Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: ckWbeJs/sEGLF+yhAro+zLgJM+8H8XmCWJ/rnD5/GSk=
Subject key identifier: F4:9C:28:44:CA:E5:50:40:09:10:1F:77:7B:6A:06:B6:5C:EC:6E:2E
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 019510C6D5B56CF520873EB41B1A48BB441B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:00:21 +0000
Manifest this update: Sun 16 Feb 2025 22:00:21 +0000
Manifest next update: Mon 17 Feb 2025 22:00:21 +0000
Files and hashes: 1: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: LOgrcBq9GeT54i7KkqT0SvJ+IIzvwzMFqlOtDXcc/aE=)
2: fDOjbGC7SXuBR1WvGEj8iP8Gi68.roa (hash: hI6uFXxiWou3BV634T4h3OJSDdh6qUObBj238tGqfTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:d5:b5:6c:f5:20:87:3e:b4:1b:1a:48:bb:44:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Feb 16 22:00:21 2025 GMT
Not After : Feb 17 22:00:21 2025 GMT
Subject: CN=f49c2844cae5504009101f777b6a06b65cec6e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:ff:78:52:ed:d5:03:7b:c2:50:80:be:b6:
e5:6b:47:44:d7:77:a0:a9:61:de:98:fd:b4:56:ea:
48:1b:ad:22:62:59:70:43:4b:09:72:55:58:d2:46:
0b:76:51:31:da:14:0a:32:2e:69:ce:ca:0d:e8:88:
b3:80:8c:4c:d1:01:80:80:e3:e7:40:e4:4e:67:c7:
4b:0f:79:0b:f6:d3:08:6a:2a:58:b1:fb:e6:8a:90:
4d:60:13:7f:3c:8d:86:b9:3b:57:e4:3d:33:f0:ba:
3f:6d:03:90:2b:27:e1:e7:f6:8d:af:e7:83:b8:cc:
a2:b0:6c:86:a1:a3:d6:0f:bb:ed:8e:7d:42:f6:fa:
aa:23:cd:e7:2c:ff:00:4d:5d:30:59:64:70:bb:25:
cd:76:05:eb:76:4c:51:78:44:ff:73:a3:00:2d:3e:
41:e1:11:b6:77:d2:e8:4e:a4:04:7d:54:31:76:53:
f7:d6:2e:f5:d7:c1:9e:87:d2:0b:81:ba:b9:7a:dc:
5d:79:10:92:f6:8f:14:8a:8c:3f:05:f0:ab:40:15:
53:68:3c:1b:fb:d8:7a:cb:4b:08:2f:14:33:54:d5:
c3:da:b9:d1:d7:02:88:c6:a5:62:60:62:db:a7:5e:
15:40:24:dc:55:a1:6c:06:90:2c:c4:ca:f8:60:e4:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:28:44:CA:E5:50:40:09:10:1F:77:7B:6A:06:B6:5C:EC:6E:2E
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1a:ec:e9:07:10:b1:0c:40:b7:ad:37:46:c7:35:e5:10:41:
3c:8c:be:02:06:dc:b4:ff:86:6a:f9:c8:4d:73:50:af:08:05:
fb:ad:cf:09:98:29:19:e7:44:5e:10:75:09:3b:4b:1d:19:f2:
f0:5c:31:78:6a:b5:4f:1b:c5:08:31:ce:ce:7a:2f:b9:d2:6a:
19:c4:e6:d7:e1:8d:8f:f5:39:64:f9:15:9b:de:b7:ef:55:cd:
6a:eb:9e:c5:6c:88:0b:f3:ab:d4:03:4d:e0:f3:0f:c1:87:a6:
4d:5a:d7:b2:f4:3b:3a:a5:ac:86:4c:b2:cd:92:6e:53:fe:ad:
d6:d7:23:ac:7f:0d:a6:ab:db:52:7c:e3:9f:c0:b7:7c:81:41:
56:ab:a9:82:2b:f9:49:bf:be:cf:63:4b:dc:8e:be:f0:bb:e8:
8f:33:32:7e:86:89:2e:7c:31:e6:1e:ad:a7:99:04:16:c9:a5:
52:b8:e6:84:f1:a6:1a:d3:ef:f2:9d:23:9b:95:7a:9c:49:f3:
c4:89:a1:8c:1d:53:e8:cb:85:a7:5a:44:0b:9c:b1:02:b1:e1:
60:86:17:b7:67:00:9b:bd:61:b3:4c:fe:59:9a:74:94:5b:a4:
12:cc:54:1f:53:38:e2:46:e5:19:53:52:36:19:ae:5e:67:d5:
5a:4d:b6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxtW1bPUghz60GxpIu0QbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYzk4MjY3YTVkYjI2YzY1ZTQxZTY0NjY0OGYxMDE2NjM2
ZTU0NGUwHhcNMjUwMjE2MjIwMDIxWhcNMjUwMjE3MjIwMDIxWjAzMTEwLwYDVQQD
EyhmNDljMjg0NGNhZTU1MDQwMDkxMDFmNzc3YjZhMDZiNjVjZWM2ZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMv/eFLt1QN7wlCAvrbla0dE13eg
qWHemP20VupIG60iYllwQ0sJclVY0kYLdlEx2hQKMi5pzsoN6IizgIxM0QGAgOPn
QOROZ8dLD3kL9tMIaipYsfvmipBNYBN/PI2GuTtX5D0z8Lo/bQOQKyfh5/aNr+eD
uMyisGyGoaPWD7vtjn1C9vqqI83nLP8ATV0wWWRwuyXNdgXrdkxReET/c6MALT5B
4RG2d9LoTqQEfVQxdlP31i7118Geh9ILgbq5etxdeRCS9o8Uiow/BfCrQBVTaDwb
+9h6y0sILxQzVNXD2rnR1wKIxqViYGLbp14VQCTcVaFsBpAsxMr4YOTpdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPScKETK5VBACRAfd3tqBrZc7G4uMB8GA1UdIwQY
MBaAFArJgmel2ybGXkHmRmSPEBZjblROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYt
MmQ5ZTk5ZjQ3MjJjLzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYtMmQ5ZTk5ZjQ3MjJj
LzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRrs6QcQ
sQxAt603Rsc15RBBPIy+AgbctP+GavnITXNQrwgF+63PCZgpGedEXhB1CTtLHRny
8FwxeGq1TxvFCDHOznovudJqGcTm1+GNj/U5ZPkVm96371XNauuexWyIC/Or1ANN
4PMPwYemTVrXsvQ7OqWshkyyzZJuU/6t1tcjrH8NpqvbUnzjn8C3fIFBVqupgiv5
Sb++z2NL3I6+8LvojzMyfoaJLnwx5h6tp5kEFsmlUrjmhPGmGtPv8p0jm5V6nEnz
xImhjB1T6MuFp1pEC5yxArHhYIYXt2cAm71hs0z+WZp0lFukEsxUH1M44kblGVNS
NhmuXmfVWk22zw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:38 2025 by rpki-client