Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: WvvW1iltzyTOYrZmBzcNBeMWPFa33vj2NgJQawmYFNY=
Subject key identifier: AE:36:EA:7A:AA:5E:47:C5:62:89:47:C6:26:74:8A:62:E0:CB:FD:FA
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 0195127E5E4CEBE3B74A74BFD57F870E9330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 0DC3
Signing time: Mon 17 Feb 2025 06:00:26 +0000
Manifest this update: Mon 17 Feb 2025 06:00:26 +0000
Manifest next update: Tue 18 Feb 2025 06:00:26 +0000
Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: TRpFsALN+e4zNdeIRF9h6zt8uu5NxpADS0AJriN9yb4=)
2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:5e:4c:eb:e3:b7:4a:74:bf:d5:7f:87:0e:93:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Feb 17 06:00:26 2025 GMT
Not After : Feb 18 06:00:26 2025 GMT
Subject: CN=ae36ea7aaa5e47c5628947c626748a62e0cbfdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:dd:f9:2f:5a:07:c5:0b:c7:34:ab:fd:50:
6a:e5:ac:a1:3e:95:3b:35:36:8a:95:41:9b:bd:24:
db:9d:8f:cf:9b:e2:29:92:30:a6:c9:21:60:09:4e:
4d:b8:4f:39:65:3f:50:dd:0e:e1:c2:4d:09:50:ef:
20:36:5d:5b:cb:70:da:59:c2:85:da:ca:a6:6e:c8:
a4:da:54:89:38:83:be:30:88:d2:50:c3:f4:af:0a:
d0:81:82:0f:8a:cb:ab:ad:12:7b:b1:f6:f3:16:13:
d1:74:f2:18:9b:a7:08:4c:c6:be:a5:56:ae:68:d3:
77:a5:c3:a5:ab:41:03:de:8d:08:1e:76:20:c3:41:
31:6c:22:98:43:2d:5c:a8:fa:0a:d9:f2:4e:2f:be:
be:50:c5:b2:bc:36:99:16:e7:71:41:9c:fc:bf:67:
26:4d:a4:85:f3:99:8c:d2:12:4c:41:d9:15:a5:26:
f6:55:d0:d8:b3:27:e4:b8:cf:47:21:ce:ce:16:2a:
52:16:d2:07:fe:9b:af:81:aa:8d:0d:f6:27:2f:61:
06:ed:29:9f:cf:e2:74:ad:87:80:b7:b3:22:a0:dc:
db:aa:39:ea:c9:96:b2:03:90:d8:df:85:50:83:00:
f0:66:fc:a5:31:ac:53:52:6b:95:58:b1:35:31:ba:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:EA:7A:AA:5E:47:C5:62:89:47:C6:26:74:8A:62:E0:CB:FD:FA
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ee:dd:b2:79:09:9d:d9:62:91:fc:0c:d3:ae:ea:ae:dd:95:
f5:0b:6e:73:bc:a9:71:9f:21:57:54:c3:a4:81:ff:35:01:33:
02:a7:17:c4:d8:1a:4d:2b:cb:22:b4:62:b1:54:1e:7c:b8:a9:
69:6e:8c:6e:70:c4:59:ba:8a:f3:93:66:67:ff:1a:95:2d:9c:
6a:41:58:91:f1:04:e9:09:b2:3b:7a:38:9e:2f:12:54:f8:8e:
53:e7:a9:be:7d:75:82:a6:48:98:11:71:11:b6:7b:7e:ba:4f:
53:f0:22:cc:30:25:5c:f0:3f:cc:ce:b5:c7:b0:ff:20:31:76:
ca:3a:ab:1f:79:a9:70:61:4f:5a:91:ee:14:45:ed:eb:d0:ee:
7d:4d:4d:89:52:ac:35:c9:63:b5:54:fe:08:43:89:00:15:09:
7b:c2:b4:8e:38:a4:45:3a:79:eb:a4:aa:d3:3b:ab:5c:e4:8f:
76:82:08:c6:52:a9:be:c8:91:b4:1e:1b:80:e4:e4:e2:94:56:
ff:e6:1c:1a:2e:bc:15:ef:2e:6f:4f:80:71:6b:c8:23:5b:64:
f1:7d:fe:e4:45:83:4e:64:44:06:98:c0:90:8d:ac:ed:bf:e7:
7e:42:72:9e:bb:7e:cb:6c:8e:c0:a7:97:9c:64:f0:32:85:17:
dc:06:b7:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfl5M6+O3SnS/1X+HDpMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGU3ZWFmZTJmZmFhOTBjYWU5NDc2ODAzMDM0ZGI2ZGE3
YzEyMTkwHhcNMjUwMjE3MDYwMDI2WhcNMjUwMjE4MDYwMDI2WjAzMTEwLwYDVQQD
EyhhZTM2ZWE3YWFhNWU0N2M1NjI4OTQ3YzYyNjc0OGE2MmUwY2JmZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0evd+S9aB8ULxzSr/VBq5ayhPpU7
NTaKlUGbvSTbnY/Pm+IpkjCmySFgCU5NuE85ZT9Q3Q7hwk0JUO8gNl1by3DaWcKF
2sqmbsik2lSJOIO+MIjSUMP0rwrQgYIPisurrRJ7sfbzFhPRdPIYm6cITMa+pVau
aNN3pcOlq0ED3o0IHnYgw0ExbCKYQy1cqPoK2fJOL76+UMWyvDaZFudxQZz8v2cm
TaSF85mM0hJMQdkVpSb2VdDYsyfkuM9HIc7OFipSFtIH/puvgaqNDfYnL2EG7Smf
z+J0rYeAt7MioNzbqjnqyZayA5DY34VQgwDwZvylMaxTUmuVWLE1Mbr3NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK426nqqXkfFYolHxiZ0imLgy/36MB8GA1UdIwQY
MBaAFGxOfq/i/6qQyulHaAMDTbbafBIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDkt
YjIxZGQzZjY4YWJhLzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDktYjIxZGQzZjY4YWJh
LzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfe7dsnkJ
ndlikfwM067qrt2V9Qtuc7ypcZ8hV1TDpIH/NQEzAqcXxNgaTSvLIrRisVQefLip
aW6MbnDEWbqK85NmZ/8alS2cakFYkfEE6QmyO3o4ni8SVPiOU+epvn11gqZImBFx
EbZ7frpPU/AizDAlXPA/zM61x7D/IDF2yjqrH3mpcGFPWpHuFEXt69DufU1NiVKs
NcljtVT+CEOJABUJe8K0jjikRTp566Sq0zurXOSPdoIIxlKpvsiRtB4bgOTk4pRW
/+YcGi68Fe8ub0+AcWvII1tk8X3+5EWDTmREBpjAkI2s7b/nfkJynrt+y2yOwKeX
nGTwMoUX3Aa3Mg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:59 2025 by rpki-client