Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: 1YZB41Ck2vmbr/vjQx+eFnSv6bow8bny8LoT/0XQyIM=
Subject key identifier: C5:6E:D4:44:1B:EC:B3:B8:73:D4:22:44:91:23:F4:FB:E5:AB:6E:AF
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 01951247893186CC770A3455481A40E62422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0698
Signing time: Mon 17 Feb 2025 05:00:32 +0000
Manifest this update: Mon 17 Feb 2025 05:00:32 +0000
Manifest next update: Tue 18 Feb 2025 05:00:32 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: uyQjbpEvwFqSm4PWgn5H79q/crPPTGLHLj7uEXcLXW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:89:31:86:cc:77:0a:34:55:48:1a:40:e6:24:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Feb 17 05:00:32 2025 GMT
Not After : Feb 18 05:00:32 2025 GMT
Subject: CN=c56ed4441becb3b873d422449123f4fbe5ab6eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:b8:c6:a6:e2:0f:2e:24:c7:2e:d2:40:2f:
23:72:0b:c0:52:a3:ec:aa:04:ef:ab:0d:43:42:d5:
f1:09:cf:64:8f:10:1c:45:17:f0:9b:66:dc:2d:9f:
9a:59:df:a6:8e:11:93:16:51:65:93:f3:00:2a:8d:
6e:9a:2b:52:9f:90:7c:e2:b6:c3:e1:f1:2a:98:45:
99:24:45:6f:43:f7:dd:02:6a:49:df:a6:6c:a0:8e:
43:2b:1c:7e:b3:88:42:9b:fd:c0:d1:32:37:d7:4c:
71:6c:35:49:cd:9a:72:1b:96:c8:a9:a4:13:a3:f6:
35:29:68:f4:cb:49:5d:82:29:63:26:1d:1b:ef:1b:
48:e8:ca:91:cc:8f:02:96:b4:6a:6c:fb:df:e5:08:
fc:75:e6:91:05:f6:d5:76:bb:83:02:5a:bf:d0:90:
b9:b5:86:bd:b9:b3:95:32:b5:df:c8:30:48:b2:ce:
a0:24:99:e5:c2:e3:a0:98:ec:87:eb:b3:2c:1c:33:
98:03:c7:4a:07:ed:be:14:25:82:31:d7:05:c7:97:
2d:ef:45:ab:74:47:18:1d:df:b9:f3:92:3d:b3:80:
71:f8:7b:60:6f:fb:28:98:33:62:35:12:b8:2d:b0:
53:46:5a:06:65:10:8c:03:7a:dd:ea:5c:a8:d3:e2:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6E:D4:44:1B:EC:B3:B8:73:D4:22:44:91:23:F4:FB:E5:AB:6E:AF
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4a:1a:8a:e5:b6:a2:a5:3d:2d:ca:09:fd:4f:2a:b2:0a:c5:
8e:44:c9:84:3b:91:d6:6b:d0:d8:0d:a9:54:35:71:f0:a3:52:
de:a7:6d:21:66:1a:a5:d1:bd:11:94:df:40:a6:bc:6d:af:19:
19:67:4e:34:56:24:38:eb:47:08:e5:66:38:9d:14:88:f4:a4:
78:9f:87:e7:9f:74:aa:c4:ba:b5:3b:83:04:fa:07:1c:94:9b:
00:11:c7:93:d5:09:4a:03:69:f7:ee:11:a2:62:f8:85:6f:33:
45:74:65:31:a4:9f:3c:c8:70:49:b9:a2:26:10:ef:8a:7d:40:
9f:c4:a2:4f:f1:c5:e8:fb:6e:86:b5:c3:6e:4c:31:66:66:d0:
54:15:7c:34:c7:d5:c0:ba:c5:47:af:ed:48:8b:9b:b0:b0:5c:
c1:3b:c4:66:13:f0:16:ae:11:8c:eb:46:ff:34:ce:de:2b:42:
8b:ef:66:81:a2:a8:ba:d4:cc:68:f6:b1:66:b2:ff:83:ee:19:
d7:19:ef:44:47:08:2d:3c:af:92:62:29:17:2e:a6:24:4b:98:
55:e1:89:95:ae:da:3b:56:01:d2:49:33:2c:4c:b7:e5:67:0e:
9a:8a:0b:fd:25:61:e6:39:43:6c:8e:f4:6e:0c:29:df:83:97:
14:26:82:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR4kxhsx3CjRVSBpA5iQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYWQ5Y2Q1MDM0ZjgxNTU4ZjgzZDIzOGVjYTQwNjMzMmJk
N2JhODUwHhcNMjUwMjE3MDUwMDMyWhcNMjUwMjE4MDUwMDMyWjAzMTEwLwYDVQQD
EyhjNTZlZDQ0NDFiZWNiM2I4NzNkNDIyNDQ5MTIzZjRmYmU1YWI2ZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/O4xqbiDy4kxy7SQC8jcgvAUqPs
qgTvqw1DQtXxCc9kjxAcRRfwm2bcLZ+aWd+mjhGTFlFlk/MAKo1umitSn5B84rbD
4fEqmEWZJEVvQ/fdAmpJ36ZsoI5DKxx+s4hCm/3A0TI310xxbDVJzZpyG5bIqaQT
o/Y1KWj0y0ldgiljJh0b7xtI6MqRzI8ClrRqbPvf5Qj8deaRBfbVdruDAlq/0JC5
tYa9ubOVMrXfyDBIss6gJJnlwuOgmOyH67MsHDOYA8dKB+2+FCWCMdcFx5ct70Wr
dEcYHd+585I9s4Bx+Htgb/somDNiNRK4LbBTRloGZRCMA3rd6lyo0+JvXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVu1EQb7LO4c9QiRJEj9Pvlq26vMB8GA1UdIwQY
MBaAFDutnNUDT4FVj4PSOOykBjMr17qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgt
NGJhNWYyMDZmNjVhLzEvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgtNGJhNWYyMDZmNjVh
LzEvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUoaiuW2
oqU9LcoJ/U8qsgrFjkTJhDuR1mvQ2A2pVDVx8KNS3qdtIWYapdG9EZTfQKa8ba8Z
GWdONFYkOOtHCOVmOJ0UiPSkeJ+H5590qsS6tTuDBPoHHJSbABHHk9UJSgNp9+4R
omL4hW8zRXRlMaSfPMhwSbmiJhDvin1An8SiT/HF6PtuhrXDbkwxZmbQVBV8NMfV
wLrFR6/tSIubsLBcwTvEZhPwFq4RjOtG/zTO3itCi+9mgaKoutTMaPaxZrL/g+4Z
1xnvREcILTyvkmIpFy6mJEuYVeGJla7aO1YB0kkzLEy35WcOmooL/SVh5jlDbI70
bgwp34OXFCaCWw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:39 2025 by rpki-client