Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: z9sylxCpMeXQnXSxIJYhwIRm/3q4xob5iBwo5/m2ljk=
Subject key identifier: 64:24:E1:68:25:27:8E:1F:AD:CE:D4:91:84:C1:50:F8:32:32:C6:EE
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 0194C42C8DA62411F3227FDE5AB1AB349757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 01C9
Signing time: Sun 02 Feb 2025 01:00:41 +0000
Manifest this update: Sun 02 Feb 2025 01:00:41 +0000
Manifest next update: Mon 03 Feb 2025 01:00:41 +0000
Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: OydLsm+QEyUpino6CZ8cAyUKj4GOHGoB/JRE/uc70XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:8d:a6:24:11:f3:22:7f:de:5a:b1:ab:34:97:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: Feb 2 01:00:41 2025 GMT
Not After : Feb 3 01:00:41 2025 GMT
Subject: CN=6424e16825278e1fadced49184c150f83232c6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:00:dd:21:1c:c5:86:4b:dc:9e:59:2f:22:
9b:45:be:6d:ad:90:fa:6c:51:59:fe:84:c8:41:90:
a1:22:f2:8f:79:d0:24:1a:0a:d2:3a:03:a0:f6:53:
56:bd:c6:44:06:48:5a:40:83:c7:24:9f:c8:62:c3:
22:8c:a7:b4:e0:6d:fb:f5:bb:d6:bd:14:bf:50:60:
9b:cd:02:00:bc:93:f3:df:ac:cb:4c:ad:50:ac:ad:
02:95:f2:fc:76:13:a9:7a:4c:cd:5e:49:6e:79:fe:
a3:07:88:81:c6:af:57:97:e4:4b:e1:e0:a4:c8:30:
7c:80:55:81:bb:c2:82:ef:fc:95:73:a4:cf:d2:cd:
82:d6:69:1d:fe:98:d0:91:fe:5c:10:ac:7e:29:b1:
52:51:d4:3f:b1:38:29:a2:aa:1f:be:da:9c:2f:08:
51:66:ed:2b:0e:74:56:81:2d:a9:d3:ed:de:8e:11:
4a:41:a3:87:fc:06:fb:c0:ef:7a:3e:27:16:1f:f2:
5e:f3:97:d1:81:ec:b9:9f:5e:4c:4f:6b:a6:6e:77:
00:09:72:57:ed:43:3e:ef:5f:17:42:98:10:ac:25:
9f:2a:59:8d:ec:b8:51:79:e9:af:cf:cc:32:77:e9:
d1:c5:07:a2:1f:4a:7c:40:eb:f9:c3:84:36:a3:1f:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:24:E1:68:25:27:8E:1F:AD:CE:D4:91:84:C1:50:F8:32:32:C6:EE
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a4:2a:dd:69:d5:e3:1f:5c:57:93:44:32:96:f8:39:c3:72:
7d:c1:4c:b3:67:d6:fe:f8:98:18:26:77:7b:22:c5:11:04:ae:
0a:2f:24:56:9b:2a:7b:d1:61:22:d2:9f:0a:9a:dc:86:55:e0:
b5:f8:af:71:42:ab:6d:7c:6e:af:c8:c7:aa:df:c4:d7:83:2e:
95:18:a9:f6:4e:50:7f:94:88:a3:94:b9:de:c3:e0:66:da:ad:
ea:fc:5d:ad:6f:bf:24:cc:05:8c:5a:08:0d:0b:27:39:6f:2f:
c8:fa:92:32:12:84:bd:6b:53:f6:32:72:f3:67:d1:5f:5c:94:
5c:80:0f:52:ce:3c:d1:9f:f8:2e:fa:92:09:44:b2:09:b0:4d:
81:3e:b0:95:58:95:f5:de:f8:89:20:97:6d:0b:fb:b0:72:81:
a4:97:a3:12:c4:b2:bf:99:b2:42:43:9e:b2:7c:3f:2e:4c:9c:
e8:0e:8a:50:c4:3e:65:a1:1e:4e:88:60:2f:64:08:c8:2a:8d:
ed:26:e5:f5:51:3c:c2:ad:20:47:84:44:17:ae:50:5b:99:32:
cf:40:75:64:63:d3:b7:eb:cd:6e:a4:bc:b7:ea:b3:da:ba:97:
b2:2c:d8:47:6c:4a:e5:c4:83:af:29:43:26:8d:7d:f7:2b:13:
d6:5d:d3:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELI2mJBHzIn/eWrGrNJdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNDE0ZWEyMWE5MTE2ZDJjZGY4ZjVjMDJkMDg2NzNhZmE1
NzY4OTMwHhcNMjUwMjAyMDEwMDQxWhcNMjUwMjAzMDEwMDQxWjAzMTEwLwYDVQQD
Eyg2NDI0ZTE2ODI1Mjc4ZTFmYWRjZWQ0OTE4NGMxNTBmODMyMzJjNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUcA3SEcxYZL3J5ZLyKbRb5trZD6
bFFZ/oTIQZChIvKPedAkGgrSOgOg9lNWvcZEBkhaQIPHJJ/IYsMijKe04G379bvW
vRS/UGCbzQIAvJPz36zLTK1QrK0ClfL8dhOpekzNXkluef6jB4iBxq9Xl+RL4eCk
yDB8gFWBu8KC7/yVc6TP0s2C1mkd/pjQkf5cEKx+KbFSUdQ/sTgpoqofvtqcLwhR
Zu0rDnRWgS2p0+3ejhFKQaOH/Ab7wO96PicWH/Je85fRgey5n15MT2umbncACXJX
7UM+718XQpgQrCWfKlmN7LhReemvz8wyd+nRxQeiH0p8QOv5w4Q2ox/AewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQk4WglJ44frc7UkYTBUPgyMsbuMB8GA1UdIwQY
MBaAFP5BTqIakRbSzfj1wC0IZzr6V2iTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAt
YmNjYTI2ZmM4OTQ1LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAtYmNjYTI2ZmM4OTQ1
LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaQq3WnV
4x9cV5NEMpb4OcNyfcFMs2fW/viYGCZ3eyLFEQSuCi8kVpsqe9FhItKfCprchlXg
tfivcUKrbXxur8jHqt/E14MulRip9k5Qf5SIo5S53sPgZtqt6vxdrW+/JMwFjFoI
DQsnOW8vyPqSMhKEvWtT9jJy82fRX1yUXIAPUs480Z/4LvqSCUSyCbBNgT6wlViV
9d74iSCXbQv7sHKBpJejEsSyv5myQkOesnw/Lkyc6A6KUMQ+ZaEeTohgL2QIyCqN
7Sbl9VE8wq0gR4REF65QW5kyz0B1ZGPTt+vNbqS8t+qz2rqXsizYR2xK5cSDrylD
Jo199ysT1l3TsA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:41 2025 by rpki-client