Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier: p/24BYfAg7yx2JxBKWRqCM1bX0qSg4qVAOm/B41IDLc=
Subject key identifier: 94:83:55:43:DC:D4:1D:47:DF:A0:77:1C:2B:7C:8A:65:34:D8:3C:68
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 0195127E53CBF4319957BAB012C31B9EE789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number: 145B
Signing time: Mon 17 Feb 2025 06:00:23 +0000
Manifest this update: Mon 17 Feb 2025 06:00:23 +0000
Manifest next update: Tue 18 Feb 2025 06:00:23 +0000
Files and hashes: 1: VzkNnK8ZZLi3EdFem2ht2MqP6yg.roa (hash: vDh90IOKG2Z4aklRGqaqLJS7/W1wdLFm/VhjhWpb5HU=)
2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: TIkhvXv3m/vLH83WRS8CqPBi/ZBVXG0xbG9SJp7LjNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:53:cb:f4:31:99:57:ba:b0:12:c3:1b:9e:e7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: Feb 17 06:00:23 2025 GMT
Not After : Feb 18 06:00:23 2025 GMT
Subject: CN=94835543dcd41d47dfa0771c2b7c8a6534d83c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:38:25:61:be:9e:af:3c:70:53:88:05:f0:
ac:ed:7a:15:1f:67:a0:e1:ba:96:77:ca:5d:dd:2b:
20:49:d5:2d:81:56:dc:34:57:e0:2c:9e:ec:4f:89:
db:29:8b:ba:c4:43:fc:6a:65:bc:56:1a:01:0f:21:
eb:c7:fe:aa:6a:f0:a3:96:70:0a:db:ad:28:95:ab:
cd:49:ea:03:c1:a9:8b:02:ab:01:a6:f0:b2:b4:1d:
cc:37:87:94:f3:c8:9d:7b:ae:44:54:a5:b9:6d:54:
89:27:ec:35:59:6e:05:86:77:a6:7e:1a:49:b2:02:
d9:e4:f7:b4:45:f9:a0:32:e5:9c:47:99:a2:87:58:
63:19:cc:c1:03:a6:a7:67:57:7a:f8:26:c3:81:99:
db:58:30:32:08:2f:b1:08:6d:94:79:a4:48:9f:ab:
be:31:49:31:88:f8:f6:ef:30:3f:47:98:ba:a2:e2:
b8:e4:cf:92:34:9a:3a:65:bf:71:f8:41:e5:82:2d:
b9:18:65:8c:9b:9f:f0:ca:77:1b:5b:4f:27:b3:dd:
15:57:67:53:60:05:df:8e:d2:38:3e:77:41:45:4f:
f0:00:b8:f9:29:f8:20:65:89:5d:e9:1f:fc:75:b5:
2d:a8:f8:79:b8:5f:46:06:35:eb:d3:55:e9:bb:1f:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:83:55:43:DC:D4:1D:47:DF:A0:77:1C:2B:7C:8A:65:34:D8:3C:68
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9a:8e:1c:e1:ca:2d:4f:c6:70:e3:b8:dc:de:bb:83:13:fd:
51:be:a3:84:ed:21:f2:62:39:0c:66:f8:42:5e:52:dc:91:96:
1e:75:4f:f0:f7:28:ee:8e:af:23:a4:d3:27:32:a2:1c:13:48:
13:81:56:88:bd:e4:a1:3d:69:89:5c:d7:99:0b:f4:d3:05:77:
13:ca:42:f7:65:a4:08:26:70:6d:a3:1d:1f:00:e1:36:f6:11:
b0:b9:41:4a:4f:16:3e:14:ee:57:04:cb:e4:1c:7c:e3:b0:b6:
ee:71:78:24:2d:d1:6a:16:91:7f:39:8f:6d:15:fb:75:0f:a0:
a1:ef:73:31:9e:cd:b4:e9:d3:18:f8:e6:1f:58:66:3e:82:43:
29:6e:de:45:01:d7:e0:1b:2a:ec:2e:34:2a:1d:b4:20:27:98:
06:34:ea:45:6d:6b:cb:13:d7:78:bf:ed:21:f3:c0:5f:4b:f7:
9e:ff:f7:0e:93:fd:40:68:86:c4:2b:53:0d:c1:a9:f4:67:e4:
28:35:63:08:d7:13:1e:88:14:2a:a6:c5:4f:bc:56:ad:38:ea:
32:1b:d4:45:a4:7c:e8:b4:0f:f0:46:99:b1:ea:c9:47:77:40:
ac:7f:e5:4b:23:d3:35:72:82:7d:3f:66:bd:a1:7e:52:82:5b:
4d:f2:b1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSflPL9DGZV7qwEsMbnueJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzOTYzNzRjYmY1ZDc2NzEyNWYwMmRjZjBmOTcyOTYz
MjMwOTIwHhcNMjUwMjE3MDYwMDIzWhcNMjUwMjE4MDYwMDIzWjAzMTEwLwYDVQQD
Eyg5NDgzNTU0M2RjZDQxZDQ3ZGZhMDc3MWMyYjdjOGE2NTM0ZDgzYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycI4JWG+nq88cFOIBfCs7XoVH2eg
4bqWd8pd3SsgSdUtgVbcNFfgLJ7sT4nbKYu6xEP8amW8VhoBDyHrx/6qavCjlnAK
260olavNSeoDwamLAqsBpvCytB3MN4eU88ide65EVKW5bVSJJ+w1WW4FhnemfhpJ
sgLZ5Pe0RfmgMuWcR5mih1hjGczBA6anZ1d6+CbDgZnbWDAyCC+xCG2UeaRIn6u+
MUkxiPj27zA/R5i6ouK45M+SNJo6Zb9x+EHlgi25GGWMm5/wyncbW08ns90VV2dT
YAXfjtI4PndBRU/wALj5KfggZYld6R/8dbUtqPh5uF9GBjXr01Xpux9ZQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSDVUPc1B1H36B3HCt8imU02DxoMB8GA1UdIwQY
MBaAFJ/zOWN0y/XXZxJfAtzw+XKWMjCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEt
ZTk1NTQ0ODNmZmE3LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEtZTk1NTQ0ODNmZmE3
LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpqOHOHK
LU/GcOO43N67gxP9Ub6jhO0h8mI5DGb4Ql5S3JGWHnVP8Pco7o6vI6TTJzKiHBNI
E4FWiL3koT1piVzXmQv00wV3E8pC92WkCCZwbaMdHwDhNvYRsLlBSk8WPhTuVwTL
5Bx847C27nF4JC3RahaRfzmPbRX7dQ+goe9zMZ7NtOnTGPjmH1hmPoJDKW7eRQHX
4Bsq7C40Kh20ICeYBjTqRW1ryxPXeL/tIfPAX0v3nv/3DpP9QGiGxCtTDcGp9Gfk
KDVjCNcTHogUKqbFT7xWrTjqMhvURaR86LQP8EaZserJR3dArH/lSyPTNXKCfT9m
vaF+UoJbTfKxPQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:46 2025 by rpki-client