Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: xN8HIWUizsltPBgRcR/bNZTjyyf2WNLotfunbp0EYzk=
Subject key identifier: 5C:C0:F6:04:B6:C4:74:3E:60:29:49:8E:0A:DB:55:76:3C:B0:77:51
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 019511351F21D4EA4AB9ABAB0ECFA68D5A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 04DB
Signing time: Mon 17 Feb 2025 00:00:48 +0000
Manifest this update: Mon 17 Feb 2025 00:00:48 +0000
Manifest next update: Tue 18 Feb 2025 00:00:48 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: mi46wJgXYACe7MNawFRUX4CO7rCytq1dytRDrtM5+8o=)
2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:1f:21:d4:ea:4a:b9:ab:ab:0e:cf:a6:8d:5a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Feb 17 00:00:48 2025 GMT
Not After : Feb 18 00:00:48 2025 GMT
Subject: CN=5cc0f604b6c4743e6029498e0adb55763cb07751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:7c:40:04:f0:de:ca:7d:fc:2f:db:f3:c8:
97:07:b0:1f:15:9c:de:50:34:a8:c2:93:a0:12:fb:
d8:61:b0:f0:b7:45:c4:e4:c2:f3:30:51:74:9e:d8:
5f:87:f2:1e:2f:a8:e4:72:1a:93:f0:a2:ad:e2:54:
cb:0f:f5:32:a6:6c:89:f0:9e:f8:22:6b:27:74:25:
0e:b3:71:02:2f:19:d9:a9:e4:38:0c:13:a1:c5:98:
ca:8d:03:c7:99:f2:54:33:d9:ae:58:dd:c3:e7:3b:
1e:7c:84:8c:49:87:5c:14:1a:c3:e6:61:b5:18:b3:
00:03:3e:ac:23:9c:e1:f8:86:b7:53:d0:07:6b:63:
9b:20:a7:c2:ac:ce:65:71:cb:ed:48:f4:e2:2d:69:
a1:75:69:2b:9e:95:5d:06:b5:bb:4f:68:54:65:19:
c9:92:b4:fb:ab:66:04:b1:66:8b:f2:7c:c8:0a:70:
b0:47:2a:77:6a:f1:9f:04:79:cf:dd:7e:e1:c4:47:
ef:27:48:d9:f8:bf:d2:1d:94:d9:b4:cd:f5:31:f2:
c0:f6:a9:ef:52:17:4d:fb:e9:c8:aa:12:64:b0:b9:
d7:aa:57:19:10:89:ea:6a:8c:c2:ec:5d:91:ed:07:
a5:10:2a:10:01:5f:59:61:84:a2:d6:82:f1:2f:9e:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C0:F6:04:B6:C4:74:3E:60:29:49:8E:0A:DB:55:76:3C:B0:77:51
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:46:99:8b:b2:2e:f8:3c:aa:93:99:26:8b:7f:03:ed:f0:5e:
ef:95:5b:89:00:c0:aa:15:a1:52:98:c5:5f:5b:e4:46:ee:c6:
e0:e0:96:ab:f3:71:1f:fc:e8:5e:7a:f9:81:d1:db:c5:83:f9:
da:86:8e:92:b6:e3:bc:a6:06:97:29:42:ed:53:25:fd:47:4a:
cf:1b:8d:2d:ad:c1:36:35:5f:f5:d6:9e:c7:ad:f5:04:61:ea:
4f:ec:fe:3d:d4:f2:c9:cd:97:46:61:ca:0d:74:61:b4:47:7d:
c5:a9:c0:d3:eb:c9:70:84:c3:08:a2:77:11:6b:99:7a:f6:ff:
69:f6:5c:f9:0b:97:91:3f:5c:e8:1e:68:ba:ff:28:f8:df:cd:
6b:e3:62:e0:e1:bb:69:65:b7:c4:44:35:ce:9d:a0:b9:62:a1:
64:66:66:57:64:de:c0:df:14:70:cf:c7:2d:a5:ea:9c:39:e7:
cc:eb:31:18:d5:f5:7d:0c:05:fa:75:b2:28:76:77:10:22:f9:
77:36:a4:30:6c:33:3a:3a:15:bc:29:5b:5e:5b:b8:d2:f7:ca:
4d:f1:5f:5f:f2:18:80:91:61:3a:bb:da:89:cb:b7:04:b1:44:
a6:a9:f4:78:ba:60:da:4e:ab:93:0e:bf:35:23:6c:fe:49:f2:
d5:5c:72:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNR8h1OpKuaurDs+mjVqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjZkMGUwMDcyZDBjYWIyOWJmYTg3MzdkZTJhNTNlNTE0
MTgyNzYwHhcNMjUwMjE3MDAwMDQ4WhcNMjUwMjE4MDAwMDQ4WjAzMTEwLwYDVQQD
Eyg1Y2MwZjYwNGI2YzQ3NDNlNjAyOTQ5OGUwYWRiNTU3NjNjYjA3NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQp8QATw3sp9/C/b88iXB7AfFZze
UDSowpOgEvvYYbDwt0XE5MLzMFF0nthfh/IeL6jkchqT8KKt4lTLD/UypmyJ8J74
ImsndCUOs3ECLxnZqeQ4DBOhxZjKjQPHmfJUM9muWN3D5zsefISMSYdcFBrD5mG1
GLMAAz6sI5zh+Ia3U9AHa2ObIKfCrM5lccvtSPTiLWmhdWkrnpVdBrW7T2hUZRnJ
krT7q2YEsWaL8nzICnCwRyp3avGfBHnP3X7hxEfvJ0jZ+L/SHZTZtM31MfLA9qnv
UhdN++nIqhJksLnXqlcZEInqaozC7F2R7QelECoQAV9ZYYSi1oLxL56saQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzA9gS2xHQ+YClJjgrbVXY8sHdRMB8GA1UdIwQY
MBaAFHG20OAHLQyrKb+oc33ipT5RQYJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYt
YjFmY2YzODk2OTk5LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYtYjFmY2YzODk2OTk5
LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkaZi7Iu
+Dyqk5kmi38D7fBe75VbiQDAqhWhUpjFX1vkRu7G4OCWq/NxH/zoXnr5gdHbxYP5
2oaOkrbjvKYGlylC7VMl/UdKzxuNLa3BNjVf9daex631BGHqT+z+PdTyyc2XRmHK
DXRhtEd9xanA0+vJcITDCKJ3EWuZevb/afZc+QuXkT9c6B5ouv8o+N/Na+Ni4OG7
aWW3xEQ1zp2guWKhZGZmV2TewN8UcM/HLaXqnDnnzOsxGNX1fQwF+nWyKHZ3ECL5
dzakMGwzOjoVvClbXlu40vfKTfFfX/IYgJFhOrvaicu3BLFEpqn0eLpg2k6rkw6/
NSNs/kny1Vxy6g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:07 2025 by rpki-client