Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
File: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft (raw, json)
Hash identifier: 12Qgez0vzzl/KibokOBMgCJabNJEzzmhHOI4pFvW9IQ=
Subject key identifier: EE:B5:D5:5C:F3:60:4A:01:83:18:9F:5E:6A:06:DC:20:2A:1E:7C:94
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Certificate issuer: /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial: 0194C507C3A2636311B9BF591924FF1D9391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
Manifest number: 0B1A
Signing time: Sun 02 Feb 2025 05:00:07 +0000
Manifest this update: Sun 02 Feb 2025 05:00:07 +0000
Manifest next update: Mon 03 Feb 2025 05:00:07 +0000
Files and hashes: 1: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl (hash: KXi+9LxXCuWZQGX1tMR8WUu5r8gzSrJgc+pDye9T8zo=)
2: kH84XjWCF3YsEupBc9_NB-UJ1LE.roa (hash: vFi6ltA+YLY/2jEI7t4T0lx3r1xW2YaGJ9YVTzgeHZA=)
3: m8b-nSkJNQaQc9Ko3VmUYZ_aR5k.roa (hash: x/jmnJNzCw/+lpmfHMz6HsStw+fWqWLA6QrXjLJpCDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:c3:a2:63:63:11:b9:bf:59:19:24:ff:1d:93:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
Validity
Not Before: Feb 2 05:00:07 2025 GMT
Not After : Feb 3 05:00:07 2025 GMT
Subject: CN=eeb5d55cf3604a0183189f5e6a06dc202a1e7c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:55:f2:bb:38:00:7b:4d:bd:52:22:37:96:8a:
44:42:14:03:95:61:2b:b6:e6:93:34:28:f7:b6:e2:
6d:9e:3e:a6:e7:92:ca:9c:fb:92:af:c1:f9:0a:90:
b2:3c:ec:35:76:6b:22:0a:05:3f:6e:0c:64:75:11:
59:2d:94:65:0d:7e:2d:19:c4:1e:98:08:5e:00:20:
aa:95:86:92:5c:cf:27:b2:d1:e6:8a:87:7c:6e:9a:
1a:f5:09:59:41:21:ed:db:23:52:29:12:50:4c:ce:
a8:6d:7c:43:19:28:7b:27:1a:3e:03:35:f3:56:52:
a2:35:d4:b7:ad:88:ac:20:a4:5e:65:51:0e:77:0f:
46:b0:c7:b8:de:3d:9d:e2:aa:e5:e2:05:68:a7:cf:
4b:28:64:82:13:bd:e0:c1:c4:70:46:14:1a:1b:7b:
52:4c:c4:82:8a:91:b1:63:36:66:16:63:ab:4d:50:
52:4d:fb:a2:b0:4c:7b:53:77:e7:ed:52:a2:b3:40:
61:af:a0:88:df:20:11:bf:0c:61:65:a5:24:fd:6a:
96:6d:47:0e:46:48:fe:7a:d3:ba:8c:a1:6d:6e:b6:
9c:27:d7:a1:10:09:28:a5:d1:16:0b:0f:d2:ef:51:
50:77:ce:2a:05:7e:b5:3e:d1:1b:1e:03:a6:be:b6:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B5:D5:5C:F3:60:4A:01:83:18:9F:5E:6A:06:DC:20:2A:1E:7C:94
X509v3 Authority Key Identifier:
keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8a:f5:3e:40:e7:74:fe:b4:a7:34:4c:0e:17:2d:52:94:c4:
