Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: j5W9Tdq6Ym0DqmoV1IWYdwhNu0eMWYxrZPBJUUVJ8Ms=
Subject key identifier: FF:A1:20:26:76:48:6A:08:5F:33:F4:72:B1:45:B2:93:20:E0:AF:5E
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 0195116C1E3A362C78B927DB742C7E484EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 048E
Signing time: Mon 17 Feb 2025 01:00:53 +0000
Manifest this update: Mon 17 Feb 2025 01:00:53 +0000
Manifest next update: Tue 18 Feb 2025 01:00:53 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: xA30mg8KXYE6/8yE0FEDg7+yuuQK4ghO+k7dwe8MIa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:1e:3a:36:2c:78:b9:27:db:74:2c:7e:48:4e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Feb 17 01:00:53 2025 GMT
Not After : Feb 18 01:00:53 2025 GMT
Subject: CN=ffa1202676486a085f33f472b145b29320e0af5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:e4:45:9a:12:d6:9c:3f:15:df:8e:08:2f:
17:b6:2f:71:49:86:d3:0c:28:0c:f7:17:38:2a:61:
05:27:36:a6:eb:a0:a8:b0:dd:4c:1a:9f:2c:51:ae:
f2:81:6e:e4:6f:4e:07:6d:c2:f8:6d:18:78:b7:26:
3a:b0:72:6e:24:2b:06:2b:20:34:5e:5d:83:d4:8c:
12:d3:99:2f:51:7b:5e:f5:09:0e:a1:c1:04:96:37:
12:2d:20:81:8c:fc:dd:30:3f:86:b5:11:03:71:51:
9f:16:87:51:43:71:36:4a:97:30:64:63:e9:6a:c5:
be:29:a0:41:f9:90:47:7f:09:ee:c4:c0:87:b7:34:
12:10:22:99:62:98:9c:3e:d6:43:f3:76:58:e0:ad:
49:99:f7:c7:87:df:f1:7c:7e:06:55:18:c6:87:5e:
45:b8:07:c3:c3:53:60:fb:71:06:be:0b:d9:1d:e0:
a9:74:b3:ba:48:e5:e2:04:7d:28:b0:cf:15:14:42:
9b:4d:63:b4:99:a0:c1:86:da:50:25:f5:bc:fa:07:
fb:e1:a1:ab:a9:d5:cb:ce:6f:cc:70:84:09:c5:85:
62:b4:2c:49:52:02:83:17:3f:44:88:a7:00:35:e3:
7e:f9:a4:1e:dc:08:ea:81:0f:8f:80:33:60:a2:50:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A1:20:26:76:48:6A:08:5F:33:F4:72:B1:45:B2:93:20:E0:AF:5E
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:38:22:5b:99:0e:ab:17:db:f3:cc:b9:66:55:9d:73:4f:4f:
96:30:c8:4d:a1:06:61:36:18:22:19:41:25:7c:31:2b:ed:46:
dc:61:9b:1d:f4:f0:76:04:28:db:bf:f4:51:06:89:cd:80:3a:
8c:7f:0c:68:bf:32:f0:2a:ea:0a:1b:12:5e:4d:88:9e:e8:02:
c5:81:17:09:83:1b:3e:1d:47:a9:b4:d0:5d:3e:7e:e1:04:9b:
05:4e:07:80:ee:c6:a7:04:d7:e8:8f:7c:e2:98:0a:50:83:dc:
8b:30:b2:1d:03:ce:f6:bf:b0:6d:c4:75:ec:b3:e4:6b:6e:ee:
00:47:bd:16:bf:7c:3b:81:82:c3:31:e0:fe:25:8f:bc:db:e8:
7a:ce:3e:58:4a:32:82:89:3f:6e:bf:c6:0a:3a:fe:0a:dd:b6:
67:8e:66:18:73:81:a8:81:3e:59:81:35:e1:4d:7b:78:a4:31:
6b:93:89:fd:a5:66:1f:cf:a3:06:fc:d1:32:89:64:d0:ea:b5:
94:a0:fe:12:f6:5b:08:d4:95:2d:ab:69:3b:6e:70:fc:c4:61:
66:af:f9:88:cd:fb:e4:49:00:79:03:6a:38:52:44:2c:7e:7b:
5e:d1:97:9f:55:b3:8e:33:8a:b1:0b:25:20:8d:28:bf:4d:2f:
f1:58:c7:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURbB46Nix4uSfbdCx+SE7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZWZmZmMxNWE4M2EzOGJkZGE4Y2ZlMTIwYzMzNTI2N2Rj
ZTUwZjMwHhcNMjUwMjE3MDEwMDUzWhcNMjUwMjE4MDEwMDUzWjAzMTEwLwYDVQQD
EyhmZmExMjAyNjc2NDg2YTA4NWYzM2Y0NzJiMTQ1YjI5MzIwZTBhZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTzkRZoS1pw/Fd+OCC8Xti9xSYbT
DCgM9xc4KmEFJzam66CosN1MGp8sUa7ygW7kb04HbcL4bRh4tyY6sHJuJCsGKyA0
Xl2D1IwS05kvUXte9QkOocEEljcSLSCBjPzdMD+GtREDcVGfFodRQ3E2SpcwZGPp
asW+KaBB+ZBHfwnuxMCHtzQSECKZYpicPtZD83ZY4K1JmffHh9/xfH4GVRjGh15F
uAfDw1Ng+3EGvgvZHeCpdLO6SOXiBH0osM8VFEKbTWO0maDBhtpQJfW8+gf74aGr
qdXLzm/McIQJxYVitCxJUgKDFz9EiKcANeN++aQe3AjqgQ+PgDNgolCapQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+hICZ2SGoIXzP0crFFspMg4K9eMB8GA1UdIwQY
MBaAFMzv/8Fag6OL3ajP4SDDNSZ9zlDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTct
NGJlYjVkZmYxNzAxLzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTctNGJlYjVkZmYxNzAx
LzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTgiW5kO
qxfb88y5ZlWdc09PljDITaEGYTYYIhlBJXwxK+1G3GGbHfTwdgQo27/0UQaJzYA6
jH8MaL8y8CrqChsSXk2InugCxYEXCYMbPh1HqbTQXT5+4QSbBU4HgO7GpwTX6I98
4pgKUIPcizCyHQPO9r+wbcR17LPka27uAEe9Fr98O4GCwzHg/iWPvNvoes4+WEoy
gok/br/GCjr+Ct22Z45mGHOBqIE+WYE14U17eKQxa5OJ/aVmH8+jBvzRMolk0Oq1
lKD+EvZbCNSVLatpO25w/MRhZq/5iM375EkAeQNqOFJELH57XtGXn1WzjjOKsQsl
II0ov00v8VjHsw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:46 2025 by rpki-client