d5:9f:
67:70:24:c3:b4:57:2d:3e:e6:e7:40:2b:bf:6f:f2:
b6:07:82:4b:4c:4d:d9:3d:1f:8d:72:0d:cb:2d:0d:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:F0:B6:A3:83:C8:F2:4A:23:B5:BD:40:5F:A4:E3:35:21:19:8E
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e0:01:d7:48:fe:72:c2:9e:41:f0:11:fe:c3:13:0a:b2:b9:
9a:8f:b9:3c:4b:ea:dc:54:bf:92:c9:f9:39:89:8d:f4:05:42:
99:60:7d:73:91:60:52:4b:f6:f7:3a:51:9b:d9:de:74:20:ec:
6a:b6:17:62:34:bb:ca:98:dc:60:2a:64:eb:5d:f2:ef:5f:65:
4f:f6:e7:a7:c1:a8:a7:bb:f3:3e:e2:33:e6:3e:6d:9d:96:09:
5a:4e:51:5f:35:14:cf:7e:5b:01:28:70:a8:2c:71:ac:ef:d4:
09:b0:98:45:32:0f:b6:79:c6:35:3c:61:ef:7e:4e:5a:52:10:
06:07:6d:6d:ac:51:9b:e4:d8:b2:26:63:37:ee:d9:b5:d3:bb:
97:92:42:84:21:82:99:7e:e7:e9:51:4c:d1:cf:46:2f:77:11:
41:73:f4:d8:7a:8a:60:95:94:10:73:6e:13:68:4d:67:cf:2c:
bb:40:ac:93:1f:7a:fa:62:7b:d7:09:7c:04:65:9a:a9:fd:8a:
16:ac:42:0b:1d:d5:ba:eb:49:85:d1:a7:54:80:5d:ce:c2:22:
43:94:b8:f8:40:1a:d1:02:74:64:24:f3:ef:54:51:1d:1f:b6:
11:c7:bf:bb:82:4b:e4:ef:a3:18:f7:ea:55:8b:11:f6:13:aa:
c5:27:5a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2UQzptQHH8a2OVQEwDtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNWZlNTBmMjkwZGQ5ZTQxZTVmNGE2NWRhYmIyMzk3MmE4
MmNhZDMwHhcNMjUwMjE3MDMwMDA2WhcNMjUwMjE4MDMwMDA2WjAzMTEwLwYDVQQD
Eyg0MzIwZjBiNmEzODNjOGYyNGEyM2I1YmQ0MDVmYTRlMzM1MjExOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFADRLFlME6QqMbb+1onT1vwnsCL
B5uYViwQBe1aA7jeCLUxCLGqJ3Eshm28obu4Fohiq+2xSBwPgUuA9pIf0g5Ewz3K
UiHAEJOo1qRnfs8hGkjgDUwCTBKoxLeqrHQbM/LY9D2R+pONUx5y0YejVSy2Jq5+
rJTl4AuNzP+mu5Np2oYMocLtHynBy9S3Q/fvHLqxeTAqFwP5eDTRvcSmxOaCh0M/
CGPfFw+fuvv18sBmCa+gsliy7sZ50rnhye3laIIzJQiH9bJgRMy0qcTmNFis9IF9
c69Sf3D9dMqg1Z9ncCTDtFctPubnQCu/b/K2B4JLTE3ZPR+Ncg3LLQ111QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMg8Lajg8jySiO1vUBfpOM1IRmOMB8GA1UdIwQY
MBaAFItf5Q8pDdnkHl9KZdq7I5cqgsrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2It
OTEwYWUzYmVjNjMxLzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yNTc0Y2ItYjVmZC00N2Q1LTlhM2ItOTEwYWUzYmVjNjMx
LzEvaTFfbER5a04yZVFlWDBwbDJyc2pseXFDeXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeAB10j+
csKeQfAR/sMTCrK5mo+5PEvq3FS/ksn5OYmN9AVCmWB9c5FgUkv29zpRm9nedCDs
arYXYjS7ypjcYCpk613y719lT/bnp8Gop7vzPuIz5j5tnZYJWk5RXzUUz35bAShw
qCxxrO/UCbCYRTIPtnnGNTxh735OWlIQBgdtbaxRm+TYsiZjN+7ZtdO7l5JChCGC
mX7n6VFM0c9GL3cRQXP02HqKYJWUEHNuE2hNZ88su0Cskx96+mJ71wl8BGWaqf2K
FqxCCx3VuutJhdGnVIBdzsIiQ5S4+EAa0QJ0ZCTz71RRHR+2Ece/u4JL5O+jGPfq
VYsR9hOqxSdaJQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:00 2025 by rpki-client