Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: 7oZcwTEdAsxr/BunCGIag8OFCpFw4i2P4/YmsBNYyWY=
Subject key identifier: 80:B5:A7:F0:F4:99:9E:20:A7:AF:5A:1F:A5:5A:70:D3:DE:D0:13:5C
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 019511A2AAED362A83946ED7C4B2F5D63641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 015F
Signing time: Mon 17 Feb 2025 02:00:28 +0000
Manifest this update: Mon 17 Feb 2025 02:00:28 +0000
Manifest next update: Tue 18 Feb 2025 02:00:28 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: mipRKjDPVEFaak/FaqBCDS7+kdYs7fXEYePbFG5rE+8=)
2: mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa (hash: bNr/zF64vk+SVTrKPbIdCfqu6Sowa5lS9V4LG/Ns2g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:aa:ed:36:2a:83:94:6e:d7:c4:b2:f5:d6:36:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Feb 17 02:00:28 2025 GMT
Not After : Feb 18 02:00:28 2025 GMT
Subject: CN=80b5a7f0f4999e20a7af5a1fa55a70d3ded0135c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:d2:36:0d:6c:60:54:67:16:23:6a:c1:fc:
4c:7e:7f:0a:2c:09:90:f0:d4:3f:ee:a1:84:e6:03:
03:cf:de:4b:ef:dc:73:a0:86:4d:15:f2:e0:4c:7d:
2c:8e:40:eb:57:41:06:e0:01:29:6f:28:ed:2f:97:
9f:35:86:77:7b:c4:02:a8:dc:2e:e8:05:06:2f:2c:
e9:ea:a3:07:3f:a3:9a:4b:c4:f1:ba:86:54:ff:13:
5a:69:04:b3:68:30:75:a5:11:9e:c0:4f:6a:0d:08:
e1:97:b4:fd:a6:25:5e:f6:e1:c3:6b:f3:9a:e2:9d:
eb:2d:01:94:76:bd:55:7a:87:de:d8:05:c7:29:2b:
7a:53:11:45:c6:40:8b:89:3a:cc:9e:59:80:15:26:
3d:ab:0f:94:1a:16:c9:ac:00:91:c3:ab:75:c8:b1:
f4:84:e5:71:14:2c:c8:7d:f6:af:e4:d8:51:47:a9:
d0:51:94:b9:c6:a1:e3:d1:81:48:13:56:38:03:5a:
f7:e1:23:23:12:8f:69:ae:af:91:5a:13:75:22:48:
c3:f7:f9:29:33:fd:91:83:9c:fd:28:1f:d8:a6:74:
9d:34:da:ff:88:58:16:1f:60:53:62:24:2c:48:b1:
d4:a1:c2:3b:cf:25:5c:79:c1:1b:36:ca:b7:1f:d4:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B5:A7:F0:F4:99:9E:20:A7:AF:5A:1F:A5:5A:70:D3:DE:D0:13:5C
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7f:7b:a5:bc:9f:45:9f:b0:be:7f:b3:82:6c:13:7c:23:fe:
2d:48:23:9e:1f:78:27:b8:46:c9:43:da:8c:e1:58:66:98:61:
13:c1:7f:3f:ac:ba:bb:dd:f3:b2:c5:5a:b9:3d:84:5d:6d:08:
30:e0:25:99:17:55:f4:76:db:a2:15:92:a1:8b:eb:a2:8f:ed:
10:7d:a4:c8:d4:be:16:a1:84:cf:bd:7e:83:5c:9a:cd:80:df:
21:0d:58:4c:53:ee:82:0a:a2:4f:9e:87:16:bf:00:2c:a2:cf:
12:60:6b:5e:3f:88:37:a6:55:e0:52:ce:2b:f8:89:3c:72:cf:
9c:fb:ad:be:9a:c6:a5:84:de:c2:39:4e:c8:df:3c:64:de:d3:
cd:89:e3:12:bd:8c:2b:33:13:7c:d9:d4:b0:e6:26:e6:a2:89:
61:e0:68:1d:f6:ae:b6:e0:7b:a2:02:9c:6a:5e:8d:63:7f:b2:
74:18:57:41:19:93:d5:ef:94:06:72:d8:79:90:b2:70:6a:ce:
43:0b:f3:24:86:f5:91:39:43:41:81:32:70:7a:d0:c4:42:0b:
f1:8d:50:5d:27:69:eb:10:d8:c8:94:31:62:8f:54:a7:d6:9b:
2b:6e:dc:e5:27:b7:7b:6d:01:1b:a1:5a:54:83:09:5f:fd:37:
a9:e0:f4:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURoqrtNiqDlG7XxLL11jZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZWRhN2RmMDVmNmRiYTA5ZTM5ZTdkNGJkZWM3YmFlMGVm
ZmJhYjAwHhcNMjUwMjE3MDIwMDI4WhcNMjUwMjE4MDIwMDI4WjAzMTEwLwYDVQQD
Eyg4MGI1YTdmMGY0OTk5ZTIwYTdhZjVhMWZhNTVhNzBkM2RlZDAxMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1nSNg1sYFRnFiNqwfxMfn8KLAmQ
8NQ/7qGE5gMDz95L79xzoIZNFfLgTH0sjkDrV0EG4AEpbyjtL5efNYZ3e8QCqNwu
6AUGLyzp6qMHP6OaS8TxuoZU/xNaaQSzaDB1pRGewE9qDQjhl7T9piVe9uHDa/Oa
4p3rLQGUdr1Veofe2AXHKSt6UxFFxkCLiTrMnlmAFSY9qw+UGhbJrACRw6t1yLH0
hOVxFCzIffav5NhRR6nQUZS5xqHj0YFIE1Y4A1r34SMjEo9prq+RWhN1IkjD9/kp
M/2Rg5z9KB/YpnSdNNr/iFgWH2BTYiQsSLHUocI7zyVcecEbNsq3H9TcHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIC1p/D0mZ4gp69aH6VacNPe0BNcMB8GA1UdIwQY
MBaAFNPtp98F9tugnjnn1L3se64O/7qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kYzY0ZjQtY2ZiYS00ZWZkLWI0ZWQt
Njc2YmVkYjE3NDczLzEvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kYzY0ZjQtY2ZiYS00ZWZkLWI0ZWQtNjc2YmVkYjE3NDcz
LzEvMC0ybjN3WDIyNkNlT2VmVXZleDdyZzdfdXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnX97pbyf
RZ+wvn+zgmwTfCP+LUgjnh94J7hGyUPajOFYZphhE8F/P6y6u93zssVauT2EXW0I
MOAlmRdV9HbbohWSoYvroo/tEH2kyNS+FqGEz71+g1yazYDfIQ1YTFPuggqiT56H
Fr8ALKLPEmBrXj+IN6ZV4FLOK/iJPHLPnPutvprGpYTewjlOyN88ZN7TzYnjEr2M
KzMTfNnUsOYm5qKJYeBoHfautuB7ogKcal6NY3+ydBhXQRmT1e+UBnLYeZCycGrO
QwvzJIb1kTlDQYEycHrQxEIL8Y1QXSdp6xDYyJQxYo9Up9abK27c5Se3e20BG6Fa
VIMJX/03qeD0iQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:21 2025 by rpki-client