Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: 8teCYbSWRiSVFEU2wmpDRFDPEsAAc89cfvi0bfFX3DM=
Subject key identifier: 49:47:C1:2D:3C:B7:21:0D:E6:F1:90:13:7A:A1:C9:24:7A:80:F8:E5
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019510C78104B7A177F6FDF02BFD9AC3AF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 22:01:04 +0000
Manifest this update: Sun 16 Feb 2025 22:01:04 +0000
Manifest next update: Mon 17 Feb 2025 22:01:04 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: SQsc5hmu1dbMvPmsEDegGo0PPDvMqiTgaeaPhnKjUy8=)
2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:81:04:b7:a1:77:f6:fd:f0:2b:fd:9a:c3:af:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Feb 16 22:01:04 2025 GMT
Not After : Feb 17 22:01:04 2025 GMT
Subject: CN=4947c12d3cb7210de6f190137aa1c9247a80f8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:ad:19:db:79:7d:06:d1:68:f4:b6:5f:fa:
02:b4:95:60:13:9f:4e:90:38:3a:ed:26:d5:2a:13:
53:57:07:40:07:4e:39:19:62:6c:67:ea:d9:79:34:
bb:1c:d1:12:49:19:25:ce:92:6a:82:9d:00:a0:76:
e7:44:e4:e0:71:47:fe:24:7c:54:74:c1:67:cd:e2:
5f:08:e6:d8:10:00:8b:62:a7:3b:03:8a:3d:e5:fa:
dd:fd:38:c1:99:1f:f4:4f:d9:24:57:f1:60:11:ce:
a8:4d:75:6c:5e:ae:a7:e3:39:14:a7:9d:8c:48:db:
8c:02:f4:cf:0c:95:1b:df:47:b4:a6:fb:f1:5b:19:
ca:7d:62:50:78:1b:99:4f:49:2e:c1:d2:7c:b6:88:
fa:95:fc:89:38:9a:bb:e0:89:20:7b:6d:d3:ca:dc:
5c:e7:51:00:b6:5c:51:40:7b:19:4b:cf:54:c3:99:
03:42:8b:29:be:ed:49:89:4f:21:08:a1:05:0b:f8:
eb:d3:5a:90:39:74:23:bc:76:1d:5b:6b:38:5e:6e:
ba:81:b3:61:a3:44:72:50:ed:ca:aa:18:6c:9d:ee:
3f:e1:4a:b0:07:f2:08:f1:f9:b0:65:96:cc:d7:65:
b5:6b:72:78:fa:87:4e:30:d7:60:3b:18:db:c1:fc:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:47:C1:2D:3C:B7:21:0D:E6:F1:90:13:7A:A1:C9:24:7A:80:F8:E5
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b4:5b:cb:5b:dc:5a:e3:6e:5b:44:0f:d3:a6:bc:d9:ab:e1:
e9:4c:24:8a:76:2d:61:e0:ea:30:ec:5a:6d:a5:08:c5:8d:7d:
f1:21:e5:13:37:5a:1c:f2:da:59:17:cf:d9:77:64:7f:1e:10:
43:2f:de:6f:64:5a:46:2a:ed:13:6b:b2:90:08:0d:0a:66:8c:
6f:eb:33:2b:96:25:8a:92:0a:e4:b1:c7:65:e6:d6:c2:1c:a6:
28:79:1d:d9:64:36:28:64:08:37:99:89:a8:15:a2:53:16:c3:
45:92:4e:ba:ee:d3:76:b0:22:8e:92:82:5b:56:95:58:40:c4:
16:8c:00:78:36:67:5e:23:1c:2a:dc:fa:44:5b:29:35:ca:d4:
4b:3c:d7:95:72:89:dd:d3:77:a5:b3:24:56:32:68:ed:8a:8c:
30:54:7c:45:1b:ee:18:5b:cb:4f:cd:46:cb:45:14:ff:18:2f:
76:29:52:f6:7c:81:c6:82:25:5f:93:89:7c:c1:4f:8d:e1:7b:
e0:c7:c8:5a:90:90:a8:40:67:ee:d2:8f:9f:de:b5:00:f6:76:
88:14:91:d4:61:0f:08:11:e6:00:11:e8:6c:13:22:32:1c:5e:
b9:7d:0a:43:c5:f0:b3:ad:c2:a5:f8:1f:ee:16:b6:05:af:10:
20:d3:c8:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx4EEt6F39v3wK/2aw68ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDdlNzBjMDA1ZjU1NmE4MjU0ZTdiMTJiMGViM2QzMzE0
ZDQ1ZTIwHhcNMjUwMjE2MjIwMTA0WhcNMjUwMjE3MjIwMTA0WjAzMTEwLwYDVQQD
Eyg0OTQ3YzEyZDNjYjcyMTBkZTZmMTkwMTM3YWExYzkyNDdhODBmOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj42tGdt5fQbRaPS2X/oCtJVgE59O
kDg67SbVKhNTVwdAB045GWJsZ+rZeTS7HNESSRklzpJqgp0AoHbnROTgcUf+JHxU
dMFnzeJfCObYEACLYqc7A4o95frd/TjBmR/0T9kkV/FgEc6oTXVsXq6n4zkUp52M
SNuMAvTPDJUb30e0pvvxWxnKfWJQeBuZT0kuwdJ8toj6lfyJOJq74Ikge23Tytxc
51EAtlxRQHsZS89Uw5kDQospvu1JiU8hCKEFC/jr01qQOXQjvHYdW2s4Xm66gbNh
o0RyUO3Kqhhsne4/4UqwB/II8fmwZZbM12W1a3J4+odOMNdgOxjbwfz8YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElHwS08tyEN5vGQE3qhySR6gPjlMB8GA1UdIwQY
MBaAFAvX5wwAX1VqglTnsSsOs9MxTUXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQt
YmIzY2M3Yzk0NGFkLzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQtYmIzY2M3Yzk0NGFk
LzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7Rby1vc
WuNuW0QP06a82avh6UwkinYtYeDqMOxabaUIxY198SHlEzdaHPLaWRfP2Xdkfx4Q
Qy/eb2RaRirtE2uykAgNCmaMb+szK5YlipIK5LHHZebWwhymKHkd2WQ2KGQIN5mJ
qBWiUxbDRZJOuu7TdrAijpKCW1aVWEDEFowAeDZnXiMcKtz6RFspNcrUSzzXlXKJ
3dN3pbMkVjJo7YqMMFR8RRvuGFvLT81Gy0UU/xgvdilS9nyBxoIlX5OJfMFPjeF7
4MfIWpCQqEBn7tKPn961APZ2iBSR1GEPCBHmABHobBMiMhxeuX0KQ8Xws63Cpfgf
7ha2Ba8QINPIPA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:19 2025 by rpki-client