Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: v0GLMFJnOruTeqZlHHiBz1ZuaeU35v8supz+OQeDU0c=
Subject key identifier: 28:5B:A8:50:EC:94:4A:BE:EF:0D:F8:E9:8D:1E:86:5A:1F:C9:5E:06
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019512479A8F7AC84FA71F2F60F7224993CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 119C
Signing time: Mon 17 Feb 2025 05:00:37 +0000
Manifest this update: Mon 17 Feb 2025 05:00:37 +0000
Manifest next update: Tue 18 Feb 2025 05:00:37 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: L6jFsUxaZ87dd5pZQs6jLVlK1E14Khz6aRjB+n24YFo=)
2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=)
3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:9a:8f:7a:c8:4f:a7:1f:2f:60:f7:22:49:93:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Feb 17 05:00:37 2025 GMT
Not After : Feb 18 05:00:37 2025 GMT
Subject: CN=285ba850ec944abeef0df8e98d1e865a1fc95e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:71:a6:d9:c1:67:06:e1:62:53:0f:bc:84:
d7:ae:60:27:44:de:36:82:2f:0d:92:dc:1e:2f:5c:
6e:74:ea:a1:6f:78:1d:10:04:e5:53:ed:12:23:c8:
10:9e:93:73:10:46:3b:63:9f:37:a0:24:1f:87:c0:
f0:71:2c:0e:34:ae:df:04:4e:90:0f:d1:21:a0:f0:
13:04:b0:0f:24:bd:93:75:44:5f:df:71:94:60:e9:
5f:7a:7a:9c:1b:85:c6:ad:3a:2e:53:a3:9c:43:56:
5f:fd:3b:be:a3:fa:4d:07:65:8e:63:20:b0:1e:d1:
0f:88:49:c7:6e:35:e8:b4:41:47:c9:e7:03:90:da:
98:27:77:6f:70:dd:f9:46:65:df:cc:ea:6d:22:4f:
14:83:df:1d:40:b3:d8:b6:22:a2:1a:ef:5b:8f:bd:
b6:88:8a:c6:a2:de:3e:03:dc:08:d1:93:0a:6a:b1:
14:5e:94:1b:a0:5d:52:2b:ba:51:9c:27:65:9f:c4:
8e:0a:11:c7:0c:24:12:cf:39:17:83:71:66:0f:07:
8f:ee:cd:6d:cc:89:9e:f1:d0:01:8a:d2:22:2d:e2:
fa:4e:73:b7:11:32:17:de:da:cc:67:dc:f8:7f:5d:
71:4a:99:42:d7:a2:fe:27:fd:c5:b9:b3:e1:ad:26:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5B:A8:50:EC:94:4A:BE:EF:0D:F8:E9:8D:1E:86:5A:1F:C9:5E:06
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a0:8a:8c:ed:28:80:f5:29:82:62:3d:ea:0a:ca:47:95:62:
b6:86:59:e7:f7:3a:08:16:6b:f8:38:42:18:06:65:d3:ac:e5:
d1:26:07:24:b1:df:a6:e2:d9:54:fd:f8:e8:88:6e:1b:c9:65:
66:c8:9e:95:b2:d6:36:75:98:11:a9:34:3a:b4:d9:3b:2a:08:
a3:f5:bf:8a:b8:7a:b1:e9:1c:48:8e:ec:91:84:40:96:33:5a:
47:21:78:64:cd:2e:64:ab:d9:d2:76:d2:3f:1f:13:4c:cf:7b:
8d:30:a4:6e:95:6a:6a:17:34:fe:0c:11:43:f8:82:f1:5f:f5:
3d:53:f5:f7:0e:74:e5:37:94:cf:f0:68:74:77:1e:8b:c7:d7:
5a:ce:46:77:d6:49:59:78:f9:47:d5:6f:f7:a3:93:86:28:df:
01:17:cb:8e:b3:c6:fd:5a:a6:18:af:8c:4d:b4:32:1b:b2:98:
db:13:91:8f:33:7c:ed:bc:89:e1:4e:ba:6e:69:a4:fb:d8:cb:
88:05:8b:68:16:9d:2a:0d:0c:d2:ce:b8:41:b6:3e:3a:dc:eb:
70:6c:dc:08:f7:33:d3:c2:04:76:16:20:d3:46:fc:da:fd:e2:
be:6a:ef:a2:13:3b:d0:4a:86:e2:e5:ab:d5:71:a8:95:c8:36:
ba:e9:56:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR5qPeshPpx8vYPciSZPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTkyYWFjNDg5NTIyZDVkYjE4ZmQ2MzkxZTAzNWE5Nzc4
ZWEzYjEwHhcNMjUwMjE3MDUwMDM3WhcNMjUwMjE4MDUwMDM3WjAzMTEwLwYDVQQD
EygyODViYTg1MGVjOTQ0YWJlZWYwZGY4ZTk4ZDFlODY1YTFmYzk1ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8lxptnBZwbhYlMPvITXrmAnRN42
gi8NktweL1xudOqhb3gdEATlU+0SI8gQnpNzEEY7Y583oCQfh8DwcSwONK7fBE6Q
D9EhoPATBLAPJL2TdURf33GUYOlfenqcG4XGrTouU6OcQ1Zf/Tu+o/pNB2WOYyCw
HtEPiEnHbjXotEFHyecDkNqYJ3dvcN35RmXfzOptIk8Ug98dQLPYtiKiGu9bj722
iIrGot4+A9wI0ZMKarEUXpQboF1SK7pRnCdln8SOChHHDCQSzzkXg3FmDweP7s1t
zIme8dABitIiLeL6TnO3ETIX3trMZ9z4f11xSplC16L+J/3FubPhrSbsZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChbqFDslEq+7w346Y0ehlofyV4GMB8GA1UdIwQY
MBaAFNNZKqxIlSLV2xj9Y5HgNal3jqOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUt
ZTMzYWUxMDZiNTRkLzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUtZTMzYWUxMDZiNTRk
LzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqCKjO0o
gPUpgmI96grKR5VitoZZ5/c6CBZr+DhCGAZl06zl0SYHJLHfpuLZVP346IhuG8ll
ZsielbLWNnWYEak0OrTZOyoIo/W/irh6sekcSI7skYRAljNaRyF4ZM0uZKvZ0nbS
Px8TTM97jTCkbpVqahc0/gwRQ/iC8V/1PVP19w505TeUz/BodHcei8fXWs5Gd9ZJ
WXj5R9Vv96OThijfARfLjrPG/VqmGK+MTbQyG7KY2xORjzN87byJ4U66bmmk+9jL
iAWLaBadKg0M0s64QbY+OtzrcGzcCPcz08IEdhYg00b82v3ivmrvohM70EqG4uWr
1XGolcg2uulW+Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:45 2025 by rpki-client