Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
File: mf5n9L9N0mrjFbMae0cs5NXBrmo.mft (raw, json)
Hash identifier: H06KQG/B76v9Cv7gl75u867GKlsZo/YhCaUq1uvTFBw=
Subject key identifier: C8:88:15:1F:8B:F2:FD:76:BF:F2:E5:14:97:14:ED:B1:B3:28:1C:E4
Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
Certificate issuer: /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Certificate serial: 0194C4D12CC4B2B43F49A746BF3154B8FEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 04:00:30 +0000
Manifest this update: Sun 02 Feb 2025 04:00:30 +0000
Manifest next update: Mon 03 Feb 2025 04:00:30 +0000
Files and hashes: 1: DJ9c19i6-KdVhR4wxk4rl1TwOA4.roa (hash: 9EgmYxbySr7FvyMgHaLB4XxWt5JwrgMM/8o6In9Xr3E=)
2: mf5n9L9N0mrjFbMae0cs5NXBrmo.crl (hash: viwv49QDW+USIK/aQMY+wZSF1d95lB/FXidSgqGpmCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:2c:c4:b2:b4:3f:49:a7:46:bf:31:54:b8:fe:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Validity
Not Before: Feb 2 04:00:30 2025 GMT
Not After : Feb 3 04:00:30 2025 GMT
Subject: CN=c888151f8bf2fd76bff2e5149714edb1b3281ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:b2:f4:9d:90:e1:06:c5:2d:bb:0e:bc:c7:
7f:69:43:54:1e:ea:9f:b4:cd:e0:f3:13:1b:49:88:
22:7a:1d:04:ee:bb:11:4b:09:90:8e:21:6d:9f:26:
f6:27:04:4f:63:a7:03:80:6b:ca:d7:3e:c5:64:4d:
41:81:12:38:e6:f4:de:6e:0e:4b:13:06:10:a9:15:
92:7d:77:b8:0f:1c:76:e9:37:fd:3e:a9:48:8a:1a:
a8:6e:89:af:57:a8:20:b4:22:f2:27:5d:74:12:02:
ad:0a:4d:22:d0:ae:7f:c3:e8:11:84:96:91:f9:8b:
bc:10:40:a5:0e:63:69:f7:86:cc:c0:a9:62:db:84:
47:72:31:c5:c1:86:2f:eb:28:c9:32:52:e7:cb:a9:
2e:05:eb:fb:d5:7c:ce:0d:2c:03:4f:1b:4a:8d:03:
6d:d5:16:e5:d6:65:9c:0a:14:01:89:73:8e:9e:12:
ba:1e:75:1d:42:ef:07:20:dc:11:49:10:76:35:34:
1b:8b:f0:d2:d8:2d:56:4f:42:ae:42:e1:ce:f4:6e:
e4:6b:3d:b0:ed:01:47:b9:a6:b3:95:16:71:2c:ff:
04:90:56:2e:33:20:8f:fb:f3:ad:e1:53:bc:b3:3c:
33:74:f2:a2:cc:bf:de:97:bf:69:69:2f:f6:4a:88:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:88:15:1F:8B:F2:FD:76:BF:F2:E5:14:97:14:ED:B1:B3:28:1C:E4
X509v3 Authority Key Identifier:
keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e7:84:df:13:98:8a:4d:49:bc:33:81:e5:1d:22:32:56:9c:
bc:33:fe:ea:91:68:5b:13:71:b6:e2:75:40:7c:be:3c:fb:41:
12:9b:a3:44:05:2c:27:2c:bb:ba:51:1d:95:7d:da:e4:ac:c1:
5f:ca:45:cc:b6:a4:12:b6:b2:8a:01:8b:78:ad:93:fd:e8:a1:
60:aa:70:1c:11:a3:85:a2:d3:6f:55:b0:0e:44:c2:d1:db:32:
28:a1:44:08:96:db:4e:f3:fa:27:0d:37:7b:ee:0d:76:86:a8:
4f:6d:2e:44:79:52:d5:07:5b:33:d8:95:e9:99:d1:87:82:53:
f0:93:b4:98:7b:52:97:7f:2b:71:ca:7f:28:e0:49:f9:c0:1d:
04:aa:49:99:83:27:0a:2a:af:7d:c9:7d:6e:d7:68:97:0e:df:
37:17:62:f2:22:cc:1b:8b:80:30:59:c8:2b:e0:80:fb:ac:ed:
b4:66:70:32:7b:dc:e2:68:34:60:60:30:ec:59:31:8d:37:b5:
64:e5:89:08:69:af:b4:82:c5:d2:65:87:89:d8:f0:88:ac:4b:
fe:6d:ff:41:3a:74:03:eb:28:f0:c4:1b:1e:44:3f:31:5a:40:
d1:de:2c:ce:c8:28:4f:c0:2e:d3:29:dc:9d:f7:63:e0:50:e8:
f4:50:3c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0SzEsrQ/SadGvzFUuP6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmU2N2Y0YmY0ZGQyNmFlMzE1YjMxYTdiNDcyY2U0ZDVj
MWFlNmEwHhcNMjUwMjAyMDQwMDMwWhcNMjUwMjAzMDQwMDMwWjAzMTEwLwYDVQQD
EyhjODg4MTUxZjhiZjJmZDc2YmZmMmU1MTQ5NzE0ZWRiMWIzMjgxY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jOy9J2Q4QbFLbsOvMd/aUNUHuqf
tM3g8xMbSYgieh0E7rsRSwmQjiFtnyb2JwRPY6cDgGvK1z7FZE1BgRI45vTebg5L
EwYQqRWSfXe4Dxx26Tf9PqlIihqobomvV6ggtCLyJ110EgKtCk0i0K5/w+gRhJaR
+Yu8EEClDmNp94bMwKli24RHcjHFwYYv6yjJMlLny6kuBev71XzODSwDTxtKjQNt
1Rbl1mWcChQBiXOOnhK6HnUdQu8HINwRSRB2NTQbi/DS2C1WT0KuQuHO9G7kaz2w
7QFHuaazlRZxLP8EkFYuMyCP+/Ot4VO8szwzdPKizL/el79paS/2SogIWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiIFR+L8v12v/LlFJcU7bGzKBzkMB8GA1UdIwQY
MBaAFJn+Z/S/TdJq4xWzGntHLOTVwa5qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yN2ZiNDgtZDA2Ni00MmQ5LTk0MzIt
YTA1YmQyMjgzMzdjLzEvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yN2ZiNDgtZDA2Ni00MmQ5LTk0MzItYTA1YmQyMjgzMzdj
LzEvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQueE3xOY
ik1JvDOB5R0iMlacvDP+6pFoWxNxtuJ1QHy+PPtBEpujRAUsJyy7ulEdlX3a5KzB
X8pFzLakErayigGLeK2T/eihYKpwHBGjhaLTb1WwDkTC0dsyKKFECJbbTvP6Jw03
e+4NdoaoT20uRHlS1QdbM9iV6ZnRh4JT8JO0mHtSl38rccp/KOBJ+cAdBKpJmYMn
Ciqvfcl9btdolw7fNxdi8iLMG4uAMFnIK+CA+6zttGZwMnvc4mg0YGAw7FkxjTe1
ZOWJCGmvtILF0mWHidjwiKxL/m3/QTp0A+so8MQbHkQ/MVpA0d4szsgoT8Au0ync
nfdj4FDo9FA8uQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:36 2025 by rpki-client