Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier: Pd8o1DdeJlTwQOGmtmvF8Jdbq9WqT33BujO9TVsjKJQ=
Subject key identifier: 23:D7:DF:09:3D:56:59:86:76:48:29:B6:74:7F:DF:04:24:C6:66:6C
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 019510C6A9F858388759EE20421C86C1C357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number: 120B
Signing time: Sun 16 Feb 2025 22:00:09 +0000
Manifest this update: Sun 16 Feb 2025 22:00:09 +0000
Manifest next update: Mon 17 Feb 2025 22:00:09 +0000
Files and hashes: 1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=)
2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: hJkOpt0CXM7+tvF7U/oziSqOUZ/CaaCvWdxjmPSf1z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:a9:f8:58:38:87:59:ee:20:42:1c:86:c1:c3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Feb 16 22:00:09 2025 GMT
Not After : Feb 17 22:00:09 2025 GMT
Subject: CN=23d7df093d565986764829b6747fdf0424c6666c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:50:fd:5d:87:07:6c:d3:6f:f2:37:99:fe:
29:03:d5:e0:59:95:17:a0:19:75:b4:a9:0f:04:25:
1e:97:95:12:2b:31:57:38:ff:68:90:7b:02:b7:b1:
b8:86:a1:3a:86:c4:2c:0c:8d:af:04:d3:ca:af:51:
83:22:6a:8a:16:91:47:ac:05:e7:32:fd:24:0e:13:
bd:4d:5e:50:a0:54:5f:7c:2e:f9:2d:da:3f:5a:b4:
ae:9b:67:0b:48:48:af:d4:85:6f:b1:88:8d:b3:54:
87:6c:38:1a:a7:17:2b:c3:fb:cb:8f:df:f5:b6:cc:
cf:3d:74:15:96:54:7e:3c:9e:f9:b2:9c:4f:7e:0d:
84:e2:1c:cd:07:f9:ff:4c:b8:1d:f0:64:6d:17:8a:
8a:1c:5e:b9:2b:ba:d2:93:cc:a0:fe:23:91:4a:63:
de:ba:28:5c:92:b3:46:df:96:34:da:e1:df:82:21:
64:ee:51:5e:0e:bf:d8:55:a1:7d:d8:79:bc:17:df:
9a:ee:b6:99:bf:02:6f:6a:77:69:28:ed:bb:b3:54:
4a:3e:6a:92:d7:5a:5f:0b:37:84:c0:52:91:ec:ce:
fd:e6:b1:b7:14:d3:12:6a:82:49:3e:9d:6b:b7:10:
6d:10:99:40:8a:c4:f4:ce:a0:23:50:c9:25:86:3c:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:DF:09:3D:56:59:86:76:48:29:B6:74:7F:DF:04:24:C6:66:6C
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:10:af:4e:49:6d:24:a8:e4:62:b7:ee:64:5c:73:fa:bc:75:
11:84:83:88:c7:e6:07:ea:5b:d5:0e:59:b5:ce:88:2d:66:9d:
b1:97:bb:8b:0f:7a:4a:ca:9c:a9:84:17:ed:3b:e9:93:3b:3e:
5c:de:29:fd:72:d8:c8:4e:10:a6:74:fe:fe:84:7c:48:24:cb:
14:94:73:fe:65:41:18:de:34:14:c0:c9:27:26:65:d2:8c:28:
eb:d9:96:a1:b0:67:77:ed:b7:8d:7d:06:57:b6:80:4a:9e:be:
4d:47:45:14:e0:ef:b1:58:69:4f:ad:f1:42:c8:a1:d7:87:f0:
fc:40:03:0d:d0:10:b1:b8:72:ff:a8:ca:e6:23:d7:3f:c9:30:
56:b2:ed:a7:c1:01:c4:40:c4:64:af:b8:a9:12:6f:43:79:12:
25:53:38:51:13:d9:a5:f8:cd:ab:66:07:d7:51:71:53:ca:4f:
76:de:80:6f:99:f5:74:3d:e7:82:16:52:a5:9c:44:90:c9:5b:
3e:13:b5:d6:25:95:49:34:8c:9e:28:72:ca:35:97:45:07:23:
a6:44:e4:ff:1e:b0:9e:48:3d:53:a2:ff:27:ca:07:52:d2:68:
7a:ba:5c:f4:0f:21:1b:85:9d:34:a2:91:23:5e:b5:96:53:14:
ec:60:e1:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxqn4WDiHWe4gQhyGwcNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjliZDhiYjQ5YTgwOTk2YjQ2MGY1MDI4ZWQ1MmE4ZTA1
N2MwYjEwHhcNMjUwMjE2MjIwMDA5WhcNMjUwMjE3MjIwMDA5WjAzMTEwLwYDVQQD
EygyM2Q3ZGYwOTNkNTY1OTg2NzY0ODI5YjY3NDdmZGYwNDI0YzY2NjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw35Q/V2HB2zTb/I3mf4pA9XgWZUX
oBl1tKkPBCUel5USKzFXOP9okHsCt7G4hqE6hsQsDI2vBNPKr1GDImqKFpFHrAXn
Mv0kDhO9TV5QoFRffC75Ldo/WrSum2cLSEiv1IVvsYiNs1SHbDgapxcrw/vLj9/1
tszPPXQVllR+PJ75spxPfg2E4hzNB/n/TLgd8GRtF4qKHF65K7rSk8yg/iORSmPe
uihckrNG35Y02uHfgiFk7lFeDr/YVaF92Hm8F9+a7raZvwJvandpKO27s1RKPmqS
11pfCzeEwFKR7M795rG3FNMSaoJJPp1rtxBtEJlAisT0zqAjUMklhjyGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPX3wk9VlmGdkgptnR/3wQkxmZsMB8GA1UdIwQY
MBaAFP4pvYu0moCZa0YPUCjtUqjgV8CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWIt
MDZiOGRmZTQ5OGJkLzEvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWItMDZiOGRmZTQ5OGJk
LzEvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehCvTklt
JKjkYrfuZFxz+rx1EYSDiMfmB+pb1Q5Ztc6ILWadsZe7iw96SsqcqYQX7Tvpkzs+
XN4p/XLYyE4QpnT+/oR8SCTLFJRz/mVBGN40FMDJJyZl0owo69mWobBnd+23jX0G
V7aASp6+TUdFFODvsVhpT63xQsih14fw/EADDdAQsbhy/6jK5iPXP8kwVrLtp8EB
xEDEZK+4qRJvQ3kSJVM4URPZpfjNq2YH11FxU8pPdt6Ab5n1dD3nghZSpZxEkMlb
PhO11iWVSTSMnihyyjWXRQcjpkTk/x6wnkg9U6L/J8oHUtJoerpc9A8hG4WdNKKR
I161llMU7GDhQA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:50 2025 by rpki-client