Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
File: Z6FPJDBIdf8VT-Kysstuugr5RSM.mft (raw, json)
Hash identifier: 5B9agRhgCdev9fVAti4BPLF+v16jJ/SKwFU4DQzLicg=
Subject key identifier: B1:06:81:39:D1:22:F5:31:C9:9D:6E:27:48:E5:70:C4:D9:2B:CB:0A
Authority key identifier: 67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
Certificate issuer: /CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Certificate serial: 019511D986C17EED8E8EDAA5D99DA619B2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
Manifest number: 132F
Signing time: Mon 17 Feb 2025 03:00:23 +0000
Manifest this update: Mon 17 Feb 2025 03:00:23 +0000
Manifest next update: Tue 18 Feb 2025 03:00:23 +0000
Files and hashes: 1: Z6FPJDBIdf8VT-Kysstuugr5RSM.crl (hash: t3ZnH65YklwPPYfqMmlqEvqvNigunpU+a1cnooPezqY=)
2: pl66MpODxtxRoZhLJAW-nkoD_Sc.roa (hash: sJLlhjSfYMWQixCxG3V31R8LPRit/+p4sujJjRjMO3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:86:c1:7e:ed:8e:8e:da:a5:d9:9d:a6:19:b2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Validity
Not Before: Feb 17 03:00:23 2025 GMT
Not After : Feb 18 03:00:23 2025 GMT
Subject: CN=b1068139d122f531c99d6e2748e570c4d92bcb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:77:f7:98:ac:bd:7f:ad:70:6f:c2:85:00:
1f:27:a4:95:2c:e4:06:67:47:48:fc:5a:89:f2:6d:
45:4c:36:1d:e9:d9:54:d4:c2:a9:74:67:85:61:f0:
cb:bc:fb:56:7c:6d:5a:a0:e2:f0:93:b2:3b:1e:9e:
8e:e9:fe:08:ce:2f:1a:c4:89:43:0d:01:4a:5c:b9:
0d:3c:df:d0:e8:a7:05:78:11:f9:0d:16:69:e7:4a:
7e:b2:34:a7:73:9a:09:53:b2:05:2c:27:d6:34:2d:
23:c8:03:48:92:d8:b8:2e:2b:74:b9:fb:fd:26:5d:
f0:6f:df:11:83:1e:58:49:9e:43:71:86:aa:ae:d8:
56:eb:fe:7f:b1:ea:2d:ed:cf:48:26:5b:55:da:79:
03:be:0e:44:2d:c1:92:14:86:fe:c3:62:70:26:46:
87:96:d4:77:b9:57:ee:bc:b4:57:1b:de:b3:d9:7d:
f6:3c:ba:a7:6e:d5:34:7a:9a:13:95:26:ef:6d:1d:
9d:9d:63:88:c0:b8:01:8d:ab:d6:3f:ff:b4:2c:0b:
b4:88:96:82:21:3d:dd:f1:dd:36:25:b1:7e:37:5b:
9c:28:1f:aa:53:10:8d:97:d3:13:fa:46:86:79:98:
fe:bf:85:93:07:fe:03:2b:3b:ba:e4:0a:5a:62:4e:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:06:81:39:D1:22:F5:31:C9:9D:6E:27:48:E5:70:C4:D9:2B:CB:0A
X509v3 Authority Key Identifier:
keyid:67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c1:84:d4:c1:fc:0d:62:e5:7e:b8:e6:b2:ab:bd:d6:23:ca:
df:c7:f2:2a:bb:c3:a3:6a:58:d1:70:33:30:29:2f:3d:7a:91:
