Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: 1urkiOuItnEdBZNGchSEWHLQTTsW4FUIxE6JHj2It0Y=
Subject key identifier: E9:0B:2B:22:58:31:04:5C:B7:32:F3:DE:65:21:79:83:5D:7A:74:67
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 019512109B1266AF279486F6973E6883343E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 08A9
Signing time: Mon 17 Feb 2025 04:00:32 +0000
Manifest this update: Mon 17 Feb 2025 04:00:32 +0000
Manifest next update: Tue 18 Feb 2025 04:00:32 +0000
Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=)
2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: es3gHtKc3WDlMag2k2+agEEjmoGpaByZsNhChDUvZg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:9b:12:66:af:27:94:86:f6:97:3e:68:83:34:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Feb 17 04:00:32 2025 GMT
Not After : Feb 18 04:00:32 2025 GMT
Subject: CN=e90b2b225831045cb732f3de652179835d7a7467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:1e:b2:03:08:81:a2:3b:03:80:46:dd:49:
12:26:6f:41:cc:b9:95:1e:48:db:c4:75:29:70:d0:
b3:98:db:ba:7d:64:1b:37:fd:ce:91:3a:67:1a:07:
65:29:21:52:2c:2a:e3:96:05:f1:7b:2f:a1:5e:68:
57:7a:48:ae:42:9f:8e:31:91:e6:0e:35:4e:cf:c7:
85:86:08:0d:62:d4:eb:f0:b1:8a:92:c0:5a:eb:4f:
10:28:0e:3c:37:95:63:14:42:57:3c:68:0e:53:bd:
24:3b:fd:ac:7c:ab:2f:ea:0f:25:22:13:fe:bf:95:
f4:87:41:c4:68:6b:44:f4:06:51:5c:3b:ff:0e:db:
21:73:8d:e3:81:01:de:09:0b:e3:1f:7d:dc:78:06:
c1:82:f6:89:2f:8e:f4:e0:c9:a0:c1:78:d5:0b:43:
f4:9d:63:c0:b1:df:13:b4:cb:74:6c:f2:73:66:f5:
cb:99:d1:71:c0:3a:92:f6:79:0d:8b:b7:90:68:76:
ed:c3:9b:4c:02:be:aa:e5:b5:a1:60:f5:db:cc:a0:
50:80:69:f7:ff:51:a7:26:82:68:c0:e4:87:8d:76:
0d:83:f3:2a:95:92:e9:97:70:b3:1c:e4:aa:e2:b6:
dd:b0:18:a6:9b:93:a2:f2:12:69:7e:ee:6b:3a:c8:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0B:2B:22:58:31:04:5C:B7:32:F3:DE:65:21:79:83:5D:7A:74:67
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:bb:20:a1:86:76:d9:a2:1b:f7:07:e2:03:f4:31:06:0a:c8:
c6:11:a0:8c:75:74:2f:c0:18:7c:a0:30:59:02:66:e8:42:66:
ab:e9:48:ab:a1:3d:8f:54:e2:76:d0:55:01:cd:72:54:a1:a8:
c0:1f:16:ca:a0:ea:8a:6c:17:56:e5:7d:5b:cf:5e:fa:74:23:
9b:2b:56:b9:8b:dd:f8:7b:c6:e8:d4:e4:cf:93:1d:41:4b:58:
f3:8b:01:4b:f4:7e:ae:2f:08:11:7c:1d:3d:d7:f5:b7:44:5e:
2f:8f:af:f0:8f:ec:72:b2:3f:29:ad:fa:18:ce:95:63:3c:49:
fe:0b:7c:3f:5a:45:d2:da:a2:e6:90:8c:56:8f:ec:53:f2:47:
d2:7c:94:5f:db:f7:fa:29:09:f1:9f:3e:cb:7b:70:4e:1e:89:
af:1c:dc:78:0a:bb:ee:bf:ef:c2:b6:25:62:90:4c:3b:a8:90:
ce:18:01:14:cd:a8:14:00:70:b7:8c:76:c8:a4:66:ef:a5:16:
7e:8b:a0:8d:c7:c9:50:8b:c5:74:bc:45:f0:f8:28:e6:9e:18:
52:c5:12:7c:ab:33:77:a6:bd:9b:d9:7e:7e:7e:29:29:42:97:
d6:d6:f6:59:bf:35:c2:e5:82:2a:63:e2:c6:ed:4b:22:09:3b:
ae:51:2a:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEJsSZq8nlIb2lz5ogzQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOGFkMTM1NDEyYmY5MDQxYmU1ZmQwOGU3NGEyNDEyMGRi
M2VlYzcwHhcNMjUwMjE3MDQwMDMyWhcNMjUwMjE4MDQwMDMyWjAzMTEwLwYDVQQD
EyhlOTBiMmIyMjU4MzEwNDVjYjczMmYzZGU2NTIxNzk4MzVkN2E3NDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlMesgMIgaI7A4BG3UkSJm9BzLmV
HkjbxHUpcNCzmNu6fWQbN/3OkTpnGgdlKSFSLCrjlgXxey+hXmhXekiuQp+OMZHm
DjVOz8eFhggNYtTr8LGKksBa608QKA48N5VjFEJXPGgOU70kO/2sfKsv6g8lIhP+
v5X0h0HEaGtE9AZRXDv/Dtshc43jgQHeCQvjH33ceAbBgvaJL4704MmgwXjVC0P0
nWPAsd8TtMt0bPJzZvXLmdFxwDqS9nkNi7eQaHbtw5tMAr6q5bWhYPXbzKBQgGn3
/1GnJoJowOSHjXYNg/MqlZLpl3CzHOSq4rbdsBimm5Oi8hJpfu5rOshjvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkLKyJYMQRctzLz3mUheYNdenRnMB8GA1UdIwQY
MBaAFF+K0TVBK/kEG+X9COdKJBINs+7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAt
Mzc5NzMzYWIzOGNkLzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAtMzc5NzMzYWIzOGNk
LzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLsgoYZ2
2aIb9wfiA/QxBgrIxhGgjHV0L8AYfKAwWQJm6EJmq+lIq6E9j1TidtBVAc1yVKGo
wB8WyqDqimwXVuV9W89e+nQjmytWuYvd+HvG6NTkz5MdQUtY84sBS/R+ri8IEXwd
Pdf1t0ReL4+v8I/scrI/Ka36GM6VYzxJ/gt8P1pF0tqi5pCMVo/sU/JH0nyUX9v3
+ikJ8Z8+y3twTh6JrxzceAq77r/vwrYlYpBMO6iQzhgBFM2oFABwt4x2yKRm76UW
fougjcfJUIvFdLxF8Pgo5p4YUsUSfKszd6a9m9l+fn4pKUKX1tb2Wb81wuWCKmPi
xu1LIgk7rlEqYA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:06 2025 by rpki-client