Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: y6zjKEaAC2Y5M4T5drDcb8c5mQPreeAsVYvl9stceVc=
Subject key identifier: 68:7D:BC:64:FD:77:49:CD:98:A2:49:8F:08:E4:8C:69:A6:7B:B7:4E
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 0195116BD9D6F1CFC5F90FFC488ACA512EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 1033
Signing time: Mon 17 Feb 2025 01:00:35 +0000
Manifest this update: Mon 17 Feb 2025 01:00:35 +0000
Manifest next update: Tue 18 Feb 2025 01:00:35 +0000
Files and hashes: 1: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (hash: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=)
2: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (hash: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=)
3: F7_d7fgliowGPaZRFZI34xcsDus.roa (hash: +yscUhU7PFr7qP/8wMXAL6pAA3Z7ru6wJfgIp1yHZlI=)
4: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: 4Y/LDINmD36igyBaCPNbEufb92UoJ9Lw4CV0PfobkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:d9:d6:f1:cf:c5:f9:0f:fc:48:8a:ca:51:2e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Feb 17 01:00:35 2025 GMT
Not After : Feb 18 01:00:35 2025 GMT
Subject: CN=687dbc64fd7749cd98a2498f08e48c69a67bb74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:50:a0:86:90:90:de:87:95:93:ec:e5:6c:
97:50:d6:c8:f9:29:ab:2d:4a:d0:77:75:13:74:85:
17:f7:93:cf:d9:7f:63:53:8c:e8:a3:65:e8:b1:e7:
72:9a:8d:4b:92:01:26:4a:5e:8e:84:ce:9c:52:e8:
99:95:aa:9c:f6:da:a8:f9:49:d8:6c:69:bf:9e:cd:
a2:44:e7:f9:ca:ed:ab:71:5d:7d:6a:5f:ea:8b:d0:
ce:c3:91:0b:36:18:07:f9:41:64:de:0e:85:2c:5d:
af:30:59:68:dd:41:43:7d:b1:5d:84:8e:c7:fd:05:
a1:50:c8:90:71:df:01:64:34:71:27:96:8c:eb:8a:
ca:d9:2b:84:60:06:ce:48:c0:3b:9f:52:02:e9:66:
1c:f8:5d:ae:e2:75:0a:0b:b9:8a:71:ee:3c:cc:b0:
be:64:64:3a:87:0c:80:6f:e9:e4:08:d2:71:dd:a0:
b3:9a:84:1a:11:42:ee:1c:1c:03:ee:ea:d2:d1:91:
a1:b7:9a:06:6c:97:3e:00:90:3d:92:60:05:56:5d:
14:a5:c6:70:3c:62:37:d2:ba:04:57:19:b7:2a:88:
c5:d0:60:42:fc:00:66:e7:13:f4:7a:22:ac:ee:72:
c8:1c:03:d2:49:1a:7d:ea:25:2f:36:ca:32:8f:51:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7D:BC:64:FD:77:49:CD:98:A2:49:8F:08:E4:8C:69:A6:7B:B7:4E
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:eb:5b:54:e7:3b:c2:ad:2a:cc:cc:2f:f7:33:3c:b8:0b:5a:
c2:35:f6:d3:7b:af:8f:cb:00:71:50:9a:3d:f7:4a:8c:02:1a:
ce:7d:c5:b4:04:58:c5:2c:31:bb:1d:19:be:dc:a4:1e:68:d0:
75:e0:82:90:4c:7c:91:e7:2e:ba:7a:4c:db:0e:0a:f9:dd:48:
db:31:c9:6b:31:a9:3a:0c:37:27:3b:5f:dc:cc:8c:24:e2:0a:
2c:d2:28:5b:9d:fd:43:8b:63:bb:82:dc:06:5b:cf:c2:56:b3:
ea:41:63:40:67:1a:33:9b:50:ee:30:75:54:f6:7c:0f:e6:19:
91:cd:43:00:27:a8:69:7c:ce:27:e1:20:a8:26:56:dc:c4:10:
f5:61:c0:bf:7e:4d:91:f7:d6:d0:2a:71:fa:83:9a:c0:f6:b0:
de:ae:0b:2f:bb:fe:74:4a:19:d4:3a:00:1d:c2:c9:25:9b:ba:
a1:be:14:ea:56:f4:93:2b:d1:26:86:1f:2b:54:a9:11:ab:61:
60:5a:65:a8:ca:7e:01:cf:a5:9f:ec:c7:c9:ac:3d:4a:7e:ed:
55:5f:32:09:2a:40:c8:b7:04:73:11:12:76:83:b9:e1:68:1b:
5e:94:d0:79:a4:bb:52:95:94:a2:ab:9b:2a:95:70:e3:90:73:
4f:bd:99:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa9nW8c/F+Q/8SIrKUS7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh
NTM3ZjkwHhcNMjUwMjE3MDEwMDM1WhcNMjUwMjE4MDEwMDM1WjAzMTEwLwYDVQQD
Eyg2ODdkYmM2NGZkNzc0OWNkOThhMjQ5OGYwOGU0OGM2OWE2N2JiNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42dQoIaQkN6HlZPs5WyXUNbI+Smr
LUrQd3UTdIUX95PP2X9jU4zoo2Xosedymo1LkgEmSl6OhM6cUuiZlaqc9tqo+UnY
bGm/ns2iROf5yu2rcV19al/qi9DOw5ELNhgH+UFk3g6FLF2vMFlo3UFDfbFdhI7H
/QWhUMiQcd8BZDRxJ5aM64rK2SuEYAbOSMA7n1IC6WYc+F2u4nUKC7mKce48zLC+
ZGQ6hwyAb+nkCNJx3aCzmoQaEULuHBwD7urS0ZGht5oGbJc+AJA9kmAFVl0UpcZw
PGI30roEVxm3KojF0GBC/ABm5xP0eiKs7nLIHAPSSRp96iUvNsoyj1E+TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh9vGT9d0nNmKJJjwjkjGmme7dOMB8GA1UdIwQY
MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt
MTYzMjQ3ZWIwZTA3LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3
LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGutbVOc7
wq0qzMwv9zM8uAtawjX203uvj8sAcVCaPfdKjAIazn3FtARYxSwxux0ZvtykHmjQ
deCCkEx8kecuunpM2w4K+d1I2zHJazGpOgw3Jztf3MyMJOIKLNIoW539Q4tju4Lc
BlvPwlaz6kFjQGcaM5tQ7jB1VPZ8D+YZkc1DACeoaXzOJ+EgqCZW3MQQ9WHAv35N
kffW0Cpx+oOawPaw3q4LL7v+dEoZ1DoAHcLJJZu6ob4U6lb0kyvRJoYfK1SpEath
YFplqMp+Ac+ln+zHyaw9Sn7tVV8yCSpAyLcEcxESdoO54WgbXpTQeaS7UpWUoqub
KpVw45BzT72ZrQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:35 2025 by rpki-client