Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: gB/evKNZxEGseMpxfYpxs+OrUDxl8aSCQIpJk6kGlzE=
Subject key identifier: CB:86:27:63:40:0C:12:89:FC:8D:69:81:DE:11:05:87:AC:F1:E3:1F
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 019510C7A7F5A7E09BE5369F129E4D3BD4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:14 +0000
Manifest this update: Sun 16 Feb 2025 22:01:14 +0000
Manifest next update: Mon 17 Feb 2025 22:01:14 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: vmORSV8+x3JmNCtSf8LuvgSjr/JdIlDtZR0LtmZgnuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:a7:f5:a7:e0:9b:e5:36:9f:12:9e:4d:3b:d4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Feb 16 22:01:14 2025 GMT
Not After : Feb 17 22:01:14 2025 GMT
Subject: CN=cb862763400c1289fc8d6981de110587acf1e31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:ac:ca:f6:a6:17:57:a0:03:6d:d7:d3:fb:
32:3b:6c:18:1d:ee:3e:fd:9c:28:eb:20:1e:10:d2:
ec:ee:28:a2:b7:f4:f4:6d:7f:f2:e9:bf:3b:96:81:
e1:af:7d:8a:80:7a:69:4d:fe:2c:d9:d4:94:eb:a8:
df:8d:36:5f:b7:60:00:36:76:da:c6:5c:11:5e:88:
e9:d8:79:97:d4:51:75:d0:fa:76:40:e9:26:b4:18:
b6:ee:45:8a:ac:9b:73:26:fd:49:0e:20:97:12:ed:
a5:b5:84:a5:15:3b:9c:71:19:a8:eb:b4:62:5a:71:
40:e6:86:e6:e6:d2:5f:be:92:e9:69:08:c2:f5:66:
ec:e0:ba:94:21:5c:ee:7b:8e:37:8b:88:0c:54:54:
b6:fe:72:83:10:39:5f:54:91:8a:c1:db:d2:9b:3e:
3c:96:83:f7:40:ae:45:f3:33:13:d1:c6:e1:09:1e:
f9:0a:70:c5:4b:e4:44:c9:84:bc:57:d5:2d:11:c0:
79:9e:42:61:17:f2:ff:7b:52:dc:97:14:0b:9f:42:
cb:39:fd:ab:8e:f6:f7:73:b4:bd:80:60:38:fe:b3:
03:e6:03:97:94:b0:2e:1e:ba:e7:d8:e2:f8:61:8c:
43:f4:9b:3e:cb:ef:e5:07:e9:a6:7c:d1:7a:22:29:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:86:27:63:40:0C:12:89:FC:8D:69:81:DE:11:05:87:AC:F1:E3:1F
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a8:19:71:4a:ed:e8:8b:d2:f0:8c:cd:a2:5e:50:e6:b0:fb:
0e:97:3d:59:39:25:6f:68:17:c0:af:4f:57:12:75:a3:69:23:
06:da:c7:3a:e8:85:5a:68:79:c9:8b:8f:a7:20:1b:57:87:a4:
9e:20:f3:28:77:05:ce:ab:7b:0e:05:b6:7f:1c:99:92:8c:cc:
f4:90:7f:e7:f9:f2:a6:34:86:8f:ba:a8:d9:48:1e:bf:c6:22:
e6:dc:d5:48:e7:37:c2:49:9e:43:e8:ed:3f:32:fc:07:60:10:
35:b0:04:9a:96:c8:e7:f8:62:6d:e0:1a:b4:c3:ac:79:03:a4:
5d:7c:0a:f0:6c:08:38:de:ba:cd:c8:52:1c:d0:b2:7e:8c:a2:
a8:76:8b:d8:5c:69:c8:3c:fe:d2:36:e6:5f:28:ff:ba:f6:d6:
db:0c:7d:17:4b:7b:4c:4d:e7:01:f4:e4:37:6b:a4:00:57:92:
57:b5:07:fd:b5:83:75:75:92:88:96:9c:7a:8f:b0:07:35:49:
48:e2:13:29:e6:eb:33:36:b0:0c:14:d1:da:dd:6c:ce:02:cd:
ac:57:e7:a4:e5:4d:51:d0:34:5d:f7:65:67:b9:03:cc:b9:d4:
49:c2:83:f9:2f:95:26:a3:36:99:32:73:40:6f:f3:68:7d:40:
56:56:81:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx6f1p+Cb5TafEp5NO9TdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MDMyYmRiMTI4Yzg2ZTAwYjIxYzc3OTU5YTgwMTFjNDBk
MDY1MGMwHhcNMjUwMjE2MjIwMTE0WhcNMjUwMjE3MjIwMTE0WjAzMTEwLwYDVQQD
EyhjYjg2Mjc2MzQwMGMxMjg5ZmM4ZDY5ODFkZTExMDU4N2FjZjFlMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK2syvamF1egA23X0/syO2wYHe4+
/Zwo6yAeENLs7iiit/T0bX/y6b87loHhr32KgHppTf4s2dSU66jfjTZft2AANnba
xlwRXojp2HmX1FF10Pp2QOkmtBi27kWKrJtzJv1JDiCXEu2ltYSlFTuccRmo67Ri
WnFA5obm5tJfvpLpaQjC9Wbs4LqUIVzue443i4gMVFS2/nKDEDlfVJGKwdvSmz48
loP3QK5F8zMT0cbhCR75CnDFS+REyYS8V9UtEcB5nkJhF/L/e1LclxQLn0LLOf2r
jvb3c7S9gGA4/rMD5gOXlLAuHrrn2OL4YYxD9Js+y+/lB+mmfNF6Iim6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuGJ2NADBKJ/I1pgd4RBYes8eMfMB8GA1UdIwQY
MBaAFLkDK9sSjIbgCyHHeVmoARxA0GUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYt
ZmU4NDZmNzVkMTcwLzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYtZmU4NDZmNzVkMTcw
LzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6gZcUrt
6IvS8IzNol5Q5rD7Dpc9WTklb2gXwK9PVxJ1o2kjBtrHOuiFWmh5yYuPpyAbV4ek
niDzKHcFzqt7DgW2fxyZkozM9JB/5/nypjSGj7qo2Ugev8Yi5tzVSOc3wkmeQ+jt
PzL8B2AQNbAEmpbI5/hibeAatMOseQOkXXwK8GwION66zchSHNCyfoyiqHaL2Fxp
yDz+0jbmXyj/uvbW2wx9F0t7TE3nAfTkN2ukAFeSV7UH/bWDdXWSiJaceo+wBzVJ
SOITKebrMzawDBTR2t1szgLNrFfnpOVNUdA0XfdlZ7kDzLnUScKD+S+VJqM2mTJz
QG/zaH1AVlaBhQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:19 2025 by rpki-client