Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: 56GRcSv4U8dH1jMO2OFXx+laZoUeg+VJNSZn159MrHY=
Subject key identifier: EC:D4:57:D1:A1:18:A5:77:9B:90:D8:33:48:96:F4:B5:61:4A:8F:A5
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 019511A2C244AF53DE8189029319E956FF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 02:00:33 +0000
Manifest this update: Mon 17 Feb 2025 02:00:33 +0000
Manifest next update: Tue 18 Feb 2025 02:00:33 +0000
Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=)
2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: RnnO6TRXX672VtcoV/d3LbqLwuXNY6MQfsPCtbsGm6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c2:44:af:53:de:81:89:02:93:19:e9:56:ff:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Feb 17 02:00:33 2025 GMT
Not After : Feb 18 02:00:33 2025 GMT
Subject: CN=ecd457d1a118a5779b90d8334896f4b5614a8fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:a5:2b:28:ac:d2:27:81:8f:c0:d1:03:c3:
1e:05:a1:26:b7:ed:d6:1a:84:54:9e:0a:ee:67:3c:
ec:e7:cd:80:83:c0:09:b4:31:c4:53:17:56:34:bd:
d6:2b:da:5b:cc:84:94:d9:57:6b:71:c6:d7:b1:e3:
ef:6c:92:52:55:8d:4a:a7:e3:18:f8:c4:3e:c0:e2:
98:c7:8c:ef:da:24:7b:d8:4c:1a:43:e2:20:8a:4b:
7f:2a:62:98:91:e1:ae:8f:c5:16:cc:fa:16:4b:ce:
29:55:67:32:d5:93:0b:40:d5:20:36:f1:a3:93:15:
89:22:00:63:41:02:03:f6:8a:7d:88:97:98:6d:b0:
4a:72:d1:60:91:13:61:9e:63:cc:d6:42:fb:1a:4a:
cc:09:79:77:99:d6:91:ef:95:fb:99:ae:29:95:a5:
49:77:f1:52:1b:91:85:a1:39:69:e3:3b:75:42:f8:
c3:e4:2a:68:d5:f3:80:f7:07:83:ec:cf:6a:3d:0b:
05:ac:da:d8:88:5a:d8:0d:e0:75:81:dc:13:02:ef:
d0:7e:20:fa:55:6c:49:65:d4:70:70:62:79:d3:8f:
61:73:7e:91:e4:e2:a5:42:39:ef:76:0d:5e:b2:a8:
eb:0b:4b:84:09:8b:ad:7b:54:51:52:ca:88:67:4e:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D4:57:D1:A1:18:A5:77:9B:90:D8:33:48:96:F4:B5:61:4A:8F:A5
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a5:59:18:eb:41:d6:70:f2:21:03:83:ca:3c:d6:11:dd:f2:
ee:ea:6b:a5:ac:2f:be:80:db:18:d6:a2:41:18:db:d2:04:2e:
0b:05:f5:0b:30:de:c5:73:0e:f9:36:e9:2a:0e:8e:b1:34:5d:
c9:0d:c6:40:54:d8:bd:c7:83:d9:2b:3d:85:3c:91:d0:c3:04:
50:b5:a5:3e:b7:d7:06:a8:69:28:77:8e:ae:0c:cd:e7:ae:34:
20:06:44:f4:bf:bb:60:bb:94:d0:f8:ee:8f:c5:45:89:74:74:
8d:45:0b:c5:96:e8:fc:27:b1:b7:12:1b:ec:76:be:34:53:63:
1f:d2:74:03:b1:b1:08:48:7f:57:f9:e1:b2:5f:cd:ef:5b:d6:
98:a9:66:3a:f6:f0:c6:c3:e1:7d:70:d4:74:44:a7:dc:00:0e:
57:58:84:b8:1a:9a:0a:6f:a8:ce:76:2f:4d:d5:8c:1a:70:7e:
fc:a6:cd:6d:75:22:d4:de:b5:22:fa:b2:6c:fd:94:96:bb:7b:
ef:90:50:41:0c:21:19:32:80:a2:c4:49:0e:05:67:25:f2:98:
d8:19:8d:c0:ac:8f:27:6f:2c:1a:aa:e8:e1:d5:05:22:73:59:
aa:28:4f:00:2b:37:f2:0b:ce:85:c9:7c:3b:f6:c5:86:4a:22:
6b:07:ce:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURosJEr1PegYkCkxnpVv8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk
ODhmZTMwHhcNMjUwMjE3MDIwMDMzWhcNMjUwMjE4MDIwMDMzWjAzMTEwLwYDVQQD
EyhlY2Q0NTdkMWExMThhNTc3OWI5MGQ4MzM0ODk2ZjRiNTYxNGE4ZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A6lKyis0ieBj8DRA8MeBaEmt+3W
GoRUngruZzzs582Ag8AJtDHEUxdWNL3WK9pbzISU2VdrccbXsePvbJJSVY1Kp+MY
+MQ+wOKYx4zv2iR72EwaQ+Igikt/KmKYkeGuj8UWzPoWS84pVWcy1ZMLQNUgNvGj
kxWJIgBjQQID9op9iJeYbbBKctFgkRNhnmPM1kL7GkrMCXl3mdaR75X7ma4plaVJ
d/FSG5GFoTlp4zt1QvjD5Cpo1fOA9weD7M9qPQsFrNrYiFrYDeB1gdwTAu/QfiD6
VWxJZdRwcGJ5049hc36R5OKlQjnvdg1esqjrC0uECYute1RRUsqIZ07ldQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzUV9GhGKV3m5DYM0iW9LVhSo+lMB8GA1UdIwQY
MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt
NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj
LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6VZGOtB
1nDyIQODyjzWEd3y7uprpawvvoDbGNaiQRjb0gQuCwX1CzDexXMO+TbpKg6OsTRd
yQ3GQFTYvceD2Ss9hTyR0MMEULWlPrfXBqhpKHeOrgzN5640IAZE9L+7YLuU0Pju
j8VFiXR0jUULxZbo/CextxIb7Ha+NFNjH9J0A7GxCEh/V/nhsl/N71vWmKlmOvbw
xsPhfXDUdESn3AAOV1iEuBqaCm+oznYvTdWMGnB+/KbNbXUi1N61IvqybP2Ulrt7
75BQQQwhGTKAosRJDgVnJfKY2BmNwKyPJ28sGqro4dUFInNZqihPACs38gvOhcl8
O/bFhkoiawfOXQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:38 2025 by rpki-client