Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier: d0ZCE73vRo5trPfvcFXv1A2qdHcEJV19q/uIQUZje/Q=
Subject key identifier: 90:A6:DB:53:6E:59:34:0B:4E:FA:0F:41:9A:F6:5F:47:FC:53:27:1D
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 019511350E1B4E1C4523228DAAE4D4630980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number: 0A80
Signing time: Mon 17 Feb 2025 00:00:44 +0000
Manifest this update: Mon 17 Feb 2025 00:00:44 +0000
Manifest next update: Tue 18 Feb 2025 00:00:44 +0000
Files and hashes: 1: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: WyfFG2WntpiV/Ap59LFQjL/Q1OGPZOteXigMdYVGbdk=)
2: bkv0tf8B7iS-vnBK_3AdS1Bzza4.roa (hash: sVeZTcwjMup/pTvS7GUIobKYbPGzbA4y8WVwVhuhqdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:0e:1b:4e:1c:45:23:22:8d:aa:e4:d4:63:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Feb 17 00:00:44 2025 GMT
Not After : Feb 18 00:00:44 2025 GMT
Subject: CN=90a6db536e59340b4efa0f419af65f47fc53271d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:d8:f3:1d:a8:cf:c2:27:99:2f:77:fa:b6:
dd:bb:fb:03:b9:9b:1e:a7:96:d5:67:08:b6:9d:0c:
c5:41:cc:5d:1d:95:c6:d6:90:0f:52:6e:b2:d2:ab:
b0:81:83:85:36:aa:e3:46:46:bd:3a:36:44:e4:bb:
f6:6a:89:c4:21:38:16:ba:6a:7f:db:6d:fe:21:90:
da:80:8a:e0:c3:19:02:2c:f5:23:9c:42:3f:2d:a1:
f9:d1:3c:db:dc:be:4c:c8:99:76:e2:cb:21:92:6c:
24:32:21:44:4a:40:1d:60:a7:df:e6:1c:94:e0:5e:
ed:57:80:50:66:d5:e7:5f:69:6f:bd:f3:3d:3c:1f:
48:7b:28:9d:15:61:5e:36:a8:bb:54:2a:9a:f5:d0:
d1:9f:7b:08:21:3d:ff:d0:13:b3:75:60:90:8c:ad:
a8:7f:a0:d0:27:29:ce:21:1a:45:2a:2e:44:4c:5b:
d6:86:ab:cf:d4:fe:4f:59:1c:af:31:46:e9:85:e4:
08:e6:ef:40:1e:ee:52:f7:ea:dd:e4:62:c6:41:74:
4e:44:5e:7c:fc:99:9f:5f:fe:fb:ef:32:76:fa:c6:
89:a7:89:25:13:06:c3:e8:89:63:41:d5:13:f2:8a:
9e:68:f1:3e:3a:5c:20:c9:a5:2c:92:ab:e3:de:d0:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A6:DB:53:6E:59:34:0B:4E:FA:0F:41:9A:F6:5F:47:FC:53:27:1D
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cc:54:b7:93:fc:20:7d:03:a9:37:28:4f:a6:66:49:1e:e1:
5d:f6:f9:7b:e1:da:14:22:e3:eb:8a:e8:bb:58:b2:02:d0:38:
3c:a3:43:53:2c:4f:c6:d6:07:6d:a2:7e:c7:fe:d8:f9:2f:a2:
16:39:c2:b3:d0:69:67:53:a2:f5:fe:2a:51:6d:d1:7d:4b:a9:
c3:79:bf:07:90:2f:a5:b7:3a:97:24:9d:66:7b:76:31:9e:6a:
df:ec:86:90:78:04:13:f6:f2:3b:66:dc:a4:82:61:f3:07:d3:
38:3e:41:7a:45:e6:8d:24:b1:f2:1d:a9:e3:30:69:49:44:24:
17:2e:4c:78:e9:d3:0b:8a:9b:a4:b7:9b:2c:37:51:46:d2:bc:
3e:c0:f6:54:1c:9a:33:a3:aa:66:03:0b:18:0f:e1:88:be:2e:
bc:0b:37:b5:93:88:e5:be:57:5d:39:3d:07:cd:10:6b:ef:d6:
8e:61:08:e6:ec:6e:3b:c1:84:76:4a:5d:bc:d1:ad:6b:b7:79:
3b:d8:1e:87:65:65:f5:63:61:17:fe:48:7a:4d:0b:90:3c:d5:
10:db:45:a6:ac:37:94:03:0c:c8:da:fb:16:0c:84:e8:52:43:
a4:c0:f5:4b:bc:52:2a:b3:7e:5f:61:ea:39:1f:ee:10:8a:6e:
01:14:6d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNQ4bThxFIyKNquTUYwmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMmUyMmNjMTU4NTllZDRhMDc4NGJmZDA4NTg0YjNjOGZi
MjlmOWEwHhcNMjUwMjE3MDAwMDQ0WhcNMjUwMjE4MDAwMDQ0WjAzMTEwLwYDVQQD
Eyg5MGE2ZGI1MzZlNTkzNDBiNGVmYTBmNDE5YWY2NWY0N2ZjNTMyNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSDY8x2oz8InmS93+rbdu/sDuZse
p5bVZwi2nQzFQcxdHZXG1pAPUm6y0quwgYOFNqrjRka9OjZE5Lv2aonEITgWump/
223+IZDagIrgwxkCLPUjnEI/LaH50Tzb3L5MyJl24sshkmwkMiFESkAdYKff5hyU
4F7tV4BQZtXnX2lvvfM9PB9IeyidFWFeNqi7VCqa9dDRn3sIIT3/0BOzdWCQjK2o
f6DQJynOIRpFKi5ETFvWhqvP1P5PWRyvMUbpheQI5u9AHu5S9+rd5GLGQXRORF58
/JmfX/777zJ2+saJp4klEwbD6IljQdUT8oqeaPE+OlwgyaUskqvj3tD76wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCm21NuWTQLTvoPQZr2X0f8UycdMB8GA1UdIwQY
MBaAFP4uIswVhZ7UoHhL/QhYSzyPsp+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQt
ODA2MGM1MDNkODZlLzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQtODA2MGM1MDNkODZl
LzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcxUt5P8
IH0DqTcoT6ZmSR7hXfb5e+HaFCLj64rou1iyAtA4PKNDUyxPxtYHbaJ+x/7Y+S+i
FjnCs9BpZ1Oi9f4qUW3RfUupw3m/B5Avpbc6lySdZnt2MZ5q3+yGkHgEE/byO2bc
pIJh8wfTOD5BekXmjSSx8h2p4zBpSUQkFy5MeOnTC4qbpLebLDdRRtK8PsD2VBya
M6OqZgMLGA/hiL4uvAs3tZOI5b5XXTk9B80Qa+/WjmEI5uxuO8GEdkpdvNGta7d5
O9geh2Vl9WNhF/5Iek0LkDzVENtFpqw3lAMMyNr7FgyE6FJDpMD1S7xSKrN+X2Hq
OR/uEIpuARRtvQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:16 2025 by rpki-client