Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: S0GNgk6TP2bIXPsKEFm0EG9d2tHuay3x4N8jLby644M=
Subject key identifier: 1C:86:5A:06:8B:CF:7F:98:6E:7E:A9:B5:95:CA:4B:E6:FB:D8:24:43
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 019510FE0EF5FB50B68A77DD6784933A0F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 145B
Signing time: Sun 16 Feb 2025 23:00:40 +0000
Manifest this update: Sun 16 Feb 2025 23:00:40 +0000
Manifest next update: Mon 17 Feb 2025 23:00:40 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: VZGifEpdHKor+MFsNg0jcrlt4a4PPu94JWAS2Wc2dqA=)
2: b1EekpPHczR9SbF16iWNQ3damig.roa (hash: Fw8tFU/rOTZrNv9R1o3/Px5yWIdWmaPwzJuJsuMKmH0=)
3: eADzDJE6P-qH0r5TYUNn_ncYKzA.roa (hash: PxBgbfMtKG6Jth9+kbRfrbslcA+mMm5JhYaaugK0nGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:0e:f5:fb:50:b6:8a:77:dd:67:84:93:3a:0f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Feb 16 23:00:40 2025 GMT
Not After : Feb 17 23:00:40 2025 GMT
Subject: CN=1c865a068bcf7f986e7ea9b595ca4be6fbd82443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:8d:38:f0:f2:1b:5c:71:a7:8c:64:3a:70:
2d:79:77:a6:70:38:fe:5d:3b:b1:d0:93:2f:49:ac:
5a:14:38:71:db:a7:be:ea:92:b8:21:34:0c:2b:ec:
b5:d5:c9:1d:a0:bb:bc:55:77:41:d7:7b:2e:61:da:
32:df:a5:45:e6:c3:61:3c:ca:23:2a:06:91:d1:39:
17:33:60:37:9d:04:30:1a:b3:aa:e6:16:72:9d:21:
a5:3d:7a:aa:32:d7:c5:d7:9a:3c:4e:87:ec:58:17:
cb:58:3e:f1:4e:d2:3f:3a:26:95:18:f0:c1:43:b2:
47:ec:2f:92:71:fa:38:8e:e9:61:c4:95:d0:1e:cc:
bc:6a:97:1d:b5:ed:f1:c8:58:6f:08:2e:21:0f:e6:
76:03:ed:e2:b5:9f:ac:36:85:d2:e3:54:64:54:35:
19:de:b6:95:72:ce:3d:6a:21:66:b3:f7:a5:0b:84:
bd:70:d3:8a:3e:3d:1b:62:ee:6b:b4:fa:38:3d:0f:
b7:f6:31:2b:1d:8c:53:ef:f8:33:d0:6e:64:39:49:
20:06:49:32:8a:23:65:0b:26:7f:3c:6e:00:1c:af:
9c:fa:f3:f4:55:d4:c3:e0:ea:33:06:08:54:11:68:
24:82:8d:3f:42:62:f6:7a:77:fc:b0:97:4f:58:7f:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:86:5A:06:8B:CF:7F:98:6E:7E:A9:B5:95:CA:4B:E6:FB:D8:24:43
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ba:cb:c3:62:86:af:bd:69:50:30:6c:a4:9c:e5:04:19:d0:
d6:9b:08:54:5b:1a:f0:f4:c5:f3:a6:cc:02:48:fd:e4:04:ff:
e5:62:19:5c:21:4c:e9:0b:c1:4f:d0:a8:54:18:e0:c9:72:b2:
8e:10:0c:97:78:55:c8:bd:ea:c0:d5:55:e1:d0:02:4e:c0:51:
