Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: 59c5j+RVeOSt5YN99Vtiz+mBT2kARwH9JeAdnty+eM0=
Subject key identifier: 12:3B:5F:45:29:D6:F3:5A:0B:79:CC:6B:82:58:68:D1:DC:DC:39:7D
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 0195116BF031DECDE63A48A8E15196C59169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1465
Signing time: Mon 17 Feb 2025 01:00:41 +0000
Manifest this update: Mon 17 Feb 2025 01:00:41 +0000
Manifest next update: Tue 18 Feb 2025 01:00:41 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: rv9szEV/HcVVuRd1iAqve2cOS7EurDwbjvQydeK1kNw=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: qBk8yEy6XQzjJQM_m4xKxUxOGWY.roa (hash: MrQEI7rx7w7zwtpbP6zhx6P3UqAEniYO/sUrOOmnWv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:f0:31:de:cd:e6:3a:48:a8:e1:51:96:c5:91:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Feb 17 01:00:41 2025 GMT
Not After : Feb 18 01:00:41 2025 GMT
Subject: CN=123b5f4529d6f35a0b79cc6b825868d1dcdc397d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:73:76:9a:fb:43:93:1d:2a:ce:5a:68:c1:c4:
1a:f1:59:34:32:32:00:7e:e0:38:f8:f3:8e:48:69:
7f:72:2a:77:4d:28:cd:af:2b:d8:b8:77:af:18:42:
ee:f0:5c:e2:d3:56:80:e5:d7:6d:af:4b:6d:0b:f9:
8c:4b:88:5b:ef:ce:8d:f5:94:54:09:7d:29:08:c8:
21:6b:90:09:60:cb:63:31:e6:59:cf:1c:01:3b:8b:
e7:a9:18:6a:81:c1:8e:a8:3a:ab:3d:0d:7a:94:f7:
5d:cb:db:08:e8:da:ac:2c:a4:16:2c:ec:74:7c:19:
3f:1d:5c:70:6c:09:a9:61:12:3a:24:e4:2d:0c:85:
4b:31:34:13:c3:2e:8c:53:80:33:42:8b:f0:83:04:
ef:db:59:92:6b:cb:8f:35:83:3b:97:f8:08:ea:89:
09:a3:c3:48:d3:95:cd:e9:6b:74:c5:7e:f7:51:a6:
2a:fc:94:73:60:94:6f:21:a0:03:21:f9:ad:6c:09:
2f:08:3a:06:b5:70:d7:d5:23:f0:7c:5b:04:ca:f0:
a0:20:21:3b:c5:f8:0e:cb:d8:40:7f:30:f8:9d:f5:
50:3f:34:97:00:c9:17:cc:71:4a:13:cb:20:ac:45:
bb:88:76:9b:2a:11:a0:e1:72:b3:86:73:73:5d:5c:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:5F:45:29:D6:F3:5A:0B:79:CC:6B:82:58:68:D1:DC:DC:39:7D
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:98:96:54:4a:9e:e2:c3:9f:14:ab:e5:f7:7d:f1:ac:0c:79:
b6:c0:57:18:2e:cb:e1:2b:ae:88:5a:03:04:b6:2d:35:0b:68:
58:d9:82:a9:cd:eb:87:32:35:5b:ad:cb:84:ae:90:21:64:79:
e8:b0:2d:5a:af:21:c8:de:27:a8:53:e2:1a:c5:48:9c:f5:d8:
77:96:bd:d8:e5:01:27:fb:01:51:99:0b:17:9a:83:7c:c1:07:
c9:6e:16:21:94:62:b7:7c:64:e8:20:a0:85:a8:c1:b7:61:aa:
62:25:c8:36:ea:79:70:7f:67:d0:37:c5:a2:86:54:c9:19:00:
4c:cc:5f:68:e7:4f:2e:ad:5c:61:91:9c:6c:da:ef:2c:4c:0c:
fc:59:3d:ba:61:34:1b:dd:4f:79:db:8b:b1:65:c0:83:7c:dc:
a7:8a:e4:34:0c:3d:8c:a4:ca:ad:f2:ec:b1:92:20:9e:13:76:
90:86:22:61:0b:77:d3:ff:8d:dd:94:65:a6:be:c8:4e:0d:21:
90:af:e7:d8:6c:0c:db:39:41:22:11:29:3a:8b:39:86:88:a3:
ab:17:c9:4b:9e:aa:f6:f0:f6:5b:3b:2a:14:51:fa:e6:81:4a:
1a:2d:37:40:02:5d:61:35:a9:50:4d:7c:51:04:68:92:11:61:
4a:f5:62:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa/Ax3s3mOkio4VGWxZFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy
NDk5OTEwHhcNMjUwMjE3MDEwMDQxWhcNMjUwMjE4MDEwMDQxWjAzMTEwLwYDVQQD
EygxMjNiNWY0NTI5ZDZmMzVhMGI3OWNjNmI4MjU4NjhkMWRjZGMzOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93N2mvtDkx0qzlpowcQa8Vk0MjIA
fuA4+POOSGl/cip3TSjNryvYuHevGELu8Fzi01aA5ddtr0ttC/mMS4hb786N9ZRU
CX0pCMgha5AJYMtjMeZZzxwBO4vnqRhqgcGOqDqrPQ16lPddy9sI6NqsLKQWLOx0
fBk/HVxwbAmpYRI6JOQtDIVLMTQTwy6MU4AzQovwgwTv21mSa8uPNYM7l/gI6okJ
o8NI05XN6Wt0xX73UaYq/JRzYJRvIaADIfmtbAkvCDoGtXDX1SPwfFsEyvCgICE7
xfgOy9hAfzD4nfVQPzSXAMkXzHFKE8sgrEW7iHabKhGg4XKzhnNzXVxr8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBI7X0Up1vNaC3nMa4JYaNHc3Dl9MB8GA1UdIwQY
MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt
OTExOTBhMDJkYjcwLzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw
LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5iWVEqe
4sOfFKvl933xrAx5tsBXGC7L4SuuiFoDBLYtNQtoWNmCqc3rhzI1W63LhK6QIWR5
6LAtWq8hyN4nqFPiGsVInPXYd5a92OUBJ/sBUZkLF5qDfMEHyW4WIZRit3xk6CCg
hajBt2GqYiXINup5cH9n0DfFooZUyRkATMxfaOdPLq1cYZGcbNrvLEwM/Fk9umE0
G91PeduLsWXAg3zcp4rkNAw9jKTKrfLssZIgnhN2kIYiYQt30/+N3ZRlpr7ITg0h
kK/n2GwM2zlBIhEpOos5hoijqxfJS56q9vD2WzsqFFH65oFKGi03QAJdYTWpUE18
UQRokhFhSvVi+g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:26 2025 by rpki-client