Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File: r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier: W63HWRmzwCdU+ip7zBFmFEHf3O+WRnUO7H+n5bdA/Fc=
Subject key identifier: 25:9C:42:0F:9F:9A:24:23:DB:95:D0:6C:65:74:96:89:F9:C9:7F:8B
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 0195116BC39A5AC0D842BAA36D7956D0F8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 01:00:29 +0000
Manifest this update: Mon 17 Feb 2025 01:00:29 +0000
Manifest next update: Tue 18 Feb 2025 01:00:29 +0000
Files and hashes: 1: acvvT5q-PVeUjsCLlPVuoTE00po.roa (hash: MQoBLU//Irn0dEBmlINyAJ8ehIRD+2s0D9hVDHRZB5A=)
2: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: 7QCBVBwjnJSPOHJGUs5CWGj3ajP9L9OxqK2QRjLrZQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c3:9a:5a:c0:d8:42:ba:a3:6d:79:56:d0:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Feb 17 01:00:29 2025 GMT
Not After : Feb 18 01:00:29 2025 GMT
Subject: CN=259c420f9f9a2423db95d06c65749689f9c97f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:03:3e:a6:f6:a6:f4:48:30:57:f1:d0:92:26:
27:10:4c:3e:d2:39:37:26:cc:9d:e3:b4:1a:f4:cd:
d7:be:3b:cd:e0:ca:bd:77:ac:65:ad:7f:76:9e:8d:
3d:61:1c:dd:5d:91:35:13:01:58:f3:39:57:0c:5a:
f7:21:f9:d5:b1:7f:4d:db:e0:62:f0:57:b8:2d:9f:
f3:c9:af:9f:07:82:f6:dd:b8:f8:27:eb:1a:bd:a4:
43:06:08:9f:07:a1:41:a7:39:0e:5f:26:f6:9c:35:
12:a1:c7:e9:42:10:52:29:58:c8:e9:d1:54:6e:b9:
97:f1:7e:9f:88:6d:e5:46:69:bb:c3:37:36:3a:bf:
2b:8f:63:bd:fe:3d:cc:b3:7e:51:f5:48:78:90:fb:
48:f0:0a:86:97:d8:5e:da:99:2c:8b:04:ac:bf:df:
4c:e7:28:fe:3d:78:af:d3:7b:c5:ee:a4:64:f9:37:
11:b1:ab:a8:3d:44:e4:0e:f1:a3:bb:a0:73:13:f5:
59:a4:14:9b:46:a9:36:c4:b7:f2:9f:0c:f6:f3:0c:
71:67:4c:d4:19:17:dc:22:f9:40:52:be:c7:5e:3b:
b4:a5:f4:2f:ed:de:d1:69:19:1f:7c:35:e3:46:95:
f0:46:8d:76:42:4e:ac:3f:3e:cd:25:67:3d:d9:3b:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9C:42:0F:9F:9A:24:23:DB:95:D0:6C:65:74:96:89:F9:C9:7F:8B
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9d:c2:4e:a8:40:34:5f:72:79:7e:82:3d:eb:71:4a:52:7e:
16:81:11:bd:88:5c:36:2f:3f:6a:5b:be:1a:76:b1:40:c9:73:
a0:30:24:99:c3:32:c9:d7:2e:cd:1d:1f:81:0d:e9:48:bc:1d:
b8:86:96:ae:f2:30:ac:08:ef:0e:6f:08:7e:15:ab:4e:cf:e6:
96:c5:fa:63:ff:39:5c:0a:97:83:9f:09:a5:41:bb:ec:0a:ee:
dc:8f:bd:e3:62:23:69:61:e0:ae:ed:43:71:d3:81:86:7b:15:
a4:17:fb:a5:f3:3f:3e:b0:2b:a2:f8:f0:74:7f:ed:35:43:0a:
75:64:a7:c1:6a:16:c3:00:5a:1e:92:aa:8e:81:e6:ff:89:6b:
5b:a4:ac:58:c2:c3:21:ef:d8:82:af:30:d1:41:13:c2:13:44:
a7:9c:de:ff:86:f8:5c:b0:4a:bd:8e:8a:d0:0c:1c:33:d1:24:
12:37:d0:1f:ce:f4:c3:fe:51:eb:a9:c9:d4:f1:53:36:76:54:
53:65:84:f0:ca:d0:05:f8:15:29:08:ea:fe:6b:12:69:5c:7a:
6e:f1:7f:45:bf:c0:7f:4f:60:28:9f:ef:2f:cc:2c:16:fe:fa:
a1:ef:f3:02:5d:74:9e:7c:26:ab:ea:d2:8d:b6:84:02:e1:59:
76:ed:55:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa8OaWsDYQrqjbXlW0PjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWEzOTZmNGRlMzU1ZGE4ZGMwNzlhMWU4ODVlMGMzMzc1
ZWNlMzIwHhcNMjUwMjE3MDEwMDI5WhcNMjUwMjE4MDEwMDI5WjAzMTEwLwYDVQQD
EygyNTljNDIwZjlmOWEyNDIzZGI5NWQwNmM2NTc0OTY4OWY5Yzk3ZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwM+pvam9EgwV/HQkiYnEEw+0jk3
Jsyd47Qa9M3XvjvN4Mq9d6xlrX92no09YRzdXZE1EwFY8zlXDFr3IfnVsX9N2+Bi
8Fe4LZ/zya+fB4L23bj4J+savaRDBgifB6FBpzkOXyb2nDUSocfpQhBSKVjI6dFU
brmX8X6fiG3lRmm7wzc2Or8rj2O9/j3Ms35R9Uh4kPtI8AqGl9he2pksiwSsv99M
5yj+PXiv03vF7qRk+TcRsauoPUTkDvGju6BzE/VZpBSbRqk2xLfynwz28wxxZ0zU
GRfcIvlAUr7HXju0pfQv7d7RaRkffDXjRpXwRo12Qk6sPz7NJWc92Tu1mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWcQg+fmiQj25XQbGV0lon5yX+LMB8GA1UdIwQY
MBaAFK/qOW9N41XajcB5oeiF4MM3Xs4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1vNWIwM2pWZHFOd0htaDZJWGd3emRlempJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZTNmN2ItYzc4Zi00NjYzLWJmMWQt
ZjVkYmRmNzIyZjVkLzEvci1vNWIwM2pWZHFOd0htaDZJWGd3emRlempJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZTNmN2ItYzc4Zi00NjYzLWJmMWQtZjVkYmRmNzIyZjVk
LzEvci1vNWIwM2pWZHFOd0htaDZJWGd3emRlempJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJ3CTqhA
NF9yeX6CPetxSlJ+FoERvYhcNi8/alu+GnaxQMlzoDAkmcMyydcuzR0fgQ3pSLwd
uIaWrvIwrAjvDm8IfhWrTs/mlsX6Y/85XAqXg58JpUG77Aru3I+942IjaWHgru1D
cdOBhnsVpBf7pfM/PrArovjwdH/tNUMKdWSnwWoWwwBaHpKqjoHm/4lrW6SsWMLD
Ie/Ygq8w0UETwhNEp5ze/4b4XLBKvY6K0AwcM9EkEjfQH870w/5R66nJ1PFTNnZU
U2WE8MrQBfgVKQjq/msSaVx6bvF/Rb/Af09gKJ/vL8wsFv76oe/zAl10nnwmq+rS
jbaEAuFZdu1V5A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:24 2025 by rpki-client