24:ca:09:3c:b2:fd:d5:59:46:f9:94:55:3b:3d:24:e7:eb:68:
71:94:0c:5e:18:48:0b:48:a7:bf:a8:be:3f:01:f3:d0:0e:ed:
9b:db:16:40:e7:d0:fc:2a:57:65:a5:b1:cd:47:79:9c:2b:e1:
dd:0e:c5:20:31:be:a8:c0:74:15:0c:12:46:ca:c3:42:b3:02:
9b:c7:13:7e:25:6e:36:ed:3a:81:9b:ae:41:2a:6a:f0:fa:46:
5b:95:4d:25:6d:88:5c:51:bc:9b:5f:95:ec:ad:35:e6:86:19:
9b:aa:a0:25:7d:71:38:35:40:07:02:30:ed:90:a7:e5:db:4d:
86:28:d1:e7:e5:4f:70:43:d8:c4:ca:da:2f:70:6b:43:2b:55:
fb:c1:76:4b:09:4d:04:05:d2:d0:f6:63:51:a4:b2:d4:19:a2:
f5:f3:68:3e:a7:d8:42:5b:71:2c:3b:e5:f9:ac:25:d8:7c:96:
84:e1:36:df
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZUQ/g71+1C2infdZ4STOg8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDgzZWZkZDk5OTZmOGM3NWU3ZjQxMTRlNDY2ZWJmODM2
OTY4ZWEwHhcNMjUwMjE2MjMwMDQwWhcNMjUwMjE3MjMwMDQwWjAzMTEwLwYDVQQD
EygxYzg2NWEwNjhiY2Y3Zjk4NmU3ZWE5YjU5NWNhNGJlNmZiZDgyNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV6NOPDyG1xxp4xkOnAteXemcDj+
XTux0JMvSaxaFDhx26e+6pK4ITQMK+y11ckdoLu8VXdB13suYdoy36VF5sNhPMoj
KgaR0TkXM2A3nQQwGrOq5hZynSGlPXqqMtfF15o8TofsWBfLWD7xTtI/OiaVGPDB
Q7JH7C+Scfo4julhxJXQHsy8apcdte3xyFhvCC4hD+Z2A+3itZ+sNoXS41RkVDUZ
3raVcs49aiFms/elC4S9cNOKPj0bYu5rtPo4PQ+39jErHYxT7/gz0G5kOUkgBkky
iiNlCyZ/PG4AHK+c+vP0VdTD4OozBghUEWgkgo0/QmL2enf8sJdPWH+D4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFByGWgaLz3+Ybn6ptZXKS+b72CRDMB8GA1UdIwQY
MBaAFPvYPv3ZmW+Mdef0EU5Gbr+DaWjqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05Zy1fZG1aYjR4MTVfUVJUa1p1djROcGFPby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYWEwNmE1LTdlZjYtNGJjOS1iMGEw
LTJmYTgzOTAxN2Q3NS8xLzEtOWctX2RtWmI0eDE1X1FSVGtadXY0TnBhT28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJjL2FhMDZhNS03ZWY2LTRiYzktYjBhMC0yZmE4MzkwMTdk
NzUvMS8xLTlnLV9kbVpiNHgxNV9RUlRrWnV2NE5wYU9vLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLrL
w2KGr71pUDBspJzlBBnQ1psIVFsa8PTF86bMAkj95AT/5WIZXCFM6QvBT9CoVBjg
yXKyjhAMl3hVyL3qwNVV4dACTsBRJMoJPLL91VlG+ZRVOz0k5+tocZQMXhhIC0in
v6i+PwHz0A7tm9sWQOfQ/CpXZaWxzUd5nCvh3Q7FIDG+qMB0FQwSRsrDQrMCm8cT
fiVuNu06gZuuQSpq8PpGW5VNJW2IXFG8m1+V7K015oYZm6qgJX1xODVABwIw7ZCn
5dtNhijR5+VPcEPYxMraL3BrQytV+8F2SwlNBAXS0PZjUaSy1Bmi9fNoPqfYQltx
LDvl+awl2HyWhOE23w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:43 2025 by rpki-client