Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: 9FWgNL2kj0c44NKT8iC2PKXGhBRYryzLvsMGK2nG4a4=
Subject key identifier: B8:85:5E:F4:86:81:29:CE:FD:E9:93:74:0E:13:37:08:EF:A7:A7:DB
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 019511351FAA8BC5DAB9B6D8128B4C9180DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0B1E
Signing time: Mon 17 Feb 2025 00:00:48 +0000
Manifest this update: Mon 17 Feb 2025 00:00:48 +0000
Manifest next update: Tue 18 Feb 2025 00:00:48 +0000
Files and hashes: 1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: mWhHNEPN99kZ4VCMoC9fQvenhUz/uznqJpVzuOPPiG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:1f:aa:8b:c5:da:b9:b6:d8:12:8b:4c:91:80:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Feb 17 00:00:48 2025 GMT
Not After : Feb 18 00:00:48 2025 GMT
Subject: CN=b8855ef4868129cefde993740e133708efa7a7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:49:49:fc:ec:f4:6d:a1:b5:85:08:07:f2:
fb:9a:9e:53:0b:76:19:68:99:38:bf:fe:04:59:db:
89:99:40:9d:40:c0:a8:5c:dc:83:26:79:fa:03:f5:
28:71:eb:6c:45:8c:65:45:45:41:c3:2e:7a:28:5e:
30:3b:2d:58:63:22:02:7b:87:37:fc:a0:bf:ab:a7:
42:c3:37:2d:ed:00:89:71:63:8c:82:9d:d7:a0:c8:
9c:31:b5:f3:52:fc:34:76:64:b1:55:e1:56:57:28:
98:9c:20:a6:0c:af:b3:c0:ca:a4:6a:30:0b:08:4d:
d7:3a:89:13:70:c4:ed:ee:5d:62:da:6b:94:b8:e2:
8c:e6:d5:85:bd:78:ee:d8:3c:cd:d3:71:06:b1:05:
9d:a6:0a:6d:c0:8a:5e:b6:d0:31:48:c8:59:01:6c:
17:11:7d:77:09:73:01:df:de:e0:48:2a:d8:cc:0a:
7f:ed:d1:ca:bb:4f:07:b6:78:b8:60:3d:e0:55:0c:
a7:66:fa:1e:de:fb:25:a3:e8:d6:35:63:af:ea:c3:
cc:4c:c5:ce:b5:78:3b:42:3e:5a:2a:11:44:16:a5:
8c:7e:09:bf:73:76:b2:98:03:5a:17:5f:da:bf:69:
62:ec:3a:b0:9e:b6:96:12:4d:07:7c:92:a7:b2:bd:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:85:5E:F4:86:81:29:CE:FD:E9:93:74:0E:13:37:08:EF:A7:A7:DB
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c0:4e:9d:cb:e5:01:68:f6:c4:01:ec:98:18:ac:19:fa:74:
51:3f:4b:db:8b:54:ac:a0:74:80:98:bb:64:bd:38:b9:d0:d4:
64:78:a9:30:45:ee:f3:29:bb:fa:85:0e:3f:c2:cb:24:da:14:
ba:93:04:26:65:f2:e5:a3:94:05:e7:3c:ce:49:fb:ea:58:5e:
27:b2:ac:59:2a:7e:6b:c1:a2:f5:54:06:42:58:93:96:9e:e2:
5d:19:ff:c4:45:16:04:c2:81:f1:70:59:f4:d6:36:b4:62:29:
d0:13:b6:96:7a:41:3c:fc:ad:e9:ae:5f:00:8e:5a:51:fd:c9:
d6:33:64:48:5f:7c:bc:11:5c:2a:14:a3:00:aa:be:e2:62:eb:
9f:90:6c:1e:c1:48:bb:e5:f6:24:22:76:f4:fa:5b:73:54:eb:
1c:0a:c6:b3:00:0c:75:1f:3f:b9:e4:81:1d:21:64:f0:33:5d:
17:b2:71:94:f5:4f:8c:5e:80:0c:7b:e0:d9:2e:c4:14:e0:02:
fd:69:ee:4e:4c:dc:1e:f0:74:6c:fe:a8:1e:19:48:27:ce:c3:
5c:49:31:89:00:d7:fc:e9:f4:69:c5:54:e4:8b:55:81:0a:57:
68:9f:be:93:83:64:d8:be:62:1d:e0:bb:0a:46:6c:f9:9c:1c:
6e:f2:8a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNR+qi8XaubbYEotMkYDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOTAzNDAzYzIwYTZjZGIyMjM2NmNjN2FjZjQ4ZTlmOTli
ZTM0ZmYwHhcNMjUwMjE3MDAwMDQ4WhcNMjUwMjE4MDAwMDQ4WjAzMTEwLwYDVQQD
EyhiODg1NWVmNDg2ODEyOWNlZmRlOTkzNzQwZTEzMzcwOGVmYTdhN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uBJSfzs9G2htYUIB/L7mp5TC3YZ
aJk4v/4EWduJmUCdQMCoXNyDJnn6A/UocetsRYxlRUVBwy56KF4wOy1YYyICe4c3
/KC/q6dCwzct7QCJcWOMgp3XoMicMbXzUvw0dmSxVeFWVyiYnCCmDK+zwMqkajAL
CE3XOokTcMTt7l1i2muUuOKM5tWFvXju2DzN03EGsQWdpgptwIpettAxSMhZAWwX
EX13CXMB397gSCrYzAp/7dHKu08Htni4YD3gVQynZvoe3vslo+jWNWOv6sPMTMXO
tXg7Qj5aKhFEFqWMfgm/c3aymANaF1/av2li7DqwnraWEk0HfJKnsr1p+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiFXvSGgSnO/emTdA4TNwjvp6fbMB8GA1UdIwQY
MBaAFLyQNAPCCmzbIjZsx6z0jp+ZvjT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kNWU1Y2ItNWIyNy00N2Y2LThhY2It
MDM1MDc4NzIyNWM4LzEvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9kNWU1Y2ItNWIyNy00N2Y2LThhY2ItMDM1MDc4NzIyNWM4
LzEvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8BOncvl
AWj2xAHsmBisGfp0UT9L24tUrKB0gJi7ZL04udDUZHipMEXu8ym7+oUOP8LLJNoU
upMEJmXy5aOUBec8zkn76lheJ7KsWSp+a8Gi9VQGQliTlp7iXRn/xEUWBMKB8XBZ
9NY2tGIp0BO2lnpBPPyt6a5fAI5aUf3J1jNkSF98vBFcKhSjAKq+4mLrn5BsHsFI
u+X2JCJ29Ppbc1TrHArGswAMdR8/ueSBHSFk8DNdF7JxlPVPjF6ADHvg2S7EFOAC
/WnuTkzcHvB0bP6oHhlIJ87DXEkxiQDX/On0acVU5ItVgQpXaJ++k4Nk2L5iHeC7
CkZs+ZwcbvKKRQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:21 2025 by rpki-client