Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File: Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier: r4zrcl9bPbwjswvo43xye7JFSlA/DxFOAnAQ7BC5aoU=
Subject key identifier: B9:38:0E:A7:C1:C5:5B:94:D8:B0:DE:B8:FD:38:97:46:88:F5:40:2A
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 01951210DE2718C671DCD334D5B169901EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number: 131D
Signing time: Mon 17 Feb 2025 04:00:50 +0000
Manifest this update: Mon 17 Feb 2025 04:00:50 +0000
Manifest next update: Tue 18 Feb 2025 04:00:50 +0000
Files and hashes: 1: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: BaxkVGz7ZolVljoXcDWZyo4i2nTrqHXHoUNfaHYu5VA=)
2: rFN0KDBiljkvhFQ66hAH56Hsc84.roa (hash: 2lh/B/WXfyLgwdob+PT24RTvz83sEjoawwppCzC07qk=)
3: ttl4gF5H4xVOsldpEtY--5SUL-g.roa (hash: SbdB5263yFvJJDlQfuHRPnaHcrA2J/RblHkI32JVk8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:de:27:18:c6:71:dc:d3:34:d5:b1:69:90:1e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Feb 17 04:00:50 2025 GMT
Not After : Feb 18 04:00:50 2025 GMT
Subject: CN=b9380ea7c1c55b94d8b0deb8fd38974688f5402a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:da:06:48:aa:78:30:30:03:35:42:40:44:
6d:c2:50:06:5a:bb:04:7e:6c:4f:d0:2b:8d:b5:36:
6d:ac:e6:7b:73:d5:80:ae:47:1c:67:86:b5:fc:0f:
8f:42:7c:7e:88:74:9b:43:b5:c9:00:0e:80:b3:f7:
84:8f:4e:6f:db:52:b0:40:0e:10:33:11:f3:4e:98:
3f:7a:ea:a5:52:eb:f2:86:c6:aa:d4:9a:88:44:da:
fa:be:fc:56:d9:90:e3:ef:b9:9d:14:56:64:35:b0:
3a:fd:2d:15:74:9f:9f:7e:a3:dd:ca:b5:cc:2d:1e:
10:cc:1d:03:1b:5b:23:55:a3:5a:ae:3f:b8:59:bf:
b1:99:80:b8:96:f7:57:27:b4:38:7a:a2:9d:ca:69:
e9:fe:fa:37:a3:52:27:c2:f6:78:23:52:cd:25:00:
b5:a6:d5:ca:1d:53:df:e1:33:b5:5d:52:17:cd:ff:
23:e8:f8:1a:d5:e7:fe:da:83:fd:09:3a:08:92:83:
c8:97:12:50:12:af:88:ae:ce:59:f7:9e:74:bd:e2:
10:58:47:30:27:3a:24:63:da:80:95:55:91:43:20:
69:0e:c1:d8:b2:a2:f3:5e:a6:6e:35:83:eb:57:2b:
a8:90:34:b3:f7:02:c7:6a:41:dd:91:1a:09:a5:4d:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:0E:A7:C1:C5:5B:94:D8:B0:DE:B8:FD:38:97:46:88:F5:40:2A
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:74:22:6c:fa:ba:a8:f5:73:20:8a:4e:6d:25:17:00:ce:b1:
68:85:69:85:28:66:b3:e7:38:7d:d1:91:21:e5:ee:e8:a0:44:
46:62:0c:73:a6:b9:b7:5e:86:3d:a6:e5:20:e2:1a:57:dd:ca:
eb:fb:e5:ad:c8:19:64:0f:6d:d9:c0:9a:72:b4:bf:7a:7c:ba:
9e:01:34:b4:bc:00:2d:f6:4f:ff:11:65:4c:86:a2:64:a0:50:
d7:6f:93:b7:89:13:27:19:a0:c4:85:e3:0e:53:c5:5e:66:4b:
0a:ef:0f:cd:30:73:93:18:48:65:4f:3e:10:6e:5f:34:e5:d2:
c7:5c:7e:9f:64:5c:b6:b0:bd:0c:f2:3e:45:f2:20:ef:10:56:
2a:e8:8c:dc:35:03:a6:52:d5:32:a7:dd:d1:d6:90:5c:f7:4e:
e5:11:e9:15:e4:16:5f:2d:e4:2a:73:72:c7:76:b1:99:42:e5:
19:54:df:bb:73:58:02:8c:5a:e4:92:0d:d2:1a:0d:9d:2a:84:
63:c0:19:2b:6c:de:02:87:05:ce:15:4a:95:12:68:fc:1c:0f:
a4:04:83:6b:74:8f:be:8b:f6:41:90:2a:ac:cf:c0:f6:d2:e1:
9d:61:84:be:a8:8b:54:12:0d:9d:d0:36:f2:ef:b3:19:ed:c2:
00:43:bd:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEN4nGMZx3NM01bFpkB65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0
YzUwMTkwHhcNMjUwMjE3MDQwMDUwWhcNMjUwMjE4MDQwMDUwWjAzMTEwLwYDVQQD
EyhiOTM4MGVhN2MxYzU1Yjk0ZDhiMGRlYjhmZDM4OTc0Njg4ZjU0MDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt3aBkiqeDAwAzVCQERtwlAGWrsE
fmxP0CuNtTZtrOZ7c9WArkccZ4a1/A+PQnx+iHSbQ7XJAA6As/eEj05v21KwQA4Q
MxHzTpg/euqlUuvyhsaq1JqIRNr6vvxW2ZDj77mdFFZkNbA6/S0VdJ+ffqPdyrXM
LR4QzB0DG1sjVaNarj+4Wb+xmYC4lvdXJ7Q4eqKdymnp/vo3o1InwvZ4I1LNJQC1
ptXKHVPf4TO1XVIXzf8j6Pga1ef+2oP9CToIkoPIlxJQEq+Irs5Z9550veIQWEcw
JzokY9qAlVWRQyBpDsHYsqLzXqZuNYPrVyuokDSz9wLHakHdkRoJpU3xMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLk4DqfBxVuU2LDeuP04l0aI9UAqMB8GA1UdIwQY
MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt
NzViZDk0NmE3MzU1LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1
LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXQibPq6
qPVzIIpObSUXAM6xaIVphShms+c4fdGRIeXu6KBERmIMc6a5t16GPablIOIaV93K
6/vlrcgZZA9t2cCacrS/eny6ngE0tLwALfZP/xFlTIaiZKBQ12+Tt4kTJxmgxIXj
DlPFXmZLCu8PzTBzkxhIZU8+EG5fNOXSx1x+n2RctrC9DPI+RfIg7xBWKuiM3DUD
plLVMqfd0daQXPdO5RHpFeQWXy3kKnNyx3axmULlGVTfu3NYAoxa5JIN0hoNnSqE
Y8AZK2zeAocFzhVKlRJo/BwPpASDa3SPvov2QZAqrM/A9tLhnWGEvqiLVBINndA2
8u+zGe3CAEO9Sg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:22 2025 by rpki-client