Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: ojnvzziNgC0BRJ722LpuxvitN4sSLh/prkxYee0sHjg=
Subject key identifier: EC:12:1C:B2:AC:1B:8C:95:94:22:37:DE:9F:63:FB:4C:DE:E1:BD:BE
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 01951134BD81B49A4A7D4908864F6D115C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 0E32
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: HwLDpTIt6plI2sCVLbeUjnqOAJc.roa (hash: yvIMoIjc3gOAvuIICfd6lLbgjDWXL7Ecab2rJN91n/I=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: YouMM/9uA8UzSGb5oUXIFdUG1nEuyClwLDkuiBtpQaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:bd:81:b4:9a:4a:7d:49:08:86:4f:6d:11:5c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=ec121cb2ac1b8c95942237de9f63fb4cdee1bdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:b1:7c:09:5a:48:92:df:a3:c9:b1:79:ab:
88:01:56:f5:76:c2:aa:dd:2b:69:7e:b6:9c:c6:69:
1c:8d:35:19:ea:45:66:49:a2:17:50:1d:e9:4e:0e:
6d:18:32:7b:d8:5c:c6:63:87:7e:e8:f5:38:bd:0d:
49:22:22:74:d1:05:67:1c:1e:82:72:fb:f9:37:12:
02:c0:78:05:b3:bc:b7:f5:24:24:88:51:e2:ac:45:
61:d5:00:88:6e:0b:9a:d3:68:02:4b:5f:87:0d:24:
84:56:5a:5a:77:6f:23:d1:43:37:40:92:ba:07:6c:
6e:ee:9e:b0:22:8c:bc:79:4b:e3:56:ef:e5:a2:99:
a8:8e:1a:03:aa:db:f9:80:d5:e2:29:0c:11:da:d6:
23:ac:37:1a:07:1c:57:60:74:c9:76:a8:95:00:34:
f9:92:45:d1:07:76:e7:c3:cc:93:47:21:27:e8:97:
ce:d0:5e:71:d2:9e:72:db:81:8a:58:df:e5:a5:21:
dd:95:3e:7d:38:7f:53:87:6e:8c:fb:73:81:9e:81:
d1:ab:93:fe:10:f6:66:9f:ad:13:2a:c5:15:32:12:
93:d6:bd:49:3d:74:c3:83:fb:8f:29:be:33:cf:b6:
21:ba:da:b4:67:cc:80:e4:40:12:83:43:83:53:7b:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:12:1C:B2:AC:1B:8C:95:94:22:37:DE:9F:63:FB:4C:DE:E1:BD:BE
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e3:db:29:2c:9b:4e:48:1b:3e:dd:67:7f:19:00:95:3b:df:
7c:6c:1b:a1:5a:87:65:84:6f:71:54:a1:08:b8:b3:21:7d:0f:
a4:a0:ea:23:fb:ca:71:04:5e:6a:86:1c:c9:9c:b6:9e:50:f9:
e1:0b:e4:5b:f4:aa:b6:0b:ef:f2:82:77:2f:d6:4b:95:92:6b:
a7:5b:ee:63:54:f9:7b:00:d2:c1:7d:ff:10:61:78:09:a4:09:
d5:07:fe:ea:5f:90:7e:84:b9:40:29:00:57:44:5f:9e:4f:5b:
67:66:97:00:85:38:2d:70:0a:8e:56:53:0d:69:2d:c6:6e:0e:
64:3e:ff:ee:cc:c4:1a:c3:ba:4f:02:16:20:c2:42:49:4d:4c:
e3:9d:61:e5:11:9d:ea:ab:c5:34:13:47:8f:29:a3:cb:a9:f7:
f5:f9:ff:ed:a4:55:30:5e:1d:09:b9:fc:72:45:2e:4c:d2:ff:
d7:72:82:23:6b:39:de:bd:9a:70:d0:fb:24:b4:0c:71:87:92:
6f:a6:ec:26:31:47:3d:80:67:4e:4b:92:b1:23:e5:c8:dc:02:
32:4e:54:55:0a:89:30:bb:14:ee:b7:fa:53:60:5d:ba:0d:e6:
9c:fa:07:92:99:ba:b8:ee:75:40:8b:ed:4f:f2:a2:7a:26:46:
f4:df:b0:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNL2BtJpKfUkIhk9tEVxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZWI2NjhiNzM1YTE4MzkzNzRlNDhmNzljYjI0MzZkYmY0
MTdjYWEwHhcNMjUwMjE3MDAwMDIzWhcNMjUwMjE4MDAwMDIzWjAzMTEwLwYDVQQD
EyhlYzEyMWNiMmFjMWI4Yzk1OTQyMjM3ZGU5ZjYzZmI0Y2RlZTFiZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxixfAlaSJLfo8mxeauIAVb1dsKq
3StpfracxmkcjTUZ6kVmSaIXUB3pTg5tGDJ72FzGY4d+6PU4vQ1JIiJ00QVnHB6C
cvv5NxICwHgFs7y39SQkiFHirEVh1QCIbgua02gCS1+HDSSEVlpad28j0UM3QJK6
B2xu7p6wIoy8eUvjVu/lopmojhoDqtv5gNXiKQwR2tYjrDcaBxxXYHTJdqiVADT5
kkXRB3bnw8yTRyEn6JfO0F5x0p5y24GKWN/lpSHdlT59OH9Th26M+3OBnoHRq5P+
EPZmn60TKsUVMhKT1r1JPXTDg/uPKb4zz7Yhutq0Z8yA5EASg0ODU3tIjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwSHLKsG4yVlCI33p9j+0ze4b2+MB8GA1UdIwQY
MBaAFMDrZotzWhg5N05I95yyQ22/QXyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTIt
MmQyNmYxYjU2ZTIwLzEvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTItMmQyNmYxYjU2ZTIw
LzEvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOPbKSyb
TkgbPt1nfxkAlTvffGwboVqHZYRvcVShCLizIX0PpKDqI/vKcQReaoYcyZy2nlD5
4QvkW/Sqtgvv8oJ3L9ZLlZJrp1vuY1T5ewDSwX3/EGF4CaQJ1Qf+6l+QfoS5QCkA
V0Rfnk9bZ2aXAIU4LXAKjlZTDWktxm4OZD7/7szEGsO6TwIWIMJCSU1M451h5RGd
6qvFNBNHjymjy6n39fn/7aRVMF4dCbn8ckUuTNL/13KCI2s53r2acND7JLQMcYeS
b6bsJjFHPYBnTkuSsSPlyNwCMk5UVQqJMLsU7rf6U2Bdug3mnPoHkpm6uO51QIvt
T/KieiZG9N+wpg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:13 2025 by rpki-client