Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: LQMx0IeOTG0HINNEyF4BfRSQ/4XAVvy4Til5swvojUE=
Subject key identifier: 86:0A:08:6C:E6:4E:2B:69:C6:55:65:10:8F:81:56:F2:09:C9:72:70
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 019510FDF07A5931105704E71895D2E89EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 0405
Signing time: Sun 16 Feb 2025 23:00:32 +0000
Manifest this update: Sun 16 Feb 2025 23:00:32 +0000
Manifest next update: Mon 17 Feb 2025 23:00:32 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: TKzUPvavK0k8IzNiGAP3it6HIRSyuQlaN9O3jzKb14E=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:f0:7a:59:31:10:57:04:e7:18:95:d2:e8:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Feb 16 23:00:32 2025 GMT
Not After : Feb 17 23:00:32 2025 GMT
Subject: CN=860a086ce64e2b69c65565108f8156f209c97270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:74:8e:76:35:b1:c4:bd:77:b9:0d:fd:dd:
4e:36:0b:8d:0a:63:f3:c4:0a:8f:d8:35:af:fc:bd:
4b:d0:85:c8:da:9e:21:66:17:bb:f0:29:d6:a3:db:
e4:e5:c0:fb:0d:27:ff:e1:9c:dd:53:83:27:aa:30:
40:50:b8:3e:13:d3:35:ad:91:aa:4d:30:42:b7:09:
ab:39:fd:ce:4e:00:d6:c8:0f:b6:cc:0b:a1:a3:c3:
3b:4c:c8:c8:f7:34:d5:0d:e0:13:40:b6:dc:69:47:
c0:9f:26:49:2c:e4:0a:ec:ff:f7:1e:e1:17:62:84:
ba:96:f4:ee:84:11:f8:b4:4b:23:f5:77:cc:63:f6:
ec:c1:1d:a5:3c:39:b2:00:10:eb:fa:cd:9b:ce:6e:
65:e3:67:00:7e:f8:94:d6:67:30:62:ac:55:84:60:
35:fa:38:99:66:9e:85:9c:79:94:3f:fb:20:29:1d:
51:17:67:14:76:cb:66:dc:91:35:10:44:49:c5:e5:
fe:5a:2a:7e:11:bc:d9:7d:e9:ce:a0:8f:fc:c6:bf:
83:f7:62:f2:98:70:f5:d9:91:d9:5e:de:a1:f2:f7:
ad:b2:c2:ec:5b:4f:7c:9a:75:b6:6f:c5:cd:61:fe:
98:1b:d4:22:4b:a9:51:25:3b:6c:29:a1:64:92:cc:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0A:08:6C:E6:4E:2B:69:C6:55:65:10:8F:81:56:F2:09:C9:72:70
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6a:fc:bc:ff:87:f2:e6:35:c7:10:c3:d9:37:c5:18:71:d5:
d9:44:95:29:c4:ee:4a:53:b3:7f:0e:6f:ec:ae:2d:41:4f:57:
5c:41:2e:9b:60:1d:22:ff:71:61:c1:13:80:ca:ab:14:ea:ff:
88:a0:26:8b:72:fd:a9:00:c5:37:97:9c:29:6a:cc:b1:81:87:
fe:7d:2e:a3:cd:52:42:a2:74:cc:1c:bc:d6:4e:66:46:ae:80:
26:b4:bf:db:a5:f5:97:36:ab:2f:d0:a7:00:ac:37:5a:11:24:
16:ca:70:dd:f4:5d:c8:80:18:97:80:d0:a7:56:c5:5e:0e:07:
d4:78:26:99:21:5f:8c:a7:2f:cb:78:02:af:69:36:25:3f:2a:
f2:9e:76:0f:ef:36:4a:d8:58:0e:6b:ab:4b:f5:f6:f0:df:fa:
3b:87:49:c7:9c:87:0d:ab:d8:52:73:2f:04:ac:08:b3:31:f6:
40:84:a0:d2:53:4b:10:71:9a:71:af:5c:2a:b3:21:e7:a9:c3:
01:c3:f2:f0:06:0f:a5:1b:5c:26:c5:67:3f:f0:2e:08:1c:e1:
5f:84:1f:20:b5:29:44:b2:b6:c1:75:9a:6b:b0:c7:de:7c:e9:
c5:8f:f9:d5:ed:d0:5a:36:2d:0e:46:fa:0f:93:f5:c9:d0:99:
1e:35:5e:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/fB6WTEQVwTnGJXS6J7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmI4YTVlZDQ2YWMzMDQ2ZDQ1MDE0NzIzYTBiOTJmYWNm
MmE0OWIwHhcNMjUwMjE2MjMwMDMyWhcNMjUwMjE3MjMwMDMyWjAzMTEwLwYDVQQD
Eyg4NjBhMDg2Y2U2NGUyYjY5YzY1NTY1MTA4ZjgxNTZmMjA5Yzk3MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SN0jnY1scS9d7kN/d1ONguNCmPz
xAqP2DWv/L1L0IXI2p4hZhe78CnWo9vk5cD7DSf/4ZzdU4MnqjBAULg+E9M1rZGq
TTBCtwmrOf3OTgDWyA+2zAuho8M7TMjI9zTVDeATQLbcaUfAnyZJLOQK7P/3HuEX
YoS6lvTuhBH4tEsj9XfMY/bswR2lPDmyABDr+s2bzm5l42cAfviU1mcwYqxVhGA1
+jiZZp6FnHmUP/sgKR1RF2cUdstm3JE1EERJxeX+Wip+EbzZfenOoI/8xr+D92Ly
mHD12ZHZXt6h8vetssLsW098mnW2b8XNYf6YG9QiS6lRJTtsKaFkksxDBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYKCGzmTitpxlVlEI+BVvIJyXJwMB8GA1UdIwQY
MBaAFNkril7UasMEbUUBRyOguS+s8qSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYt
NDE1NjlhYmMzN2NjLzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYtNDE1NjlhYmMzN2Nj
LzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWr8vP+H
8uY1xxDD2TfFGHHV2USVKcTuSlOzfw5v7K4tQU9XXEEum2AdIv9xYcETgMqrFOr/
iKAmi3L9qQDFN5ecKWrMsYGH/n0uo81SQqJ0zBy81k5mRq6AJrS/26X1lzarL9Cn
AKw3WhEkFspw3fRdyIAYl4DQp1bFXg4H1HgmmSFfjKcvy3gCr2k2JT8q8p52D+82
SthYDmurS/X28N/6O4dJx5yHDavYUnMvBKwIszH2QISg0lNLEHGaca9cKrMh56nD
AcPy8AYPpRtcJsVnP/AuCBzhX4QfILUpRLK2wXWaa7DH3nzpxY/51e3QWjYtDkb6
D5P1ydCZHjVeCw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:14 2025 by rpki-client