Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: L+QoWhLqjlto1TPGIp9LF98jkSqnPDbDf+bYwEzBc/k=
Subject key identifier: 74:34:AB:0E:88:D0:F7:CD:12:2B:E3:CF:C5:00:A3:39:82:0A:F5:05
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 0195127E800F316FD5B49CF8771E6DDCD61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 06:00:34 +0000
Manifest this update: Mon 17 Feb 2025 06:00:34 +0000
Manifest next update: Tue 18 Feb 2025 06:00:34 +0000
Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=)
2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: 8zDOv9K5wykzzD6grhl/IUijsWbGyTf9/zOABDN9Bq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:80:0f:31:6f:d5:b4:9c:f8:77:1e:6d:dc:d6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Feb 17 06:00:34 2025 GMT
Not After : Feb 18 06:00:34 2025 GMT
Subject: CN=7434ab0e88d0f7cd122be3cfc500a339820af505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:f0:af:a4:4b:c4:c0:ad:a1:cf:86:17:a9:
80:ed:10:41:d5:2c:4c:e8:48:ce:88:ab:bc:83:25:
1a:b4:e8:a8:21:e9:14:96:3a:b8:02:e9:4d:4c:76:
ae:f5:57:ca:92:bb:bb:eb:4e:13:bb:75:06:ac:b5:
6e:65:09:66:9e:09:6b:2c:03:9e:d0:73:4d:84:c3:
50:ee:2e:33:a3:03:ff:bf:02:1e:b8:60:be:9e:2b:
64:31:74:43:17:57:04:c3:3e:30:da:27:28:50:b0:
c6:f1:7f:ff:5d:c9:47:1d:46:b2:20:98:3c:82:de:
ec:6f:ea:ab:f2:59:8f:f7:2e:ea:2b:7c:c8:43:ec:
3e:11:18:7b:2d:c9:22:06:05:fb:73:f2:32:61:20:
78:de:3b:33:98:bf:8c:dc:8f:a3:59:e3:bc:0a:ae:
b3:bd:1f:8c:b8:51:65:f2:d7:24:21:23:3e:01:ce:
7e:72:64:c0:c1:2a:c7:25:6a:e9:55:2b:a1:51:f7:
2d:ee:37:00:79:77:7b:5c:4d:04:f5:45:b8:20:f0:
30:89:ce:e2:b0:81:6f:ae:bb:f8:5a:48:ad:6f:87:
48:79:a0:43:e7:6c:82:bf:f7:73:67:c2:df:a6:81:
53:3c:97:49:70:80:c8:84:85:48:7a:19:3f:b7:de:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:34:AB:0E:88:D0:F7:CD:12:2B:E3:CF:C5:00:A3:39:82:0A:F5:05
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d8:47:b3:e7:7e:e7:f1:d3:2e:0d:88:bb:6c:29:82:1b:f9:
81:9e:61:08:84:79:cb:d1:73:4a:df:1d:ed:a1:2f:f8:70:c3:
5a:a2:1a:29:37:f7:a5:17:b4:9f:45:ba:a2:e5:e5:73:73:bb:
69:cb:a1:83:8d:29:74:dd:d3:71:d7:a0:48:af:51:86:85:b5:
dc:50:7f:1c:a8:39:05:ad:d4:38:c9:07:b7:8b:57:2a:13:7a:
02:b7:3b:fa:35:a8:e6:a8:5d:03:09:29:f0:e7:86:bc:35:bf:
cf:ec:90:bf:b6:ab:6b:b7:1c:e3:9d:28:80:89:1d:43:4d:0b:
49:c1:69:cc:1a:f3:e5:ad:57:88:7d:b5:2a:e0:40:71:9a:f8:
eb:d5:3f:c9:a5:9f:64:36:dc:b9:10:f0:0d:26:b0:ca:fe:f8:
74:3e:46:5b:3a:19:44:b5:09:2e:d4:cf:d3:d7:82:a6:b9:6d:
e1:b0:33:3c:70:8e:e2:5b:45:1a:57:2f:72:aa:d1:5f:ed:a6:
cb:91:01:a9:f1:76:f6:17:b0:4d:48:37:23:83:c2:31:bf:1f:
f7:15:7a:7d:f1:72:96:85:91:97:14:b2:a7:8f:5b:01:43:4f:
f5:dc:5e:a1:d4:41:35:dc:10:ec:1f:8c:74:92:99:df:25:2e:
da:f5:b6:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfoAPMW/VtJz4dx5t3NYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDBjNzUxZWJmYjQ4MDdkODQ2MjJlODA2Y2IzZDBiOWRk
ODEwNjkwHhcNMjUwMjE3MDYwMDM0WhcNMjUwMjE4MDYwMDM0WjAzMTEwLwYDVQQD
Eyg3NDM0YWIwZTg4ZDBmN2NkMTIyYmUzY2ZjNTAwYTMzOTgyMGFmNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXzwr6RLxMCtoc+GF6mA7RBB1SxM
6EjOiKu8gyUatOioIekUljq4AulNTHau9VfKkru7604Tu3UGrLVuZQlmnglrLAOe
0HNNhMNQ7i4zowP/vwIeuGC+nitkMXRDF1cEwz4w2icoULDG8X//XclHHUayIJg8
gt7sb+qr8lmP9y7qK3zIQ+w+ERh7LckiBgX7c/IyYSB43jszmL+M3I+jWeO8Cq6z
vR+MuFFl8tckISM+Ac5+cmTAwSrHJWrpVSuhUfct7jcAeXd7XE0E9UW4IPAwic7i
sIFvrrv4Wkitb4dIeaBD52yCv/dzZ8LfpoFTPJdJcIDIhIVIehk/t94kuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQ0qw6I0PfNEivjz8UAozmCCvUFMB8GA1UdIwQY
MBaAFKZAx1Hr+0gH2EYi6AbLPQud2BBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMt
MDI2YjhjZjY5MWJhLzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMtMDI2YjhjZjY5MWJh
LzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9hHs+d+
5/HTLg2Iu2wpghv5gZ5hCIR5y9FzSt8d7aEv+HDDWqIaKTf3pRe0n0W6ouXlc3O7
acuhg40pdN3TcdegSK9RhoW13FB/HKg5Ba3UOMkHt4tXKhN6Arc7+jWo5qhdAwkp
8OeGvDW/z+yQv7ara7cc450ogIkdQ00LScFpzBrz5a1XiH21KuBAcZr469U/yaWf
ZDbcuRDwDSawyv74dD5GWzoZRLUJLtTP09eCprlt4bAzPHCO4ltFGlcvcqrRX+2m
y5EBqfF29hewTUg3I4PCMb8f9xV6ffFyloWRlxSyp49bAUNP9dxeodRBNdwQ7B+M
dJKZ3yUu2vW2BA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:44 2025 by rpki-client