Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: 2i5IOJYUue8RUfHUo7IQSImGsT3flrYwpPH2jaGd5Eo=
Subject key identifier: DB:03:36:AC:4B:9C:A6:0E:7A:82:88:A3:E5:B7:79:81:2B:56:ED:23
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 01950ED8A0BBE6BB666D01C27A08DEADE362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 1459
Signing time: Sun 16 Feb 2025 13:00:32 +0000
Manifest this update: Sun 16 Feb 2025 13:00:32 +0000
Manifest next update: Mon 17 Feb 2025 13:00:32 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: WDvqgvN9rfAwTRfQsfAGKEWkzyUpBuYN6qlaDryNTc8=)
2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=)
3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:d8:a0:bb:e6:bb:66:6d:01:c2:7a:08:de:ad:e3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Feb 16 13:00:32 2025 GMT
Not After : Feb 17 13:00:32 2025 GMT
Subject: CN=db0336ac4b9ca60e7a8288a3e5b779812b56ed23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:26:c9:ce:46:3b:3d:0d:21:08:be:51:86:
71:90:52:19:33:4c:92:51:96:ad:1d:a3:4d:b5:db:
aa:39:df:7b:82:f9:08:46:00:db:3c:58:a2:a1:e8:
98:a4:40:41:dc:c7:fb:f4:e9:95:87:e2:72:47:f0:
e6:0e:55:6c:9c:6a:4a:c8:58:bd:aa:1c:49:8a:a9:
03:b0:fd:18:a9:a2:ed:65:95:fc:2d:a6:ad:2c:d8:
2d:8a:8b:18:71:94:ff:55:91:88:4a:5c:ff:5a:7b:
cc:0e:eb:8c:5c:65:d5:cf:0c:78:66:2f:45:4e:a4:
8d:9d:eb:ab:48:05:a0:db:b1:8e:af:4d:ea:57:8f:
40:2e:82:0b:7f:5b:ac:1d:59:46:ec:32:2c:9a:12:
54:2f:f0:ee:61:9c:f2:87:8e:03:90:b6:6c:20:ba:
14:1a:14:2a:a6:39:20:e8:87:b7:40:a9:65:53:a1:
e3:ec:6c:d5:a6:ff:b3:d3:7c:e6:8c:23:9f:68:c7:
a6:35:4e:c2:cd:b1:1a:74:1a:59:a3:05:21:30:e1:
36:f8:a4:20:cf:f3:21:33:1e:cc:72:31:50:c1:d5:
0b:a7:45:46:4e:71:77:08:a4:5a:27:6a:e3:e0:8c:
dc:9a:53:04:ad:b6:04:0f:c5:13:36:e9:8a:4d:a7:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:03:36:AC:4B:9C:A6:0E:7A:82:88:A3:E5:B7:79:81:2B:56:ED:23
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:57:d1:ee:ba:cf:d2:b2:f9:77:b8:4e:49:67:eb:c4:5a:87:
3e:a7:23:85:8a:48:46:67:35:9b:24:04:d4:85:7b:26:a3:22:
97:c1:b5:27:cc:a5:bb:11:7e:7e:8a:71:4a:cd:ce:f3:1d:f2:
8f:33:93:13:74:f0:47:ed:a6:35:5f:01:fd:3f:02:03:bc:7e:
25:4a:5f:21:7d:08:03:8d:11:14:42:3f:0b:6a:a7:56:46:58:
eb:7f:7e:20:c0:26:df:c2:e3:81:d9:42:04:a9:01:95:3a:11:
80:4e:fb:be:3d:ce:a3:93:26:54:60:e6:86:f0:46:ba:7c:7a:
c5:de:96:2a:e4:84:58:39:d4:de:78:a3:f0:86:56:e1:29:3e:
af:8f:8c:0e:32:ee:66:15:a4:29:73:ff:52:5d:79:8e:5a:b3:
e6:52:b9:e2:dd:cc:6c:75:7b:9e:06:56:99:76:6d:81:8d:ba:
b4:ac:7a:6f:d9:84:b4:44:1f:2a:40:1c:ec:de:28:78:95:98:
dc:59:e4:43:0b:22:b7:93:71:f5:62:90:69:ec:23:5e:ef:b3:
58:48:54:d9:6e:70:f6:7d:0c:67:7f:40:50:96:e8:30:ad:b0:
af:4f:4e:27:42:77:39:5e:2f:be:d4:ab:e4:9c:8c:6f:d6:c2:
d6:8f:7a:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUO2KC75rtmbQHCegjereNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTUzZDE4ZjVmMjEyYWUwODAyYTE3ZWU1OTk0YzMzMzFh
NDM1MjQwHhcNMjUwMjE2MTMwMDMyWhcNMjUwMjE3MTMwMDMyWjAzMTEwLwYDVQQD
EyhkYjAzMzZhYzRiOWNhNjBlN2E4Mjg4YTNlNWI3Nzk4MTJiNTZlZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8kmyc5GOz0NIQi+UYZxkFIZM0yS
UZatHaNNtduqOd97gvkIRgDbPFiioeiYpEBB3Mf79OmVh+JyR/DmDlVsnGpKyFi9
qhxJiqkDsP0YqaLtZZX8LaatLNgtiosYcZT/VZGISlz/WnvMDuuMXGXVzwx4Zi9F
TqSNneurSAWg27GOr03qV49ALoILf1usHVlG7DIsmhJUL/DuYZzyh44DkLZsILoU
GhQqpjkg6Ie3QKllU6Hj7GzVpv+z03zmjCOfaMemNU7CzbEadBpZowUhMOE2+KQg
z/MhMx7McjFQwdULp0VGTnF3CKRaJ2rj4IzcmlMErbYED8UTNumKTadbLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsDNqxLnKYOeoKIo+W3eYErVu0jMB8GA1UdIwQY
MBaAFAPlPRj18hKuCAKhfuWZTDMxpDUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2Qt
MDJiYWI5ZjZmOTU1LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2QtMDJiYWI5ZjZmOTU1
LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1fR7rrP
0rL5d7hOSWfrxFqHPqcjhYpIRmc1myQE1IV7JqMil8G1J8yluxF+fopxSs3O8x3y
jzOTE3TwR+2mNV8B/T8CA7x+JUpfIX0IA40RFEI/C2qnVkZY639+IMAm38LjgdlC
BKkBlToRgE77vj3Oo5MmVGDmhvBGunx6xd6WKuSEWDnU3nij8IZW4Sk+r4+MDjLu
ZhWkKXP/Ul15jlqz5lK54t3MbHV7ngZWmXZtgY26tKx6b9mEtEQfKkAc7N4oeJWY
3FnkQwsit5Nx9WKQaewjXu+zWEhU2W5w9n0MZ39AUJboMK2wr09OJ0J3OV4vvtSr
5JyMb9bC1o96PQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:02 2025 by rpki-client