Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: uaChQ+zMtk3jFuNmIdrhodLqBTDPlcLcdBNpBrghK8o=
Subject key identifier: 7F:37:9F:8F:E9:9B:DB:F7:B2:1E:5A:BC:40:E1:E9:EE:D2:BF:FD:86
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 0194C4D17578E9806A43A1BAC0DDBA92CAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 72
Signing time: Sun 02 Feb 2025 04:00:48 +0000
Manifest this update: Sun 02 Feb 2025 04:00:48 +0000
Manifest next update: Mon 03 Feb 2025 04:00:48 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: E5bxCoFrmpfz8SLcISQRLs5kgE26uCZVxPSyJ6iFhcY=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:75:78:e9:80:6a:43:a1:ba:c0:dd:ba:92:ca:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Feb 2 04:00:48 2025 GMT
Not After : Feb 3 04:00:48 2025 GMT
Subject: CN=7f379f8fe99bdbf7b21e5abc40e1e9eed2bffd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:ca:c3:95:a2:b1:39:ad:6d:58:df:fd:8c:
53:27:a3:da:c5:e5:91:04:3b:b3:32:08:cd:5c:08:
f8:a4:3e:c6:79:0a:3e:03:c3:38:ff:a8:bb:d8:4f:
42:7d:fa:0a:40:92:e9:90:f1:7f:00:f6:0f:02:e6:
80:25:ca:17:52:88:ed:9a:b6:e1:10:3a:4f:15:85:
ca:b4:c3:99:24:31:66:f8:b9:17:aa:4e:43:b0:a9:
ca:02:6b:28:2c:e5:3b:4e:a4:10:f3:32:8c:b3:39:
df:75:7d:da:86:e5:04:40:32:71:40:e1:11:f2:f7:
4a:7c:4e:1d:9f:d8:c2:d6:0e:a7:0a:7e:ac:bd:54:
6c:3a:fb:79:6a:32:f4:9f:72:5f:11:0f:7b:e6:00:
5e:f3:36:db:29:89:ac:52:36:c7:21:5e:b6:12:04:
73:3c:6d:45:2d:3a:30:1d:6b:6d:e5:46:44:06:6e:
6f:b4:07:c2:a7:cc:80:78:5d:55:2f:2a:ef:8d:09:
47:ed:60:83:87:05:cf:c2:98:11:a6:3f:d7:60:e4:
64:fa:1b:a9:6b:d8:dc:16:1a:e1:0f:c6:7f:e5:46:
46:44:d1:a7:f0:35:52:c1:28:00:85:d9:a4:57:3f:
13:f9:a9:00:79:82:27:f3:2d:d2:73:f5:a4:52:e8:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:37:9F:8F:E9:9B:DB:F7:B2:1E:5A:BC:40:E1:E9:EE:D2:BF:FD:86
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:70:e8:05:ac:fe:b0:59:d3:84:0e:c0:13:28:1b:5e:94:13:
ca:93:65:bf:bd:6d:a2:27:94:51:fd:7c:27:a4:e6:d5:d3:f7:
80:fb:34:e6:12:02:8f:dc:cd:71:f5:85:f5:26:39:fb:37:3a:
08:b8:71:86:f7:75:28:03:61:ba:9b:f9:fc:24:a2:6c:dd:ee:
91:d7:16:4d:52:1d:2b:c3:57:3d:32:1d:3c:ff:d4:2d:41:2b:
c4:47:53:3e:06:82:d7:39:7f:2f:de:03:8b:ca:3f:05:92:19:
36:ec:09:1e:9b:15:c4:3c:fc:6a:82:ae:54:09:79:13:b2:b3:
2a:28:fb:84:5f:2a:68:49:54:0b:15:50:99:3b:19:24:a9:5b:
fe:d9:2f:0b:66:e8:2d:26:96:25:da:db:93:94:30:1f:9c:0c:
cd:5b:fb:0b:4e:6a:81:b6:79:89:28:35:93:66:b5:80:f1:2f:
d3:81:d1:15:e4:53:3a:5a:51:28:1c:b4:29:0f:f6:93:e5:7f:
02:38:ba:f5:ce:dc:09:b4:52:60:68:e1:19:d8:f5:c3:8c:5a:
79:b7:9a:a7:b1:1e:fb:25:7f:42:6a:82:f1:b3:50:63:ee:a0:
c6:74:3b:6f:5b:cd:77:14:29:f7:eb:6e:8b:f5:fe:a5:65:c6:
7f:6e:f2:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0XV46YBqQ6G6wN26ksr3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDcwMjkzMjgwMmMyNzQzZDMzNWY2N2Q0N2E0MjM4YzMz
MjQ1MzMwHhcNMjUwMjAyMDQwMDQ4WhcNMjUwMjAzMDQwMDQ4WjAzMTEwLwYDVQQD
Eyg3ZjM3OWY4ZmU5OWJkYmY3YjIxZTVhYmM0MGUxZTllZWQyYmZmZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0HKw5WisTmtbVjf/YxTJ6PaxeWR
BDuzMgjNXAj4pD7GeQo+A8M4/6i72E9CffoKQJLpkPF/APYPAuaAJcoXUojtmrbh
EDpPFYXKtMOZJDFm+LkXqk5DsKnKAmsoLOU7TqQQ8zKMsznfdX3ahuUEQDJxQOER
8vdKfE4dn9jC1g6nCn6svVRsOvt5ajL0n3JfEQ975gBe8zbbKYmsUjbHIV62EgRz
PG1FLTowHWtt5UZEBm5vtAfCp8yAeF1VLyrvjQlH7WCDhwXPwpgRpj/XYORk+hup
a9jcFhrhD8Z/5UZGRNGn8DVSwSgAhdmkVz8T+akAeYIn8y3Sc/WkUujxZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH83n4/pm9v3sh5avEDh6e7Sv/2GMB8GA1UdIwQY
MBaAFAgHApMoAsJ0PTNfZ9R6QjjDMkUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODct
NDgwZmViOTJkNzE4LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODctNDgwZmViOTJkNzE4
LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXDoBaz+
sFnThA7AEygbXpQTypNlv71toieUUf18J6Tm1dP3gPs05hICj9zNcfWF9SY5+zc6
CLhxhvd1KANhupv5/CSibN3ukdcWTVIdK8NXPTIdPP/ULUErxEdTPgaC1zl/L94D
i8o/BZIZNuwJHpsVxDz8aoKuVAl5E7KzKij7hF8qaElUCxVQmTsZJKlb/tkvC2bo
LSaWJdrbk5QwH5wMzVv7C05qgbZ5iSg1k2a1gPEv04HRFeRTOlpRKBy0KQ/2k+V/
Aji69c7cCbRSYGjhGdj1w4xaebeap7Ee+yV/QmqC8bNQY+6gxnQ7b1vNdxQp9+tu
i/X+pWXGf27y4A==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:14 2025 by rpki-client