Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: svmyKdMCvPbyyqESh/nZa2VhJDOTaMNyJYer7/iCjug=
Subject key identifier: F1:B8:0F:04:00:E6:AB:C7:95:7E:C1:A4:73:97:F0:83:E4:E0:35:F7
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019512102D5F3E1959998EAF741F0864CDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 0D17
Signing time: Mon 17 Feb 2025 04:00:04 +0000
Manifest this update: Mon 17 Feb 2025 04:00:04 +0000
Manifest next update: Tue 18 Feb 2025 04:00:04 +0000
Files and hashes: 1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=)
2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=)
3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: 2wBAoldXbNEA/GN/M6i6Jexj+aePM8fzJ5fdmLLc9gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:2d:5f:3e:19:59:99:8e:af:74:1f:08:64:cd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Feb 17 04:00:04 2025 GMT
Not After : Feb 18 04:00:04 2025 GMT
Subject: CN=f1b80f0400e6abc7957ec1a47397f083e4e035f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:26:4c:28:02:92:ed:9d:15:be:d7:06:12:
df:79:3e:98:ac:53:a6:ba:c8:94:86:1d:8f:7b:9c:
ab:05:44:8c:bf:31:28:48:bf:c1:55:4d:29:95:cc:
98:67:db:ea:27:89:d0:40:05:57:0e:f5:b4:aa:0e:
17:3c:a3:00:77:3d:a7:65:7a:3b:45:64:56:3e:46:
0d:a4:ec:7d:1b:20:dd:06:63:fa:0a:58:a3:75:29:
1a:7b:19:30:3b:94:25:9b:8c:d8:95:0a:55:0a:84:
40:86:fe:e3:84:87:51:f9:a1:00:01:e3:4d:e3:ab:
3c:7a:39:47:ee:25:23:a8:f2:4c:e1:eb:89:1d:3c:
9d:6a:2f:09:2e:eb:54:bc:60:1a:d7:3d:9c:c1:a1:
fd:f5:38:3f:48:2c:73:d9:23:b6:36:29:22:bd:46:
a4:ea:7d:28:43:af:9c:0b:54:73:1e:14:88:f4:ec:
25:1f:92:e7:60:e8:02:92:84:3e:4d:a2:e5:57:b6:
20:d2:e8:4d:b4:21:d8:dd:c7:1e:41:7e:a4:71:92:
ff:41:ed:ce:bb:7a:24:83:00:45:b0:61:d9:41:e3:
fe:e2:05:20:c4:d4:71:d1:89:19:76:d0:b4:71:c3:
72:ce:77:7b:c1:f5:50:73:60:79:c8:b2:40:e1:4c:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B8:0F:04:00:E6:AB:C7:95:7E:C1:A4:73:97:F0:83:E4:E0:35:F7
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:af:96:46:ba:7e:fb:6d:80:15:e9:d9:cf:a7:7a:43:2a:bd:
53:5c:44:20:c8:14:72:58:23:73:e9:1b:dd:cf:bd:28:e1:b6:
e7:ce:a8:a4:f1:33:f0:e8:e3:ef:93:32:ab:29:43:b8:87:04:
7e:cc:2f:f9:a2:fd:ec:7a:df:ac:f9:db:da:e3:d0:fc:1c:8b:
78:99:5f:2c:c5:aa:be:13:ad:0c:17:c6:3e:9d:fd:90:32:9d:
43:f7:6b:36:02:3d:fe:7b:e9:87:44:8f:02:65:51:3b:4b:d9:
fb:76:3f:ea:0b:b5:1e:4d:67:4a:b8:99:c3:c6:47:d4:9b:86:
ab:c0:3b:dd:b8:c5:e5:a6:b5:b6:0d:b9:07:d6:f9:2a:95:9f:
ea:4a:1d:34:1b:84:54:af:e9:4a:6c:95:5e:29:e6:53:57:9b:
e8:b9:6f:25:32:bb:6c:25:83:9c:8d:2f:1a:df:4b:27:5c:10:
ca:ae:67:dd:29:87:da:66:43:09:72:f3:c0:8e:b4:77:be:8e:
d6:3e:f9:8d:44:38:2e:cb:6c:9a:35:c0:86:da:75:61:e7:f0:
56:5d:65:85:29:cc:1c:12:d0:2c:45:07:df:d0:9b:68:1b:42:
bd:99:1d:16:4b:8a:eb:bf:e1:d5:11:88:74:29:9f:f6:87:3f:
5f:a9:2d:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEC1fPhlZmY6vdB8IZM3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl
MzZlZDMwHhcNMjUwMjE3MDQwMDA0WhcNMjUwMjE4MDQwMDA0WjAzMTEwLwYDVQQD
EyhmMWI4MGYwNDAwZTZhYmM3OTU3ZWMxYTQ3Mzk3ZjA4M2U0ZTAzNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M0mTCgCku2dFb7XBhLfeT6YrFOm
usiUhh2Pe5yrBUSMvzEoSL/BVU0plcyYZ9vqJ4nQQAVXDvW0qg4XPKMAdz2nZXo7
RWRWPkYNpOx9GyDdBmP6ClijdSkaexkwO5Qlm4zYlQpVCoRAhv7jhIdR+aEAAeNN
46s8ejlH7iUjqPJM4euJHTydai8JLutUvGAa1z2cwaH99Tg/SCxz2SO2NikivUak
6n0oQ6+cC1RzHhSI9OwlH5LnYOgCkoQ+TaLlV7Yg0uhNtCHY3cceQX6kcZL/Qe3O
u3okgwBFsGHZQeP+4gUgxNRx0YkZdtC0ccNyznd7wfVQc2B5yLJA4UxN7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG4DwQA5qvHlX7BpHOX8IPk4DX3MB8GA1UdIwQY
MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt
ZjRmMDU2MWI3YTU3LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3
LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmq+WRrp+
+22AFenZz6d6Qyq9U1xEIMgUclgjc+kb3c+9KOG2586opPEz8Ojj75MyqylDuIcE
fswv+aL97HrfrPnb2uPQ/ByLeJlfLMWqvhOtDBfGPp39kDKdQ/drNgI9/nvph0SP
AmVRO0vZ+3Y/6gu1Hk1nSriZw8ZH1JuGq8A73bjF5aa1tg25B9b5KpWf6kodNBuE
VK/pSmyVXinmU1eb6LlvJTK7bCWDnI0vGt9LJ1wQyq5n3SmH2mZDCXLzwI60d76O
1j75jUQ4LstsmjXAhtp1YefwVl1lhSnMHBLQLEUH39CbaBtCvZkdFkuK67/h1RGI
dCmf9oc/X6kt5w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:03 2025 by rpki-client