Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: 03qEp5LiliwVQj4w+Y516EUa72ZIRC33sw0UOoaF69M=
Subject key identifier: D1:4B:75:10:A7:F9:41:60:FE:87:73:20:EC:67:2F:55:D1:BA:F7:55
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 0195113536A24E0581448B1EE068C0DF735C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 00:00:54 +0000
Manifest this update: Mon 17 Feb 2025 00:00:54 +0000
Manifest next update: Tue 18 Feb 2025 00:00:54 +0000
Files and hashes: 1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: m1XNvBQXbeB/6/VXAvntMtl1eNmsqyyP5wT1h2UaDvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:36:a2:4e:05:81:44:8b:1e:e0:68:c0:df:73:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Feb 17 00:00:54 2025 GMT
Not After : Feb 18 00:00:54 2025 GMT
Subject: CN=d14b7510a7f94160fe877320ec672f55d1baf755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:b8:5b:df:50:bc:89:a8:e3:d4:f8:97:8b:
e8:02:45:4c:44:e3:a8:d2:e9:81:a0:16:1f:4d:a9:
38:c6:77:be:1e:45:0c:be:2c:29:45:be:da:51:b7:
93:87:3d:e3:a6:7d:32:0b:a2:84:4f:fb:aa:5f:80:
ba:46:36:e9:d5:30:b6:a2:e4:f8:0a:0c:af:66:4b:
63:17:0b:9d:39:50:f7:27:e6:4c:7d:c0:06:9e:7c:
2e:cf:78:bf:fc:dd:25:cf:40:ae:14:ea:76:7b:a6:
6b:98:ec:9a:9c:55:68:2a:51:4f:75:95:ba:2d:cc:
60:06:1b:3c:e3:20:05:c0:21:c3:fc:e6:41:ba:8d:
1f:b4:9f:30:eb:4c:13:13:c4:6b:f4:65:a6:eb:83:
a9:17:07:ad:ec:00:78:e7:62:5a:27:51:cd:8b:70:
9b:9d:07:6e:7a:12:09:35:96:f5:a6:d6:25:8a:9f:
34:b5:a8:3e:10:df:d6:da:c9:8d:6e:11:2d:a3:d6:
6e:b4:85:c3:c2:9b:fd:ae:2b:7f:b2:c1:a8:79:7d:
e4:ce:55:6f:15:4b:95:45:05:4b:c4:f6:eb:f3:51:
38:c3:29:60:22:64:7e:fd:e0:54:7f:0a:c7:a0:3e:
72:b2:a3:43:b0:a4:a2:d1:f3:57:60:8f:b4:3f:06:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4B:75:10:A7:F9:41:60:FE:87:73:20:EC:67:2F:55:D1:BA:F7:55
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4e:b6:bd:4d:8a:9f:39:c5:7c:20:05:c6:cc:94:5d:93:7b:
21:5b:ab:c0:5b:d1:d1:1b:cf:47:3d:1b:07:dd:09:b2:cc:d2:
c9:6a:a0:15:12:9f:e5:1d:a6:3c:f7:0e:06:9d:94:8a:d6:2d:
69:86:1f:05:2c:e6:8c:37:38:3b:cf:73:97:05:05:05:9a:fb:
a3:d3:0d:bd:8b:b2:ac:8a:5d:f1:b3:01:b9:2b:41:b8:78:62:
f8:0e:0b:a1:f9:02:13:b0:9b:fd:41:21:9d:d1:bb:e4:b3:9d:
01:e2:3a:cd:06:df:dd:8e:c4:0b:94:a0:a4:6f:93:2a:70:f3:
8c:3b:f0:9b:53:15:74:38:df:fe:3c:69:e1:3e:dd:8b:1c:ff:
6f:c5:9e:72:d0:bd:98:6d:3e:cc:94:82:79:93:a8:33:ca:01:
35:d8:a5:89:94:50:71:b5:f6:ac:41:7e:9b:93:80:c6:c4:6a:
d7:38:08:8b:65:fd:b8:4f:7a:35:3b:ce:6c:60:4e:9a:b8:99:
b4:31:ee:b3:e1:b4:42:75:7a:39:58:3a:8e:fa:82:29:f3:e4:
7f:48:0a:e5:bf:88:6f:71:1c:0a:ba:5e:94:37:39:f9:09:9f:
bd:46:cb:14:7d:d4:7b:3e:10:68:a5:69:64:7d:51:52:80:cf:
3d:96:70:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNTaiTgWBRIse4GjA33NcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzllYjlkZDYyZDUxYWZhNTAxMmVmYTFhOWQxMGM2NjQw
MGM0NDUwHhcNMjUwMjE3MDAwMDU0WhcNMjUwMjE4MDAwMDU0WjAzMTEwLwYDVQQD
EyhkMTRiNzUxMGE3Zjk0MTYwZmU4NzczMjBlYzY3MmY1NWQxYmFmNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonK4W99QvImo49T4l4voAkVMROOo
0umBoBYfTak4xne+HkUMviwpRb7aUbeThz3jpn0yC6KET/uqX4C6Rjbp1TC2ouT4
CgyvZktjFwudOVD3J+ZMfcAGnnwuz3i//N0lz0CuFOp2e6ZrmOyanFVoKlFPdZW6
LcxgBhs84yAFwCHD/OZBuo0ftJ8w60wTE8Rr9GWm64OpFwet7AB452JaJ1HNi3Cb
nQduehIJNZb1ptYlip80tag+EN/W2smNbhEto9ZutIXDwpv9rit/ssGoeX3kzlVv
FUuVRQVLxPbr81E4wylgImR+/eBUfwrHoD5ysqNDsKSi0fNXYI+0PwaDqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFLdRCn+UFg/odzIOxnL1XRuvdVMB8GA1UdIwQY
MBaAFHh5653WLVGvpQEu+hqdEMZkAMRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yYzU4ZmEtMDZkNS00ZDM5LThiNWQt
NzRhY2Y4MmFmNTk2LzEvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yYzU4ZmEtMDZkNS00ZDM5LThiNWQtNzRhY2Y4MmFmNTk2
LzEvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZU62vU2K
nznFfCAFxsyUXZN7IVurwFvR0RvPRz0bB90JsszSyWqgFRKf5R2mPPcOBp2UitYt
aYYfBSzmjDc4O89zlwUFBZr7o9MNvYuyrIpd8bMBuStBuHhi+A4LofkCE7Cb/UEh
ndG75LOdAeI6zQbf3Y7EC5SgpG+TKnDzjDvwm1MVdDjf/jxp4T7dixz/b8WectC9
mG0+zJSCeZOoM8oBNdiliZRQcbX2rEF+m5OAxsRq1zgIi2X9uE96NTvObGBOmriZ
tDHus+G0QnV6OVg6jvqCKfPkf0gK5b+Ib3EcCrpelDc5+QmfvUbLFH3Uez4QaKVp
ZH1RUoDPPZZwHQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:24 2025 by rpki-client