Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
File: a0I7KaGCk2si34-YJt1YOgBZE0o.mft (raw, json)
Hash identifier: dxA40LtLoGQ2MO9gXln50VGwS6VDCWEy+NCJYkqO2Es=
Subject key identifier: 83:4B:1F:70:E1:AE:1B:9C:1C:7C:AF:37:4E:E3:D9:BF:CD:6A:B8:44
Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
Certificate issuer: /CN=6b423b29a182936b22df8f9826dd583a0059134a
Certificate serial: 0195109038C734180BD5FFECAF1FB40A6AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
Manifest number: 057B
Signing time: Sun 16 Feb 2025 21:00:41 +0000
Manifest this update: Sun 16 Feb 2025 21:00:41 +0000
Manifest next update: Mon 17 Feb 2025 21:00:41 +0000
Files and hashes: 1: U_Lbl4dQRImqSP6zV_MXvnCzVro.roa (hash: k+fOfvjUjOj8hU8vOKkhlBwBO0V4NXX3JC8vdkG/viY=)
2: a0I7KaGCk2si34-YJt1YOgBZE0o.crl (hash: gfKNP/e/ijrtFVk2v87LpjrsTP5gxreZNHQfirM7qoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:38:c7:34:18:0b:d5:ff:ec:af:1f:b4:0a:6a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a
Validity
Not Before: Feb 16 21:00:41 2025 GMT
Not After : Feb 17 21:00:41 2025 GMT
Subject: CN=834b1f70e1ae1b9c1c7caf374ee3d9bfcd6ab844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:6a:d0:53:0b:0a:a3:b2:d4:8d:e7:42:5f:
81:2c:8b:9a:e5:7f:f5:f6:04:bc:3e:c3:e4:31:16:
35:3b:0c:9f:86:a3:b2:54:62:e7:45:ce:f2:0e:26:
00:9a:d4:29:af:69:02:5c:38:26:20:a4:38:f1:1a:
10:34:b6:0e:ff:dd:97:90:af:6a:48:a8:5a:bf:54:
81:49:af:b9:df:0f:f4:00:94:f5:af:05:ed:ab:2b:
a7:3d:73:5c:e6:76:81:df:12:5c:b3:3a:d4:d5:d0:
43:aa:f7:22:17:2d:ff:fa:ad:e4:fb:9b:7f:b5:8d:
7f:1f:55:f5:17:3c:d5:b4:89:db:a5:11:aa:5b:bd:
0b:c9:d9:a2:38:ad:95:ec:94:79:c6:df:04:6b:f5:
e8:d5:75:99:cf:fa:d2:57:5c:a5:5b:13:61:2d:41:
3e:90:40:d7:4b:36:21:6a:dd:2c:27:f6:46:e8:cf:
30:c9:66:59:01:d0:1a:df:3f:82:19:09:61:07:4b:
aa:1a:30:9c:fd:40:48:29:6c:52:b9:e2:6b:b7:0b:
66:5b:5b:ba:88:f9:88:85:f0:96:f8:ca:53:5f:87:
df:24:b4:b9:fc:58:d2:57:42:21:a2:b5:41:27:4e:
a4:41:ee:bb:a2:1f:71:e8:b1:8c:db:b4:3e:c3:c7:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4B:1F:70:E1:AE:1B:9C:1C:7C:AF:37:4E:E3:D9:BF:CD:6A:B8:44
X509v3 Authority Key Identifier:
keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:02:39:86:87:fd:6c:cb:18:20:b6:2d:e3:74:9c:4d:f7:53:
d0:5a:94:bc:4b:18:78:15:c8:2c:3b:b6:c9:82:22:00:4b:66:
6b:b6:70:44:9a:40:07:c8:87:99:ab:c2:05:9b:18:8b:59:a9:
1b:16:2e:5b:9a:2d:81:f6:0e:a4:ea:e9:80:e0:6a:0a:b9:8f:
57:74:64:1e:d2:ac:46:c8:2c:4c:93:16:23:86:cb:62:26:ff:
d9:67:1e:4a:66:0f:ae:da:ad:39:5f:02:13:90:0b:83:6f:4c:
2f:d1:a2:ba:cf:7f:64:a4:cf:2e:53:f6:11:0d:9d:3e:7b:55:
35:bf:2b:b5:cd:aa:58:1c:92:fb:9d:b8:c0:2d:5e:c9:30:df:
34:f6:b3:4a:e0:b7:c9:a2:2e:62:87:32:ee:09:85:eb:ff:3e:
57:a3:75:42:a2:8c:8a:5b:a4:3a:32:11:f3:33:08:55:c6:7f:
6d:64:2b:b2:3d:6e:74:e3:cf:e6:6f:fc:55:53:a1:ab:4e:d5:
33:e1:63:96:c2:61:39:45:1b:ff:76:ad:56:c5:5e:84:c8:a4:
51:4e:16:ce:b0:aa:1c:66:dd:56:ee:ce:95:35:ff:84:4d:72:
38:2a:a1:f9:5a:e4:ff:e7:71:30:43:30:65:18:85:48:25:4e:
9f:f9:85:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQkDjHNBgL1f/srx+0Cmr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNDIzYjI5YTE4MjkzNmIyMmRmOGY5ODI2ZGQ1ODNhMDA1
OTEzNGEwHhcNMjUwMjE2MjEwMDQxWhcNMjUwMjE3MjEwMDQxWjAzMTEwLwYDVQQD
Eyg4MzRiMWY3MGUxYWUxYjljMWM3Y2FmMzc0ZWUzZDliZmNkNmFiODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwpq0FMLCqOy1I3nQl+BLIua5X/1
9gS8PsPkMRY1OwyfhqOyVGLnRc7yDiYAmtQpr2kCXDgmIKQ48RoQNLYO/92XkK9q
SKhav1SBSa+53w/0AJT1rwXtqyunPXNc5naB3xJcszrU1dBDqvciFy3/+q3k+5t/
tY1/H1X1FzzVtInbpRGqW70LydmiOK2V7JR5xt8Ea/Xo1XWZz/rSV1ylWxNhLUE+
kEDXSzYhat0sJ/ZG6M8wyWZZAdAa3z+CGQlhB0uqGjCc/UBIKWxSueJrtwtmW1u6
iPmIhfCW+MpTX4ffJLS5/FjSV0IhorVBJ06kQe67oh9x6LGM27Q+w8dvqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINLH3DhrhucHHyvN07j2b/NarhEMB8GA1UdIwQY
MBaAFGtCOymhgpNrIt+PmCbdWDoAWRNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDct
NThhOGEzM2Q1NGE2LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDctNThhOGEzM2Q1NGE2
LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQI5hof9
bMsYILYt43ScTfdT0FqUvEsYeBXILDu2yYIiAEtma7ZwRJpAB8iHmavCBZsYi1mp
GxYuW5otgfYOpOrpgOBqCrmPV3RkHtKsRsgsTJMWI4bLYib/2WceSmYPrtqtOV8C
E5ALg29ML9Gius9/ZKTPLlP2EQ2dPntVNb8rtc2qWByS+524wC1eyTDfNPazSuC3
yaIuYocy7gmF6/8+V6N1QqKMilukOjIR8zMIVcZ/bWQrsj1udOPP5m/8VVOhq07V
M+FjlsJhOUUb/3atVsVehMikUU4WzrCqHGbdVu7OlTX/hE1yOCqh+Vrk/+dxMEMw
ZRiFSCVOn/mFFw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:17 2025 by rpki-client