00:e7:73:66:97:99:77:9b:52:34:95:ed:b4:e5:d5:55:1e:07:
e8:dc:37:c3:80:1c:35:51:1d:ec:ba:1d:e3:fc:d7:76:42:83:
b7:6b:93:29:94:b2:84:b0:0f:2e:9f:44:ad:f1:f6:a7:f1:1d:
d6:89:d8:14:4a:67:51:8a:63:8e:9e:8b:54:0f:9c:f1:60:df:
09:b3:13:2d:ed:8b:00:36:54:73:dc:8a:c8:8d:4f:76:6f:02:
63:0e:fb:1d:3e:97:88:04:08:44:5b:3e:b9:83:0c:7b:f3:29:
dd:6c:de:8c:40:d4:db:c2:be:f6:51:9a:75:6d:da:61:f8:d9:
f9:65:4f:da:06:fc:f4:21:98:1f:00:f0:30:f5:53:38:92:f7:
6c:c8:65:5c:ae:41:c8:a4:de:44:6d:8a:b8:22:9b:d4:a4:1d:
56:b3:cb:a8:36:d0:ea:75:51:a8:0d:8d:18:fe:df:5d:73:e7:
ea:da:8d:52:50:c0:31:c4:14:39:ee:f9:d7:75:c2:96:58:34:
ae:5e:ed:bd:4f:1c:1a:dd:13:16:43:e4:1c:67:08:03:44:84:
97:7b:74:83:5f:0a:1a:21:f6:d4:55:8e:d5:c2:56:55:37:e8:
f3:c4:2e:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTFB8OiY2MRub9ZGST/HZORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTM2N2Q4ZGVjZjdkNjI2ZTU0NzgwZjgwZTU3MzYwZDJj
MDc4Y2QwHhcNMjUwMjAyMDUwMDA3WhcNMjUwMjAzMDUwMDA3WjAzMTEwLwYDVQQD
EyhlZWI1ZDU1Y2YzNjA0YTAxODMxODlmNWU2YTA2ZGMyMDJhMWU3Yzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lXyuzgAe029UiI3lopEQhQDlWEr
tuaTNCj3tuJtnj6m55LKnPuSr8H5CpCyPOw1dmsiCgU/bgxkdRFZLZRlDX4tGcQe
mAheACCqlYaSXM8nstHmiod8bpoa9QlZQSHt2yNSKRJQTM6obXxDGSh7Jxo+AzXz
VlKiNdS3rYisIKReZVEOdw9GsMe43j2d4qrl4gVop89LKGSCE73gwcRwRhQaG3tS
TMSCipGxYzZmFmOrTVBSTfuisEx7U3fn7VKis0Bhr6CI3yARvwxhZaUk/WqWbUcO
Rkj+etO6jKFtbracJ9ehEAkopdEWCw/S71FQd84qBX61PtEbHgOmvrYoeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO611VzzYEoBgxifXmoG3CAqHnyUMB8GA1UdIwQY
MBaAFCfjZ9jez31iblR4D4Dlc2DSwHjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1ObjJON1BmV0p1VkhnUGdPVnpZTkxBZU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81ZjA1NzktMGVmYS00MjJiLWFhNjgt
YTQzNGZkMDg4ZmQwLzEvSi1ObjJON1BmV0p1VkhnUGdPVnpZTkxBZU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81ZjA1NzktMGVmYS00MjJiLWFhNjgtYTQzNGZkMDg4ZmQw
LzEvSi1ObjJON1BmV0p1VkhnUGdPVnpZTkxBZU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbor1PkDn
dP60pzRMDhctUpTEAOdzZpeZd5tSNJXttOXVVR4H6Nw3w4AcNVEd7Lod4/zXdkKD
t2uTKZSyhLAPLp9ErfH2p/Ed1onYFEpnUYpjjp6LVA+c8WDfCbMTLe2LADZUc9yK
yI1Pdm8CYw77HT6XiAQIRFs+uYMMe/Mp3WzejEDU28K+9lGadW3aYfjZ+WVP2gb8
9CGYHwDwMPVTOJL3bMhlXK5ByKTeRG2KuCKb1KQdVrPLqDbQ6nVRqA2NGP7fXXPn
6tqNUlDAMcQUOe7513XCllg0rl7tvU8cGt0TFkPkHGcIA0SEl3t0g18KGiH21FWO
1cJWVTfo88Quyw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:18 2025 by rpki-client