Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: JpTHNtyfhO9Qt6pMZ7D9DIx5ak5nMcU/SIayUpLGeO0=
Subject key identifier: 50:A9:54:B5:8E:F0:C1:3F:0C:E3:64:37:43:D8:19:7B:63:FE:F2:41
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 01950F7D472F3DABBE59E2A0192EE49F286C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 145A
Signing time: Sun 16 Feb 2025 16:00:23 +0000
Manifest this update: Sun 16 Feb 2025 16:00:23 +0000
Manifest next update: Mon 17 Feb 2025 16:00:23 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: IMTwT+F9z1lm3g1wbU4DvhX7g4e/pG1Y+Fgde7AhwhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:7d:47:2f:3d:ab:be:59:e2:a0:19:2e:e4:9f:28:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Feb 16 16:00:23 2025 GMT
Not After : Feb 17 16:00:23 2025 GMT
Subject: CN=50a954b58ef0c13f0ce3643743d8197b63fef241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:58:53:6f:1b:4a:8e:68:70:88:2b:ee:7e:
bd:ad:d0:0a:b6:0f:1c:e1:8b:1d:fb:de:8a:7a:b6:
aa:1b:a7:41:bb:d5:e7:bf:72:c6:5f:4a:ae:42:cf:
41:07:41:2e:2d:b4:10:0c:5c:56:62:21:d1:a4:2a:
cf:c3:c0:bb:5a:2e:b4:e2:54:0a:7a:fa:8c:73:d8:
27:3f:22:f6:99:ee:e7:f9:4d:59:90:8a:2c:16:1b:
71:bb:f3:3b:96:82:7f:6f:75:36:dc:09:44:b9:5d:
2f:56:60:2c:42:01:c2:32:0a:6b:60:69:f0:06:49:
3e:2b:af:65:2d:f3:1c:00:ab:56:f1:96:ec:e5:d1:
bd:79:ec:1c:f2:14:21:a8:f9:34:b1:75:20:dd:73:
fa:4d:cd:a5:2c:61:28:31:f0:29:41:ae:d5:fc:77:
ea:4e:97:c3:25:63:f7:61:a3:98:a3:ea:d2:73:77:
d9:cd:e3:c5:a0:3e:f8:74:c4:98:0b:ee:96:bb:4e:
2c:fd:e0:b8:ce:59:07:9e:7d:c2:cc:b3:94:d2:14:
90:54:88:57:a7:8d:a8:84:93:1e:64:e9:f0:20:09:
06:fe:00:a5:41:19:8e:25:73:d8:6b:da:42:ca:21:
c6:39:34:c5:9e:3f:87:95:a6:7e:7c:ce:54:95:68:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A9:54:B5:8E:F0:C1:3F:0C:E3:64:37:43:D8:19:7B:63:FE:F2:41
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b4:bb:3e:10:66:6a:a1:a5:d3:ab:bc:6f:f5:3c:4f:16:a2:
40:5b:74:f7:30:72:d6:70:84:c1:b6:99:7b:b8:e7:30:c8:90:
de:b0:8d:b8:31:d4:ea:b2:f6:3c:11:7f:5c:a3:ad:7d:0f:69:
63:8b:c1:5f:bb:30:de:2a:80:91:5a:eb:89:e4:a9:cd:66:4b:
d3:ff:1b:a2:fa:38:3e:f6:67:86:ab:df:7d:fb:4a:a5:72:d6:
81:4f:5f:54:ba:b9:5f:62:32:6d:0a:e2:86:5c:32:3a:e3:07:
5b:2f:53:ba:31:d9:78:4c:51:45:4f:d9:62:e1:1e:e1:4b:72:
2a:37:7f:aa:be:fd:55:d7:9e:ed:11:45:1d:3e:74:ea:1c:71:
fb:28:24:5f:6c:5d:05:50:14:dc:96:5b:22:69:fb:6f:d8:b5:
76:fb:70:f4:96:64:8a:ca:90:95:56:93:8c:d9:9f:d2:03:fb:
63:fb:74:8e:ad:fa:9a:90:78:50:b1:86:b4:ad:ae:05:b0:38:
25:96:ac:35:a1:13:4a:c4:d9:b2:21:12:42:a2:c1:84:4e:39:
ae:3f:30:ce:57:b6:7c:29:68:50:20:8c:cc:70:c0:d4:e5:b2:
1a:1c:77:e5:e2:bd:ba:e9:8a:97:ad:34:55:42:2f:86:88:ce:
eb:71:6b:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUPfUcvPau+WeKgGS7knyhsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTEyNjczMmMyZjAxOTNiYzNkZTRlOGQzYWJjMTVmNGJh
ZWQ2MmQwHhcNMjUwMjE2MTYwMDIzWhcNMjUwMjE3MTYwMDIzWjAzMTEwLwYDVQQD
Eyg1MGE5NTRiNThlZjBjMTNmMGNlMzY0Mzc0M2Q4MTk3YjYzZmVmMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO5YU28bSo5ocIgr7n69rdAKtg8c
4Ysd+96KeraqG6dBu9Xnv3LGX0quQs9BB0EuLbQQDFxWYiHRpCrPw8C7Wi604lQK
evqMc9gnPyL2me7n+U1ZkIosFhtxu/M7loJ/b3U23AlEuV0vVmAsQgHCMgprYGnw
Bkk+K69lLfMcAKtW8Zbs5dG9eewc8hQhqPk0sXUg3XP6Tc2lLGEoMfApQa7V/Hfq
TpfDJWP3YaOYo+rSc3fZzePFoD74dMSYC+6Wu04s/eC4zlkHnn3CzLOU0hSQVIhX
p42ohJMeZOnwIAkG/gClQRmOJXPYa9pCyiHGOTTFnj+HlaZ+fM5UlWg1FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCpVLWO8ME/DONkN0PYGXtj/vJBMB8GA1UdIwQY
MBaAFHyRJnMsLwGTvD3k6NOrwV9LrtYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2Qt
ZDZiNzMwMjY2ZTc2LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2QtZDZiNzMwMjY2ZTc2
LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7S7PhBm
aqGl06u8b/U8TxaiQFt09zBy1nCEwbaZe7jnMMiQ3rCNuDHU6rL2PBF/XKOtfQ9p
Y4vBX7sw3iqAkVrrieSpzWZL0/8bovo4PvZnhqvffftKpXLWgU9fVLq5X2IybQri
hlwyOuMHWy9TujHZeExRRU/ZYuEe4UtyKjd/qr79Vdee7RFFHT506hxx+ygkX2xd
BVAU3JZbImn7b9i1dvtw9JZkisqQlVaTjNmf0gP7Y/t0jq36mpB4ULGGtK2uBbA4
JZasNaETSsTZsiESQqLBhE45rj8wzle2fCloUCCMzHDA1OWyGhx35eK9uumKl600
VUIvhojO63Frig==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:17 2025 by rpki-client