Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: 4UAmqe5gL6MSVh3WhVFXMWnJXVuv0uko8yvvaW9qRrk=
Subject key identifier: 36:59:1D:4D:A7:AC:99:36:5F:AC:5E:DB:A4:57:8F:D2:12:69:23:42
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 019511A2D8368487678E455B5698FC0531B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 0EE0
Signing time: Mon 17 Feb 2025 02:00:39 +0000
Manifest this update: Mon 17 Feb 2025 02:00:39 +0000
Manifest next update: Tue 18 Feb 2025 02:00:39 +0000
Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: 3fzN3Vny5Kd5MF76YyzegiaQrzd7103IJ0Hj8gBkvj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:d8:36:84:87:67:8e:45:5b:56:98:fc:05:31:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Feb 17 02:00:39 2025 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=36591d4da7ac99365fac5edba4578fd212692342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:8b:07:9f:36:5b:3f:c5:17:c6:ba:4a:97:
02:c6:2c:ba:43:9a:59:72:02:e9:81:64:a3:0e:f8:
b3:64:04:d4:54:e5:88:2a:da:d1:e5:fb:b3:b4:e5:
30:3f:9a:9d:e9:1c:5b:03:dd:12:d2:88:19:c5:9a:
78:f4:a3:7b:e0:88:20:81:24:6f:7a:24:f3:80:50:
f9:14:5f:42:4e:b7:cd:7a:ac:c5:86:6c:c6:78:65:
23:0a:d9:55:b4:a3:de:47:46:d9:14:98:9f:cf:4d:
30:19:ca:64:0c:e0:1a:4f:b8:ad:8a:00:9c:21:f3:
93:10:ce:5e:3d:1a:44:b1:f8:a2:76:2b:08:6a:e5:
ac:74:f2:9b:4b:8b:55:0f:94:32:33:94:5b:c0:9c:
d0:8c:40:e0:4f:16:2b:7b:26:7c:ef:eb:0a:35:54:
5c:ed:10:68:4e:35:0a:30:a9:96:86:c4:96:a8:3d:
05:52:c9:58:dd:39:ff:59:95:00:59:92:ff:97:36:
4e:ca:c4:c9:29:a5:43:0d:59:db:d4:7f:1b:96:28:
2b:48:d4:62:3c:d2:c8:87:5e:98:28:d4:73:f9:c1:
4b:2f:64:0a:bb:78:92:91:b9:39:ff:fa:02:f4:09:
84:6f:e5:5a:7f:cf:3a:6b:bd:20:ae:ae:2d:a8:b0:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:59:1D:4D:A7:AC:99:36:5F:AC:5E:DB:A4:57:8F:D2:12:69:23:42
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7d:17:60:38:61:5f:f4:70:54:ee:1e:46:26:b5:6e:03:e7:
61:05:56:7d:db:e6:4b:0b:b0:d2:d1:50:53:f7:ce:8e:f7:e2:
20:85:01:07:96:de:f2:f7:a5:34:51:fb:02:4a:3b:c6:01:f4:
f7:65:6c:31:fa:c8:70:68:ca:7e:d4:3a:bb:a6:e5:f1:dd:b4:
34:94:d0:3b:99:b2:9a:92:2d:71:88:a4:72:0d:27:04:c0:c4:
62:b2:a4:c5:87:89:05:1b:41:a9:11:11:c2:63:07:2e:4a:c7:
dd:6c:28:70:e0:07:c5:38:e7:14:2d:04:e6:54:74:27:e9:26:
bc:6a:da:b5:e8:a8:8e:21:14:72:18:1b:e7:5b:ef:f0:b4:a0:
9a:85:86:6f:30:d1:09:80:95:e0:b8:23:f8:85:5d:18:7a:a0:
a4:3d:cc:61:02:8f:57:84:30:e6:79:0d:cb:85:da:08:51:b8:
35:e4:73:04:d0:41:50:e6:41:db:4e:10:79:13:14:61:c5:b0:
1d:05:eb:96:08:50:99:3c:3d:10:fd:58:aa:71:e7:1f:e7:d3:
03:3a:bc:dd:dc:c1:d4:13:1f:b8:85:39:62:f1:e0:33:d6:6d:
0a:8c:5e:8a:ef:c0:6e:64:be:77:ce:2e:a9:ca:6f:0d:e4:38:
1e:a3:82:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURotg2hIdnjkVbVpj8BTG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz
Y2VlMWMwHhcNMjUwMjE3MDIwMDM5WhcNMjUwMjE4MDIwMDM5WjAzMTEwLwYDVQQD
EygzNjU5MWQ0ZGE3YWM5OTM2NWZhYzVlZGJhNDU3OGZkMjEyNjkyMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx16LB582Wz/FF8a6SpcCxiy6Q5pZ
cgLpgWSjDvizZATUVOWIKtrR5fuztOUwP5qd6RxbA90S0ogZxZp49KN74IgggSRv
eiTzgFD5FF9CTrfNeqzFhmzGeGUjCtlVtKPeR0bZFJifz00wGcpkDOAaT7itigCc
IfOTEM5ePRpEsfiidisIauWsdPKbS4tVD5QyM5RbwJzQjEDgTxYreyZ87+sKNVRc
7RBoTjUKMKmWhsSWqD0FUslY3Tn/WZUAWZL/lzZOysTJKaVDDVnb1H8bligrSNRi
PNLIh16YKNRz+cFLL2QKu3iSkbk5//oC9AmEb+Vaf886a70grq4tqLCQvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZZHU2nrJk2X6xe26RXj9ISaSNCMB8GA1UdIwQY
MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt
Zjg1ZTMzZGQ4OTQ2LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2
LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh30XYDhh
X/RwVO4eRia1bgPnYQVWfdvmSwuw0tFQU/fOjvfiIIUBB5be8velNFH7Ako7xgH0
92VsMfrIcGjKftQ6u6bl8d20NJTQO5mympItcYikcg0nBMDEYrKkxYeJBRtBqRER
wmMHLkrH3WwocOAHxTjnFC0E5lR0J+kmvGrateiojiEUchgb51vv8LSgmoWGbzDR
CYCV4Lgj+IVdGHqgpD3MYQKPV4Qw5nkNy4XaCFG4NeRzBNBBUOZB204QeRMUYcWw
HQXrlghQmTw9EP1YqnHnH+fTAzq83dzB1BMfuIU5YvHgM9ZtCoxeiu/AbmS+d84u
qcpvDeQ4HqOCxg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:20 2025 by rpki-client