Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: riiADxUib7mY1rcIbNs28jbkvN9NBuGhx8nlESzAd/U=
Subject key identifier: B0:85:3A:22:C6:83:AB:39:C2:AB:78:E5:F6:DC:58:BD:42:5D:42:E1
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 0195113535A771D1EB892EE1ADFF3F9A9E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 00:00:54 +0000
Manifest this update: Mon 17 Feb 2025 00:00:54 +0000
Manifest next update: Tue 18 Feb 2025 00:00:54 +0000
Files and hashes: 1: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: SQend+bOOpOmfMMGgovpvntuu67ADJP5KjWyUr8Fi1k=)
2: qmxsyUbW81VdsinEooDwPTqDgYg.roa (hash: 5mMYBqM+9mhhKL1z8ft7+FIG5whvIdm78M3vwoV475A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:35:a7:71:d1:eb:89:2e:e1:ad:ff:3f:9a:9e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Feb 17 00:00:54 2025 GMT
Not After : Feb 18 00:00:54 2025 GMT
Subject: CN=b0853a22c683ab39c2ab78e5f6dc58bd425d42e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:4d:ca:55:e8:34:33:64:27:08:f2:93:7b:
83:b3:85:4d:ac:07:8f:ff:01:21:93:62:36:b0:ad:
58:1b:a6:2b:43:2e:f9:58:4a:c1:fa:1c:e4:fd:0a:
e9:8d:ec:aa:94:6e:f2:11:de:33:f6:12:3a:0c:1b:
da:4b:c6:9c:d3:cf:5c:70:b9:52:ce:14:90:be:ee:
61:1d:f0:c2:c3:d3:68:1f:52:36:38:9e:e3:c1:1a:
7d:b6:ad:a4:9c:de:f2:81:c0:f1:e4:a1:9a:1a:82:
7d:a3:9b:75:62:5d:2f:48:26:a8:ed:24:60:20:f8:
3f:0d:f4:de:2f:89:fc:92:60:1a:66:f9:77:39:14:
57:a8:92:54:3e:44:aa:0b:d4:09:98:1d:fb:33:13:
20:db:47:53:7e:0e:d1:c7:a2:cc:e3:45:89:f7:fb:
84:c1:7b:3c:c8:f4:5f:bb:17:ae:e4:bd:90:8a:63:
e4:b6:f9:4d:f9:03:38:0d:bc:8f:4e:7b:1c:4a:97:
c0:f1:35:2e:a2:e2:86:c1:6c:00:ef:a9:a7:fb:fc:
e6:ca:96:2f:20:51:47:dd:fc:bd:97:3b:68:6a:de:
a6:f4:43:a0:78:39:29:de:f7:74:e6:4c:e0:ff:01:
e8:89:ad:34:c0:ff:db:00:99:e4:4b:a5:24:87:8c:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:85:3A:22:C6:83:AB:39:C2:AB:78:E5:F6:DC:58:BD:42:5D:42:E1
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:41:53:51:90:26:e5:1b:51:76:2e:cc:b5:e4:2d:e8:b2:78:
39:d4:42:82:b9:86:f8:eb:c1:a0:0e:71:bb:83:1f:7f:ed:0c:
a7:9c:61:6e:b9:53:0d:99:5e:7f:51:2e:7e:22:a5:4d:4c:e7:
e0:4a:88:8e:47:f4:a1:20:1c:74:c5:94:ce:c0:86:fb:ff:87:
d4:cd:d5:ea:52:40:0e:1a:5f:dd:76:5d:2f:40:32:4a:8b:db:
1b:70:15:14:40:93:96:a7:a7:00:f3:9d:e8:ee:a8:d2:2b:a0:
81:1f:cf:96:50:1a:53:9e:3f:5e:3b:4d:a9:48:61:03:30:c6:
45:63:3e:23:fa:fd:fa:da:81:04:f0:81:3b:1a:9a:53:ae:61:
7f:16:dd:92:04:d4:45:a2:1a:d8:d6:0f:27:b8:8d:35:8e:bf:
ed:58:ff:b9:6a:6e:20:30:c3:73:c4:7f:d8:3c:1a:38:6d:39:
6d:31:64:14:b4:f5:d9:ed:dd:f7:01:5f:82:c5:9c:29:b0:ac:
4e:11:97:cb:64:ba:b0:73:80:38:6b:26:fa:1b:90:12:8f:9e:
b4:e2:f3:3b:d9:50:66:5d:41:17:ea:8f:56:3d:43:b7:5b:10:
ec:14:09:98:75:f5:cc:4b:67:37:49:a7:ca:c4:42:1f:e8:c5:
d7:ef:a4:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNTWncdHriS7hrf8/mp6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk
ZDRlZTYwHhcNMjUwMjE3MDAwMDU0WhcNMjUwMjE4MDAwMDU0WjAzMTEwLwYDVQQD
EyhiMDg1M2EyMmM2ODNhYjM5YzJhYjc4ZTVmNmRjNThiZDQyNWQ0MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV5NylXoNDNkJwjyk3uDs4VNrAeP
/wEhk2I2sK1YG6YrQy75WErB+hzk/QrpjeyqlG7yEd4z9hI6DBvaS8ac089ccLlS
zhSQvu5hHfDCw9NoH1I2OJ7jwRp9tq2knN7ygcDx5KGaGoJ9o5t1Yl0vSCao7SRg
IPg/DfTeL4n8kmAaZvl3ORRXqJJUPkSqC9QJmB37MxMg20dTfg7Rx6LM40WJ9/uE
wXs8yPRfuxeu5L2QimPktvlN+QM4DbyPTnscSpfA8TUuouKGwWwA76mn+/zmypYv
IFFH3fy9lztoat6m9EOgeDkp3vd05kzg/wHoia00wP/bAJnkS6Ukh4wzkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCFOiLGg6s5wqt45fbcWL1CXULhMB8GA1UdIwQY
MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt
NDJkYWZiNGI1MWQyLzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy
LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkFTUZAm
5RtRdi7MteQt6LJ4OdRCgrmG+OvBoA5xu4Mff+0Mp5xhbrlTDZlef1EufiKlTUzn
4EqIjkf0oSAcdMWUzsCG+/+H1M3V6lJADhpf3XZdL0AySovbG3AVFECTlqenAPOd
6O6o0iuggR/PllAaU54/XjtNqUhhAzDGRWM+I/r9+tqBBPCBOxqaU65hfxbdkgTU
RaIa2NYPJ7iNNY6/7Vj/uWpuIDDDc8R/2DwaOG05bTFkFLT12e3d9wFfgsWcKbCs
ThGXy2S6sHOAOGsm+huQEo+etOLzO9lQZl1BF+qPVj1Dt1sQ7BQJmHX1zEtnN0mn
ysRCH+jF1++kug==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:46 2025 by rpki-client