Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: Nb9A+JfiF29FHsTN2o5EqEVnGnOIiJgDYPzkLwAJCjw=
Subject key identifier: 87:64:6C:4F:19:A3:D3:06:DD:28:A2:BD:1F:77:CF:23:55:3E:6E:44
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 019512473207A365687C12F36251103EAC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 0D58
Signing time: Mon 17 Feb 2025 05:00:10 +0000
Manifest this update: Mon 17 Feb 2025 05:00:10 +0000
Manifest next update: Tue 18 Feb 2025 05:00:10 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: QoDNK8nwaaA9HcTKhb0U/SUmhaMo0D5us9Q5QLCGLFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:32:07:a3:65:68:7c:12:f3:62:51:10:3e:ac:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Feb 17 05:00:10 2025 GMT
Not After : Feb 18 05:00:10 2025 GMT
Subject: CN=87646c4f19a3d306dd28a2bd1f77cf23553e6e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:21:54:3e:f6:a1:5c:d2:26:eb:e9:1f:7f:
c6:1c:a4:11:9c:24:c4:c4:bd:1c:0c:63:08:f5:b3:
98:b6:1c:af:48:60:37:13:8f:d1:b7:44:bc:a8:48:
75:9f:1d:3f:39:49:26:0b:1d:de:93:48:7b:bf:47:
8a:59:7e:69:ac:34:5e:cc:db:ed:d3:ff:36:da:00:
c5:c7:e1:77:6c:c5:5a:91:c8:6f:aa:d7:aa:8f:42:
11:eb:5a:f2:ad:d2:90:2f:9f:2b:96:54:ca:b7:4a:
52:9e:03:71:e9:13:dc:e0:3f:82:5a:cb:53:93:46:
8f:f8:29:01:82:8b:d2:7c:32:fc:6a:1c:ee:02:11:
4e:c5:4e:32:f1:b1:cc:bb:fd:f8:ae:48:63:77:a4:
1b:97:54:77:37:3e:c6:88:bc:75:99:98:3e:18:c3:
36:68:21:0a:08:9b:50:de:2d:ed:69:f0:88:54:32:
7c:71:5b:60:45:a3:c3:30:e6:85:9a:61:76:3f:ff:
4d:02:12:be:f9:87:8a:85:8a:cc:3e:6f:d2:8f:76:
02:0f:2f:6f:d5:ad:7e:db:8d:39:7d:0c:de:ef:35:
74:0e:55:fb:f7:a3:7d:6e:63:ff:f0:90:b5:6c:9f:
5e:06:c2:b6:81:f1:b5:df:36:10:4b:b1:38:f4:34:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:64:6C:4F:19:A3:D3:06:DD:28:A2:BD:1F:77:CF:23:55:3E:6E:44
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2b:83:cc:d1:8f:0c:67:5e:58:e2:66:94:28:d4:75:32:33:
16:32:50:0f:a6:b5:5a:5d:44:81:5b:cc:c8:5f:41:b9:6f:d7:
b6:98:3e:20:8a:14:79:78:bf:55:16:0d:f1:00:82:f2:01:c5:
8a:3c:86:44:c7:a4:56:2e:f7:58:26:eb:b8:79:7e:f8:aa:f0:
d1:4a:ab:ba:6d:2f:36:bd:45:fd:9a:be:24:eb:15:0c:aa:7d:
2b:f6:3f:58:6a:0a:2e:df:64:98:1d:1d:4b:9d:3e:00:22:04:
fc:05:f7:59:a9:9d:d6:1c:d9:96:1b:03:f9:95:f2:da:8e:7d:
92:c9:b8:b0:31:d6:90:08:3c:37:53:0c:f1:5d:95:60:71:e4:
a4:5e:c5:94:8d:8b:9a:a7:7e:05:96:fc:2b:af:8e:aa:62:0a:
31:01:28:56:3e:d2:13:11:a6:4d:f5:78:a2:8e:7b:54:8b:e9:
88:67:e6:2c:cf:f6:4c:31:f5:2a:7e:13:dc:04:ff:ca:bb:70:
94:55:dd:50:0f:3d:40:97:65:8b:4b:c0:d5:45:09:c1:a4:4d:
6b:3a:0f:56:c4:a3:2d:7e:90:58:d1:59:2a:ec:6d:db:df:ed:
f7:e9:16:c5:8c:90:24:b2:c6:61:bb:e1:e8:45:2c:09:73:1f:
13:ce:8c:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSRzIHo2VofBLzYlEQPqxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzM2ZWRlYjkyZjkzN2VhNDU4OTNlYTliY2Y0ZWY4M2Yx
NWZmYzgwHhcNMjUwMjE3MDUwMDEwWhcNMjUwMjE4MDUwMDEwWjAzMTEwLwYDVQQD
Eyg4NzY0NmM0ZjE5YTNkMzA2ZGQyOGEyYmQxZjc3Y2YyMzU1M2U2ZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRUhVD72oVzSJuvpH3/GHKQRnCTE
xL0cDGMI9bOYthyvSGA3E4/Rt0S8qEh1nx0/OUkmCx3ek0h7v0eKWX5prDRezNvt
0/822gDFx+F3bMVakchvqteqj0IR61ryrdKQL58rllTKt0pSngNx6RPc4D+CWstT
k0aP+CkBgovSfDL8ahzuAhFOxU4y8bHMu/34rkhjd6Qbl1R3Nz7GiLx1mZg+GMM2
aCEKCJtQ3i3tafCIVDJ8cVtgRaPDMOaFmmF2P/9NAhK++YeKhYrMPm/Sj3YCDy9v
1a1+2405fQze7zV0DlX796N9bmP/8JC1bJ9eBsK2gfG13zYQS7E49DSeLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdkbE8Zo9MG3SiivR93zyNVPm5EMB8GA1UdIwQY
MBaAFMdzbt65L5N+pFiT6pvPTvg/Ff/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYt
NjY5NmRhZGI0NWViLzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYtNjY5NmRhZGI0NWVi
LzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyuDzNGP
DGdeWOJmlCjUdTIzFjJQD6a1Wl1EgVvMyF9BuW/Xtpg+IIoUeXi/VRYN8QCC8gHF
ijyGRMekVi73WCbruHl++Krw0Uqrum0vNr1F/Zq+JOsVDKp9K/Y/WGoKLt9kmB0d
S50+ACIE/AX3Wamd1hzZlhsD+ZXy2o59ksm4sDHWkAg8N1MM8V2VYHHkpF7FlI2L
mqd+BZb8K6+OqmIKMQEoVj7SExGmTfV4oo57VIvpiGfmLM/2TDH1Kn4T3AT/yrtw
lFXdUA89QJdli0vA1UUJwaRNazoPVsSjLX6QWNFZKuxt29/t9+kWxYyQJLLGYbvh
6EUsCXMfE86Mpw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:30 2025 by rpki-client