Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: CjY2nB0Z7qMLLfIxD+IFP14qrjvZuI7As768/f9fGU0=
Subject key identifier: 9D:2B:51:11:00:4F:41:5C:CE:6F:96:94:2D:D0:5B:B2:89:2C:8A:E9
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 019511A24B8F00EF91DFE0F16E18651094A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 03EA
Signing time: Mon 17 Feb 2025 02:00:03 +0000
Manifest this update: Mon 17 Feb 2025 02:00:03 +0000
Manifest next update: Tue 18 Feb 2025 02:00:03 +0000
Files and hashes: 1: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (hash: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: lqMbGLw/2A+PdRySflXKyzOTUDQX4wRMY3dGcfqB9Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:4b:8f:00:ef:91:df:e0:f1:6e:18:65:10:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Feb 17 02:00:03 2025 GMT
Not After : Feb 18 02:00:03 2025 GMT
Subject: CN=9d2b5111004f415cce6f96942dd05bb2892c8ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:12:14:74:fe:37:65:77:81:42:51:49:fc:
c3:29:5e:63:85:ea:e8:bb:6c:03:67:59:57:74:35:
cf:bd:97:23:92:ff:7a:e1:eb:a2:32:84:62:7a:25:
38:7a:19:19:cb:c8:3a:cd:f8:14:49:e8:fe:2e:0e:
88:65:ae:1e:9c:a0:43:01:4f:26:38:f0:c9:71:b6:
d2:90:be:83:de:18:8c:14:7c:ad:66:6a:9b:99:69:
f3:60:83:ca:09:ae:0a:8e:19:c8:93:13:b9:52:6d:
7e:4b:36:86:1c:91:b9:55:db:fb:55:23:e3:51:05:
a7:40:90:83:53:8d:b3:a9:a1:98:12:4e:3b:0b:06:
6e:4f:d8:4a:82:82:09:a3:f8:cd:0f:5a:57:cb:a2:
67:2a:a6:3f:29:c5:b1:2f:59:6c:f1:aa:81:f5:42:
18:5d:18:21:39:ec:5e:1b:ba:02:80:64:77:b8:d5:
8a:fa:8e:fb:17:99:d4:47:75:bf:49:0c:57:8d:cd:
20:da:24:bc:eb:08:90:4b:3e:cb:3d:a4:07:15:61:
88:de:f7:42:ff:8e:f9:42:b2:3a:36:97:00:f1:c0:
39:83:d9:8e:cb:55:2f:25:55:f8:0f:e6:a2:a7:f0:
05:2c:8a:22:88:6e:de:78:f8:1d:6d:e5:39:a7:12:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:51:11:00:4F:41:5C:CE:6F:96:94:2D:D0:5B:B2:89:2C:8A:E9
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9c:de:5e:ba:66:e7:1c:f0:9c:a3:21:da:4f:0c:ea:ce:0b:
46:ab:3c:4d:ce:09:11:78:20:cf:d7:cb:43:16:de:b4:2f:a3:
82:0e:3a:64:d4:5f:13:22:9b:35:6e:53:eb:b3:92:7c:c2:f8:
5f:6c:af:e7:82:c3:00:47:57:16:54:ae:58:73:ce:36:89:1b:
b7:bb:bc:01:96:b6:a9:d0:b0:95:8b:a0:84:70:8e:7a:64:6a:
17:de:f3:54:1b:1b:75:67:7b:25:a8:61:eb:62:0b:61:d3:1e:
12:44:82:6d:0d:f0:26:51:48:40:22:2b:0d:e6:22:7c:cb:b0:
a8:97:63:5f:c7:53:d6:48:d0:74:cf:be:85:08:b2:51:8d:af:
08:99:c5:d0:91:ec:c1:7f:dd:ce:e9:a8:5f:93:a4:67:a1:48:
6e:34:16:47:53:4d:ec:f2:9b:39:2d:59:10:24:5f:bf:3e:5f:
e7:21:54:d4:89:c0:37:c4:dd:a8:f9:ab:e9:14:be:c0:cd:91:
5d:fd:b3:07:dd:ff:f2:83:32:e1:31:c4:46:fa:2a:38:93:11:
32:93:e9:96:75:5a:6b:86:32:3d:d6:01:29:75:7e:8c:2d:a5:
91:e3:7c:c8:d3:75:5b:49:d2:f4:6d:14:ac:1a:21:34:cf:0f:
da:ae:eb:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURokuPAO+R3+DxbhhlEJSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ0OTc1YTVkYmRiZjgyM2I0YTBhNmI3ZWViOTliMTQ4
NDM2N2UwHhcNMjUwMjE3MDIwMDAzWhcNMjUwMjE4MDIwMDAzWjAzMTEwLwYDVQQD
Eyg5ZDJiNTExMTAwNGY0MTVjY2U2Zjk2OTQyZGQwNWJiMjg5MmM4YWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh8SFHT+N2V3gUJRSfzDKV5jhero
u2wDZ1lXdDXPvZcjkv964euiMoRieiU4ehkZy8g6zfgUSej+Lg6IZa4enKBDAU8m
OPDJcbbSkL6D3hiMFHytZmqbmWnzYIPKCa4KjhnIkxO5Um1+SzaGHJG5Vdv7VSPj
UQWnQJCDU42zqaGYEk47CwZuT9hKgoIJo/jND1pXy6JnKqY/KcWxL1ls8aqB9UIY
XRghOexeG7oCgGR3uNWK+o77F5nUR3W/SQxXjc0g2iS86wiQSz7LPaQHFWGI3vdC
/475QrI6NpcA8cA5g9mOy1UvJVX4D+aip/AFLIoiiG7eePgdbeU5pxJwBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0rUREAT0Fczm+WlC3QW7KJLIrpMB8GA1UdIwQY
MBaAFK30SXWl29v4I7SgprfuuZsUhDZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDkt
YmJiMGM4MDI4ZTJiLzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDktYmJiMGM4MDI4ZTJi
LzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5zeXrpm
5xzwnKMh2k8M6s4LRqs8Tc4JEXggz9fLQxbetC+jgg46ZNRfEyKbNW5T67OSfML4
X2yv54LDAEdXFlSuWHPONokbt7u8AZa2qdCwlYughHCOemRqF97zVBsbdWd7Jahh
62ILYdMeEkSCbQ3wJlFIQCIrDeYifMuwqJdjX8dT1kjQdM++hQiyUY2vCJnF0JHs
wX/dzumoX5OkZ6FIbjQWR1NN7PKbOS1ZECRfvz5f5yFU1InAN8TdqPmr6RS+wM2R
Xf2zB93/8oMy4THERvoqOJMRMpPplnVaa4YyPdYBKXV+jC2lkeN8yNN1W0nS9G0U
rBohNM8P2q7rxg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:20 2025 by rpki-client