Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: FCF3ini7asP2bRYgfqCRu4Gh5agtWgF7uIRIOZbVfdg=
Subject key identifier: 98:D5:A1:D0:FD:7E:A6:19:B1:32:3E:A0:00:EE:A8:C1:0A:5B:7D:02
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 019511D943EA995641618AF40921D280532C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 09AE
Signing time: Mon 17 Feb 2025 03:00:05 +0000
Manifest this update: Mon 17 Feb 2025 03:00:05 +0000
Manifest next update: Tue 18 Feb 2025 03:00:05 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: wO33yOeLfW6a2DOkAsP5th0wW0SGtDSKCGbVP13kL1c=)
2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:43:ea:99:56:41:61:8a:f4:09:21:d2:80:53:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Feb 17 03:00:05 2025 GMT
Not After : Feb 18 03:00:05 2025 GMT
Subject: CN=98d5a1d0fd7ea619b1323ea000eea8c10a5b7d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:48:fe:00:c2:b4:9a:57:72:90:5d:03:bb:
16:de:94:47:25:0f:43:49:e2:3f:38:18:f9:ae:b4:
79:1d:ae:5c:1b:05:de:7e:e6:d3:0f:f5:34:e8:3e:
8b:6a:25:b5:4a:d6:03:66:fb:fd:a2:ac:e9:4f:b9:
d8:bb:2b:5d:dc:74:19:69:f5:23:ff:8b:66:0e:07:
9d:9c:62:d4:a9:05:f9:88:d5:aa:34:73:aa:04:b0:
45:4b:08:0f:ea:b5:4b:f3:24:f9:d5:58:40:13:f2:
1f:55:7b:b4:ce:9b:d1:4d:73:d2:b1:9e:8d:1d:78:
08:27:a4:60:b2:56:ae:d8:e1:1c:f0:41:60:d3:0a:
25:fb:3c:59:96:94:98:3a:da:4f:a0:12:3b:c4:21:
59:53:77:42:10:c2:5e:df:63:37:71:3b:42:77:91:
55:1f:ea:47:fa:40:b7:1f:78:b9:0a:e1:77:fb:80:
fd:54:26:ba:f0:f1:03:9d:c5:1f:b9:d9:0f:12:f7:
bd:22:c3:2b:7a:5b:ce:8d:2b:16:2c:81:a2:2e:1f:
a6:dd:9e:c5:22:67:42:0d:71:03:27:3f:8d:a5:47:
b4:f5:16:ff:67:53:0e:71:98:a7:8e:1d:9f:a7:4a:
82:4e:a5:94:3f:fa:83:f1:e6:c8:ca:ca:82:b5:56:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D5:A1:D0:FD:7E:A6:19:B1:32:3E:A0:00:EE:A8:C1:0A:5B:7D:02
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:88:55:fd:2d:26:96:90:dd:c9:50:e0:2e:8b:28:c0:5b:13:
b1:7b:fa:ee:f4:f7:b5:62:50:8a:c0:79:fe:dc:77:bd:3a:9b:
c6:45:80:fa:4f:5a:de:b2:6f:a6:77:ee:c1:ce:cd:69:86:a5:
33:5f:db:d4:73:14:8e:b1:07:0e:5b:8c:ff:d4:54:77:9e:8f:
c7:34:12:4a:5c:54:10:35:24:c7:6f:d6:e6:e0:b3:4f:83:66:
ae:cc:b2:b1:c6:0c:96:f1:6e:0f:b6:6d:99:dd:02:24:f6:16:
7f:ce:47:70:b5:95:57:2e:60:72:d9:3a:6c:7f:96:37:80:e9:
2a:33:94:4a:e3:f0:5d:70:01:d6:f9:bd:21:e1:9f:6a:16:c5:
15:7e:16:23:9b:41:e5:68:4f:6f:af:fc:bd:5c:86:f0:4c:86:
cd:4f:0f:9f:cf:fb:82:29:29:f9:f5:16:9e:63:71:d9:c3:dd:
f3:d4:b7:ca:99:b4:28:e9:77:99:d9:da:f3:b8:86:8b:4c:2c:
42:2a:3c:8e:8c:07:4a:b2:67:1f:5a:9b:78:cb:b4:f6:77:71:
7e:80:90:57:4c:f7:82:70:00:5c:d4:56:26:69:05:66:b5:2a:
59:c4:b3:07:74:97:8c:61:6e:51:fa:94:91:29:56:cf:3e:21:
4c:87:b8:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2UPqmVZBYYr0CSHSgFMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg1YjYyNDhiZDcyMDc2YWI0MjFmZmEwZTNiZmVmOTM1
NjVlOWQwHhcNMjUwMjE3MDMwMDA1WhcNMjUwMjE4MDMwMDA1WjAzMTEwLwYDVQQD
Eyg5OGQ1YTFkMGZkN2VhNjE5YjEzMjNlYTAwMGVlYThjMTBhNWI3ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8JI/gDCtJpXcpBdA7sW3pRHJQ9D
SeI/OBj5rrR5Ha5cGwXefubTD/U06D6LaiW1StYDZvv9oqzpT7nYuytd3HQZafUj
/4tmDgednGLUqQX5iNWqNHOqBLBFSwgP6rVL8yT51VhAE/IfVXu0zpvRTXPSsZ6N
HXgIJ6Rgslau2OEc8EFg0wol+zxZlpSYOtpPoBI7xCFZU3dCEMJe32M3cTtCd5FV
H+pH+kC3H3i5CuF3+4D9VCa68PEDncUfudkPEve9IsMrelvOjSsWLIGiLh+m3Z7F
ImdCDXEDJz+NpUe09Rb/Z1MOcZinjh2fp0qCTqWUP/qD8ebIysqCtVbPtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjVodD9fqYZsTI+oADuqMEKW30CMB8GA1UdIwQY
MBaAFOEIW2JIvXIHarQh/6Djv++TVl6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTkt
MWY1Zjk0Y2UzNWVlLzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTktMWY1Zjk0Y2UzNWVl
LzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIhV/S0m
lpDdyVDgLosowFsTsXv67vT3tWJQisB5/tx3vTqbxkWA+k9a3rJvpnfuwc7NaYal
M1/b1HMUjrEHDluM/9RUd56PxzQSSlxUEDUkx2/W5uCzT4NmrsyyscYMlvFuD7Zt
md0CJPYWf85HcLWVVy5gctk6bH+WN4DpKjOUSuPwXXAB1vm9IeGfahbFFX4WI5tB
5WhPb6/8vVyG8EyGzU8Pn8/7gikp+fUWnmNx2cPd89S3ypm0KOl3mdna87iGi0ws
Qio8jowHSrJnH1qbeMu09ndxfoCQV0z3gnAAXNRWJmkFZrUqWcSzB3SXjGFuUfqU
kSlWzz4hTIe4eQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:18 2025 by rpki-client