Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: bYPM9GhYrRcsh+xrni4gAgrVzMpCm4oYLoPLzcsRxuA=
Subject key identifier: E8:D0:B5:0F:04:FA:52:96:39:9E:A2:32:5E:2C:8C:EF:0D:63:BF:88
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 0195108FFF290892E814029343899CF790EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 21:00:27 +0000
Manifest this update: Sun 16 Feb 2025 21:00:27 +0000
Manifest next update: Mon 17 Feb 2025 21:00:27 +0000
Files and hashes: 1: MPxrAGmlXi-R_-aAmj075zLDNVQ.roa (hash: u+cdaGdIb9sz6WUdHND28+hGiYkwyguJ2P/NJZ6f3PE=)
2: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: webUVHoQOYlD9TaAcI05gQ/9VyKGhBBMDO5wk1ME/C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:ff:29:08:92:e8:14:02:93:43:89:9c:f7:90:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: Feb 16 21:00:27 2025 GMT
Not After : Feb 17 21:00:27 2025 GMT
Subject: CN=e8d0b50f04fa5296399ea2325e2c8cef0d63bf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:35:ef:28:3b:14:c4:bb:ef:19:62:e4:37:
ae:5e:d8:de:e1:11:84:67:31:5c:8d:35:4c:8d:2b:
1b:b7:c7:e9:20:b2:82:a9:09:87:be:99:f9:6e:7e:
5a:bb:e0:0d:f5:4d:38:97:15:a4:a0:1e:9e:a1:9d:
95:02:b5:4f:cd:38:34:a8:e7:43:cc:ce:9a:2d:82:
c7:46:dc:49:85:07:22:30:28:2a:87:36:e0:12:15:
39:b8:82:ce:4a:63:4a:5b:7e:d7:f0:a1:ec:c3:85:
96:ce:c6:5a:93:63:45:dd:f9:90:06:34:d5:a1:28:
64:ca:51:e1:7c:2b:04:fe:35:e5:9c:16:20:d2:3b:
84:b8:9a:44:df:ad:97:5c:f5:33:4e:2f:67:67:bb:
dd:9d:a2:52:79:f4:0e:e3:d7:66:3b:6d:ec:71:53:
4b:71:5c:e1:c4:68:99:00:ad:ed:83:2b:af:8f:a7:
e1:c3:fa:5b:04:16:62:a1:b2:fb:cc:cb:77:9b:f9:
e1:f5:ef:2c:2d:74:2d:92:e7:55:bc:39:60:22:9c:
11:76:e6:fb:4d:6b:63:48:e1:f0:fc:69:29:6e:23:
3d:6f:25:c8:4c:a9:9c:e4:fb:6f:5b:66:85:ee:96:
b3:b5:9e:f0:1b:d6:72:7d:64:98:78:17:97:84:a9:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:B5:0F:04:FA:52:96:39:9E:A2:32:5E:2C:8C:EF:0D:63:BF:88
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e7:2d:72:7e:d4:6b:d0:bb:e9:4d:7e:27:5e:a0:03:37:69:
cf:3d:d3:24:c6:4e:38:5a:50:6e:a1:00:81:17:ad:a3:63:4b:
9c:9f:7c:97:0a:87:d9:13:77:ba:57:fc:8b:71:4f:91:ca:be:
5b:1e:a9:48:77:25:34:9d:f6:23:61:d8:8d:8e:19:f0:8f:8d:
ad:90:bd:6d:d2:a2:97:dc:76:f5:55:85:d3:a8:3f:60:4c:2f:
94:ea:78:47:be:63:3c:e6:b1:18:4a:ae:cb:73:da:00:c8:45:
62:a8:b2:df:db:b7:2b:25:6a:c3:35:45:94:d9:19:67:c7:8b:
19:f7:94:73:31:c7:e2:f6:ee:87:83:27:ba:63:36:a6:13:d8:
cb:b6:f4:54:76:bb:d1:22:12:04:ca:af:ed:3b:05:87:4f:c4:
b7:6f:8f:e3:7c:59:34:b8:b5:ab:1a:97:05:1f:44:8b:8d:8a:
07:cd:f7:8e:fd:2d:8a:b2:68:ad:13:56:b2:8b:9d:05:43:91:
75:fd:e5:a5:a1:21:3e:bc:52:32:c8:47:13:1b:c1:36:a4:f7:
05:e1:01:12:17:17:d2:7b:7c:6f:dd:1b:13:c5:bb:3a:a9:59:
07:3c:6f:57:0d:da:d2:c2:25:ab:f8:21:17:7c:a8:7c:6b:30:
eb:7e:4d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQj/8pCJLoFAKTQ4mc95DuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NDRjNmI2ZmJhMzczODExZTAwYmVlNDg0ZTIyNGM2YjZl
MjNmZDIwHhcNMjUwMjE2MjEwMDI3WhcNMjUwMjE3MjEwMDI3WjAzMTEwLwYDVQQD
EyhlOGQwYjUwZjA0ZmE1Mjk2Mzk5ZWEyMzI1ZTJjOGNlZjBkNjNiZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3417yg7FMS77xli5DeuXtje4RGE
ZzFcjTVMjSsbt8fpILKCqQmHvpn5bn5au+AN9U04lxWkoB6eoZ2VArVPzTg0qOdD
zM6aLYLHRtxJhQciMCgqhzbgEhU5uILOSmNKW37X8KHsw4WWzsZak2NF3fmQBjTV
oShkylHhfCsE/jXlnBYg0juEuJpE362XXPUzTi9nZ7vdnaJSefQO49dmO23scVNL
cVzhxGiZAK3tgyuvj6fhw/pbBBZiobL7zMt3m/nh9e8sLXQtkudVvDlgIpwRdub7
TWtjSOHw/GkpbiM9byXITKmc5PtvW2aF7paztZ7wG9ZyfWSYeBeXhKnqAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjQtQ8E+lKWOZ6iMl4sjO8NY7+IMB8GA1UdIwQY
MBaAFHdExrb7o3OBHgC+5ITiJMa24j/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDBUR3R2dWpjNEVlQUw3a2hPSWt4cmJpUDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83NDRkZjMtOGUyOS00NThiLWE0NTkt
OGY4Yzg5MjI2ZTNlLzEvZDBUR3R2dWpjNEVlQUw3a2hPSWt4cmJpUDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83NDRkZjMtOGUyOS00NThiLWE0NTktOGY4Yzg5MjI2ZTNl
LzEvZDBUR3R2dWpjNEVlQUw3a2hPSWt4cmJpUDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOctcn7U
a9C76U1+J16gAzdpzz3TJMZOOFpQbqEAgReto2NLnJ98lwqH2RN3ulf8i3FPkcq+
Wx6pSHclNJ32I2HYjY4Z8I+NrZC9bdKil9x29VWF06g/YEwvlOp4R75jPOaxGEqu
y3PaAMhFYqiy39u3KyVqwzVFlNkZZ8eLGfeUczHH4vbuh4MnumM2phPYy7b0VHa7
0SISBMqv7TsFh0/Et2+P43xZNLi1qxqXBR9Ei42KB833jv0tirJorRNWsoudBUOR
df3lpaEhPrxSMshHExvBNqT3BeEBEhcX0nt8b90bE8W7OqlZBzxvVw3a0sIlq/gh
F3yofGsw635NPA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:51 2025 by rpki-client