Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier: zU64a8xih8zCUGNPcD75YBDKq1CvBCSF/4gdg1Pazcs=
Subject key identifier: 5C:23:74:F9:18:4D:93:0F:07:29:2A:94:F4:A5:66:24:90:00:8E:DE
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 019510C73F8A55E0DA3DFB43F8EECAB8D5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number: 06AB
Signing time: Sun 16 Feb 2025 22:00:48 +0000
Manifest this update: Sun 16 Feb 2025 22:00:48 +0000
Manifest next update: Mon 17 Feb 2025 22:00:48 +0000
Files and hashes: 1: 6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa (hash: m6tO4ROtbLwqmMtYoGkRxelczMRQ44EOZBvyjQVDxjY=)
2: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: Br9a5gpuGssFJYh33pwl311KZiraxpRfZiXYSNucpHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:3f:8a:55:e0:da:3d:fb:43:f8:ee:ca:b8:d5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Feb 16 22:00:48 2025 GMT
Not After : Feb 17 22:00:48 2025 GMT
Subject: CN=5c2374f9184d930f07292a94f4a5662490008ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:1e:a5:a2:81:dd:90:23:7f:0e:f6:7e:13:
96:2f:61:06:62:c4:25:17:35:d4:03:95:4a:45:41:
e3:75:4f:40:bb:8c:b1:f1:a7:42:dc:7a:28:fe:a4:
68:57:8a:ee:bf:02:95:47:fe:af:b8:fb:1d:2f:5c:
5e:60:e8:2b:00:4c:0a:52:92:b3:64:60:d6:bb:3f:
36:74:82:ae:1b:e7:fe:e9:cb:19:11:b6:24:19:de:
67:fd:06:d1:df:87:79:84:64:b3:5f:ef:7a:75:63:
e0:d8:82:e9:40:29:4b:c1:d3:06:b9:ad:99:2d:33:
be:37:24:88:7c:9f:64:45:7d:db:23:ae:d3:9c:60:
cf:18:d4:5a:de:cc:3c:d7:19:60:d4:bb:3f:f9:a5:
33:80:5a:b6:cc:a8:25:e6:38:38:15:3f:c7:59:fb:
38:f1:98:ce:2a:a6:52:7a:26:35:40:8a:5f:b2:dd:
de:c0:52:73:0e:99:97:ce:34:d4:cc:67:43:7e:3b:
98:b9:72:21:02:84:77:29:17:fe:89:93:0e:0c:f2:
14:c6:f0:a3:8a:f6:12:f4:8e:72:e9:af:dc:57:d3:
98:9a:a3:8a:d8:d2:01:48:14:eb:d9:16:1f:46:56:
93:d2:e4:7c:42:ff:b6:9e:6e:9f:af:d9:01:69:f6:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:23:74:F9:18:4D:93:0F:07:29:2A:94:F4:A5:66:24:90:00:8E:DE
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:da:41:58:87:50:e1:4c:bb:13:a3:c1:7e:13:c1:b4:45:e1:
75:ed:81:41:6d:58:7a:52:0f:52:05:3a:24:1f:34:01:ed:c3:
fe:58:b3:dd:13:5e:6b:bf:6a:06:86:38:b1:61:97:af:ba:9c:
d1:52:83:34:60:c5:45:35:67:38:18:72:94:04:14:c4:5c:5d:
e4:5d:dc:25:92:3e:8f:d9:55:e2:3c:1b:ec:a9:96:85:4a:b6:
94:e4:45:8c:a6:72:df:8c:1d:0d:55:b0:a0:bb:0b:f8:b2:69:
94:16:a8:55:6c:51:80:34:43:d2:88:81:24:5b:7d:3c:01:f7:
a0:29:61:4a:c5:8f:ee:34:9e:c0:26:82:3c:83:b4:84:6c:41:
c1:b4:41:29:f4:2b:b7:c3:53:c1:59:a1:f6:21:13:48:7e:ef:
fb:3b:a9:f1:79:d7:65:8f:e7:4a:9a:6a:07:51:e3:c7:77:a5:
77:45:00:ef:e4:08:51:07:37:98:93:97:9d:01:06:fc:b9:1b:
78:69:49:bd:52:2c:8f:2b:49:f4:f1:18:55:9c:f4:5d:8f:b5:
ff:f9:1b:27:d6:61:5e:ed:00:f8:87:b5:c1:84:20:d9:a1:1d:
36:c9:66:87:16:85:55:de:9f:91:f8:cb:78:d7:26:55:bf:0a:
85:e2:a5:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxz+KVeDaPftD+O7KuNWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODI3YTVhMjRlNzcxY2MxNGZhNjliYjc0YjNlNzYwMTY3
YjAyNmIwHhcNMjUwMjE2MjIwMDQ4WhcNMjUwMjE3MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg1YzIzNzRmOTE4NGQ5MzBmMDcyOTJhOTRmNGE1NjYyNDkwMDA4ZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8QepaKB3ZAjfw72fhOWL2EGYsQl
FzXUA5VKRUHjdU9Au4yx8adC3Hoo/qRoV4ruvwKVR/6vuPsdL1xeYOgrAEwKUpKz
ZGDWuz82dIKuG+f+6csZEbYkGd5n/QbR34d5hGSzX+96dWPg2ILpQClLwdMGua2Z
LTO+NySIfJ9kRX3bI67TnGDPGNRa3sw81xlg1Ls/+aUzgFq2zKgl5jg4FT/HWfs4
8ZjOKqZSeiY1QIpfst3ewFJzDpmXzjTUzGdDfjuYuXIhAoR3KRf+iZMODPIUxvCj
ivYS9I5y6a/cV9OYmqOK2NIBSBTr2RYfRlaT0uR8Qv+2nm6fr9kBafZuUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwjdPkYTZMPBykqlPSlZiSQAI7eMB8GA1UdIwQY
MBaAFA+Celok53HMFPppu3Sz52AWewJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGIt
Y2JkYWVkMGQwMGFkLzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGItY2JkYWVkMGQwMGFk
LzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdpBWIdQ
4Uy7E6PBfhPBtEXhde2BQW1YelIPUgU6JB80Ae3D/liz3RNea79qBoY4sWGXr7qc
0VKDNGDFRTVnOBhylAQUxFxd5F3cJZI+j9lV4jwb7KmWhUq2lORFjKZy34wdDVWw
oLsL+LJplBaoVWxRgDRD0oiBJFt9PAH3oClhSsWP7jSewCaCPIO0hGxBwbRBKfQr
t8NTwVmh9iETSH7v+zup8XnXZY/nSppqB1Hjx3eld0UA7+QIUQc3mJOXnQEG/Lkb
eGlJvVIsjytJ9PEYVZz0XY+1//kbJ9ZhXu0A+Ie1wYQg2aEdNslmhxaFVd6fkfjL
eNcmVb8KheKlzA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:30 2025 by rpki-client