Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier: VX6p4rZCsnla3g801m3/khkf/iq6HOjUkzqJ+LIN3bM=
Subject key identifier: 3A:26:C3:CE:D8:F3:05:94:DB:7D:2D:F1:AF:25:5E:88:00:FE:71:49
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 019510901BDD5253F6412B0927553A564766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 21:00:34 +0000
Manifest this update: Sun 16 Feb 2025 21:00:34 +0000
Manifest next update: Mon 17 Feb 2025 21:00:34 +0000
Files and hashes: 1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=)
2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: MIHuMr+wok7v/LJwJBcIZraIOu8gSrH6wv+MkQkICkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:1b:dd:52:53:f6:41:2b:09:27:55:3a:56:47:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Feb 16 21:00:34 2025 GMT
Not After : Feb 17 21:00:34 2025 GMT
Subject: CN=3a26c3ced8f30594db7d2df1af255e8800fe7149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:cb:a6:ce:a1:52:0c:19:e8:e6:c0:bf:19:
f2:a0:0a:bd:94:83:1d:ff:ab:f5:b3:22:2c:6b:51:
98:35:a6:40:9e:f5:fa:b4:78:c5:9a:3a:33:50:b4:
51:68:c7:db:34:e3:94:5e:ef:be:10:87:f5:0f:01:
6b:82:05:39:d4:77:60:f4:7b:79:f7:5b:27:de:9a:
bf:0d:11:11:97:5b:34:a7:8e:76:8f:d8:73:d1:37:
62:a1:58:a0:ac:cb:34:77:ac:ab:49:c8:6d:d8:70:
e1:22:96:4d:c3:a7:60:b1:7d:2f:90:8f:b3:3e:2d:
5a:b5:59:2d:22:e1:ce:ab:78:14:fd:aa:74:d7:c0:
ff:90:f6:7e:5b:b1:e9:fc:69:be:f8:d3:29:e3:a1:
76:92:5a:19:d9:40:8e:11:fc:10:54:66:75:69:dc:
f2:a0:09:54:11:79:4f:7d:04:ea:a7:e5:8f:ca:32:
bd:45:8e:e5:f3:db:10:15:f1:83:25:df:4a:da:6b:
81:4c:44:cf:c0:70:01:b1:f5:38:95:5d:04:41:99:
41:a2:c7:15:f6:49:9f:19:6f:0e:14:64:f8:28:13:
2c:63:63:af:d8:70:2b:94:f6:98:42:a0:4b:0a:c5:
86:26:59:63:10:63:5b:8e:68:06:60:cd:3e:18:ce:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:26:C3:CE:D8:F3:05:94:DB:7D:2D:F1:AF:25:5E:88:00:FE:71:49
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:48:83:dd:2c:c1:e7:20:18:be:6e:13:37:88:a6:ba:5d:a3:
c9:93:ee:a4:81:b8:10:45:9d:07:d2:58:21:0f:9d:4e:46:41:
cb:f1:8e:04:20:ed:fa:b5:5a:94:03:d9:3e:2d:48:4f:4e:b9:
70:83:d0:a9:5c:fe:2c:af:a0:08:74:67:21:6a:62:fb:b0:43:
0c:be:ab:80:d1:03:85:f6:e7:e8:3c:b8:8a:18:4e:00:c4:43:
f2:55:23:7e:52:40:37:2b:1a:69:63:c9:1e:f4:51:5d:8c:7b:
22:f9:29:2d:1e:79:68:4c:00:fa:c0:dd:d7:e4:71:82:41:fb:
e6:d4:03:8f:c0:32:b1:89:bc:6b:bd:ce:95:39:ff:d8:33:e7:
54:f2:9d:3e:48:14:dd:f0:e1:4d:2b:cc:58:4a:b1:28:ea:21:
de:0b:8b:15:0b:f5:94:01:9f:e2:16:41:e4:ec:71:dd:ff:a2:
f6:34:d8:26:e0:3a:b2:30:cd:86:1b:29:3f:c9:95:ec:9e:54:
52:1d:5a:74:e0:a3:72:ce:08:eb:e7:57:7d:7f:0b:f8:3a:ba:
a1:9b:9f:92:84:af:68:dd:bf:fe:32:56:0c:ec:ec:71:5c:d1:
ac:43:52:ed:5e:75:8d:af:df:6e:c3:50:2a:f6:6b:09:7d:81:
c3:5a:d6:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQkBvdUlP2QSsJJ1U6VkdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZWM1MGNiMzNhZTE4NjBkNGNjNWZiNjdlNDNkMzkzMDQy
MjRiNGYwHhcNMjUwMjE2MjEwMDM0WhcNMjUwMjE3MjEwMDM0WjAzMTEwLwYDVQQD
EygzYTI2YzNjZWQ4ZjMwNTk0ZGI3ZDJkZjFhZjI1NWU4ODAwZmU3MTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmvLps6hUgwZ6ObAvxnyoAq9lIMd
/6v1syIsa1GYNaZAnvX6tHjFmjozULRRaMfbNOOUXu++EIf1DwFrggU51Hdg9Ht5
91sn3pq/DRERl1s0p452j9hz0TdioVigrMs0d6yrScht2HDhIpZNw6dgsX0vkI+z
Pi1atVktIuHOq3gU/ap018D/kPZ+W7Hp/Gm++NMp46F2kloZ2UCOEfwQVGZ1adzy
oAlUEXlPfQTqp+WPyjK9RY7l89sQFfGDJd9K2muBTETPwHABsfU4lV0EQZlBoscV
9kmfGW8OFGT4KBMsY2Ov2HArlPaYQqBLCsWGJlljEGNbjmgGYM0+GM51KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDomw87Y8wWU230t8a8lXogA/nFJMB8GA1UdIwQY
MBaAFAHsUMszrhhg1Mxftn5D05MEIktPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQt
MTMwNjk4YTU5NTljLzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQtMTMwNjk4YTU5NTlj
LzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0iD3SzB
5yAYvm4TN4imul2jyZPupIG4EEWdB9JYIQ+dTkZBy/GOBCDt+rValAPZPi1IT065
cIPQqVz+LK+gCHRnIWpi+7BDDL6rgNEDhfbn6Dy4ihhOAMRD8lUjflJANysaaWPJ
HvRRXYx7IvkpLR55aEwA+sDd1+RxgkH75tQDj8AysYm8a73OlTn/2DPnVPKdPkgU
3fDhTSvMWEqxKOoh3guLFQv1lAGf4hZB5Oxx3f+i9jTYJuA6sjDNhhspP8mV7J5U
Uh1adOCjcs4I6+dXfX8L+Dq6oZufkoSvaN2//jJWDOzscVzRrENS7V51ja/fbsNQ
KvZrCX2Bw1rWbg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:28 2025 by rpki-client