Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: sUkc76NzsMM2ke9F98D1g0CAeBbbkK5OA/Y1Y43kEBU=
Subject key identifier: B5:DD:DE:7A:26:A6:D5:8E:45:44:75:6A:6B:52:4F:D5:5F:6D:CA:FF
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 01951134D0BAB0004EBD2BF38332301E2D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 1004
Signing time: Mon 17 Feb 2025 00:00:28 +0000
Manifest this update: Mon 17 Feb 2025 00:00:28 +0000
Manifest next update: Tue 18 Feb 2025 00:00:28 +0000
Files and hashes: 1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: wnUJWyhlFupRlS6iWKIahjD7r96vYptVC226X8YfYHQ=)
2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:d0:ba:b0:00:4e:bd:2b:f3:83:32:30:1e:2d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Feb 17 00:00:28 2025 GMT
Not After : Feb 18 00:00:28 2025 GMT
Subject: CN=b5ddde7a26a6d58e4544756a6b524fd55f6dcaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:bf:c5:e6:12:6a:97:97:0d:9b:92:cf:2f:
b4:50:88:16:1a:93:a6:c3:f8:73:6f:d6:dc:8f:d7:
85:29:d7:3b:ee:16:26:52:99:72:2d:d1:3e:e0:b1:
9e:1d:7b:84:ba:8f:0c:b5:88:83:fe:06:e8:55:93:
64:d1:8a:23:c1:8f:dc:6a:c1:08:e0:a5:82:c6:0b:
b9:99:32:c8:3a:ef:e9:33:20:7f:82:c1:8c:f3:82:
14:c6:9d:07:96:73:ff:06:f5:7f:a8:54:99:aa:85:
23:dd:61:b8:d3:0b:3e:b8:1a:fa:1b:c7:a5:30:40:
87:bf:5a:83:a3:91:e7:aa:85:c6:a5:cb:23:80:ad:
86:2f:a6:93:69:2d:69:c8:c1:0a:f7:97:6d:0d:fd:
53:8d:a6:f2:5d:4e:1e:c9:9a:36:ce:d1:09:84:e9:
4b:e9:e1:d3:d6:eb:f1:1f:0b:e4:e5:e6:56:2c:88:
0b:c3:20:cb:19:33:38:3b:9d:fd:44:00:15:8c:a9:
ba:2b:f6:22:e2:36:e6:02:09:ca:7a:7b:fc:82:9a:
22:2a:9b:2a:2d:da:c0:bb:12:f5:c9:b8:54:2a:c7:
c3:69:ab:55:c8:06:d7:01:9b:be:44:ac:85:78:a5:
e7:6c:44:8a:45:4d:2d:40:5b:0c:0a:de:47:78:c4:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DD:DE:7A:26:A6:D5:8E:45:44:75:6A:6B:52:4F:D5:5F:6D:CA:FF
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bc:5f:df:e5:6c:0b:4a:2e:e6:60:02:29:a0:3f:66:d6:bb:
e3:16:4a:ea:79:0a:71:9c:8a:55:79:1c:c1:24:07:a2:24:c5:
a9:43:ee:8f:a2:b9:df:61:6b:4d:9e:0b:c2:f5:1b:aa:f1:af:
76:12:f1:c8:5f:7e:af:4a:d9:4c:79:a9:41:87:6c:d1:73:80:
28:59:68:d0:51:9e:71:6f:f0:7e:f5:c3:11:aa:f0:ea:58:99:
f7:58:0a:71:61:4d:7e:db:19:4d:1e:3a:b1:2b:55:62:8c:c9:
67:fe:ba:34:a7:62:24:23:c6:67:9e:d1:e5:93:1c:ce:64:6b:
b9:3b:46:87:64:0a:fb:ea:7d:c6:0e:cf:22:9a:5f:c3:92:96:
c1:a7:5b:0a:d4:9f:58:af:f5:f9:3b:ac:ea:2c:96:24:e0:80:
a0:cf:c0:10:cf:f2:86:9b:33:5f:c4:9a:f7:da:b5:78:f1:d1:
dd:27:da:fc:89:29:c1:e8:10:06:ae:4d:72:f4:fe:14:c0:ab:
69:0a:3d:15:f4:19:80:4a:e3:d5:67:70:f9:6c:53:b8:23:65:
13:19:68:50:37:6a:71:43:c4:81:7f:50:99:f2:ae:a2:3f:1a:
18:cf:25:f3:65:48:4e:6b:29:17:05:67:94:1b:11:bc:6b:d2:
cb:39:b6:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNNC6sABOvSvzgzIwHi1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGU3NTljMGVhNjdkOGZmNzIyYWFjODg3YzdlY2NlY2Rl
ZDNlYzcwHhcNMjUwMjE3MDAwMDI4WhcNMjUwMjE4MDAwMDI4WjAzMTEwLwYDVQQD
EyhiNWRkZGU3YTI2YTZkNThlNDU0NDc1NmE2YjUyNGZkNTVmNmRjYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme6/xeYSapeXDZuSzy+0UIgWGpOm
w/hzb9bcj9eFKdc77hYmUplyLdE+4LGeHXuEuo8MtYiD/gboVZNk0YojwY/casEI
4KWCxgu5mTLIOu/pMyB/gsGM84IUxp0HlnP/BvV/qFSZqoUj3WG40ws+uBr6G8el
MECHv1qDo5HnqoXGpcsjgK2GL6aTaS1pyMEK95dtDf1TjabyXU4eyZo2ztEJhOlL
6eHT1uvxHwvk5eZWLIgLwyDLGTM4O539RAAVjKm6K/Yi4jbmAgnKenv8gpoiKpsq
LdrAuxL1ybhUKsfDaatVyAbXAZu+RKyFeKXnbESKRU0tQFsMCt5HeMQZ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXd3nomptWORUR1amtST9Vfbcr/MB8GA1UdIwQY
MBaAFCsOdZwOpn2P9yKqyIfH7M7N7T7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgt
NTVlMWZmN2YzMmY5LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgtNTVlMWZmN2YzMmY5
LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrxf3+Vs
C0ou5mACKaA/Zta74xZK6nkKcZyKVXkcwSQHoiTFqUPuj6K532FrTZ4LwvUbqvGv
dhLxyF9+r0rZTHmpQYds0XOAKFlo0FGecW/wfvXDEarw6liZ91gKcWFNftsZTR46
sStVYozJZ/66NKdiJCPGZ57R5ZMczmRruTtGh2QK++p9xg7PIppfw5KWwadbCtSf
WK/1+Tus6iyWJOCAoM/AEM/yhpszX8Sa99q1ePHR3Sfa/IkpwegQBq5NcvT+FMCr
aQo9FfQZgErj1Wdw+WxTuCNlExloUDdqcUPEgX9QmfKuoj8aGM8l82VITmspFwVn
lBsRvGvSyzm2+A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:36 2025 by rpki-client