Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json)
Hash identifier: i5in4R1q6Ev4eVOQjmEL5FL0NqWLmCjTji8mA4qRaVs=
Subject key identifier: F2:9F:27:31:2D:95:75:F5:5D:F2:3A:88:D9:A6:EF:77:BB:B5:01:F7
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 0195116C27288AE6D35C232591FF946EA48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 01:00:55 +0000
Manifest this update: Mon 17 Feb 2025 01:00:55 +0000
Manifest next update: Tue 18 Feb 2025 01:00:55 +0000
Files and hashes: 1: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (hash: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=)
2: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: AezeFVvsgAwNMES5dPl7JycoA8I1oir36STNVyNGcxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:27:28:8a:e6:d3:5c:23:25:91:ff:94:6e:a4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Feb 17 01:00:55 2025 GMT
Not After : Feb 18 01:00:55 2025 GMT
Subject: CN=f29f27312d9575f55df23a88d9a6ef77bbb501f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:4e:2d:22:8a:48:ef:7f:9f:c6:fd:b9:4a:
54:30:15:25:a7:41:b9:f4:74:a2:31:32:46:b7:10:
bd:94:34:2e:d0:f4:fb:3e:d8:1d:88:98:1b:03:91:
68:52:17:09:ef:9d:34:81:e2:58:e7:b5:98:03:a2:
b0:dd:92:24:80:47:22:93:eb:fd:56:f7:5b:2a:98:
28:a8:77:26:cb:e3:53:e0:b9:31:d7:5e:06:df:cf:
15:22:09:f7:33:e4:7d:3d:88:64:9a:d5:ae:ae:32:
ea:07:e0:20:0a:79:9b:0d:80:fa:5a:b0:23:18:eb:
6e:46:86:59:51:f2:01:52:d4:41:e3:bb:b2:78:84:
72:cc:38:7f:c7:dd:5c:5e:08:65:06:ac:e6:bc:a8:
c9:6e:d6:a5:f8:82:5e:c0:f1:74:b5:1c:2b:1b:be:
01:97:0b:9b:ac:a6:ff:fa:4a:be:4b:a9:d6:23:50:
df:90:b4:cc:43:ca:4c:d1:81:81:96:be:86:df:b6:
b5:9b:68:32:3a:3d:fd:8d:41:2a:76:12:f6:99:a7:
a6:f1:d9:93:1b:4c:cf:68:51:e8:5d:9b:65:49:63:
f8:c8:63:0d:4e:fa:02:b3:22:a8:04:ee:b2:89:fd:
cb:7a:e7:67:d1:6b:c0:2e:14:31:86:83:57:3b:c0:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9F:27:31:2D:95:75:F5:5D:F2:3A:88:D9:A6:EF:77:BB:B5:01:F7
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:98:ab:96:ad:79:cd:ea:39:83:a2:7d:b8:f7:ac:c6:ee:f8:
94:2a:86:b3:06:f2:1b:41:dd:2b:af:39:d7:41:71:5e:8f:56:
8d:8e:86:ea:ca:21:26:2d:9f:ee:24:dc:ed:3c:7a:79:ba:6d:
77:fd:82:61:53:df:2f:3c:ab:c3:63:3b:15:54:7a:7f:8c:71:
74:73:7c:81:5f:c9:72:4d:23:fd:ec:eb:f1:db:84:7c:66:3c:
07:8e:d4:8b:be:b9:5e:a0:ed:33:14:cd:ee:4e:53:da:c8:cd:
56:38:7b:b4:4b:82:9b:59:89:20:f7:7a:a8:57:b8:2b:ae:a0:
3a:37:b7:55:51:8f:f2:54:2a:75:e3:2e:b7:30:43:46:42:2b:
4d:84:b3:e2:ed:71:89:0d:6e:7a:a1:a2:16:17:e3:05:da:b2:
95:26:96:f2:9e:df:eb:f1:73:d4:99:2a:e6:b3:1f:ee:2a:6f:
62:f5:cb:6d:a6:de:d1:49:17:ca:25:59:4c:6c:a9:4e:37:fc:
44:bf:4c:7b:87:17:1e:fc:2a:78:61:d0:d2:40:4a:48:9c:d5:
78:8f:7a:d0:76:ba:c4:a8:90:08:c7:5c:9f:bf:c1:86:c6:8c:
fb:b5:30:30:40:4e:fe:72:aa:ab:42:7f:05:3c:57:93:0d:66:
27:d5:ae:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURbCcoiubTXCMlkf+UbqSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2RjN2YyOThiYjc3NGE3MjZlZGM0MzNjZjZiMDM5OTQx
NDhiNTQwHhcNMjUwMjE3MDEwMDU1WhcNMjUwMjE4MDEwMDU1WjAzMTEwLwYDVQQD
EyhmMjlmMjczMTJkOTU3NWY1NWRmMjNhODhkOWE2ZWY3N2JiYjUwMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryJOLSKKSO9/n8b9uUpUMBUlp0G5
9HSiMTJGtxC9lDQu0PT7PtgdiJgbA5FoUhcJ7500geJY57WYA6Kw3ZIkgEcik+v9
VvdbKpgoqHcmy+NT4Lkx114G388VIgn3M+R9PYhkmtWurjLqB+AgCnmbDYD6WrAj
GOtuRoZZUfIBUtRB47uyeIRyzDh/x91cXghlBqzmvKjJbtal+IJewPF0tRwrG74B
lwubrKb/+kq+S6nWI1DfkLTMQ8pM0YGBlr6G37a1m2gyOj39jUEqdhL2maem8dmT
G0zPaFHoXZtlSWP4yGMNTvoCsyKoBO6yif3Leudn0WvALhQxhoNXO8BMfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKfJzEtlXX1XfI6iNmm73e7tQH3MB8GA1UdIwQY
MBaAFI59x/KYu3dKcm7cQzz2sDmUFItUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYt
OWM3NmE0YmRiNTIzLzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYtOWM3NmE0YmRiNTIz
LzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZirlq15
zeo5g6J9uPesxu74lCqGswbyG0HdK68510FxXo9WjY6G6sohJi2f7iTc7Tx6ebpt
d/2CYVPfLzyrw2M7FVR6f4xxdHN8gV/Jck0j/ezr8duEfGY8B47Ui765XqDtMxTN
7k5T2sjNVjh7tEuCm1mJIPd6qFe4K66gOje3VVGP8lQqdeMutzBDRkIrTYSz4u1x
iQ1ueqGiFhfjBdqylSaW8p7f6/Fz1Jkq5rMf7ipvYvXLbabe0UkXyiVZTGypTjf8
RL9Me4cXHvwqeGHQ0kBKSJzVeI960Ha6xKiQCMdcn7/BhsaM+7UwMEBO/nKqq0J/
BTxXkw1mJ9WueQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:38 2025 by rpki-client