Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
File: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json)
Hash identifier: 35t0CIV28D899zgs9IymZMeGLQ1zD7cjm61AfQcGu3I=
Subject key identifier: FD:96:71:03:5B:35:DB:D3:6A:59:8E:30:E2:4F:9C:A5:D5:16:54:E2
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Certificate issuer: /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial: 019511D9C3C2E3CFFFFB668C949A385ECA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
Manifest number: 0315
Signing time: Mon 17 Feb 2025 03:00:38 +0000
Manifest this update: Mon 17 Feb 2025 03:00:38 +0000
Manifest next update: Tue 18 Feb 2025 03:00:38 +0000
Files and hashes: 1: 6Hs21ZDEU36A7XzHFbni9nG1_gs.roa (hash: uHRCtaCqTT6lc9BE9eOvMv5KtMPToXYAuWUFVX2JuWU=)
2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: q+OkuaJd8fhzXtDaSosYEyut2SYMqBJsAoxXj1/cUT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:c3:c2:e3:cf:ff:fb:66:8c:94:9a:38:5e:ca:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
Validity
Not Before: Feb 17 03:00:38 2025 GMT
Not After : Feb 18 03:00:38 2025 GMT
Subject: CN=fd9671035b35dbd36a598e30e24f9ca5d51654e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:e7:03:11:22:5c:2f:81:80:c5:7f:bd:e4:
10:61:83:c5:f9:9d:48:42:ec:e5:15:57:4a:09:f7:
f9:4f:60:62:2f:7f:76:f0:22:bb:c8:65:09:14:3d:
da:41:6e:67:c5:62:10:a3:26:1c:11:ab:f5:08:be:
c2:fd:e9:db:67:37:12:ad:f9:32:ad:ed:69:73:0a:
5d:5c:4e:85:04:79:dc:6a:53:70:31:b1:24:6b:66:
2c:5b:35:03:fc:c2:41:bf:87:ab:c4:a5:58:9b:9f:
d6:1e:8f:07:a7:08:fc:c6:92:a8:8a:af:84:37:cc:
a7:88:40:2d:a3:10:91:1b:b3:53:b2:21:fa:5d:4f:
45:4b:93:77:62:c6:d9:83:ff:c2:19:15:7c:d7:9a:
0f:46:cf:1a:49:2a:0c:07:87:66:cb:80:c9:75:8f:
c6:47:67:7b:73:ea:02:17:07:d0:6e:fb:3a:59:67:
d7:d4:7f:43:fc:f9:0a:b1:f9:69:6e:74:65:44:46:
04:59:b2:16:11:59:2d:f4:2d:48:a7:68:e5:e9:28:
13:a5:ae:70:50:50:4a:95:2d:76:55:37:b2:7a:af:
7b:ce:e7:04:1f:53:53:34:77:ce:1f:8a:e9:4b:03:
3f:5e:ae:2d:19:de:df:1a:9d:15:59:e2:7e:f7:be:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:96:71:03:5B:35:DB:D3:6A:59:8E:30:E2:4F:9C:A5:D5:16:54:E2
X509v3 Authority Key Identifier:
keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:54:da:e9:05:07:6c:a5:16:7f:a3:a7:18:56:08:d5:68:61:
39:c3:15:ea:a0:e0:89:cf:7b:bc:ce:dc:dc:c9:b4:53:b0:d7:
69:98:95:2f:fd:e6:e3:93:9f:cf:b9:d7:cd:6d:52:09:01:b7:
11:80:63:cb:21:f2:f1:69:88:b2:57:33:a6:40:8e:5a:e4:48:
36:ce:aa:4b:82:38:b5:1d:6c:cc:d5:0e:83:dc:04:37:3c:2f:
65:28:9b:d5:51:1c:e1:03:52:de:8c:47:bb:15:9b:73:73:79:
e6:48:45:9b:77:72:6f:6c:de:e1:44:52:e4:68:d0:b5:9f:af:
5c:51:82:be:d9:14:e4:ba:c7:49:6f:29:e0:4e:56:2b:41:ee:
c8:d6:b9:f0:4c:41:e6:7e:69:78:08:db:f7:df:bc:e7:ec:fc:
31:5f:61:3b:1c:8d:ef:67:c2:cf:1f:78:98:3f:01:9a:2a:f3:
c8:f1:a2:50:37:45:f4:1f:4c:1f:db:93:35:46:da:af:b7:9f:
49:e4:2c:b5:ab:7d:6a:70:d0:ad:d4:85:3e:85:8c:27:54:35:
05:bd:8e:4f:00:d0:ce:0b:39:56:61:c7:0d:86:51:f5:9d:2a:
4e:a7:b5:37:d8:84:89:d7:ba:3c:95:1c:c1:06:8a:1a:08:50:
e8:0c:c0:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2cPC48//+2aMlJo4Xsp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTM2MDIwNWI0OGFmNDk1NDU2NjMxNDIzMGU2YjEyOTZk
OWFlYzQwHhcNMjUwMjE3MDMwMDM4WhcNMjUwMjE4MDMwMDM4WjAzMTEwLwYDVQQD
EyhmZDk2NzEwMzViMzVkYmQzNmE1OThlMzBlMjRmOWNhNWQ1MTY1NGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/PnAxEiXC+BgMV/veQQYYPF+Z1I
QuzlFVdKCff5T2BiL3928CK7yGUJFD3aQW5nxWIQoyYcEav1CL7C/enbZzcSrfky
re1pcwpdXE6FBHncalNwMbEka2YsWzUD/MJBv4erxKVYm5/WHo8Hpwj8xpKoiq+E
N8yniEAtoxCRG7NTsiH6XU9FS5N3YsbZg//CGRV815oPRs8aSSoMB4dmy4DJdY/G
R2d7c+oCFwfQbvs6WWfX1H9D/PkKsflpbnRlREYEWbIWEVkt9C1Ip2jl6SgTpa5w
UFBKlS12VTeyeq97zucEH1NTNHfOH4rpSwM/Xq4tGd7fGp0VWeJ+977bcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2WcQNbNdvTalmOMOJPnKXVFlTiMB8GA1UdIwQY
MBaAFH6TYCBbSK9JVFZjFCMOaxKW2a7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWIt
ZDMwZWE5NjhiZmE3LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWItZDMwZWE5NjhiZmE3
LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVTa6QUH
bKUWf6OnGFYI1WhhOcMV6qDgic97vM7c3Mm0U7DXaZiVL/3m45Ofz7nXzW1SCQG3
EYBjyyHy8WmIslczpkCOWuRINs6qS4I4tR1szNUOg9wENzwvZSib1VEc4QNS3oxH
uxWbc3N55khFm3dyb2ze4URS5GjQtZ+vXFGCvtkU5LrHSW8p4E5WK0HuyNa58ExB
5n5peAjb99+85+z8MV9hOxyN72fCzx94mD8BmirzyPGiUDdF9B9MH9uTNUbar7ef
SeQstat9anDQrdSFPoWMJ1Q1Bb2OTwDQzgs5VmHHDYZR9Z0qTqe1N9iEide6PJUc
wQaKGghQ6AzAzg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:10 2025 by rpki-client