Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: 9Ux13QTsMY+r6Z+0SD2sgBfBi5/7Gg3L5NA9jKCDpZs=
Subject key identifier: F8:B1:42:3C:49:D3:8A:48:2A:C4:AC:3D:E2:E3:81:66:DD:84:8D:44
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 019512473F1E1F459E517AC388C797418DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 021F
Signing time: Mon 17 Feb 2025 05:00:13 +0000
Manifest this update: Mon 17 Feb 2025 05:00:13 +0000
Manifest next update: Tue 18 Feb 2025 05:00:13 +0000
Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: +QZ5hnyXW/MntPq2X5mMxXciNLowjoqtTuPeue2kaiE=)
2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:3f:1e:1f:45:9e:51:7a:c3:88:c7:97:41:8d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Feb 17 05:00:13 2025 GMT
Not After : Feb 18 05:00:13 2025 GMT
Subject: CN=f8b1423c49d38a482ac4ac3de2e38166dd848d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:08:f9:6b:00:94:9b:05:48:fa:b4:ab:73:
5d:84:65:b9:e0:d3:4e:93:ca:86:31:b5:e5:0f:e4:
34:87:7f:54:67:b5:79:c5:f9:c9:81:22:4c:81:65:
69:4d:06:35:76:8f:cf:97:2f:cf:74:9b:96:6b:a5:
6d:ab:7c:36:1a:33:4c:f4:a3:5b:b6:32:78:f6:5b:
d4:b7:06:3a:e3:8c:11:4d:b3:aa:a8:96:c2:d4:bb:
bb:66:b6:78:4c:7d:c6:6a:24:02:81:2d:78:eb:39:
8b:08:38:1e:a3:1f:80:0b:a8:e5:db:35:b1:c2:bd:
1d:9f:a2:7d:82:5e:12:57:fd:0e:dd:cc:50:d1:cf:
e7:eb:8e:73:38:d7:2b:b5:82:07:42:81:82:a5:e9:
db:32:42:d4:e0:e6:c2:13:41:68:bd:ec:0d:05:fe:
15:c6:37:51:fb:c0:b0:7a:ea:9e:a2:24:b7:a3:e2:
23:c7:81:d3:33:78:66:ed:28:1a:2a:48:99:1d:9c:
d9:1b:e4:e5:2a:3d:84:f6:99:bf:eb:26:04:58:40:
88:be:b0:4c:fc:ac:0d:6a:41:c5:8c:ce:3e:4b:d5:
9b:03:19:7b:e9:de:68:64:64:cf:07:1d:10:0d:c1:
92:bb:68:88:27:e5:9b:7c:66:55:43:b1:29:cb:da:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:42:3C:49:D3:8A:48:2A:C4:AC:3D:E2:E3:81:66:DD:84:8D:44
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:79:ac:87:20:47:40:c5:8d:89:64:7e:e0:c2:ff:62:1d:76:
09:67:2a:6e:e1:cc:51:ce:be:a7:74:f9:f5:d2:fb:24:86:40:
2d:a7:03:5a:a7:e0:70:4b:a6:3b:1f:d1:25:2e:0c:d3:26:26:
e3:dd:26:42:5b:16:12:32:cd:8e:b5:ca:94:44:01:51:1b:70:
22:df:07:8b:78:97:d7:8a:d0:76:b7:05:89:a9:85:2d:b9:61:
3f:69:80:d1:05:98:db:df:22:c8:47:31:01:45:f1:30:f5:db:
16:88:f7:3e:b8:23:77:fb:8a:7f:ce:22:f4:f3:53:7b:89:3c:
c4:e6:72:44:65:fa:84:c7:10:b9:b9:58:b9:aa:16:98:65:af:
49:44:48:05:95:54:35:a0:da:44:ce:83:06:5f:85:8b:0e:b4:
b7:9d:c3:2f:ba:fe:67:53:8d:0b:08:20:26:81:31:6c:46:7a:
1d:b9:7c:b0:d5:ec:a9:2f:88:11:fa:b9:1d:19:96:6a:1f:95:
ef:02:0e:3a:0d:4b:3b:a6:94:ec:8b:ce:32:21:ba:8b:ed:d9:
5d:87:18:ee:8f:8d:e0:eb:4c:1a:e7:d9:8e:48:af:21:14:70:
00:f7:8c:26:58:1a:4e:45:d6:a8:b1:2f:26:0c:e7:0f:5a:7b:
74:62:92:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSRz8eH0WeUXrDiMeXQY33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjUwMjE3MDUwMDEzWhcNMjUwMjE4MDUwMDEzWjAzMTEwLwYDVQQD
EyhmOGIxNDIzYzQ5ZDM4YTQ4MmFjNGFjM2RlMmUzODE2NmRkODQ4ZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxekI+WsAlJsFSPq0q3NdhGW54NNO
k8qGMbXlD+Q0h39UZ7V5xfnJgSJMgWVpTQY1do/Ply/PdJuWa6Vtq3w2GjNM9KNb
tjJ49lvUtwY644wRTbOqqJbC1Lu7ZrZ4TH3GaiQCgS146zmLCDgeox+AC6jl2zWx
wr0dn6J9gl4SV/0O3cxQ0c/n645zONcrtYIHQoGCpenbMkLU4ObCE0FovewNBf4V
xjdR+8CweuqeoiS3o+Ijx4HTM3hm7SgaKkiZHZzZG+TlKj2E9pm/6yYEWECIvrBM
/KwNakHFjM4+S9WbAxl76d5oZGTPBx0QDcGSu2iIJ+WbfGZVQ7Epy9onwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPixQjxJ04pIKsSsPeLjgWbdhI1EMB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3mshyBH
QMWNiWR+4ML/Yh12CWcqbuHMUc6+p3T59dL7JIZALacDWqfgcEumOx/RJS4M0yYm
490mQlsWEjLNjrXKlEQBURtwIt8Hi3iX14rQdrcFiamFLblhP2mA0QWY298iyEcx
AUXxMPXbFoj3Prgjd/uKf84i9PNTe4k8xOZyRGX6hMcQublYuaoWmGWvSURIBZVU
NaDaRM6DBl+Fiw60t53DL7r+Z1ONCwggJoExbEZ6Hbl8sNXsqS+IEfq5HRmWah+V
7wIOOg1LO6aU7IvOMiG6i+3ZXYcY7o+N4OtMGufZjkivIRRwAPeMJlgaTkXWqLEv
JgznD1p7dGKS8w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:42 2025 by rpki-client