Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier: qC+32QqT/1v8AK7FQtzwEMUkEUOTFSrvN44et8c65mI=
Subject key identifier: 2E:F8:00:29:83:C3:86:0F:52:46:8F:1B:16:07:F3:2E:94:68:A7:4A
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 0195113503E432869FB3F1EBCDAAE3863167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number: 0BA4
Signing time: Mon 17 Feb 2025 00:00:41 +0000
Manifest this update: Mon 17 Feb 2025 00:00:41 +0000
Manifest next update: Tue 18 Feb 2025 00:00:41 +0000
Files and hashes: 1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: lf9WDK1L2mYO/QzSlMGI0luk1asg5qJzu0mwUIxlRE4=)
2: 30clEHSQ2FtWcxS6WRrlfziweF0.roa (hash: kMEVQBcSv51miHKtL16mTfHOOekvOtrPK9PKsU+A9fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:03:e4:32:86:9f:b3:f1:eb:cd:aa:e3:86:31:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Feb 17 00:00:41 2025 GMT
Not After : Feb 18 00:00:41 2025 GMT
Subject: CN=2ef8002983c3860f52468f1b1607f32e9468a74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:0b:7b:7d:79:40:ab:5a:ef:ee:91:4c:44:
60:fb:97:d0:85:09:4e:7a:48:e5:64:c2:00:59:19:
0a:a6:04:5c:8c:90:44:eb:18:3a:31:a7:57:b8:ef:
e6:f3:58:a1:b3:a9:d9:a6:d9:98:61:9c:59:40:af:
40:35:13:c9:6b:ff:d5:a4:cb:4a:f0:25:73:aa:f5:
5b:b7:7d:34:d7:b5:c7:24:80:97:68:ed:ce:e9:dd:
b6:f2:4d:81:a1:5d:0d:75:a4:94:92:74:61:59:06:
60:73:38:0b:10:07:85:b1:4f:60:c4:e8:83:f1:de:
1a:72:f4:bf:6e:22:a2:f0:59:7c:f6:7e:2e:7a:c5:
ce:73:40:01:0e:45:b7:06:97:c0:b4:4a:8a:07:9d:
3d:29:87:4c:e2:e4:b3:58:45:cc:25:ab:1c:07:50:
96:13:c3:c2:85:0c:fd:e0:39:0f:58:f2:b1:98:6e:
e0:ce:34:83:75:da:fd:da:20:35:53:37:e0:92:2c:
89:2f:4c:c1:ad:52:05:ac:4b:6e:52:1e:ef:68:9d:
68:a7:59:b5:9c:e8:89:d2:bc:51:45:12:6c:a5:34:
53:5c:b5:69:1d:bb:41:74:2a:08:03:42:d0:d7:b5:
c9:74:35:d0:35:31:95:b6:49:97:24:f3:bb:74:50:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F8:00:29:83:C3:86:0F:52:46:8F:1B:16:07:F3:2E:94:68:A7:4A
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:af:33:f2:ba:a9:59:ab:1b:81:88:9d:78:a1:cc:bd:f4:7f:
75:ef:51:d8:80:9c:cc:c8:72:9b:71:59:16:6f:38:98:35:a8:
8e:fc:1d:71:0e:04:de:5e:c8:65:13:6b:95:c7:26:80:29:1f:
07:0e:80:40:cc:cd:aa:ab:39:6b:88:45:a9:5b:99:05:13:49:
97:a7:75:a5:10:8f:00:6b:b2:e5:a3:0f:ca:93:24:71:9c:cf:
43:5a:9b:aa:cd:ce:1f:5a:3f:0f:60:00:15:0a:d8:f3:ab:9c:
2c:45:26:38:95:6f:7c:f1:bf:ab:be:fb:05:1d:61:db:28:38:
d7:a6:10:3d:33:22:c2:a2:bd:55:df:8c:e0:00:b7:ec:5a:ba:
d5:ef:43:44:6f:98:2f:69:53:e7:f1:b2:bb:38:0d:71:66:d5:
5a:7b:53:3f:97:5c:4b:20:19:04:75:e3:b7:61:66:91:f9:3b:
35:b7:3a:4c:82:44:f7:c0:08:b3:84:2b:7a:4b:20:0e:21:fa:
c6:22:5d:de:39:f9:72:f6:cc:70:99:49:72:de:46:39:80:65:
d6:f7:e3:cf:1f:e1:d4:b8:1c:28:71:b2:04:b8:92:91:ee:19:
70:ac:80:c5:50:d1:b3:e8:e8:26:53:c4:fe:07:4f:d7:26:d8:
64:26:4d:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNQPkMoafs/HrzarjhjFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZTQyYTU4M2ZhMjUxYjQzMmNmYzFkY2E4YmQzNDFkNTA2
NjBiOTUwHhcNMjUwMjE3MDAwMDQxWhcNMjUwMjE4MDAwMDQxWjAzMTEwLwYDVQQD
EygyZWY4MDAyOTgzYzM4NjBmNTI0NjhmMWIxNjA3ZjMyZTk0NjhhNzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BMLe315QKta7+6RTERg+5fQhQlO
ekjlZMIAWRkKpgRcjJBE6xg6MadXuO/m81ihs6nZptmYYZxZQK9ANRPJa//VpMtK
8CVzqvVbt30017XHJICXaO3O6d228k2BoV0NdaSUknRhWQZgczgLEAeFsU9gxOiD
8d4acvS/biKi8Fl89n4uesXOc0ABDkW3BpfAtEqKB509KYdM4uSzWEXMJascB1CW
E8PChQz94DkPWPKxmG7gzjSDddr92iA1UzfgkiyJL0zBrVIFrEtuUh7vaJ1op1m1
nOiJ0rxRRRJspTRTXLVpHbtBdCoIA0LQ17XJdDXQNTGVtkmXJPO7dFC4MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC74ACmDw4YPUkaPGxYH8y6UaKdKMB8GA1UdIwQY
MBaAFNLkKlg/olG0Ms/B3Ki9NB1QZguVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMt
ZmRjMWRjZGEyOTYxLzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMtZmRjMWRjZGEyOTYx
LzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq8z8rqp
WasbgYideKHMvfR/de9R2ICczMhym3FZFm84mDWojvwdcQ4E3l7IZRNrlccmgCkf
Bw6AQMzNqqs5a4hFqVuZBRNJl6d1pRCPAGuy5aMPypMkcZzPQ1qbqs3OH1o/D2AA
FQrY86ucLEUmOJVvfPG/q777BR1h2yg416YQPTMiwqK9Vd+M4AC37Fq61e9DRG+Y
L2lT5/GyuzgNcWbVWntTP5dcSyAZBHXjt2Fmkfk7Nbc6TIJE98AIs4QreksgDiH6
xiJd3jn5cvbMcJlJct5GOYBl1vfjzx/h1LgcKHGyBLiSke4ZcKyAxVDRs+joJlPE
/gdP1ybYZCZNmw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:48 2025 by rpki-client