Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File: eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier: IPWwHs+mWnGOC6mtYUiMp53u6ImqMkXRhzNhgpQwnck=
Subject key identifier: 91:E7:17:61:FD:E1:E6:3B:92:CE:E0:D0:09:9A:F7:25:AB:16:83:C7
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer: /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial: 0195121077D7AD198B3C441D1B80B3E422AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 04:00:23 +0000
Manifest this update: Mon 17 Feb 2025 04:00:23 +0000
Manifest next update: Tue 18 Feb 2025 04:00:23 +0000
Files and hashes: 1: 5zhQ3B9hLH2ZPYsiKLmy8Rojvg0.roa (hash: KI1hydbtzIhfdYk8QexN8+EHwEo9bPdSN9gLtHnLO94=)
2: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: 5C4I0c89pI+uAMHEDUagunBnKxYTMVZqLaB2wq8n0Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:77:d7:ad:19:8b:3c:44:1d:1b:80:b3:e4:22:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
Validity
Not Before: Feb 17 04:00:23 2025 GMT
Not After : Feb 18 04:00:23 2025 GMT
Subject: CN=91e71761fde1e63b92cee0d0099af725ab1683c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:a3:02:21:23:e4:20:30:f1:a6:1f:ec:fb:
0b:b9:62:c1:97:53:41:d1:ba:18:93:ab:32:9a:e1:
74:a6:78:8e:12:a3:1c:f8:cf:c9:14:49:71:05:b4:
c7:7b:91:2f:1a:c0:e9:1c:a1:a2:05:41:51:cf:11:
eb:a0:a4:9e:ed:1d:83:e1:ba:86:60:ab:07:0f:f3:
08:9a:2a:b4:d9:4d:f0:3a:ec:ac:ca:7a:65:16:67:
db:d4:4a:ac:70:c3:e9:2a:f6:4c:38:e7:c4:42:3e:
72:da:5b:f3:5a:7a:c0:e2:84:6c:f7:7b:ce:2b:51:
c1:bc:b0:f6:53:43:eb:b4:41:cb:28:26:c0:ac:81:
2c:85:3f:59:eb:1a:90:3c:ef:49:a8:34:e0:9e:95:
38:0f:f2:26:2b:df:19:74:86:2d:24:3e:05:fc:5a:
80:ad:8a:5a:e4:ac:d4:72:b4:17:b8:90:38:de:c0:
c5:67:18:8d:cf:08:cc:e2:40:31:93:45:e2:a3:d5:
d5:06:a2:f3:b7:0c:77:6d:d3:90:f4:54:18:ff:d6:
be:3d:69:4a:92:d3:94:e8:fc:b0:e7:6e:79:7f:e0:
cd:5c:9a:46:42:d1:28:25:1b:18:91:1c:74:1f:39:
8c:a4:64:16:64:3d:5a:63:ff:51:ab:a4:f0:85:1a:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E7:17:61:FD:E1:E6:3B:92:CE:E0:D0:09:9A:F7:25:AB:16:83:C7
X509v3 Authority Key Identifier:
keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d5:25:93:99:c1:92:88:57:ad:66:15:1b:58:2f:14:d0:e8:
8c:16:d4:8e:15:88:3a:90:08:27:ef:d9:d6:81:89:ff:2c:d7:
39:e0:35:df:8d:57:06:c7:90:49:60:f4:00:af:b4:62:01:42:
32:36:fb:df:74:ff:20:96:50:54:ce:92:73:2e:18:24:a9:ed:
d9:93:8c:ed:b5:45:5d:f6:01:a5:13:bb:e3:60:55:a8:3c:6e:
7a:eb:c9:3d:24:c4:b0:f0:10:bb:dd:76:c0:c1:f0:7b:f3:8c:
fe:db:1e:0b:6b:d8:5e:6c:2e:d5:27:44:ce:f7:d3:41:fd:31:
52:7b:61:74:cf:6c:a0:75:4e:b2:28:3c:35:1b:f6:45:ec:ee:
f3:8e:f2:86:46:2b:27:89:6b:10:44:e1:6d:cc:68:bf:ed:df:
9d:93:ca:7e:15:94:fc:37:70:22:de:13:6c:24:ca:ee:98:df:
59:d4:0b:88:78:82:3d:4e:11:88:41:4b:39:32:e5:7f:c2:6c:
fe:8c:ac:1a:33:1c:47:32:cc:30:63:e1:6b:0e:50:b5:36:cd:
9c:0c:b9:b4:95:2e:65:a3:39:d8:ed:31:d5:89:c8:35:77:02:
9c:dd:6d:f8:bd:51:e6:5d:6b:b8:8e:14:96:8c:2d:d9:c4:74:
f3:d7:38:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEHfXrRmLPEQdG4Cz5CKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MmM1ZDhjMzJjYWE0NjYyMzE2ODU4YzY1YmViZTEyYzg2
MWFkNjcwHhcNMjUwMjE3MDQwMDIzWhcNMjUwMjE4MDQwMDIzWjAzMTEwLwYDVQQD
Eyg5MWU3MTc2MWZkZTFlNjNiOTJjZWUwZDAwOTlhZjcyNWFiMTY4M2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh+jAiEj5CAw8aYf7PsLuWLBl1NB
0boYk6symuF0pniOEqMc+M/JFElxBbTHe5EvGsDpHKGiBUFRzxHroKSe7R2D4bqG
YKsHD/MImiq02U3wOuysynplFmfb1EqscMPpKvZMOOfEQj5y2lvzWnrA4oRs93vO
K1HBvLD2U0PrtEHLKCbArIEshT9Z6xqQPO9JqDTgnpU4D/ImK98ZdIYtJD4F/FqA
rYpa5KzUcrQXuJA43sDFZxiNzwjM4kAxk0Xio9XVBqLztwx3bdOQ9FQY/9a+PWlK
ktOU6Pyw5255f+DNXJpGQtEoJRsYkRx0HzmMpGQWZD1aY/9Rq6TwhRpP5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHnF2H94eY7ks7g0Ama9yWrFoPHMB8GA1UdIwQY
MBaAFHksXYwyyqRmIxaFjGW+vhLIYa1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wZTRmNmMtNTEyOC00NmY5LWIzZjMt
OGI4MmMyMDI5M2ExLzEvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wZTRmNmMtNTEyOC00NmY5LWIzZjMtOGI4MmMyMDI5M2Ex
LzEvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdUlk5nB
kohXrWYVG1gvFNDojBbUjhWIOpAIJ+/Z1oGJ/yzXOeA1341XBseQSWD0AK+0YgFC
Mjb733T/IJZQVM6Scy4YJKnt2ZOM7bVFXfYBpRO742BVqDxueuvJPSTEsPAQu912
wMHwe/OM/tseC2vYXmwu1SdEzvfTQf0xUnthdM9soHVOsig8NRv2Rezu847yhkYr
J4lrEEThbcxov+3fnZPKfhWU/DdwIt4TbCTK7pjfWdQLiHiCPU4RiEFLOTLlf8Js
/oysGjMcRzLMMGPhaw5QtTbNnAy5tJUuZaM52O0x1YnINXcCnN1t+L1R5l1ruI4U
lowt2cR089c4ZQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:01 2025 by rpki-client