Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: xnrxsUsm7zCNOz7kRHUB3SEAcTOrVeZb4l5013UdDhs=
Subject key identifier: 88:FE:2E:33:3D:26:21:21:F3:9A:FA:E0:64:08:60:09:FC:40:AF:FE
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 019510C814B02B90B9A89B1E0385BC69EA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:42 +0000
Manifest this update: Sun 16 Feb 2025 22:01:42 +0000
Manifest next update: Mon 17 Feb 2025 22:01:42 +0000
Files and hashes: 1: O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa (hash: EUscQTnmBwchHhwFPgGdViuEre/xVGQ6ryyvSQoTdUA=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: 5yeDhV7JU73P9qKM7pghkbtK/6jDJsg4td7ElnLDhAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:14:b0:2b:90:b9:a8:9b:1e:03:85:bc:69:ea:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Feb 16 22:01:42 2025 GMT
Not After : Feb 17 22:01:42 2025 GMT
Subject: CN=88fe2e333d262121f39afae064086009fc40affe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:f2:45:14:10:03:39:9e:7e:46:ff:5b:79:
65:32:67:9d:6d:d8:19:11:51:a5:a7:2e:52:d1:29:
e1:8b:dc:29:4d:69:ca:b7:03:38:9e:32:3b:9e:4f:
28:a7:e7:e4:4f:c5:25:6b:86:b9:45:72:ec:a8:13:
79:36:d0:5d:5b:1e:f4:f0:13:39:c6:08:91:01:9f:
0d:50:88:df:b7:fc:20:55:92:a2:a2:33:ea:74:0b:
65:c0:1e:b3:8d:6b:c6:54:67:b9:47:a6:0a:af:57:
23:eb:61:74:cc:43:13:22:34:b0:93:01:f7:f8:35:
1d:cd:93:b2:40:c3:f3:7a:8a:d1:05:3d:3d:05:fc:
4d:87:9b:c9:ee:b5:91:0b:fb:17:86:6e:96:5c:6e:
db:9b:45:6c:d1:07:b9:ce:97:f3:51:c5:2f:4e:b9:
a8:33:0c:af:90:53:c9:93:2c:c5:7f:a9:41:80:18:
a5:fe:d5:6e:c9:dc:f9:90:4d:00:28:6c:20:9c:02:
66:83:af:75:02:4e:22:e8:1b:c8:d7:e6:17:84:2a:
6b:5d:1e:8f:f1:26:38:86:e7:40:7e:80:e7:af:66:
0e:38:6a:fe:af:bb:54:dc:12:e0:f6:ae:f7:10:db:
aa:30:e9:10:8e:07:5e:49:cc:4a:0b:e6:99:6e:c2:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:2E:33:3D:26:21:21:F3:9A:FA:E0:64:08:60:09:FC:40:AF:FE
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:74:94:7a:06:80:9e:03:0e:db:ad:8d:91:a2:16:00:89:16:
aa:54:a8:69:e6:c2:36:aa:f6:90:0b:19:43:71:a6:c3:b9:d6:
76:71:b4:cb:35:78:1d:45:2e:13:f5:50:04:e6:34:c4:66:c7:
1f:34:f9:c4:51:17:e3:f3:3a:15:28:a9:e2:39:cc:be:dc:a3:
4c:17:0e:c9:93:42:a8:21:52:d9:53:21:f8:06:28:6a:36:26:
2d:0b:4a:01:a6:4c:ec:dd:fd:99:7e:8c:65:52:67:c9:44:9e:
73:ca:b3:35:99:5e:80:63:50:e1:5e:81:07:be:38:e8:63:6d:
64:bb:5b:07:5e:c9:55:d4:a8:32:ed:44:8b:a1:fc:1e:67:bf:
ed:fb:54:3a:fe:bb:2f:4e:b1:f8:6a:56:11:51:e4:83:7c:a8:
87:35:19:b9:55:e9:65:ac:7e:b1:e4:e2:12:4e:a4:cb:2a:0d:
ed:09:a0:8c:44:c2:61:27:45:2b:d5:77:66:b6:a6:91:4d:15:
66:7e:fe:91:19:de:45:5d:e6:b3:85:5e:ec:0d:d2:4a:4f:77:
77:f4:40:c3:c5:dc:a3:1d:fc:19:de:2e:06:86:5f:24:ad:30:
07:9d:b2:f2:99:83:0a:43:de:4b:a0:62:a6:cf:09:3d:8a:62:
0a:6e:3f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQyBSwK5C5qJseA4W8aep6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNjI4YjkzNjYxZTkwNTg4NzM1OWZjOGU5YTE4ODgwNzVk
YjNjZDgwHhcNMjUwMjE2MjIwMTQyWhcNMjUwMjE3MjIwMTQyWjAzMTEwLwYDVQQD
Eyg4OGZlMmUzMzNkMjYyMTIxZjM5YWZhZTA2NDA4NjAwOWZjNDBhZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOPyRRQQAzmefkb/W3llMmedbdgZ
EVGlpy5S0Snhi9wpTWnKtwM4njI7nk8op+fkT8Ula4a5RXLsqBN5NtBdWx708BM5
xgiRAZ8NUIjft/wgVZKiojPqdAtlwB6zjWvGVGe5R6YKr1cj62F0zEMTIjSwkwH3
+DUdzZOyQMPzeorRBT09BfxNh5vJ7rWRC/sXhm6WXG7bm0Vs0Qe5zpfzUcUvTrmo
MwyvkFPJkyzFf6lBgBil/tVuydz5kE0AKGwgnAJmg691Ak4i6BvI1+YXhCprXR6P
8SY4hudAfoDnr2YOOGr+r7tU3BLg9q73ENuqMOkQjgdeScxKC+aZbsLtUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIj+LjM9JiEh85r64GQIYAn8QK/+MB8GA1UdIwQY
MBaAFL9ii5NmHpBYhzWfyOmhiIB12zzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJLTGsyWWVrRmlITlpfSTZhR0lnSFhiUE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YzgzZTctYTM1Mi00ZTIxLWE3MzEt
MTU3YjVhZDZhYjdiLzEvdjJLTGsyWWVrRmlITlpfSTZhR0lnSFhiUE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YzgzZTctYTM1Mi00ZTIxLWE3MzEtMTU3YjVhZDZhYjdi
LzEvdjJLTGsyWWVrRmlITlpfSTZhR0lnSFhiUE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnSUegaA
ngMO262NkaIWAIkWqlSoaebCNqr2kAsZQ3Gmw7nWdnG0yzV4HUUuE/VQBOY0xGbH
HzT5xFEX4/M6FSip4jnMvtyjTBcOyZNCqCFS2VMh+AYoajYmLQtKAaZM7N39mX6M
ZVJnyUSec8qzNZlegGNQ4V6BB7446GNtZLtbB17JVdSoMu1Ei6H8Hme/7ftUOv67
L06x+GpWEVHkg3yohzUZuVXpZax+seTiEk6kyyoN7QmgjETCYSdFK9V3ZramkU0V
Zn7+kRneRV3ms4Ve7A3SSk93d/RAw8Xcox38Gd4uBoZfJK0wB52y8pmDCkPeS6Bi
ps8JPYpiCm4/bA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:15 2025 by rpki-client