Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: e8FzEHyH7Q3pKA8ykgj6JXGmTr/yqLKLyVhIknPKX7Q=
Subject key identifier: C6:8A:AE:B9:FC:5F:C8:4A:91:C1:73:D0:C9:EB:38:14:0C:AA:72:78
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 0195116B9D954029E379634D9063F637F4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 01:00:20 +0000
Manifest this update: Mon 17 Feb 2025 01:00:20 +0000
Manifest next update: Tue 18 Feb 2025 01:00:20 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: WeKplniYRGfNyOrGGJBzlBtCwy0nzgGdxFeUbFKlGVY=)
2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:9d:95:40:29:e3:79:63:4d:90:63:f6:37:f4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Feb 17 01:00:20 2025 GMT
Not After : Feb 18 01:00:20 2025 GMT
Subject: CN=c68aaeb9fc5fc84a91c173d0c9eb38140caa7278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:ed:93:48:16:7e:65:16:09:d4:bc:13:b6:
f9:2f:49:b2:56:3e:41:67:ad:22:a9:72:4c:d9:29:
cd:8c:57:f9:a8:b3:9c:58:ff:01:f1:be:53:8d:25:
59:e8:10:8d:b4:92:2d:62:24:11:18:2d:9a:11:4c:
f7:98:70:e7:2f:5b:a2:30:cd:4b:83:69:05:58:ec:
c5:7e:f4:06:e2:a4:ba:42:a0:d2:83:dd:86:d9:74:
47:83:01:cc:c4:6e:e9:af:1a:01:50:12:98:8a:ac:
df:6f:fa:4e:0e:68:6a:e8:f5:e0:05:e5:f7:48:6c:
66:84:8d:e3:32:6f:2a:4e:04:68:b5:1b:50:94:c0:
79:d4:be:e5:44:6f:e6:a6:69:6b:13:46:53:d7:c9:
0f:11:e5:57:52:5d:d0:85:84:a3:b1:d7:69:01:5d:
3d:8d:02:0b:44:eb:a3:8d:bf:f7:cb:1c:3b:2b:f5:
b3:84:43:37:88:11:8c:19:f4:3c:b5:70:da:0f:91:
93:47:c6:d4:d2:2d:11:ee:4e:e3:68:57:e5:73:f6:
62:d2:0d:5d:5e:7a:db:df:31:da:2f:ee:24:74:6c:
fc:ae:91:db:dc:81:57:51:90:50:34:73:8a:50:cb:
19:dd:51:27:f4:40:f4:62:13:d5:93:e2:45:7c:c8:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8A:AE:B9:FC:5F:C8:4A:91:C1:73:D0:C9:EB:38:14:0C:AA:72:78
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6b:c9:97:4e:2c:19:57:a8:03:ef:4c:9a:44:3a:1b:e6:ee:
56:51:1c:ee:19:29:a3:1a:9f:47:b2:4d:c7:2a:33:16:ab:1b:
fe:4d:26:a3:b7:3b:71:80:32:fd:b7:1e:32:b2:7f:7d:95:bb:
5d:38:db:e0:73:6f:a0:60:02:f0:f7:b2:5d:64:bd:57:da:8e:
0c:3c:fd:2f:1e:09:58:b6:c4:4c:bd:25:4e:8c:96:b6:6d:54:
67:b8:aa:95:76:0f:3a:c5:f0:44:2a:41:3c:04:cc:e0:7f:79:
a6:b3:9c:23:d4:01:9e:26:94:4a:18:64:a1:1b:ca:39:d3:61:
aa:e6:5c:52:56:7b:4f:ef:79:64:48:1d:f0:bb:58:74:06:a6:
2a:4a:93:66:3f:89:c2:3a:25:bb:11:d5:f9:65:5e:a7:1f:26:
98:b3:c2:91:5c:4d:7c:79:01:f9:a7:c7:d2:a5:30:6d:c5:82:
fd:7f:e8:ca:59:b8:2e:75:37:54:46:aa:99:e1:f8:af:ab:b8:
bb:eb:3f:8b:2c:43:9c:f1:f6:08:63:c5:df:92:35:d5:40:c1:
67:97:a7:55:ca:37:a6:f1:d7:09:7e:e2:b8:48:4c:b2:bb:c8:
4d:69:35:59:63:a5:6d:6a:5e:d9:19:71:fe:6f:7b:44:16:87:
f1:b0:43:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa52VQCnjeWNNkGP2N/SvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDQzNTc4NGRhOGMyMThlMGZmMTA3Y2RjZmUyNGNhNDU2
OWM5NDkwHhcNMjUwMjE3MDEwMDIwWhcNMjUwMjE4MDEwMDIwWjAzMTEwLwYDVQQD
EyhjNjhhYWViOWZjNWZjODRhOTFjMTczZDBjOWViMzgxNDBjYWE3Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop7tk0gWfmUWCdS8E7b5L0myVj5B
Z60iqXJM2SnNjFf5qLOcWP8B8b5TjSVZ6BCNtJItYiQRGC2aEUz3mHDnL1uiMM1L
g2kFWOzFfvQG4qS6QqDSg92G2XRHgwHMxG7prxoBUBKYiqzfb/pODmhq6PXgBeX3
SGxmhI3jMm8qTgRotRtQlMB51L7lRG/mpmlrE0ZT18kPEeVXUl3QhYSjsddpAV09
jQILROujjb/3yxw7K/WzhEM3iBGMGfQ8tXDaD5GTR8bU0i0R7k7jaFflc/Zi0g1d
Xnrb3zHaL+4kdGz8rpHb3IFXUZBQNHOKUMsZ3VEn9ED0YhPVk+JFfMjCcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaKrrn8X8hKkcFz0MnrOBQMqnJ4MB8GA1UdIwQY
MBaAFODUNXhNqMIY4P8QfNz+JMpFaclJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzct
ZWQ0MmQzYTYyNWE0LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzctZWQ0MmQzYTYyNWE0
LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWvJl04s
GVeoA+9MmkQ6G+buVlEc7hkpoxqfR7JNxyozFqsb/k0mo7c7cYAy/bceMrJ/fZW7
XTjb4HNvoGAC8PeyXWS9V9qODDz9Lx4JWLbETL0lToyWtm1UZ7iqlXYPOsXwRCpB
PATM4H95prOcI9QBniaUShhkoRvKOdNhquZcUlZ7T+95ZEgd8LtYdAamKkqTZj+J
wjoluxHV+WVepx8mmLPCkVxNfHkB+afH0qUwbcWC/X/oylm4LnU3VEaqmeH4r6u4
u+s/iyxDnPH2CGPF35I11UDBZ5enVco3pvHXCX7iuEhMsrvITWk1WWOlbWpe2Rlx
/m97RBaH8bBDxQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:06 2025 by rpki-client