Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier: spesgi6QYJYLyNjlJGX5Q8DqtEmFUlC0HVy+T9A1744=
Subject key identifier: EC:45:37:17:8B:68:E5:59:9B:07:66:4C:99:0A:D7:2A:56:46:E3:89
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 0195127E575B3AE67AE19111016704E91216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number: 02AB
Signing time: Mon 17 Feb 2025 06:00:24 +0000
Manifest this update: Mon 17 Feb 2025 06:00:24 +0000
Manifest next update: Tue 18 Feb 2025 06:00:24 +0000
Files and hashes: 1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: 1Egqfgwn2zBh1SUMKBOEnF85HAv89IH4Xmr8DJRGQkI=)
2: i6CWENtAdnXqPwuX227uTDykXkg.roa (hash: nuLqIrBizKW+oU2TGkl7L2LqgilWGWZ/QKZgoAyDfPY=)
3: scpx1tsDeDfxUzO1xx1MvIOWYyI.roa (hash: mBTPbPt26EcSH4AMmR65D0K6YSKToMbRhFmYaz8u+KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:57:5b:3a:e6:7a:e1:91:11:01:67:04:e9:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: Feb 17 06:00:24 2025 GMT
Not After : Feb 18 06:00:24 2025 GMT
Subject: CN=ec4537178b68e5599b07664c990ad72a5646e389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:0c:c7:e4:4b:87:c5:a7:30:e4:57:df:cb:
3f:b4:29:34:bf:9c:f9:4d:5c:26:64:66:1f:90:c6:
68:6f:a2:51:df:d2:d0:7a:3e:7f:2c:21:ba:32:75:
97:b5:3f:d1:5f:9b:92:c1:98:cc:a6:90:70:4f:3e:
73:4b:51:50:db:77:34:23:bb:40:ec:59:13:3d:f2:
9f:22:9a:47:b4:d8:57:88:ad:fa:cc:e1:0c:8f:07:
ae:b1:75:63:c7:81:6d:dc:6b:0c:b7:d2:b8:2a:e3:
e2:c3:ab:18:62:f7:0a:2b:e2:83:41:d9:39:03:d4:
3e:80:89:bb:f3:87:97:ef:02:99:cf:d1:10:b7:c5:
e4:9d:52:de:e0:fc:76:27:40:0f:dd:28:bf:07:dd:
34:cb:5c:85:b1:a5:6d:de:84:c0:0e:c6:f3:53:71:
ec:44:d1:7e:02:95:98:3c:5f:1e:e1:ac:0a:88:fd:
71:69:50:66:88:c0:93:b3:e3:75:d4:a9:33:c4:0f:
02:db:5e:92:cc:44:3b:da:2d:53:8f:86:9d:a9:24:
24:72:5c:74:f4:60:a4:d3:20:24:d1:d9:ac:84:80:
5e:c0:09:75:bb:25:42:5d:5b:ec:2b:46:aa:29:31:
2a:30:0c:de:6f:32:53:92:43:2a:78:27:92:d0:0f:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:45:37:17:8B:68:E5:59:9B:07:66:4C:99:0A:D7:2A:56:46:E3:89
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:33:f7:85:e0:8b:e1:d7:88:62:cb:22:4e:ad:18:c3:63:ea:
43:b2:e5:4e:3e:f1:62:fa:df:be:02:b7:49:ca:af:ca:61:7f:
fb:88:79:8d:a3:7a:2c:da:cf:6f:49:da:60:71:13:f4:9d:b4:
dd:2d:07:d9:74:7e:a8:36:df:66:e7:d8:ec:98:ed:5d:54:18:
3a:b4:a3:03:e9:9e:f2:bd:9d:69:cd:7d:fe:be:5b:16:af:f5:
ab:15:db:ea:a9:79:01:9b:e7:d9:bb:03:f8:9b:72:2a:b4:28:
4c:4c:94:18:f8:73:3d:61:68:da:c0:6e:ef:1d:0f:b4:19:56:
57:51:67:0d:52:a8:9f:02:58:c2:56:d9:c1:a7:3f:e4:5b:a0:
4a:d7:3e:79:14:05:85:60:35:87:74:90:84:f8:da:63:ff:b0:
8d:dc:69:8b:a6:77:70:c1:f9:95:03:13:ee:4f:7f:50:9d:54:
8f:db:30:b2:c8:81:65:74:3e:1a:1a:76:c9:09:95:e3:00:6b:
99:df:16:fd:5a:bc:3e:16:01:4f:35:50:5d:ea:f0:cd:6c:81:
2b:6a:9a:a2:cb:02:92:75:3d:83:d4:e6:04:c4:b3:72:0b:22:
7a:ad:3c:73:38:2d:f3:e8:9c:bd:91:ce:fd:a6:04:be:de:81:
a0:aa:ea:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfldbOuZ64ZERAWcE6RIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjI5M2QwMzk5MTYwNzg4YjMxZTQzODc2MGRjM2JkMWVk
ODgyZWIwHhcNMjUwMjE3MDYwMDI0WhcNMjUwMjE4MDYwMDI0WjAzMTEwLwYDVQQD
EyhlYzQ1MzcxNzhiNjhlNTU5OWIwNzY2NGM5OTBhZDcyYTU2NDZlMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruYMx+RLh8WnMORX38s/tCk0v5z5
TVwmZGYfkMZob6JR39LQej5/LCG6MnWXtT/RX5uSwZjMppBwTz5zS1FQ23c0I7tA
7FkTPfKfIppHtNhXiK36zOEMjweusXVjx4Ft3GsMt9K4KuPiw6sYYvcKK+KDQdk5
A9Q+gIm784eX7wKZz9EQt8XknVLe4Px2J0AP3Si/B900y1yFsaVt3oTADsbzU3Hs
RNF+ApWYPF8e4awKiP1xaVBmiMCTs+N11KkzxA8C216SzEQ72i1Tj4adqSQkclx0
9GCk0yAk0dmshIBewAl1uyVCXVvsK0aqKTEqMAzebzJTkkMqeCeS0A+2tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxFNxeLaOVZmwdmTJkK1ypWRuOJMB8GA1UdIwQY
MBaAFDMik9A5kWB4izHkOHYNw70e2ILrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEt
MjIyZmUzNDgyNjhhLzEvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEtMjIyZmUzNDgyNjhh
LzEvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjP3heCL
4deIYssiTq0Yw2PqQ7LlTj7xYvrfvgK3ScqvymF/+4h5jaN6LNrPb0naYHET9J20
3S0H2XR+qDbfZufY7JjtXVQYOrSjA+me8r2dac19/r5bFq/1qxXb6ql5AZvn2bsD
+JtyKrQoTEyUGPhzPWFo2sBu7x0PtBlWV1FnDVKonwJYwlbZwac/5FugStc+eRQF
hWA1h3SQhPjaY/+wjdxpi6Z3cMH5lQMT7k9/UJ1Uj9swssiBZXQ+Ghp2yQmV4wBr
md8W/Vq8PhYBTzVQXerwzWyBK2qaossCknU9g9TmBMSzcgsieq08czgt8+icvZHO
/aYEvt6BoKrqag==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:26 2025 by rpki-client