Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: 0GSz/1BQVAjUQAccWHeTAkMprmCayHdfJ5dvTbzyfQw=
Subject key identifier: 76:ED:3D:52:8A:CF:E0:06:1A:7C:06:D2:52:80:C4:FB:E4:8D:DB:29
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 0195113522B43BF4D6EBC54714D689E137C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 0FAB
Signing time: Mon 17 Feb 2025 00:00:49 +0000
Manifest this update: Mon 17 Feb 2025 00:00:49 +0000
Manifest next update: Tue 18 Feb 2025 00:00:49 +0000
Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: 74TeTvlJpmGnn9/eYCMPuA1TUrjUua3nRXfcOyfTaUM=)
3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:22:b4:3b:f4:d6:eb:c5:47:14:d6:89:e1:37:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Feb 17 00:00:49 2025 GMT
Not After : Feb 18 00:00:49 2025 GMT
Subject: CN=76ed3d528acfe0061a7c06d25280c4fbe48ddb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:da:b5:55:b8:cd:8c:e2:37:b0:22:38:3a:
bf:7e:5b:92:76:56:78:07:6c:35:d3:d5:5d:f9:da:
a0:60:56:3b:b4:f4:48:7d:43:ad:19:22:dd:e7:78:
ef:7e:0a:3c:37:6a:94:26:d6:c4:4d:3e:d0:71:73:
bd:27:bb:bb:32:73:71:06:02:fd:0c:62:3f:0c:5c:
3b:8a:44:e5:46:c2:8c:6c:0e:50:b2:ef:be:6c:8f:
6e:af:dc:de:56:ab:08:ff:01:76:d4:ef:d5:ad:72:
65:16:ea:2d:77:d2:c5:bf:37:ed:c1:e2:26:24:f3:
92:40:fa:a5:40:14:3b:c0:d9:ab:cd:e0:72:14:cc:
90:a9:65:dc:e9:98:79:29:d5:48:66:aa:5a:1e:cf:
70:af:54:8d:51:71:fc:7f:ec:38:06:7a:d1:14:46:
a3:84:8e:80:42:ff:f8:a3:99:3b:73:66:70:b4:e5:
08:68:18:2d:ec:e6:9a:f2:b2:e9:21:e5:93:96:c1:
45:47:bd:2e:e4:04:96:e6:17:1e:bb:93:2a:9a:9f:
1e:b8:12:b0:33:cc:59:fa:4f:5f:23:c3:69:06:1b:
fb:34:8a:0e:6c:63:e7:10:67:b2:76:cc:50:47:2d:
42:96:39:ec:0b:99:51:93:5a:17:9c:8a:a6:df:4c:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:ED:3D:52:8A:CF:E0:06:1A:7C:06:D2:52:80:C4:FB:E4:8D:DB:29
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:42:0a:55:86:a4:86:24:bb:f8:57:a8:ce:82:a3:4e:57:99:
57:64:5b:6d:e1:d7:24:98:97:e5:cf:fc:27:aa:af:a2:a4:c1:
05:20:92:26:67:dd:56:de:5c:08:1d:cf:10:65:0d:6e:e1:19:
48:4e:4b:15:d1:fe:e8:39:73:c4:96:0e:2b:09:ac:b5:d6:7a:
65:49:83:bb:ae:b9:58:8a:79:cf:02:f2:64:1f:86:c3:12:42:
f3:18:76:4a:d2:7d:2a:50:82:5e:f3:a9:2a:3e:c7:34:2b:2b:
a8:e8:89:ac:5e:7b:25:a1:69:ad:9a:e3:28:5d:fe:5c:12:ec:
8b:89:ec:15:b0:08:52:82:cb:2c:74:be:78:c2:12:a7:05:c8:
41:bb:b5:06:55:12:c7:35:e6:be:af:51:98:cb:35:0b:69:a3:
c2:16:fc:0f:d6:df:56:b4:af:4d:f6:44:72:49:e0:14:d3:1d:
b5:61:6b:b7:8c:8a:ea:43:94:c2:56:b6:26:4e:62:7e:a6:bb:
9f:4e:96:96:81:00:13:69:11:63:f6:0d:06:3e:17:4d:78:2a:
24:4a:ed:6d:cf:a0:bb:4e:00:4f:f6:fc:e8:e0:75:16:b3:96:
2b:f6:b7:11:ae:ec:79:8e:ba:01:a7:b0:f9:a4:f6:64:1f:be:
b7:b4:b6:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNSK0O/TW68VHFNaJ4TfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NjNjNzEwNmE1ZjI2NDAxNjJlNzk4MDU4M2VhYjViZDgw
MDhjNDUwHhcNMjUwMjE3MDAwMDQ5WhcNMjUwMjE4MDAwMDQ5WjAzMTEwLwYDVQQD
Eyg3NmVkM2Q1MjhhY2ZlMDA2MWE3YzA2ZDI1MjgwYzRmYmU0OGRkYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuifatVW4zYziN7AiODq/fluSdlZ4
B2w109Vd+dqgYFY7tPRIfUOtGSLd53jvfgo8N2qUJtbETT7QcXO9J7u7MnNxBgL9
DGI/DFw7ikTlRsKMbA5Qsu++bI9ur9zeVqsI/wF21O/VrXJlFuotd9LFvzftweIm
JPOSQPqlQBQ7wNmrzeByFMyQqWXc6Zh5KdVIZqpaHs9wr1SNUXH8f+w4BnrRFEaj
hI6AQv/4o5k7c2ZwtOUIaBgt7Oaa8rLpIeWTlsFFR70u5ASW5hceu5Mqmp8euBKw
M8xZ+k9fI8NpBhv7NIoObGPnEGeydsxQRy1CljnsC5lRk1oXnIqm30zZCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbtPVKKz+AGGnwG0lKAxPvkjdspMB8GA1UdIwQY
MBaAFDdjxxBqXyZAFi55gFg+q1vYAIxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTct
ODhhMGU0NTBhMTdiLzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTctODhhMGU0NTBhMTdi
LzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkIKVYak
hiS7+FeozoKjTleZV2RbbeHXJJiX5c/8J6qvoqTBBSCSJmfdVt5cCB3PEGUNbuEZ
SE5LFdH+6DlzxJYOKwmstdZ6ZUmDu665WIp5zwLyZB+GwxJC8xh2StJ9KlCCXvOp
Kj7HNCsrqOiJrF57JaFprZrjKF3+XBLsi4nsFbAIUoLLLHS+eMISpwXIQbu1BlUS
xzXmvq9RmMs1C2mjwhb8D9bfVrSvTfZEckngFNMdtWFrt4yK6kOUwla2Jk5ifqa7
n06WloEAE2kRY/YNBj4XTXgqJErtbc+gu04AT/b86OB1FrOWK/a3Ea7seY66Aaew
+aT2ZB++t7S2Yw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:05 2025 by rpki-client