Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
File: aJQuPste6nkqdvray-wBqFaOl_Q.mft (raw, json)
Hash identifier: gq+3rn6AR9/KeNGoRP5FMLzqRGUbEIwTwTdoqXZV18k=
Subject key identifier: EC:32:7A:92:26:CA:AF:8A:C0:28:84:FA:94:DA:63:C6:D7:38:FC:05
Authority key identifier: 68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
Certificate issuer: /CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Certificate serial: 01951247397FC9F590013DADD9C6A359A5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 05:00:12 +0000
Manifest this update: Mon 17 Feb 2025 05:00:12 +0000
Manifest next update: Tue 18 Feb 2025 05:00:12 +0000
Files and hashes: 1: 2I7Ug_0TKUirYBKdCRFB3X-yPVM.roa (hash: OuAKBuCtiZrdtqQo3Ia+YQ9DdlyXDqDuhn9BW+I9wGc=)
2: aJQuPste6nkqdvray-wBqFaOl_Q.crl (hash: 70G8K0X1/fHcq5ptYGyWAH1Fd1f8FLLn68ubPciQAV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:39:7f:c9:f5:90:01:3d:ad:d9:c6:a3:59:a5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Validity
Not Before: Feb 17 05:00:12 2025 GMT
Not After : Feb 18 05:00:12 2025 GMT
Subject: CN=ec327a9226caaf8ac02884fa94da63c6d738fc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7c:39:ed:30:55:db:72:66:11:a7:5d:54:6a:
4a:3f:75:89:a3:e8:f6:0c:6f:61:5d:3d:d4:fe:16:
f1:7c:39:44:d9:70:39:b6:9e:71:a8:fd:da:bd:71:
e6:31:f0:9b:de:fc:53:3f:c0:dd:38:1a:4d:3d:d4:
f4:c7:d9:de:93:6c:fd:2e:d1:55:84:87:61:0d:7c:
3e:16:34:ed:e1:e9:8d:b3:4d:8b:ad:d2:85:6b:e5:
15:bc:e7:d0:bc:c1:a0:72:7e:40:d6:67:ff:8b:59:
d9:ab:0d:2e:3b:33:79:16:29:3f:bc:fb:d4:42:ca:
9d:d6:b7:fd:c6:67:44:8d:bb:bf:eb:72:24:f6:fc:
95:47:bf:f4:f0:e8:bc:13:37:5b:77:0a:b7:46:88:
8f:cb:53:61:6e:b3:b4:c2:d3:c3:c7:42:7f:85:a6:
2b:2a:9f:0e:57:81:56:e0:d7:1b:72:74:9d:3a:e4:
2e:cf:56:0d:5f:cd:95:78:c8:26:94:a1:00:72:07:
47:ad:a1:fa:a3:f4:e7:33:2c:d6:f7:c1:21:54:5f:
f4:e7:df:4a:d8:af:5e:81:8f:b4:31:7a:61:b9:28:
51:9c:46:35:9f:1e:2b:f0:71:b0:4b:9d:6f:32:c9:
ec:40:de:0f:e4:47:39:45:b2:e4:40:e5:b3:28:80:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:7A:92:26:CA:AF:8A:C0:28:84:FA:94:DA:63:C6:D7:38:FC:05
X509v3 Authority Key Identifier:
keyid:68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:be:2a:a2:73:c0:55:25:98:10:46:6d:b2:98:9b:1e:cc:06:
00:88:84:31:ec:5d:62:1f:76:dd:c0:f2:01:80:94:f5:92:c2:
69:5c:51:dd:68:90:f0:1c:2a:e9:21:a6:13:b2:b6:54:8f:f0:
