Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: 48OkzNj+K4vJVYr3s1t8y0SrZhocC+jHt8jMDe4+uyo=
Subject key identifier: D9:39:2A:E9:3A:6F:63:AD:B9:76:E4:D0:2D:55:B3:8C:62:05:DB:9C
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 019511D952664ADC32B4A2FC4C580B85476D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1463
Signing time: Mon 17 Feb 2025 03:00:09 +0000
Manifest this update: Mon 17 Feb 2025 03:00:09 +0000
Manifest next update: Tue 18 Feb 2025 03:00:09 +0000
Files and hashes: 1: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: eX14O50uXvwW5DbNRLOR4VtZieEMpve2WbVMRnMl4Y8=)
2: SFYQtUf8h78RR3sYV-5vV65d0GI.roa (hash: k8VC+Pkqjm+Q/34YSS05tLomED6YZDaGOWiNO2M8zlM=)
3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:52:66:4a:dc:32:b4:a2:fc:4c:58:0b:85:47:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Feb 17 03:00:09 2025 GMT
Not After : Feb 18 03:00:09 2025 GMT
Subject: CN=d9392ae93a6f63adb976e4d02d55b38c6205db9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ff:45:cb:cc:1c:70:77:8f:ef:ee:15:55:ec:
d4:06:5c:45:db:c6:27:f1:32:39:32:e7:c4:46:ae:
c7:24:20:af:fd:7a:20:0f:d5:dc:84:44:dd:f6:9a:
0b:33:2b:12:0f:e6:4f:68:ec:d0:cb:95:26:89:6b:
b8:c1:37:1e:45:2e:19:a7:79:fc:cd:cc:f2:ba:b0:
4b:90:15:f7:0c:9c:c5:ce:f1:d5:81:3d:18:b0:0b:
47:4e:e4:a8:92:fa:53:98:f9:97:39:4e:aa:19:82:
b7:5a:a5:c3:9a:96:fd:f2:7c:47:29:57:b0:ee:a9:
ac:ee:3d:39:17:41:63:04:33:13:6c:77:a5:38:91:
84:0a:8d:85:f4:33:6f:a4:e6:65:b9:f8:4f:45:32:
3d:c8:98:cb:b8:41:29:1b:37:f0:7d:e7:5e:18:f1:
eb:a3:f5:14:4f:89:4b:3a:be:3b:6e:b4:55:33:20:
ee:ba:5d:2a:40:33:e7:73:bc:24:63:5f:85:db:18:
af:b5:2b:ab:cc:4c:c6:8b:62:90:6c:83:37:2c:f7:
81:e4:58:08:da:0d:76:a7:91:4c:7a:35:d0:80:95:
48:9d:c7:f0:89:db:73:28:ab:23:79:4e:16:c0:7e:
08:15:f1:d6:53:d9:00:5c:d3:15:97:0d:58:8b:55:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:39:2A:E9:3A:6F:63:AD:B9:76:E4:D0:2D:55:B3:8C:62:05:DB:9C
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:eb:26:c8:f4:07:7e:d1:8b:60:ca:6f:77:11:d3:bf:f8:cb:
66:a0:6a:d9:16:8e:14:99:b4:23:bd:02:0d:4d:7a:7b:4b:69:
8e:1e:bd:ef:b5:45:cd:63:2b:80:6c:79:76:8c:2e:f4:c0:89:
2a:d7:77:fa:d8:91:cf:95:66:9b:38:23:91:9a:ec:0b:3c:ba:
19:e9:d8:e8:98:0a:2c:c7:6d:6c:db:6b:b3:27:5b:73:8e:ce:
3c:4f:9a:51:38:e9:c7:0a:df:a3:7c:75:9d:a6:49:1f:f5:61:
3f:70:a9:68:f3:bd:f5:c5:6b:3d:7e:6a:8e:b6:cb:da:17:47:
49:81:e0:ee:f9:40:df:fb:95:c7:36:c9:d1:c1:7e:3c:9e:27:
48:a2:c6:b6:45:ee:2f:8a:97:31:26:d6:48:d7:6d:db:6e:83:
2f:e6:67:8c:f7:d5:53:0b:1b:56:03:b9:2b:7b:18:57:f0:8a:
9c:c9:52:05:0c:b0:5f:13:9b:00:6c:dc:f1:d1:2b:0d:9d:db:
fe:74:0e:f2:e2:48:bc:41:d5:29:9e:cf:a6:82:e3:03:80:1e:
94:56:8a:4a:dc:8d:4d:37:67:12:1e:38:5e:d4:4e:4c:4f:e6:
1f:f0:aa:46:8d:6f:76:8f:44:78:0e:fe:90:0b:10:20:e7:ea:
a9:d3:6f:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2VJmStwytKL8TFgLhUdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZjllMzJmZjZhZjNkNWU1ZDc3YmRiYjk4ZGEzN2QwYjhl
NDQ1MTkwHhcNMjUwMjE3MDMwMDA5WhcNMjUwMjE4MDMwMDA5WjAzMTEwLwYDVQQD
EyhkOTM5MmFlOTNhNmY2M2FkYjk3NmU0ZDAyZDU1YjM4YzYyMDVkYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif9Fy8wccHeP7+4VVezUBlxF28Yn
8TI5MufERq7HJCCv/XogD9XchETd9poLMysSD+ZPaOzQy5UmiWu4wTceRS4Zp3n8
zczyurBLkBX3DJzFzvHVgT0YsAtHTuSokvpTmPmXOU6qGYK3WqXDmpb98nxHKVew
7qms7j05F0FjBDMTbHelOJGECo2F9DNvpOZlufhPRTI9yJjLuEEpGzfwfedeGPHr
o/UUT4lLOr47brRVMyDuul0qQDPnc7wkY1+F2xivtSurzEzGi2KQbIM3LPeB5FgI
2g12p5FMejXQgJVIncfwidtzKKsjeU4WwH4IFfHWU9kAXNMVlw1Yi1WEDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk5Kuk6b2OtuXbk0C1Vs4xiBducMB8GA1UdIwQY
MBaAFEX54y/2rz1eXXe9u5jaN9C45EUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYt
OGVlMGExMmEzNTliLzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYtOGVlMGExMmEzNTli
LzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATesmyPQH
ftGLYMpvdxHTv/jLZqBq2RaOFJm0I70CDU16e0tpjh6977VFzWMrgGx5dowu9MCJ
Ktd3+tiRz5VmmzgjkZrsCzy6GenY6JgKLMdtbNtrsydbc47OPE+aUTjpxwrfo3x1
naZJH/VhP3CpaPO99cVrPX5qjrbL2hdHSYHg7vlA3/uVxzbJ0cF+PJ4nSKLGtkXu
L4qXMSbWSNdt226DL+ZnjPfVUwsbVgO5K3sYV/CKnMlSBQywXxObAGzc8dErDZ3b
/nQO8uJIvEHVKZ7PpoLjA4AelFaKStyNTTdnEh44XtROTE/mH/CqRo1vdo9EeA7+
kAsQIOfqqdNvAA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:17 2025 by rpki-client