Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier: LdTP4Lcq8yJy1UqXMqlsQCkfwVrHHrUBWjNqFNvBb6A=
Subject key identifier: 81:47:98:9D:49:B3:4D:F0:11:FB:B2:A2:58:60:40:BD:5C:41:89:48
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 0195113559B17CB1D125710A91087DF09373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 00:01:03 +0000
Manifest this update: Mon 17 Feb 2025 00:01:03 +0000
Manifest next update: Tue 18 Feb 2025 00:01:03 +0000
Files and hashes: 1: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: rBYPZcX+gyLrLapBTXh/iK2HFkuREhJKiC852Oir87s=)
2: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (hash: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:59:b1:7c:b1:d1:25:71:0a:91:08:7d:f0:93:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Feb 17 00:01:03 2025 GMT
Not After : Feb 18 00:01:03 2025 GMT
Subject: CN=8147989d49b34df011fbb2a2586040bd5c418948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:40:22:a7:08:9f:a9:85:82:f6:08:f6:da:32:
2c:b4:da:2e:cc:36:65:c0:e0:43:5d:3c:eb:c9:ed:
f8:7b:1e:b4:1a:3c:fb:ee:21:72:cf:ce:57:b5:4f:
ed:5d:a7:3a:04:13:e9:4e:4d:60:8d:f1:14:cc:6e:
f8:c2:15:37:0c:a3:e6:f7:7f:cf:f7:d8:4e:24:8f:
08:4e:3f:09:43:58:2f:24:28:09:9e:98:fa:ae:27:
c8:d8:2b:ca:34:a6:09:3a:7d:58:1d:98:e1:b4:35:
00:55:67:41:ab:b7:c0:12:73:2f:d8:f5:cf:94:5e:
2e:ce:c0:e8:0e:f7:0c:c2:34:02:e4:d7:cd:d3:a1:
1e:b7:63:36:16:d2:db:b4:83:cf:72:72:28:30:f3:
c6:71:4a:0d:3f:35:24:a7:b6:b2:df:0a:6e:b0:da:
f6:24:bc:5a:76:e7:ff:01:1d:18:7d:a8:6b:05:f4:
17:2c:91:b9:9b:60:2f:2a:e7:f8:6d:43:99:3f:84:
30:34:3d:36:d0:49:25:f9:e2:b4:c3:a2:61:a5:52:
6e:44:6f:4f:b0:72:f1:53:b4:92:43:45:1b:c9:24:
d9:92:71:0d:62:67:c3:b6:c7:7d:f5:b1:ed:ee:7f:
a3:9b:f5:73:8b:5d:6d:af:f9:fa:ba:d7:0c:88:a1:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:47:98:9D:49:B3:4D:F0:11:FB:B2:A2:58:60:40:BD:5C:41:89:48
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dc:8f:6b:a8:09:52:38:0e:bf:da:2a:0d:ea:17:a2:9d:d6:
7e:e3:ea:32:e8:b3:b7:4d:ea:f5:93:47:af:aa:0d:0e:c1:62:
89:c6:55:cd:39:7c:dd:b3:54:d1:d8:89:d5:bf:5e:4d:43:a2:
cc:a7:a8:55:4f:a4:cc:f3:8d:72:2f:3e:29:0c:1c:c0:a7:ea:
c8:a0:3d:a5:81:bd:b4:ab:f7:5e:f1:90:5b:9f:0a:95:e8:e1:
43:1b:5d:15:db:84:86:d5:18:fd:65:1b:e3:2c:c9:73:96:39:
8b:38:45:ab:97:b7:75:b8:b4:43:3e:6c:35:b5:8a:66:96:10:
c8:f9:7a:07:a8:98:10:11:c2:19:5d:ea:c1:6e:76:c5:4d:10:
54:5e:7d:98:db:26:16:e0:32:09:23:79:da:02:d5:94:ee:90:
8e:ef:c9:b8:01:b5:6a:9c:56:d7:07:7f:33:a7:d8:81:25:db:
c3:33:c1:e4:ea:8d:a0:7c:a6:6a:05:01:16:62:c1:e4:06:67:
5a:1d:15:dc:fc:99:7f:7f:48:5c:c0:a4:cf:e4:fa:f9:d5:55:
36:20:c1:95:a4:73:c6:e8:c9:53:10:fd:6e:43:15:53:0d:e6:
7d:47:62:a1:32:bc:28:ec:27:02:0e:ea:7d:c8:75:4d:88:55:
6b:cf:f7:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNVmxfLHRJXEKkQh98JNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjc5NmM1YTk4NTQ1MzJlOWVkNjM4ZDFjMzlhNTQxYzJk
ODk1MmMwHhcNMjUwMjE3MDAwMTAzWhcNMjUwMjE4MDAwMTAzWjAzMTEwLwYDVQQD
Eyg4MTQ3OTg5ZDQ5YjM0ZGYwMTFmYmIyYTI1ODYwNDBiZDVjNDE4OTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kAipwifqYWC9gj22jIstNouzDZl
wOBDXTzrye34ex60Gjz77iFyz85XtU/tXac6BBPpTk1gjfEUzG74whU3DKPm93/P
99hOJI8ITj8JQ1gvJCgJnpj6rifI2CvKNKYJOn1YHZjhtDUAVWdBq7fAEnMv2PXP
lF4uzsDoDvcMwjQC5NfN06Eet2M2FtLbtIPPcnIoMPPGcUoNPzUkp7ay3wpusNr2
JLxaduf/AR0YfahrBfQXLJG5m2AvKuf4bUOZP4QwND020Ekl+eK0w6JhpVJuRG9P
sHLxU7SSQ0UbySTZknENYmfDtsd99bHt7n+jm/Vzi11tr/n6utcMiKE+fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFHmJ1Js03wEfuyolhgQL1cQYlIMB8GA1UdIwQY
MBaAFP4nlsWphUUy6e1jjRw5pUHC2JUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYmExODYtZTRkMi00NWUxLWE5Mzgt
MGU0YWIyNjM3YmVkLzEvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYmExODYtZTRkMi00NWUxLWE5MzgtMGU0YWIyNjM3YmVk
LzEvX2llV3hhbUZSVExwN1dPTkhEbWxRY0xZbFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9yPa6gJ
UjgOv9oqDeoXop3WfuPqMuizt03q9ZNHr6oNDsFiicZVzTl83bNU0diJ1b9eTUOi
zKeoVU+kzPONci8+KQwcwKfqyKA9pYG9tKv3XvGQW58KlejhQxtdFduEhtUY/WUb
4yzJc5Y5izhFq5e3dbi0Qz5sNbWKZpYQyPl6B6iYEBHCGV3qwW52xU0QVF59mNsm
FuAyCSN52gLVlO6Qju/JuAG1apxW1wd/M6fYgSXbwzPB5OqNoHymagUBFmLB5AZn
Wh0V3PyZf39IXMCkz+T6+dVVNiDBlaRzxujJUxD9bkMVUw3mfUdioTK8KOwnAg7q
fch1TYhVa8/30A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:53 2025 by rpki-client