Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: bYkXvMiNBCTRAzqlpWowlf8SklxNWGYVY41/+SIusmg=
Subject key identifier: 67:F5:44:4D:86:8F:A9:62:C3:DF:D9:59:4D:F4:66:4A:B9:3D:E8:8A
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 019512475E0E60FCE2B5C17AE0B0F05C458F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 05:00:21 +0000
Manifest this update: Mon 17 Feb 2025 05:00:21 +0000
Manifest next update: Tue 18 Feb 2025 05:00:21 +0000
Files and hashes: 1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: HV9befA3YwKr+R4BBR1gjI5vusJ4vBZoU2T8OvGsslI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:5e:0e:60:fc:e2:b5:c1:7a:e0:b0:f0:5c:45:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: Feb 17 05:00:21 2025 GMT
Not After : Feb 18 05:00:21 2025 GMT
Subject: CN=67f5444d868fa962c3dfd9594df4664ab93de88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:2a:09:ce:82:44:9f:36:9f:52:24:52:49:
b9:67:1f:c7:1a:cf:32:99:aa:b8:69:1b:f9:fb:3d:
cf:b4:1d:24:ce:f8:21:a3:0b:45:43:69:99:66:54:
35:40:d4:6b:cc:87:3b:b9:f1:27:03:de:6e:68:3d:
a6:38:ec:b2:87:eb:9a:df:6d:63:f8:93:04:52:50:
13:e7:4b:86:dc:c6:ca:2e:08:f1:79:be:ff:e1:8c:
0b:f9:44:d8:fa:d2:05:33:ca:17:8c:21:02:82:7e:
3d:c6:e8:c7:2e:8f:81:81:9d:c0:f5:40:25:b9:fe:
89:03:9a:e3:ac:1a:42:d4:fa:8d:7b:76:f2:8f:91:
2e:c8:aa:de:a8:e1:f0:69:c1:d1:a3:c1:10:9c:02:
ab:f5:6a:b7:b2:c7:51:14:e7:87:0e:86:8a:ff:47:
c6:18:0f:2f:ec:46:4c:d1:63:44:b9:96:e9:14:47:
00:f8:6f:b4:e2:0a:6b:22:c6:50:bd:61:be:5a:68:
3c:4d:d4:4d:82:a3:47:9a:49:ea:e3:5b:03:0c:da:
88:3f:35:10:5c:7b:17:21:05:6b:90:50:cf:4c:fa:
79:2a:f4:c9:5c:fc:ec:94:5f:e8:87:5a:ee:7d:cf:
30:d8:d7:b9:0b:fb:ec:77:74:be:61:8c:ef:f2:6d:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F5:44:4D:86:8F:A9:62:C3:DF:D9:59:4D:F4:66:4A:B9:3D:E8:8A
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:46:d3:55:e6:83:9c:24:4a:e4:11:ab:13:e6:69:d4:ef:78:
0a:ab:20:b0:6e:4c:56:33:f6:ea:7d:2e:a9:e5:d1:92:9c:63:
9c:a2:ae:1c:2a:97:30:11:23:e8:17:cf:09:52:6a:22:60:0a:
01:59:9f:6b:73:03:53:03:de:d1:01:00:94:89:82:f8:bc:77:
cf:46:bf:1a:36:f2:10:b2:21:e2:fe:89:9b:56:1d:3b:9b:a7:
39:65:ad:01:b8:97:d0:05:57:26:ce:ac:ac:99:d9:f7:e1:2c:
b9:46:c6:52:13:7e:e5:15:77:ef:2f:86:74:2e:40:eb:41:78:
fe:2b:0a:eb:cb:45:b0:49:60:b7:72:aa:b8:e0:4f:f3:02:3a:
5b:b0:f9:de:a9:78:9f:bd:75:41:a0:4d:95:5a:50:43:e0:38:
11:eb:23:57:2c:35:6a:a8:9f:68:c6:e7:0c:1d:51:20:df:b5:
60:e8:29:3b:95:cd:8f:23:d3:5d:66:39:e7:fb:f9:6c:8a:0f:
43:c2:ae:c0:f1:be:94:1f:13:30:b0:cf:b9:3e:a8:93:5c:7b:
ae:15:11:79:77:dd:46:fd:cb:0d:8a:59:7b:e9:83:fa:fe:64:
ec:28:d0:3c:35:04:71:c0:99:de:15:d5:a2:21:22:7a:0e:5b:
ac:9d:86:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR14OYPzitcF64LDwXEWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzY2Y0ZTc5MjdlMTA0OTY0ZTRjOTZmNDQxNjQ5Y2UzNDE3
NGNlM2EwHhcNMjUwMjE3MDUwMDIxWhcNMjUwMjE4MDUwMDIxWjAzMTEwLwYDVQQD
Eyg2N2Y1NDQ0ZDg2OGZhOTYyYzNkZmQ5NTk0ZGY0NjY0YWI5M2RlODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsUqCc6CRJ82n1IkUkm5Zx/HGs8y
maq4aRv5+z3PtB0kzvghowtFQ2mZZlQ1QNRrzIc7ufEnA95uaD2mOOyyh+ua321j
+JMEUlAT50uG3MbKLgjxeb7/4YwL+UTY+tIFM8oXjCECgn49xujHLo+BgZ3A9UAl
uf6JA5rjrBpC1PqNe3byj5EuyKreqOHwacHRo8EQnAKr9Wq3ssdRFOeHDoaK/0fG
GA8v7EZM0WNEuZbpFEcA+G+04gprIsZQvWG+Wmg8TdRNgqNHmknq41sDDNqIPzUQ
XHsXIQVrkFDPTPp5KvTJXPzslF/oh1rufc8w2Ne5C/vsd3S+YYzv8m2HqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf1RE2Gj6liw9/ZWU30Zkq5PeiKMB8GA1UdIwQY
MBaAFJPPTnkn4QSWTkyW9EFknONBdM46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAt
YmQ1YjRlNTQ3MTJiLzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAtYmQ1YjRlNTQ3MTJi
LzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEbTVeaD
nCRK5BGrE+Zp1O94CqsgsG5MVjP26n0uqeXRkpxjnKKuHCqXMBEj6BfPCVJqImAK
AVmfa3MDUwPe0QEAlImC+Lx3z0a/GjbyELIh4v6Jm1YdO5unOWWtAbiX0AVXJs6s
rJnZ9+EsuUbGUhN+5RV37y+GdC5A60F4/isK68tFsElgt3KquOBP8wI6W7D53ql4
n711QaBNlVpQQ+A4EesjVyw1aqifaMbnDB1RIN+1YOgpO5XNjyPTXWY55/v5bIoP
Q8KuwPG+lB8TMLDPuT6ok1x7rhUReXfdRv3LDYpZe+mD+v5k7CjQPDUEccCZ3hXV
oiEieg5brJ2G2w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:40 2025 by rpki-client