Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
File: 4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json)
Hash identifier: boALRnLxOyvU6cjcraP9luZXyFAqPwuGUW0xcnq7r4k=
Subject key identifier: 9B:23:BC:C1:70:2F:E7:A7:E5:8A:64:0B:38:E9:A0:A7:2B:49:54:14
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Certificate issuer: /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial: 0195121095DE404C6CE5BB99B225A974CCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
Manifest number: 029B
Signing time: Mon 17 Feb 2025 04:00:31 +0000
Manifest this update: Mon 17 Feb 2025 04:00:31 +0000
Manifest next update: Tue 18 Feb 2025 04:00:31 +0000
Files and hashes: 1: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: T6KAStye4EXU2hrDPBbcH9ipOa/C9xIViC0iVSEudvA=)
2: f-egB3l-EDxvsW6G_3sHcV0KHX4.roa (hash: JtBE12d9bxExTSrRbQgShdNCUpSoJH+tA4uA0zrPLYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:95:de:40:4c:6c:e5:bb:99:b2:25:a9:74:cc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Validity
Not Before: Feb 17 04:00:31 2025 GMT
Not After : Feb 18 04:00:31 2025 GMT
Subject: CN=9b23bcc1702fe7a7e58a640b38e9a0a72b495414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:3c:1a:a1:99:f9:36:71:5f:16:65:79:73:
c3:a5:d6:1a:7f:e3:e2:64:53:5b:89:fc:cc:67:b9:
d8:52:a1:38:25:50:ff:f6:23:2a:cb:0d:45:ca:54:
63:5e:bf:89:4b:28:72:ae:9f:87:0d:84:26:e5:e2:
2e:99:7b:bf:9b:d1:fe:08:90:9c:93:fd:08:b4:3a:
0c:45:02:44:0b:d3:c2:92:0c:d9:b5:74:17:42:ee:
03:a3:6e:38:87:3d:f5:63:0f:3c:e9:fa:1c:0b:8a:
a5:6b:f0:0d:35:8c:99:13:1b:1a:de:11:2f:98:85:
94:bd:64:b2:7f:30:39:de:ee:94:0c:1b:7f:ca:c7:
82:ca:a5:76:d4:17:19:c3:6c:ab:1e:fb:84:20:15:
c9:a9:84:4c:ff:25:ef:f6:79:38:c3:2a:78:f0:81:
65:d6:6d:68:9c:f7:56:61:c4:88:aa:29:44:4e:3a:
9a:3d:8b:84:2e:19:45:86:86:3f:4c:7e:79:24:3a:
62:98:fb:97:97:26:ac:ad:cb:55:48:65:3e:3f:77:
ee:09:af:51:31:8a:46:5c:fb:75:30:c4:b1:88:75:
48:31:84:ce:dc:d4:ff:98:59:33:92:ea:62:d5:1e:
77:a7:cf:de:d7:83:d6:a0:64:cf:93:26:96:e2:29:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:23:BC:C1:70:2F:E7:A7:E5:8A:64:0B:38:E9:A0:A7:2B:49:54:14
X509v3 Authority Key Identifier:
keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4f:69:cb:73:43:83:6e:a7:8e:14:b7:47:82:d2:0c:52:42:
e6:a2:f0:4e:0f:bd:84:61:5d:b7:e7:fe:15:fa:b4:ef:96:0b:
a0:5a:80:fc:58:7f:c3:b5:44:0c:4d:ef:4b:b6:88:5a:a7:1f:
58:64:74:25:5e:7d:f1:c8:bb:76:73:5d:b9:40:dd:a1:43:84:
c5:2f:29:24:3d:6f:21:84:e4:0a:d9:86:79:bc:85:86:74:9d:
5a:68:e7:8d:c9:32:f3:0e:32:42:3b:07:37:f5:1a:9e:5f:3d:
2d:a6:b1:6e:b5:52:55:3a:d1:df:57:ed:44:f1:69:1a:32:b7:
3b:54:b9:c7:a2:7d:12:2c:5c:d6:53:95:ae:54:4c:fc:e4:d1:
ad:74:17:47:7f:87:97:3f:33:86:9f:7b:6f:5c:d2:96:25:72:
1f:4f:c6:ed:3b:1e:fe:de:16:39:e4:a9:d3:cf:81:7a:5e:3b:
0e:10:3b:02:1f:7a:24:db:36:54:4a:e7:6e:4d:d1:4e:7a:8e:
5f:e1:f2:56:40:25:dc:2c:0e:0d:93:d6:70:f4:78:c8:c9:ba:
b6:c3:d5:28:42:1a:c3:1b:0e:77:cc:06:f1:fc:3f:07:da:36:
90:fa:f9:5c:43:d2:73:0b:40:9a:12:ff:ec:f1:0f:cf:1d:c1:
01:c3:c6:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEJXeQExs5buZsiWpdMyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODNjNGFkMmZkODcyNGE4YzdkNWVhZjQzMTgxNGNiM2Qx
NTEyN2UwHhcNMjUwMjE3MDQwMDMxWhcNMjUwMjE4MDQwMDMxWjAzMTEwLwYDVQQD
Eyg5YjIzYmNjMTcwMmZlN2E3ZTU4YTY0MGIzOGU5YTBhNzJiNDk1NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ48GqGZ+TZxXxZleXPDpdYaf+Pi
ZFNbifzMZ7nYUqE4JVD/9iMqyw1FylRjXr+JSyhyrp+HDYQm5eIumXu/m9H+CJCc
k/0ItDoMRQJEC9PCkgzZtXQXQu4Do244hz31Yw886focC4qla/ANNYyZExsa3hEv
mIWUvWSyfzA53u6UDBt/yseCyqV21BcZw2yrHvuEIBXJqYRM/yXv9nk4wyp48IFl
1m1onPdWYcSIqilETjqaPYuELhlFhoY/TH55JDpimPuXlyasrctVSGU+P3fuCa9R
MYpGXPt1MMSxiHVIMYTO3NT/mFkzkupi1R53p8/e14PWoGTPkyaW4ika2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsjvMFwL+en5YpkCzjpoKcrSVQUMB8GA1UdIwQY
MBaAFOKDxK0v2HJKjH1er0MYFMs9FRJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYt
NjFjMWVjYWFiNTVmLzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYtNjFjMWVjYWFiNTVm
LzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbU9py3ND
g26njhS3R4LSDFJC5qLwTg+9hGFdt+f+Ffq075YLoFqA/Fh/w7VEDE3vS7aIWqcf
WGR0JV598ci7dnNduUDdoUOExS8pJD1vIYTkCtmGebyFhnSdWmjnjcky8w4yQjsH
N/Uanl89LaaxbrVSVTrR31ftRPFpGjK3O1S5x6J9Eixc1lOVrlRM/OTRrXQXR3+H
lz8zhp97b1zSliVyH0/G7Tse/t4WOeSp08+Bel47DhA7Ah96JNs2VErnbk3RTnqO
X+HyVkAl3CwODZPWcPR4yMm6tsPVKEIawxsOd8wG8fw/B9o2kPr5XEPScwtAmhL/
7PEPzx3BAcPG4A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:41 2025 by rpki-client