Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: vRFPacMEiR6B250nHRB8jCyMAXz5wM6ZcMFV9tA0IMI=
Subject key identifier: AF:58:82:C5:AE:61:43:5E:73:9D:17:DD:30:07:53:BB:A8:C1:75:2B
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 019511D9560C2C013D2750717E55E1C16EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 0342
Signing time: Mon 17 Feb 2025 03:00:10 +0000
Manifest this update: Mon 17 Feb 2025 03:00:10 +0000
Manifest next update: Tue 18 Feb 2025 03:00:10 +0000
Files and hashes: 1: gBpXU6HMs3EdVnZKM3W9dtj0eWk.roa (hash: /5HDlgNXt08tmw8LTatvLunizw0Atkb/+jC9ix7IJ4k=)
2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: hRSAMe9/Hcel8AXs1tfr74W3BETtcA6E17Ymr4QXKMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:56:0c:2c:01:3d:27:50:71:7e:55:e1:c1:6e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Feb 17 03:00:10 2025 GMT
Not After : Feb 18 03:00:10 2025 GMT
Subject: CN=af5882c5ae61435e739d17dd300753bba8c1752b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:76:c7:bd:72:83:fd:a0:6a:e8:0d:ef:39:
83:14:12:06:4f:07:3a:51:12:f1:80:63:1f:6c:36:
0f:e0:4a:f4:f8:28:06:07:5f:6b:9e:66:82:98:03:
51:3b:f3:fc:ef:5e:81:5a:32:86:df:4b:61:56:b1:
55:bd:5e:1d:dd:48:50:fb:f0:c3:20:f1:dc:df:dc:
f8:3c:26:30:c5:49:6f:d4:31:3b:33:97:42:20:85:
e9:89:bc:c2:ba:77:9e:c1:b6:dc:87:6a:e2:ae:40:
00:e6:cc:82:bd:c3:25:f5:e4:5f:ff:f8:9e:29:32:
4e:65:e9:4b:8e:b3:b4:26:cf:72:7f:20:74:3b:14:
88:00:44:2f:5f:4b:4d:a9:f7:95:31:40:a0:f5:21:
ed:59:eb:34:52:31:57:25:6f:56:62:35:e7:11:d7:
7c:80:76:47:6a:5f:e6:b3:89:16:93:28:8d:e6:d0:
1e:7d:0e:76:bc:6c:53:8a:01:07:34:07:f6:ca:78:
29:30:c0:4f:2c:cf:ab:6a:e6:4c:15:26:11:43:d3:
a2:75:61:2d:e8:a3:1a:b8:a1:40:e5:cc:0d:d0:f4:
62:84:78:7c:de:28:66:0c:61:c1:59:8c:33:58:f0:
1e:54:04:20:1c:2a:22:91:51:30:f3:36:bb:39:e4:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:58:82:C5:AE:61:43:5E:73:9D:17:DD:30:07:53:BB:A8:C1:75:2B
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1e:07:77:6b:73:c8:12:9c:7a:73:fb:39:a6:ff:f9:67:81:
f9:97:43:dc:76:bc:21:02:c5:48:14:63:5b:fa:26:94:5f:41:
63:82:26:2f:0c:0e:35:94:6d:f8:90:30:41:f4:66:5a:9f:3e:
eb:3e:be:1b:ca:02:9a:21:59:ea:0d:40:e9:08:dd:34:21:28:
6c:4b:10:e9:c7:49:b6:71:6d:2f:f8:48:21:3d:20:9d:ae:2a:
5d:fa:93:13:c0:d9:6d:61:9e:93:ca:43:55:5f:e2:a0:a1:f8:
bf:a8:19:59:5b:17:4e:84:ab:2e:08:1f:74:0d:86:4e:3d:4f:
41:52:86:d5:1e:a4:8b:f0:b9:e6:f1:0e:67:d6:20:a0:48:6a:
98:eb:2c:e4:0d:40:de:32:d5:34:58:cc:98:30:b5:43:09:f9:
e8:18:2f:58:16:b9:d8:1a:90:57:69:7a:35:e1:66:3c:b8:04:
d0:44:69:de:64:af:6b:dc:80:48:8b:50:af:99:af:cb:f9:a4:
63:b2:cc:b9:d0:a6:87:48:ec:51:a8:5b:dc:22:80:9b:81:d7:
2a:90:91:60:31:1f:cc:4d:c2:ee:6b:b3:07:af:8d:ec:76:c8:
35:dc:65:57:9f:43:1b:28:4f:d1:f9:86:55:ff:ca:f7:6a:e0:
5e:db:a4:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2VYMLAE9J1BxflXhwW7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjAxZDJlYTFmOTQ4Y2EwMThjMzM1YmVkYTcyZGJlYzA3
OWQ2ZTYwHhcNMjUwMjE3MDMwMDEwWhcNMjUwMjE4MDMwMDEwWjAzMTEwLwYDVQQD
EyhhZjU4ODJjNWFlNjE0MzVlNzM5ZDE3ZGQzMDA3NTNiYmE4YzE3NTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0B2x71yg/2gaugN7zmDFBIGTwc6
URLxgGMfbDYP4Er0+CgGB19rnmaCmANRO/P8716BWjKG30thVrFVvV4d3UhQ+/DD
IPHc39z4PCYwxUlv1DE7M5dCIIXpibzCuneewbbch2rirkAA5syCvcMl9eRf//ie
KTJOZelLjrO0Js9yfyB0OxSIAEQvX0tNqfeVMUCg9SHtWes0UjFXJW9WYjXnEdd8
gHZHal/ms4kWkyiN5tAefQ52vGxTigEHNAf2yngpMMBPLM+rauZMFSYRQ9OidWEt
6KMauKFA5cwN0PRihHh83ihmDGHBWYwzWPAeVAQgHCoikVEw8za7OeTu4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9YgsWuYUNec50X3TAHU7uowXUrMB8GA1UdIwQY
MBaAFIpgHS6h+UjKAYwzW+2nLb7AedbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEt
YTQyNTgyMDcwOTQ5LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEtYTQyNTgyMDcwOTQ5
LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIx4Hd2tz
yBKcenP7Oab/+WeB+ZdD3Ha8IQLFSBRjW/omlF9BY4ImLwwONZRt+JAwQfRmWp8+
6z6+G8oCmiFZ6g1A6QjdNCEobEsQ6cdJtnFtL/hIIT0gna4qXfqTE8DZbWGek8pD
VV/ioKH4v6gZWVsXToSrLggfdA2GTj1PQVKG1R6ki/C55vEOZ9YgoEhqmOss5A1A
3jLVNFjMmDC1Qwn56BgvWBa52BqQV2l6NeFmPLgE0ERp3mSva9yASItQr5mvy/mk
Y7LMudCmh0jsUahb3CKAm4HXKpCRYDEfzE3C7muzB6+N7HbINdxlV59DGyhP0fmG
Vf/K92rgXtuk9A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:24 2025 by rpki-client