Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: mYtlph290FbSyd0bUAfmkhV0+JvihWHphuJ4YG7tCeE=
Subject key identifier: B2:EF:68:8C:51:6A:3F:2A:EB:DA:93:87:F4:1D:90:23:2F:FF:1C:77
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 0194C3BE55324A4BA7CC114470DED347BD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 71
Signing time: Sat 01 Feb 2025 23:00:18 +0000
Manifest this update: Sat 01 Feb 2025 23:00:18 +0000
Manifest next update: Sun 02 Feb 2025 23:00:18 +0000
Files and hashes: 1: TCiOUS2lOe-d-inEeAtaNF22X3k.roa (hash: H5jxU1+mIYAsjzlbjYeTvSFiOWLCAxpo86ZAHMuzEhY=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: UzNL9ebDIL4/viOEfEfS02JE0R0jGjTUbqNDjBuUw4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:55:32:4a:4b:a7:cc:11:44:70:de:d3:47:bd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Feb 1 23:00:18 2025 GMT
Not After : Feb 2 23:00:18 2025 GMT
Subject: CN=b2ef688c516a3f2aebda9387f41d90232fff1c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:c4:b8:c4:54:34:bb:2e:6a:97:41:59:44:
98:88:07:90:0d:1d:0e:8a:75:97:25:28:24:6d:3d:
d6:56:65:fa:6b:5c:7d:10:81:ee:c9:25:28:39:27:
e7:21:88:d6:3c:1a:64:37:1c:df:94:81:c3:a8:ab:
2d:07:5a:3c:09:bd:1c:20:fb:34:b8:bc:23:c1:30:
d0:fb:ce:53:c0:8a:5b:79:dd:40:59:f7:91:93:55:
32:23:c3:98:ae:8e:50:af:22:99:05:b6:b1:e9:28:
89:bb:3b:0d:bd:6a:58:55:15:a3:a3:1c:89:72:51:
dd:9f:f7:fc:90:73:83:4d:eb:f2:2f:44:23:93:8f:
22:6d:df:95:b7:cd:08:e9:62:af:07:39:58:83:f9:
a8:47:0c:c0:5e:44:82:8f:19:12:2b:33:b5:9f:e8:
95:5c:3c:89:fa:54:59:e1:55:4d:2f:1f:6f:cc:41:
7a:a4:93:54:33:50:a3:a0:fe:e6:27:b7:b1:f2:69:
cb:92:7e:af:01:cb:05:fd:63:fe:8b:bd:6c:9e:35:
71:28:00:53:9c:55:8b:0a:87:f0:13:d0:85:d4:c1:
22:ec:ab:f9:30:a9:70:6e:58:8c:ab:24:41:26:4e:
80:eb:f6:e5:d6:37:2f:97:17:c4:f2:78:fa:4b:5a:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EF:68:8C:51:6A:3F:2A:EB:DA:93:87:F4:1D:90:23:2F:FF:1C:77
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:14:eb:cb:f8:84:b0:07:d3:a5:13:be:4e:03:96:e9:00:27:
5e:30:48:43:6d:ee:a6:05:b6:0c:ee:fe:15:bb:b2:57:e4:3e:
92:a0:13:d7:06:47:86:60:bc:38:39:a2:83:68:20:97:09:8d:
c6:19:bb:f8:e7:32:02:99:29:d1:73:bc:f7:50:69:d5:ac:e4:
eb:02:31:40:a9:1a:e9:db:af:08:69:00:a5:74:b7:64:0e:cc:
8f:3f:0f:cd:32:9d:ad:1e:06:52:d5:e0:a2:5f:3c:72:ba:55:
d4:81:b6:a3:34:a3:94:ef:75:6d:45:79:cf:fd:bd:88:a3:11:
69:2f:98:db:04:7e:70:4b:b2:b0:23:33:b6:1c:2d:a6:55:57:
cf:df:48:91:64:6c:81:20:b8:27:b4:91:18:0b:41:a3:0f:46:
a7:f6:38:44:92:1c:8b:68:06:52:ca:8c:2f:95:9b:1d:21:6d:
d9:0c:72:4a:6d:b7:5a:84:6d:3b:11:46:01:9a:fb:32:74:15:
5f:e7:67:c0:77:32:ea:79:4a:93:ff:f4:22:cc:5f:50:8e:e4:
22:43:f7:98:39:a2:fa:2c:10:9e:0f:7c:ef:70:68:33:60:e0:
5a:cf:d1:48:85:69:e7:59:4c:57:ec:6f:fd:b3:c6:2d:ed:d7:
4c:68:bb:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvlUySkunzBFEcN7TR71EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ODVmMTkxNGNlYjE5MjIxYzU2MzE5MzAyN2Q0NTM0NTAz
M2FkNWYwHhcNMjUwMjAxMjMwMDE4WhcNMjUwMjAyMjMwMDE4WjAzMTEwLwYDVQQD
EyhiMmVmNjg4YzUxNmEzZjJhZWJkYTkzODdmNDFkOTAyMzJmZmYxYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1jEuMRUNLsuapdBWUSYiAeQDR0O
inWXJSgkbT3WVmX6a1x9EIHuySUoOSfnIYjWPBpkNxzflIHDqKstB1o8Cb0cIPs0
uLwjwTDQ+85TwIpbed1AWfeRk1UyI8OYro5QryKZBbax6SiJuzsNvWpYVRWjoxyJ
clHdn/f8kHODTevyL0Qjk48ibd+Vt80I6WKvBzlYg/moRwzAXkSCjxkSKzO1n+iV
XDyJ+lRZ4VVNLx9vzEF6pJNUM1CjoP7mJ7ex8mnLkn6vAcsF/WP+i71snjVxKABT
nFWLCofwE9CF1MEi7Kv5MKlwbliMqyRBJk6A6/bl1jcvlxfE8nj6S1rQNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLvaIxRaj8q69qTh/QdkCMv/xx3MB8GA1UdIwQY
MBaAFKaF8ZFM6xkiHFYxkwJ9RTRQM61fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xOTg2MmMtZjdkNC00ZjRmLWE4ZGQt
MWViYzUwZGNlZDQ5LzEvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8xOTg2MmMtZjdkNC00ZjRmLWE4ZGQtMWViYzUwZGNlZDQ5
LzEvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRTry/iE
sAfTpRO+TgOW6QAnXjBIQ23upgW2DO7+FbuyV+Q+kqAT1wZHhmC8ODmig2gglwmN
xhm7+OcyApkp0XO891Bp1azk6wIxQKka6duvCGkApXS3ZA7Mjz8PzTKdrR4GUtXg
ol88crpV1IG2ozSjlO91bUV5z/29iKMRaS+Y2wR+cEuysCMzthwtplVXz99IkWRs
gSC4J7SRGAtBow9Gp/Y4RJIci2gGUsqML5WbHSFt2QxySm23WoRtOxFGAZr7MnQV
X+dnwHcy6nlKk//0IsxfUI7kIkP3mDmi+iwQng9873BoM2DgWs/RSIVp51lMV+xv
/bPGLe3XTGi7xA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:25 2025 by rpki-client