Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File: ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier: +xYu6slTqsAm4tNJkEls3tvCbmKcFrSmYwFT7Uqv52g=
Subject key identifier: AA:0E:C4:54:DD:F1:C0:96:0D:23:A5:5F:57:71:B1:5B:90:63:AB:80
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 0194C3BE5351098B5D7213B172D7AD42392D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number: 0D32
Signing time: Sat 01 Feb 2025 23:00:17 +0000
Manifest this update: Sat 01 Feb 2025 23:00:17 +0000
Manifest next update: Sun 02 Feb 2025 23:00:17 +0000
Files and hashes: 1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: x78A4YTVWvG7zUrOw1claRgYS8AjbiFYXz2k45gxYnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:53:51:09:8b:5d:72:13:b1:72:d7:ad:42:39:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Feb 1 23:00:17 2025 GMT
Not After : Feb 2 23:00:17 2025 GMT
Subject: CN=aa0ec454ddf1c0960d23a55f5771b15b9063ab80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c1:3a:c2:d4:fe:90:fa:7e:3c:05:dc:db:f4:
27:8d:36:7f:88:49:82:b5:6f:25:84:b4:4a:57:e6:
3d:14:80:1f:de:d2:92:8f:c4:dd:1b:46:2c:8b:0e:
49:c9:53:61:8b:84:e6:b0:b5:10:7b:be:47:94:a4:
bc:40:67:05:9f:5e:8d:b4:6a:75:10:24:b9:2d:e7:
5b:14:38:31:eb:27:8b:95:34:1c:7f:83:52:6c:d3:
c8:73:bf:1d:b3:d1:1c:68:0f:ec:ad:63:1c:41:4f:
47:ae:2c:d8:f5:b1:6c:b6:5c:5a:c1:40:b7:09:e8:
9a:8b:cd:3e:81:59:92:c9:2b:50:1e:4a:a3:e3:2c:
96:fb:e0:67:fe:59:20:19:89:d9:38:58:99:36:18:
91:bf:3d:a0:ac:95:03:0e:6d:f8:7a:97:47:d7:d1:
e4:ab:6d:fa:1a:b8:5d:b3:97:68:7c:37:9a:c4:ad:
9c:5d:a2:e9:04:50:70:b4:06:c0:e6:5b:54:c7:ae:
b8:fe:84:7e:00:c3:03:95:de:ab:e8:00:a0:f1:1d:
6f:c2:82:13:ef:1a:10:9c:d3:d0:54:a2:73:a6:72:
ca:71:eb:8d:94:b0:c4:17:6e:25:0a:95:31:d5:e0:
f3:67:5f:0b:3b:53:60:6c:0f:af:98:54:5c:2f:66:
f5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0E:C4:54:DD:F1:C0:96:0D:23:A5:5F:57:71:B1:5B:90:63:AB:80
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fb:84:08:2c:e8:0e:9a:f9:ff:62:3e:7c:86:d1:7c:49:26:
32:07:27:25:08:ff:a9:d9:63:e7:95:4c:83:ab:24:2c:4e:0e:
76:9a:98:02:76:bf:15:fa:b7:45:ad:56:07:10:db:e4:b3:24:
ba:be:10:c3:0f:2b:ea:21:35:4e:02:54:ba:d7:bb:e5:a5:19:
83:b5:65:78:e5:2a:d9:81:73:14:ef:b9:e1:e8:37:a3:87:57:
3e:c2:9b:60:71:32:91:f9:82:4a:52:28:4a:bb:ef:5d:d3:be:
73:42:6d:f1:5a:3e:64:a4:47:15:a2:ac:3c:63:45:8b:4a:b3:
ed:aa:7e:87:7f:1c:db:fe:8f:f4:65:6f:74:21:c1:61:50:cf:
42:0d:21:ce:0b:b3:3d:94:69:88:8d:39:58:9b:97:cb:dd:7b:
c1:18:bd:4a:8b:12:d6:37:7a:48:9a:e2:84:64:e3:f4:12:22:
23:11:a7:1e:e1:12:4b:d8:6a:64:94:b7:10:ba:70:ac:c8:06:
4f:bc:e3:30:f7:27:0b:5d:8b:04:ed:98:b6:91:d1:0a:43:5d:
f2:89:ba:95:67:72:57:ff:a6:9b:2c:2f:84:66:22:2f:9b:82:
5e:2e:51:10:11:8d:f3:5b:36:fe:49:c3:12:b9:24:ad:39:de:
96:a3:8d:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvlNRCYtdchOxctetQjktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTJkYzIzNDBjNTMwOWI2M2ViYTIzY2ZiZTdlZWQxMWI3
NGFmNDcwHhcNMjUwMjAxMjMwMDE3WhcNMjUwMjAyMjMwMDE3WjAzMTEwLwYDVQQD
EyhhYTBlYzQ1NGRkZjFjMDk2MGQyM2E1NWY1NzcxYjE1YjkwNjNhYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78E6wtT+kPp+PAXc2/QnjTZ/iEmC
tW8lhLRKV+Y9FIAf3tKSj8TdG0Ysiw5JyVNhi4TmsLUQe75HlKS8QGcFn16NtGp1
ECS5LedbFDgx6yeLlTQcf4NSbNPIc78ds9EcaA/srWMcQU9HrizY9bFstlxawUC3
Ceiai80+gVmSyStQHkqj4yyW++Bn/lkgGYnZOFiZNhiRvz2grJUDDm34epdH19Hk
q236Grhds5dofDeaxK2cXaLpBFBwtAbA5ltUx664/oR+AMMDld6r6ACg8R1vwoIT
7xoQnNPQVKJzpnLKceuNlLDEF24lCpUx1eDzZ18LO1NgbA+vmFRcL2b1+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoOxFTd8cCWDSOlX1dxsVuQY6uAMB8GA1UdIwQY
MBaAFLni3CNAxTCbY+uiPPvn7tEbdK9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82Zjk5ZDItYWQwNS00Y2ZjLTlhNWUt
OWNiZWRjZWM4NmQ2LzEvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82Zjk5ZDItYWQwNS00Y2ZjLTlhNWUtOWNiZWRjZWM4NmQ2
LzEvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfuECCzo
Dpr5/2I+fIbRfEkmMgcnJQj/qdlj55VMg6skLE4OdpqYAna/Ffq3Ra1WBxDb5LMk
ur4Qww8r6iE1TgJUute75aUZg7VleOUq2YFzFO+54eg3o4dXPsKbYHEykfmCSlIo
SrvvXdO+c0Jt8Vo+ZKRHFaKsPGNFi0qz7ap+h38c2/6P9GVvdCHBYVDPQg0hzguz
PZRpiI05WJuXy917wRi9SosS1jd6SJrihGTj9BIiIxGnHuESS9hqZJS3ELpwrMgG
T7zjMPcnC12LBO2YtpHRCkNd8om6lWdyV/+mmywvhGYiL5uCXi5REBGN81s2/knD
ErkkrTnelqONUA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:09 2025 by rpki-client