Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json)
Hash identifier: XqZzP/d69w+k7RUfSveIcUPB6sTPZLRNJQ24+hZGF2E=
Subject key identifier: A8:67:45:FA:56:C3:9D:21:9A:0E:22:12:AD:08:1E:D6:79:06:C3:6C
Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Certificate serial: 019510FDE8E761CC57F4AF72FDFE6479F231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 23:00:30 +0000
Manifest this update: Sun 16 Feb 2025 23:00:30 +0000
Manifest next update: Mon 17 Feb 2025 23:00:30 +0000
Files and hashes: 1: 0bjBu50yRFSQQCpaSDnz4Da59n0.roa (hash: EpIJkfUrUz0ncMqveTDKjCXPCU3oKNIvzwGQlVcXpbY=)
2: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: TpoQlS9EUiNNGPspufvACb0lQTwMXW/13RfplvDcNI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:e8:e7:61:cc:57:f4:af:72:fd:fe:64:79:f2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Validity
Not Before: Feb 16 23:00:30 2025 GMT
Not After : Feb 17 23:00:30 2025 GMT
Subject: CN=a86745fa56c39d219a0e2212ad081ed67906c36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:50:db:cc:ac:2c:58:bf:b6:48:63:08:d8:b1:
d4:db:55:d6:a5:79:af:3b:c1:f5:b2:b0:f5:af:3d:
ad:6e:ef:e4:7f:63:c4:bc:ea:cb:d9:e0:6f:2d:fa:
8f:75:19:30:59:85:ee:bb:55:af:0d:42:8a:86:b0:
c4:61:50:12:87:a7:ea:ee:07:8f:6b:ef:08:81:56:
13:70:f2:0c:34:64:1a:9d:25:e2:d0:19:03:49:73:
39:0e:0f:84:bd:97:a5:57:a3:3e:d4:37:20:36:0b:
6d:d5:3b:f3:5e:89:1e:aa:b6:37:e7:7f:81:fe:c8:
9c:9f:cc:f3:cb:02:6c:3c:b9:43:bf:4a:6a:c9:68:
49:99:8f:8c:2d:75:06:57:2b:9c:f2:02:2d:e9:d0:
a6:6d:1e:86:63:e1:63:56:49:59:f8:a2:a4:86:cc:
35:06:69:5f:f1:1a:d1:d8:0b:bc:f8:d7:e5:0c:0a:
96:dd:e5:f1:5c:fa:91:64:36:26:fd:d5:bc:a3:76:
5e:7c:18:60:39:cd:b6:b3:7e:e7:70:8a:dd:83:04:
94:84:f8:ef:60:df:80:d3:36:ac:de:ca:2f:b1:e6:
8f:2c:13:2b:e9:ec:96:9b:b9:31:d6:27:7c:14:a3:
6c:18:fe:c5:b6:1e:51:67:41:d3:5b:71:f9:ab:b8:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:67:45:FA:56:C3:9D:21:9A:0E:22:12:AD:08:1E:D6:79:06:C3:6C
X509v3 Authority Key Identifier:
keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1f:8b:d3:44:87:f3:0b:9d:14:16:84:a8:14:22:3d:59:55:
c1:a6:06:59:ee:d0:1f:54:0e:30:b9:17:39:47:35:ad:95:48:
f7:ca:99:a4:9e:ad:a4:9c:7d:01:17:72:20:1e:2b:bf:f9:ec:
5f:42:5d:00:8c:7f:ea:d2:08:46:6c:0f:0d:4d:a4:ca:eb:fe:
ee:f6:34:72:87:69:89:a1:6c:e7:0f:df:c0:90:18:2e:55:36:
72:e6:41:4e:ba:28:af:08:a7:4f:25:7d:bd:cf:b7:35:5a:f4:
98:81:6d:b4:dc:5f:fd:f0:ef:17:5c:2f:be:26:22:09:80:57:
a3:7d:bf:43:e5:4c:e8:62:4a:82:a2:73:06:4c:d4:cf:1e:7d:
c8:6f:f2:cd:20:92:11:2d:7f:a8:50:aa:47:db:5f:4c:b3:6f:
05:4e:36:ab:c9:e2:2d:49:21:83:c7:46:c6:56:de:ff:3e:6c:
ec:79:a9:e0:18:d9:5a:08:80:3e:0c:5e:7b:0f:06:54:0e:72:
01:ce:48:a4:f8:e4:3e:ba:7e:80:3d:20:bc:2a:4f:b5:5c:9d:
0e:cc:c3:8d:dc:74:1e:ad:b6:8d:d5:ce:c7:bb:eb:11:f6:01:
d4:8c:e0:b1:bd:6f:cc:ba:9d:0b:14:8c:95:db:22:ee:4a:85:
92:16:8d:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/ejnYcxX9K9y/f5kefIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTJlMjBmNTEwYjIyYjgyMTdjZGYwZDIxMTQ5NmIxYjlj
MWVkYjgwHhcNMjUwMjE2MjMwMDMwWhcNMjUwMjE3MjMwMDMwWjAzMTEwLwYDVQQD
EyhhODY3NDVmYTU2YzM5ZDIxOWEwZTIyMTJhZDA4MWVkNjc5MDZjMzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lDbzKwsWL+2SGMI2LHU21XWpXmv
O8H1srD1rz2tbu/kf2PEvOrL2eBvLfqPdRkwWYXuu1WvDUKKhrDEYVASh6fq7geP
a+8IgVYTcPIMNGQanSXi0BkDSXM5Dg+EvZelV6M+1DcgNgtt1TvzXokeqrY353+B
/sicn8zzywJsPLlDv0pqyWhJmY+MLXUGVyuc8gIt6dCmbR6GY+FjVklZ+KKkhsw1
Bmlf8RrR2Au8+NflDAqW3eXxXPqRZDYm/dW8o3ZefBhgOc22s37ncIrdgwSUhPjv
YN+A0zas3sovseaPLBMr6eyWm7kx1id8FKNsGP7Fth5RZ0HTW3H5q7jLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhnRfpWw50hmg4iEq0IHtZ5BsNsMB8GA1UdIwQY
MBaAFHcS4g9RCyK4IXzfDSEUlrG5we24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEt
NDNjZTk0OTY2M2Q5LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEtNDNjZTk0OTY2M2Q5
LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYR+L00SH
8wudFBaEqBQiPVlVwaYGWe7QH1QOMLkXOUc1rZVI98qZpJ6tpJx9ARdyIB4rv/ns
X0JdAIx/6tIIRmwPDU2kyuv+7vY0codpiaFs5w/fwJAYLlU2cuZBTroorwinTyV9
vc+3NVr0mIFttNxf/fDvF1wvviYiCYBXo32/Q+VM6GJKgqJzBkzUzx59yG/yzSCS
ES1/qFCqR9tfTLNvBU42q8niLUkhg8dGxlbe/z5s7Hmp4BjZWgiAPgxeew8GVA5y
Ac5IpPjkPrp+gD0gvCpPtVydDszDjdx0Hq22jdXOx7vrEfYB1Izgsb1vzLqdCxSM
ldsi7kqFkhaNew==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:54 2025 by rpki-client