Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: FrASDJ6NhrEh5ZAx9FSuMUZdd4UE4MirgYHaOZ3hTQc=
Subject key identifier: 5E:DD:0C:CD:DB:20:72:ED:D2:00:55:1F:04:1E:F2:75:1A:28:A8:17
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 019510FDC9712A44104AC8FEB6BD666B1A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 0F80
Signing time: Sun 16 Feb 2025 23:00:22 +0000
Manifest this update: Sun 16 Feb 2025 23:00:22 +0000
Manifest next update: Mon 17 Feb 2025 23:00:22 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: jpIGViVDsl8PvjhYPw8dlSF4wXfCaEVG1Rhq+tE4tF0=)
2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:c9:71:2a:44:10:4a:c8:fe:b6:bd:66:6b:1a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: Feb 16 23:00:22 2025 GMT
Not After : Feb 17 23:00:22 2025 GMT
Subject: CN=5edd0ccddb2072edd200551f041ef2751a28a817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:92:82:3e:b9:e1:e6:69:38:65:6a:ec:69:
79:01:ed:70:79:d9:63:b7:71:20:c9:75:ff:33:ae:
14:50:1e:8d:f0:ad:87:6f:0b:3b:e7:81:cf:ff:b1:
d6:52:e7:70:56:46:93:32:17:9f:3e:63:62:b8:bb:
a2:86:b6:fc:58:2f:23:4a:87:86:3f:01:d1:00:86:
7e:fe:ae:16:17:08:7e:8a:82:4c:2c:69:a7:bd:92:
67:79:5a:99:bc:80:c1:d9:df:77:4d:d2:54:04:95:
69:c0:8c:f4:f3:ed:e9:b8:20:03:c5:1b:67:00:22:
a5:7a:56:f1:46:5c:c3:4b:f3:86:0c:6e:73:7f:f1:
e0:8c:41:61:1d:f8:eb:42:36:0b:a7:c6:b2:40:36:
22:14:69:87:f6:6e:e0:ca:49:06:16:b2:88:67:2a:
d5:a4:2f:18:19:8a:8a:66:ea:c0:ca:7b:2a:be:34:
c8:4a:d7:86:23:8a:50:cf:cf:66:c9:dc:d0:40:a0:
c4:d6:7d:14:8a:40:20:a8:db:3e:df:4e:37:b4:cd:
3b:0d:ea:52:ce:52:fa:41:11:e7:68:82:fe:8f:5b:
57:39:53:61:d1:e9:68:b4:69:95:27:23:b3:15:d5:
58:bd:e5:01:1d:cf:ee:93:68:d9:d6:25:18:3a:ad:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DD:0C:CD:DB:20:72:ED:D2:00:55:1F:04:1E:F2:75:1A:28:A8:17
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:65:6e:7a:b6:de:d4:fa:7d:14:62:11:e8:d1:f2:db:b8:51:
b1:89:15:44:e2:1e:5c:72:f5:88:95:9b:b8:f5:fb:70:8b:44:
27:eb:aa:06:f9:83:65:49:c8:9e:40:1c:5c:cf:5e:82:09:3b:
71:d9:6e:b6:14:57:fd:b4:5f:cc:72:37:76:9d:af:36:55:4c:
ad:67:8e:c6:bf:49:a5:2c:cf:98:a7:ff:0d:35:e4:50:1e:ab:
51:4f:7b:55:71:10:cc:7e:9f:18:30:8d:c8:3e:6e:3e:67:b8:
f1:17:5b:c8:20:94:8b:13:15:2a:32:ac:8d:b2:4c:cf:e7:e3:
71:b1:07:cf:4d:5d:65:49:f1:0b:2e:af:f4:ea:eb:f8:00:85:
0a:a8:61:1d:df:f1:9c:6c:96:e7:14:9b:53:4c:3a:ff:07:65:
88:28:65:09:56:df:69:fc:be:8a:6b:61:e6:0f:51:c3:6c:92:
c9:21:50:21:0b:d4:22:01:56:60:93:b5:61:fa:5f:c8:21:f3:
db:db:3a:86:ee:53:f4:bb:18:95:69:63:9f:a9:a5:42:d9:34:
ac:04:88:d1:70:eb:e7:e2:7e:72:c0:3c:da:09:c1:80:75:74:
96:d9:89:95:21:08:86:31:92:58:ed:2a:82:bf:6e:1a:91:9a:
78:49:85:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/clxKkQQSsj+tr1maxqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGQ3MDEzYTdmZGJiNTY2M2ZkMzg0YTRmZWQxMjMwMzE0
NWUzY2UwHhcNMjUwMjE2MjMwMDIyWhcNMjUwMjE3MjMwMDIyWjAzMTEwLwYDVQQD
Eyg1ZWRkMGNjZGRiMjA3MmVkZDIwMDU1MWYwNDFlZjI3NTFhMjhhODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03GSgj654eZpOGVq7Gl5Ae1wedlj
t3EgyXX/M64UUB6N8K2Hbws754HP/7HWUudwVkaTMhefPmNiuLuihrb8WC8jSoeG
PwHRAIZ+/q4WFwh+ioJMLGmnvZJneVqZvIDB2d93TdJUBJVpwIz08+3puCADxRtn
ACKlelbxRlzDS/OGDG5zf/HgjEFhHfjrQjYLp8ayQDYiFGmH9m7gykkGFrKIZyrV
pC8YGYqKZurAynsqvjTISteGI4pQz89mydzQQKDE1n0UikAgqNs+3043tM07DepS
zlL6QRHnaIL+j1tXOVNh0elotGmVJyOzFdVYveUBHc/uk2jZ1iUYOq0OCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7dDM3bIHLt0gBVHwQe8nUaKKgXMB8GA1UdIwQY
MBaAFHmNcBOn/btWY/04Sk/tEjAxRePOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzct
MjRkODE4YmE3ZjI5LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzctMjRkODE4YmE3ZjI5
LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2Vuerbe
1Pp9FGIR6NHy27hRsYkVROIeXHL1iJWbuPX7cItEJ+uqBvmDZUnInkAcXM9eggk7
cdluthRX/bRfzHI3dp2vNlVMrWeOxr9JpSzPmKf/DTXkUB6rUU97VXEQzH6fGDCN
yD5uPme48RdbyCCUixMVKjKsjbJMz+fjcbEHz01dZUnxCy6v9Orr+ACFCqhhHd/x
nGyW5xSbU0w6/wdliChlCVbfafy+imth5g9Rw2ySySFQIQvUIgFWYJO1YfpfyCHz
29s6hu5T9LsYlWljn6mlQtk0rASI0XDr5+J+csA82gnBgHV0ltmJlSEIhjGSWO0q
gr9uGpGaeEmFeQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:02 2025 by rpki-client