4e:06:bb:37:78:9a:d4:82:48:c3:d0:25:b6:06:1a:6d:32:3a:
07:f1:01:d3:69:c1:20:87:bb:6c:94:f5:78:85:8b:73:dd:1e:
ab:c2:67:50:77:62:9c:e0:e6:37:14:08:c9:79:b9:b8:a6:d2:
b1:3c:61:84:58:f0:5f:0e:d0:b9:a1:2a:92:3d:43:05:21:76:
c7:a9:e4:1c:8d:4c:89:63:80:47:f1:f1:3b:f6:9c:7a:ac:ab:
81:bc:ae:3b:3f:a2:a1:5b:f0:0f:ed:99:e4:df:8b:8d:75:be:
f6:7e:82:11:ab:ba:77:09:28:23:ec:17:90:a9:7a:bd:7e:b2:
72:6f:75:be:0d:49:b9:7e:a1:a5:e1:15:d6:79:62:38:8f:f4:
9c:79:15:56:88:5d:e3:50:6b:f0:c5:d9:de:6a:3d:75:df:01:
4b:7e:1d:4f:44:b3:d6:38:67:f4:86:7b:60:ea:61:8b:02:20:
06:37:bd:6c:cf:56:fd:9e:9b:40:d7:7e:ec:dc:72:eb:27:e6:
8d:51:5d:4f:8a:3f:05:40:cc:05:b1:ee:da:16:84:34:cf:0e:
aa:b1:b5:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2YbBfu2Ojtql2Z2mGbLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YTE0ZjI0MzA0ODc1ZmYxNTRmZTJiMmIyY2I2ZWJhMGFm
OTQ1MjMwHhcNMjUwMjE3MDMwMDIzWhcNMjUwMjE4MDMwMDIzWjAzMTEwLwYDVQQD
EyhiMTA2ODEzOWQxMjJmNTMxYzk5ZDZlMjc0OGU1NzBjNGQ5MmJjYjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jl395isvX+tcG/ChQAfJ6SVLOQG
Z0dI/FqJ8m1FTDYd6dlU1MKpdGeFYfDLvPtWfG1aoOLwk7I7Hp6O6f4Izi8axIlD
DQFKXLkNPN/Q6KcFeBH5DRZp50p+sjSnc5oJU7IFLCfWNC0jyANIkti4Lit0ufv9
Jl3wb98Rgx5YSZ5DcYaqrthW6/5/seot7c9IJltV2nkDvg5ELcGSFIb+w2JwJkaH
ltR3uVfuvLRXG96z2X32PLqnbtU0epoTlSbvbR2dnWOIwLgBjavWP/+0LAu0iJaC
IT3d8d02JbF+N1ucKB+qUxCNl9MT+kaGeZj+v4WTB/4DKzu65ApaYk7XAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEGgTnRIvUxyZ1uJ0jlcMTZK8sKMB8GA1UdIwQY
MBaAFGehTyQwSHX/FU/isrLLbroK+UUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjZGUEpEQklkZjhWVC1LeXNzdHV1Z3I1UlNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iNDBmMjYtNGFmNC00MzlkLWEzZDAt
NWMzMDczNGFjYjM4LzEvWjZGUEpEQklkZjhWVC1LeXNzdHV1Z3I1UlNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9iNDBmMjYtNGFmNC00MzlkLWEzZDAtNWMzMDczNGFjYjM4
LzEvWjZGUEpEQklkZjhWVC1LeXNzdHV1Z3I1UlNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssGE1MH8
DWLlfrjmsqu91iPK38fyKrvDo2pY0XAzMCkvPXqRTga7N3ia1IJIw9AltgYabTI6
B/EB02nBIIe7bJT1eIWLc90eq8JnUHdinODmNxQIyXm5uKbSsTxhhFjwXw7QuaEq
kj1DBSF2x6nkHI1MiWOAR/HxO/aceqyrgbyuOz+ioVvwD+2Z5N+LjXW+9n6CEau6
dwkoI+wXkKl6vX6ycm91vg1JuX6hpeEV1nliOI/0nHkVVohd41Br8MXZ3mo9dd8B
S34dT0Sz1jhn9IZ7YOphiwIgBje9bM9W/Z6bQNd+7Nxy6yfmjVFdT4o/BUDMBbHu
2haENM8OqrG1sg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:57 2025 by rpki-client