47:69:d4:29:a3:05:b3:21:5d:73:4b:f6:9e:66:81:eb:20:a5:
74:95:b1:dc:07:0d:2c:a1:48:66:66:20:24:91:04:17:54:7b:
33:e9:ef:aa:48:f2:14:29:d0:84:60:94:6d:27:08:2a:8f:ac:
bf:f8:02:0a:9f:06:56:f9:76:f5:03:34:25:93:b3:0a:94:f4:
ff:d7:04:94:c8:5b:8a:62:ca:ae:dd:ca:5e:82:6a:f7:f2:cf:
d7:d9:e2:3e:c5:fa:8a:db:58:04:41:e4:45:d5:1f:9a:88:f0:
90:b2:a9:a1:4b:cb:cb:1f:f1:fc:1e:68:4a:fc:31:72:06:15:
d3:e2:7f:2a:7b:49:41:1c:ca:eb:14:ad:16:ab:21:5f:db:93:
a1:2c:36:a5:29:08:6f:48:da:c8:68:b6:a8:b4:7d:22:cd:ab:
17:c7:49:0f:36:a1:77:cf:56:1a:24:e0:e5:18:13:e2:40:05:
bd:66:6c:1f:c0:a4:85:4c:76:59:87:d4:7f:2e:54:b9:ab:ba:
85:ee:6f:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSRzl/yfWQAT2t2cajWaW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTQyZTNlY2I1ZWVhNzkyYTc2ZmFkYWNiZWMwMWE4NTY4
ZTk3ZjQwHhcNMjUwMjE3MDUwMDEyWhcNMjUwMjE4MDUwMDEyWjAzMTEwLwYDVQQD
EyhlYzMyN2E5MjI2Y2FhZjhhYzAyODg0ZmE5NGRhNjNjNmQ3MzhmYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Xw57TBV23JmEaddVGpKP3WJo+j2
DG9hXT3U/hbxfDlE2XA5tp5xqP3avXHmMfCb3vxTP8DdOBpNPdT0x9nek2z9LtFV
hIdhDXw+FjTt4emNs02LrdKFa+UVvOfQvMGgcn5A1mf/i1nZqw0uOzN5Fik/vPvU
Qsqd1rf9xmdEjbu/63Ik9vyVR7/08Oi8Ezdbdwq3RoiPy1NhbrO0wtPDx0J/haYr
Kp8OV4FW4NcbcnSdOuQuz1YNX82VeMgmlKEAcgdHraH6o/TnMyzW98EhVF/0599K
2K9egY+0MXphuShRnEY1nx4r8HGwS51vMsnsQN4P5Ec5RbLkQOWzKIB/XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwyepImyq+KwCiE+pTaY8bXOPwFMB8GA1UdIwQY
MBaAFGiULj7LXup5Knb62svsAahWjpf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpRdVBzdGU2bmtxZHZyYXktd0JxRmFPbF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iZWIzYTgtNGI3Mi00OGVjLThlMDQt
MDNjY2UzOTY5ZjljLzEvYUpRdVBzdGU2bmtxZHZyYXktd0JxRmFPbF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iZWIzYTgtNGI3Mi00OGVjLThlMDQtMDNjY2UzOTY5Zjlj
LzEvYUpRdVBzdGU2bmtxZHZyYXktd0JxRmFPbF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYr4qonPA
VSWYEEZtspibHswGAIiEMexdYh923cDyAYCU9ZLCaVxR3WiQ8Bwq6SGmE7K2VI/w
R2nUKaMFsyFdc0v2nmaB6yCldJWx3AcNLKFIZmYgJJEEF1R7M+nvqkjyFCnQhGCU
bScIKo+sv/gCCp8GVvl29QM0JZOzCpT0/9cElMhbimLKrt3KXoJq9/LP19niPsX6
ittYBEHkRdUfmojwkLKpoUvLyx/x/B5oSvwxcgYV0+J/KntJQRzK6xStFqshX9uT
oSw2pSkIb0jayGi2qLR9Is2rF8dJDzahd89WGiTg5RgT4kAFvWZsH8CkhUx2WYfU
fy5Uuau6he5v1g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:21 2025 by rpki-client