Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File: ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier: asWnj7yD/GLAlvgKTwBqsEAdbjc4EDXeDXDR/KG5/Lc=
Subject key identifier: 9A:AC:37:23:CD:AD:18:18:57:7D:FE:16:80:5E:DF:9B:97:04:4F:22
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer: /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial: 0195116BA8B4DB0AA369FCCAE3003BE0BD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number: 03A5
Signing time: Mon 17 Feb 2025 01:00:22 +0000
Manifest this update: Mon 17 Feb 2025 01:00:22 +0000
Manifest next update: Tue 18 Feb 2025 01:00:22 +0000
Files and hashes: 1: 1iEj79HjJmqaWkGf361U7nZQikY.roa (hash: 94aaNrCAEDrHjoHsfGX3cHWK+s0OW99qZZJRJsNm9lg=)
2: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: An+r2lBJpsdspeMnEA7cyvEYu683RGe22ZSSQM+61Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:a8:b4:db:0a:a3:69:fc:ca:e3:00:3b:e0:bd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Validity
Not Before: Feb 17 01:00:22 2025 GMT
Not After : Feb 18 01:00:22 2025 GMT
Subject: CN=9aac3723cdad1818577dfe16805edf9b97044f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:b9:34:8f:82:a7:e1:73:b0:bb:05:9f:55:
98:38:27:75:b7:b1:3d:06:f1:3d:d3:69:c0:0d:26:
17:da:8b:82:0f:1f:47:1f:29:e7:0b:f0:eb:23:25:
40:ce:4b:8e:f5:9f:af:b2:70:03:19:d1:52:93:9b:
89:33:24:ba:6c:19:c6:b2:12:a1:9d:61:02:f6:ba:
7b:83:64:35:b6:90:ce:c9:a8:18:78:38:8f:f5:d6:
45:43:a4:25:97:66:b4:11:d3:cd:c8:53:df:f6:70:
85:6e:7f:a2:8d:af:e7:4e:fa:64:c7:75:c3:79:1b:
9a:e6:11:40:9f:e2:d8:85:f3:b8:5c:8c:c2:b4:99:
a8:29:8a:1f:9a:d2:ad:99:1d:d7:ab:6f:93:7c:3e:
1b:c4:89:0e:99:5c:bc:d7:18:a3:41:a9:4e:80:cf:
6d:f2:94:1a:ab:36:0e:18:65:6a:0a:49:44:d8:83:
37:19:5e:8e:fd:54:de:de:e3:14:a1:38:ab:ab:97:
bb:ce:a5:93:a0:48:b1:ad:74:19:cd:50:41:79:0d:
96:e2:08:fc:3f:e9:19:0b:95:8d:3a:e4:87:3d:84:
85:86:8a:ad:9a:12:d6:0d:be:10:ac:16:6d:d0:c8:
07:48:bd:ba:9b:36:92:0b:86:0c:c0:ad:be:e3:bd:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:37:23:CD:AD:18:18:57:7D:FE:16:80:5E:DF:9B:97:04:4F:22
X509v3 Authority Key Identifier:
keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:65:65:3f:25:2e:99:66:0a:0c:64:2b:63:14:d0:13:63:05:
69:9e:e1:3c:f6:9a:46:57:82:68:cc:cc:ce:34:42:0c:28:25:
3a:2a:1c:dd:8b:cd:90:cc:35:e3:77:dd:6c:f7:db:62:03:8e:
b7:d7:5a:7e:93:b8:a0:83:79:37:f8:b4:0f:a6:c4:4b:c3:21:
d1:04:05:d5:71:fd:e3:a1:b2:22:ad:ad:e1:96:b4:18:f0:0c:
22:98:55:25:8f:70:ce:70:85:65:ab:73:85:83:1e:10:5f:fa:
cc:d9:5d:a7:05:1f:3a:fc:88:ed:21:88:3f:a8:f8:13:c3:42:
42:4e:57:de:cc:e9:c3:91:57:8b:0d:48:75:1b:94:b0:d2:10:
73:d3:f7:52:26:f0:d4:fd:5e:4d:80:65:42:af:1a:c6:a0:5f:
37:f3:50:2c:e3:bb:f2:f9:c7:9b:8a:1e:8e:f5:02:68:18:ec:
de:fe:75:f9:d7:11:30:9b:14:df:e6:27:de:ec:ac:87:00:44:
7e:ee:8c:a6:cc:42:d9:99:71:5f:f5:a3:e7:e6:72:f5:bf:6c:
5e:63:3f:f9:1a:35:2a:6f:71:39:b0:d7:f7:1a:70:27:79:92:
55:17:47:8a:c7:c1:14:c7:a4:9a:4b:56:b1:f7:cb:4d:8e:16:
88:6b:58:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa6i02wqjafzK4wA74L0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWVkZjUyNmIxY2E1ZmYwZTY4MmZmNDhhZWNlMTIxZDI3
YmMwYzMwHhcNMjUwMjE3MDEwMDIyWhcNMjUwMjE4MDEwMDIyWjAzMTEwLwYDVQQD
Eyg5YWFjMzcyM2NkYWQxODE4NTc3ZGZlMTY4MDVlZGY5Yjk3MDQ0ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo25NI+Cp+FzsLsFn1WYOCd1t7E9
BvE902nADSYX2ouCDx9HHynnC/DrIyVAzkuO9Z+vsnADGdFSk5uJMyS6bBnGshKh
nWEC9rp7g2Q1tpDOyagYeDiP9dZFQ6Qll2a0EdPNyFPf9nCFbn+ija/nTvpkx3XD
eRua5hFAn+LYhfO4XIzCtJmoKYofmtKtmR3Xq2+TfD4bxIkOmVy81xijQalOgM9t
8pQaqzYOGGVqCklE2IM3GV6O/VTe3uMUoTirq5e7zqWToEixrXQZzVBBeQ2W4gj8
P+kZC5WNOuSHPYSFhoqtmhLWDb4QrBZt0MgHSL26mzaSC4YMwK2+472IpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqsNyPNrRgYV33+FoBe35uXBE8iMB8GA1UdIwQY
MBaAFIse31JrHKX/Dmgv9Irs4SHSe8DDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYt
MjUxMTY4ZWRkM2U0LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYtMjUxMTY4ZWRkM2U0
LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmVlPyUu
mWYKDGQrYxTQE2MFaZ7hPPaaRleCaMzMzjRCDCglOioc3YvNkMw143fdbPfbYgOO
t9dafpO4oIN5N/i0D6bES8Mh0QQF1XH946GyIq2t4Za0GPAMIphVJY9wznCFZatz
hYMeEF/6zNldpwUfOvyI7SGIP6j4E8NCQk5X3szpw5FXiw1IdRuUsNIQc9P3Uibw
1P1eTYBlQq8axqBfN/NQLOO78vnHm4oejvUCaBjs3v51+dcRMJsU3+Yn3uyshwBE
fu6MpsxC2ZlxX/Wj5+Zy9b9sXmM/+Ro1Km9xObDX9xpwJ3mSVRdHisfBFMekmktW
sffLTY4WiGtY+g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:00 2025 by rpki-client