Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: BpPZy2Qzq4aOLbOy6NZtDexsFb67A/5wH1ah0ujAcsc=
Subject key identifier: 48:2D:28:EE:D1:18:F8:31:DF:4C:3A:8F:50:15:D6:49:2D:90:4F:F4
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 019511D99056E37A877751C6216A1F831A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 03:00:25 +0000
Manifest this update: Mon 17 Feb 2025 03:00:25 +0000
Manifest next update: Tue 18 Feb 2025 03:00:25 +0000
Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=)
2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: qFUtgqWj7y014uA6oofvlz58helzs/bPSgvOfk3bAUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:90:56:e3:7a:87:77:51:c6:21:6a:1f:83:1a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Feb 17 03:00:25 2025 GMT
Not After : Feb 18 03:00:25 2025 GMT
Subject: CN=482d28eed118f831df4c3a8f5015d6492d904ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:65:de:11:be:33:81:cf:90:6f:16:c4:0e:
10:08:93:fb:4d:58:49:5b:5d:dc:48:da:f7:a9:95:
3f:9d:2c:89:00:f8:4d:b4:a0:7b:4e:77:54:42:dd:
d4:7e:34:b3:da:c6:e5:73:53:63:06:aa:fc:54:8d:
ee:f8:3f:0c:85:fd:7e:c4:86:f6:96:b7:fe:6e:48:
56:fd:a6:eb:6f:49:32:e1:fa:cc:ea:27:0b:e3:07:
cf:64:4d:8b:25:86:5c:85:52:ca:c5:36:2c:2a:1e:
16:03:e2:f2:93:77:68:e3:7b:d8:68:f9:fc:02:63:
de:c5:9a:d8:fc:ef:42:2e:9f:99:0d:a4:96:d8:c5:
49:cc:08:ad:0c:44:d0:d9:61:b1:c0:b8:0c:f3:83:
2c:5d:9b:33:e0:6d:9a:93:63:7e:45:8e:c0:ee:b1:
b9:16:ef:04:c3:7e:1a:aa:54:21:3e:31:b6:96:6c:
d7:97:24:9c:d3:0e:f3:cd:ee:b9:6d:3c:b3:0c:a6:
08:ea:a7:91:62:ca:bd:85:1e:e5:09:a1:b7:1f:0d:
c9:87:56:8c:7c:2a:1d:cf:9e:fc:10:57:d1:24:e0:
2a:f0:0c:e5:32:d3:a9:3f:5e:f8:7e:27:94:e9:61:
64:36:f1:2d:f8:43:8f:b5:68:a9:26:62:a8:c7:e6:
5f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2D:28:EE:D1:18:F8:31:DF:4C:3A:8F:50:15:D6:49:2D:90:4F:F4
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5d:58:c1:3c:db:cd:d3:ce:c2:d7:0c:a3:55:06:b8:18:62:
68:c3:e9:bf:af:40:49:67:78:4f:98:0e:84:6e:74:36:ba:31:
18:25:07:ae:c2:1b:8f:8e:9d:45:5e:08:c5:ac:18:1f:ec:8f:
c1:9f:0f:de:c3:fb:d2:85:86:78:74:56:12:e2:f5:12:c8:f4:
5f:9f:98:d3:cb:72:c3:33:34:5f:64:0a:e5:8d:f0:a1:ba:f4:
43:0f:b4:26:e4:80:e3:02:ec:10:67:96:ed:13:1e:37:7a:c3:
f6:27:df:ed:b3:01:05:e6:bc:54:c4:bf:db:0e:b4:f5:79:0c:
d0:d1:07:60:c0:22:2f:6e:ca:a0:e7:3c:76:26:a0:d1:e3:fa:
70:c2:e9:2e:dd:5e:e1:fc:c7:2f:5a:40:51:7b:fb:e5:38:7c:
c6:a3:18:cb:70:c9:c5:8a:7b:04:9d:ef:f5:61:44:b0:6e:66:
db:de:83:27:0d:df:a1:8b:fd:ce:7c:5c:de:00:cd:92:4d:50:
42:5e:81:a1:6d:44:ec:6f:99:2c:04:f3:de:cf:c9:8f:37:d2:
98:e9:55:03:43:24:19:48:f7:06:91:82:83:8b:ca:70:1a:3a:
bf:92:cd:bc:80:8d:75:d4:b4:84:42:c9:18:e4:dd:ef:de:1f:
7a:60:69:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2ZBW43qHd1HGIWofgxqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZGM0NWZmZTEzZjg0MWYxODhhZjc0M2JkN2RjMzRlZDU0
ODA1ZDQwHhcNMjUwMjE3MDMwMDI1WhcNMjUwMjE4MDMwMDI1WjAzMTEwLwYDVQQD
Eyg0ODJkMjhlZWQxMThmODMxZGY0YzNhOGY1MDE1ZDY0OTJkOTA0ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtpl3hG+M4HPkG8WxA4QCJP7TVhJ
W13cSNr3qZU/nSyJAPhNtKB7TndUQt3UfjSz2sblc1NjBqr8VI3u+D8Mhf1+xIb2
lrf+bkhW/abrb0ky4frM6icL4wfPZE2LJYZchVLKxTYsKh4WA+Lyk3do43vYaPn8
AmPexZrY/O9CLp+ZDaSW2MVJzAitDETQ2WGxwLgM84MsXZsz4G2ak2N+RY7A7rG5
Fu8Ew34aqlQhPjG2lmzXlySc0w7zze65bTyzDKYI6qeRYsq9hR7lCaG3Hw3Jh1aM
fCodz578EFfRJOAq8AzlMtOpP174fieU6WFkNvEt+EOPtWipJmKox+ZfIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgtKO7RGPgx30w6j1AV1kktkE/0MB8GA1UdIwQY
MBaAFJPcRf/hP4QfGIr3Q719w07VSAXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQt
MjE4OTU3MjhiYTRlLzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQtMjE4OTU3MjhiYTRl
LzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB11YwTzb
zdPOwtcMo1UGuBhiaMPpv69ASWd4T5gOhG50NroxGCUHrsIbj46dRV4IxawYH+yP
wZ8P3sP70oWGeHRWEuL1Esj0X5+Y08tywzM0X2QK5Y3wobr0Qw+0JuSA4wLsEGeW
7RMeN3rD9iff7bMBBea8VMS/2w609XkM0NEHYMAiL27KoOc8diag0eP6cMLpLt1e
4fzHL1pAUXv75Th8xqMYy3DJxYp7BJ3v9WFEsG5m296DJw3foYv9znxc3gDNkk1Q
Ql6BoW1E7G+ZLATz3s/JjzfSmOlVA0MkGUj3BpGCg4vKcBo6v5LNvICNddS0hELJ
GOTd794femBpzg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:33 2025 by rpki-client