Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: NQ5JdW4MO/TQKIp31IV1Plln/W+gdJqDIHnKqfK/Vg8=
Subject key identifier: FD:95:8E:2A:0B:82:3C:24:7A:F7:CF:8E:65:31:06:45:A0:05:4F:BC
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 019511D96E1C069C68E26B3A38DBBF9E894B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 0C16
Signing time: Mon 17 Feb 2025 03:00:16 +0000
Manifest this update: Mon 17 Feb 2025 03:00:16 +0000
Manifest next update: Tue 18 Feb 2025 03:00:16 +0000
Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=)
2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: Dyg3+8YOvyQZpMmWru0ko59gxoGejMZUxfCvRK7eDPw=)
4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:6e:1c:06:9c:68:e2:6b:3a:38:db:bf:9e:89:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Feb 17 03:00:16 2025 GMT
Not After : Feb 18 03:00:16 2025 GMT
Subject: CN=fd958e2a0b823c247af7cf8e65310645a0054fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:96:47:41:8c:26:9f:ab:48:e6:b4:12:a2:
e0:80:3e:09:ab:33:72:e4:2a:8d:b2:ea:fe:34:66:
c5:c6:31:28:80:64:de:25:1d:c6:4d:e9:ad:39:66:
a0:b5:8a:d3:9e:57:89:25:eb:58:a6:4a:d8:64:45:
9e:83:23:d8:0c:6e:74:37:80:95:25:fd:e7:40:2c:
7e:97:58:e3:07:59:98:8a:cd:c9:4d:0b:2b:a8:09:
97:ce:43:f3:61:c4:62:e6:7d:22:51:6f:a5:95:6a:
47:1a:1c:ae:b1:f3:b6:5c:76:e1:88:89:fc:41:ee:
ee:0d:35:87:20:2b:e1:b2:94:9d:20:96:63:d8:63:
38:d8:cc:72:01:a9:46:ff:14:8e:cf:e0:f6:6c:8a:
13:cd:3c:28:6b:cc:8f:7b:02:a5:1d:a5:12:56:26:
28:e0:fd:36:2c:c5:2d:60:41:de:ca:d7:01:4a:c5:
02:2c:c4:48:ad:12:e7:17:15:4d:cd:20:3c:5d:51:
9d:f2:29:d6:04:a1:a5:cf:f2:a4:0b:26:e6:09:4b:
5f:af:1c:28:ad:dd:e4:e4:a1:84:79:bf:31:49:fb:
aa:ca:e6:b2:dc:e0:26:b6:ea:b5:69:1c:57:71:32:
52:d6:14:f8:11:9d:57:df:cc:f7:e0:02:4e:d5:5f:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:95:8E:2A:0B:82:3C:24:7A:F7:CF:8E:65:31:06:45:A0:05:4F:BC
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4b:71:3f:12:30:3c:d0:70:07:6f:29:a3:3c:76:58:8c:b2:
a9:97:20:97:77:bd:57:1e:bb:28:66:c4:7e:24:57:a9:bf:fb:
f5:cd:49:dd:22:e8:5d:e6:45:c7:d5:1b:21:60:8f:2d:0d:cd:
f1:12:b6:39:6b:db:3e:ee:43:45:16:38:7e:6c:82:1d:65:c1:
4a:ee:e8:13:ff:8d:4f:9d:eb:89:ff:ea:24:1a:91:9e:ce:9f:
19:bc:2d:15:b9:b9:1c:7b:dd:cd:2a:ef:34:97:e2:61:c4:eb:
3b:79:5a:db:ce:2f:35:72:f7:d6:d0:8b:ae:e2:20:58:5e:2f:
34:b3:a4:5e:ca:86:94:44:2f:11:7f:39:93:02:ae:d5:2c:81:
0e:56:10:21:0e:9c:58:1e:f6:95:ff:30:91:17:74:03:e0:5c:
76:fa:a6:a4:8d:57:b4:1c:fa:e8:77:b6:05:42:8d:1c:25:2d:
ba:b2:4d:e6:f8:d9:e2:b1:62:0a:7d:92:81:cf:ed:d6:62:7e:
fc:14:4e:ae:0d:61:a0:0e:b2:1b:dd:6e:86:88:a5:ba:bb:ff:
a8:db:17:65:10:95:31:a3:a0:2b:95:78:9a:bd:bb:27:43:2b:
92:7a:08:c2:7f:bd:74:4c:26:9d:b7:8d:46:a3:d9:90:ec:f5:
77:3b:b2:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2W4cBpxo4ms6ONu/nolLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl
MWM2MjIwHhcNMjUwMjE3MDMwMDE2WhcNMjUwMjE4MDMwMDE2WjAzMTEwLwYDVQQD
EyhmZDk1OGUyYTBiODIzYzI0N2FmN2NmOGU2NTMxMDY0NWEwMDU0ZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycCWR0GMJp+rSOa0EqLggD4JqzNy
5CqNsur+NGbFxjEogGTeJR3GTemtOWagtYrTnleJJetYpkrYZEWegyPYDG50N4CV
Jf3nQCx+l1jjB1mYis3JTQsrqAmXzkPzYcRi5n0iUW+llWpHGhyusfO2XHbhiIn8
Qe7uDTWHICvhspSdIJZj2GM42MxyAalG/xSOz+D2bIoTzTwoa8yPewKlHaUSViYo
4P02LMUtYEHeytcBSsUCLMRIrRLnFxVNzSA8XVGd8inWBKGlz/KkCybmCUtfrxwo
rd3k5KGEeb8xSfuqyuay3OAmtuq1aRxXcTJS1hT4EZ1X38z34AJO1V/T0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2VjioLgjwkevfPjmUxBkWgBU+8MB8GA1UdIwQY
MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt
NTkwYTk4MTNkZGRmLzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm
LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABktxPxIw
PNBwB28pozx2WIyyqZcgl3e9Vx67KGbEfiRXqb/79c1J3SLoXeZFx9UbIWCPLQ3N
8RK2OWvbPu5DRRY4fmyCHWXBSu7oE/+NT53rif/qJBqRns6fGbwtFbm5HHvdzSrv
NJfiYcTrO3la284vNXL31tCLruIgWF4vNLOkXsqGlEQvEX85kwKu1SyBDlYQIQ6c
WB72lf8wkRd0A+BcdvqmpI1XtBz66He2BUKNHCUturJN5vjZ4rFiCn2Sgc/t1mJ+
/BROrg1hoA6yG91uhoilurv/qNsXZRCVMaOgK5V4mr27J0MrknoIwn+9dEwmnbeN
RqPZkOz1dzuyVA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:06 2025 by rpki-client