Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: c+8E6ceoMOnx+G7oFGGY6YG68vL1Ge7WCifTG1LAVEQ=
Subject key identifier: B5:87:71:61:30:50:E7:0D:79:A3:08:15:CB:93:A5:43:36:40:D5:B9
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 0194C463A2EB4D9A662354CB5B75679045A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 02:00:51 +0000
Manifest this update: Sun 02 Feb 2025 02:00:51 +0000
Manifest next update: Mon 03 Feb 2025 02:00:51 +0000
Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: cc2m8p9TNUY2zTNINcBmgHf0mQLN4XI/USGtn3EL9Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:a2:eb:4d:9a:66:23:54:cb:5b:75:67:90:45:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Feb 2 02:00:51 2025 GMT
Not After : Feb 3 02:00:51 2025 GMT
Subject: CN=b58771613050e70d79a30815cb93a5433640d5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:ff:d2:aa:2a:27:4b:eb:bc:fe:66:73:6b:
f6:1a:eb:de:d7:d9:2e:10:c6:15:5f:da:1e:d9:7b:
39:8f:15:56:d2:f0:95:af:83:0c:0e:5f:00:ad:27:
fe:9e:2a:23:45:4a:a8:d1:22:00:8d:9a:19:a0:b9:
95:c5:fb:2b:13:17:40:25:d9:a4:74:1b:67:08:ca:
2c:00:f5:7b:5d:f8:65:5e:0c:3f:27:93:63:71:06:
8b:a0:7d:f9:b4:59:72:d1:7f:79:2b:f1:7b:81:57:
f6:1b:ff:de:22:99:c6:5a:8c:6a:1c:af:ce:72:3e:
cb:7f:8d:ee:bd:3e:5e:3b:51:60:bc:a8:ac:00:b9:
87:54:5e:a8:c7:36:b9:82:f6:25:87:6a:c2:23:d0:
ee:00:ee:c2:ef:51:3b:ab:13:3c:f3:1a:d4:ae:3a:
84:23:e4:f1:b9:fa:e8:c0:6a:2e:af:0e:45:5e:1e:
bf:12:37:6e:17:53:3e:36:d2:29:fe:73:11:70:86:
03:0b:f4:1d:29:d2:98:7b:31:ba:e9:c3:1b:b3:f1:
ad:f4:f8:1b:80:64:6b:70:a9:ac:67:ca:9a:04:75:
15:c2:6b:73:e8:66:8d:ec:56:1c:c4:cc:e1:7d:0a:
85:ed:c9:97:28:c1:e7:1a:ef:8a:4c:7b:f6:20:cc:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:87:71:61:30:50:E7:0D:79:A3:08:15:CB:93:A5:43:36:40:D5:B9
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9e:82:0f:38:7b:6b:2e:a2:f3:bf:0c:8e:df:6e:74:38:e0:
f4:a6:ea:b0:b6:c4:60:6b:5a:23:8f:40:63:ec:98:c9:5d:d2:
5e:a9:72:d4:da:3e:3a:48:99:2f:6f:27:52:ac:09:aa:98:83:
cf:49:35:63:80:2b:ff:76:93:32:16:5a:ce:62:51:0a:e0:0d:
16:6f:5b:a2:59:37:b0:f6:93:23:93:2d:e1:19:30:ac:8b:38:
35:b5:5d:60:3e:a0:5a:15:53:20:3a:2f:e2:aa:2a:e5:79:bd:
b0:6d:29:08:dc:55:50:0e:17:4a:d4:b6:c5:fe:a8:b9:23:8a:
03:e6:23:9d:1d:8e:cf:80:e9:c4:71:0d:fb:db:6b:86:f1:bf:
f5:53:9d:b5:f0:f9:21:43:d7:d0:17:61:21:68:de:41:1d:40:
76:89:72:2e:35:f2:75:f7:7a:c8:7f:6a:b2:15:c1:bd:fd:e5:
16:08:16:0b:b4:1b:47:35:73:46:bd:a7:d6:a7:2c:d9:dc:0f:
71:61:24:5b:92:b5:e7:1c:04:b5:02:4d:2b:d8:ad:29:ac:3b:
56:a3:9d:15:37:77:5d:30:89:98:07:b1:37:36:7d:1a:07:b0:
43:cd:b2:30:51:7c:40:fc:f2:0b:6f:02:87:40:1a:ad:11:cb:
4b:d8:fe:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY6LrTZpmI1TLW3VnkEWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjhhMzFlNWM4YTVhODgyMjU5ODlhMWJhZWY0YTM4MTMz
ODYwMWEwHhcNMjUwMjAyMDIwMDUxWhcNMjUwMjAzMDIwMDUxWjAzMTEwLwYDVQQD
EyhiNTg3NzE2MTMwNTBlNzBkNzlhMzA4MTVjYjkzYTU0MzM2NDBkNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMf/0qoqJ0vrvP5mc2v2Guve19ku
EMYVX9oe2Xs5jxVW0vCVr4MMDl8ArSf+niojRUqo0SIAjZoZoLmVxfsrExdAJdmk
dBtnCMosAPV7XfhlXgw/J5NjcQaLoH35tFly0X95K/F7gVf2G//eIpnGWoxqHK/O
cj7Lf43uvT5eO1FgvKisALmHVF6oxza5gvYlh2rCI9DuAO7C71E7qxM88xrUrjqE
I+TxufrowGourw5FXh6/EjduF1M+NtIp/nMRcIYDC/QdKdKYezG66cMbs/Gt9Pgb
gGRrcKmsZ8qaBHUVwmtz6GaN7FYcxMzhfQqF7cmXKMHnGu+KTHv2IMzniwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWHcWEwUOcNeaMIFcuTpUM2QNW5MB8GA1UdIwQY
MBaAFHdoox5cilqIIlmJobrvSjgTOGAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzkt
NzY2ZWFkN2U2NTEzLzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzktNzY2ZWFkN2U2NTEz
LzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZ6CDzh7
ay6i878Mjt9udDjg9KbqsLbEYGtaI49AY+yYyV3SXqly1No+OkiZL28nUqwJqpiD
z0k1Y4Ar/3aTMhZazmJRCuANFm9bolk3sPaTI5Mt4RkwrIs4NbVdYD6gWhVTIDov
4qoq5Xm9sG0pCNxVUA4XStS2xf6ouSOKA+YjnR2Oz4DpxHEN+9trhvG/9VOdtfD5
IUPX0BdhIWjeQR1AdolyLjXydfd6yH9qshXBvf3lFggWC7QbRzVzRr2n1qcs2dwP
cWEkW5K15xwEtQJNK9itKaw7VqOdFTd3XTCJmAexNzZ9GgewQ82yMFF8QPzyC28C
h0AarRHLS9j+1w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:46 2025 by rpki-client