Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: /QC6SE67Zw8hUIUWbada+1SRAIeOBNP/4wmddLNuLmw=
Subject key identifier: 71:F0:BA:B8:CF:4E:29:E0:0C:DA:EA:21:48:BC:9D:22:13:53:DD:91
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 0194C463B9A4CEDA0503816F004A57F091F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 82
Signing time: Sun 02 Feb 2025 02:00:57 +0000
Manifest this update: Sun 02 Feb 2025 02:00:57 +0000
Manifest next update: Mon 03 Feb 2025 02:00:57 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: nI5NCdmtStkGl8PmX4sZl4lJ0d0.roa (hash: cjYM2aQq4v8XueF1UgYd4H++DRsq/Hpr+SQGx9rrRlE=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: +kTWg9r8imRcx1hs5PFz9TcH+Q4noiQOGlqONRy0mT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:b9:a4:ce:da:05:03:81:6f:00:4a:57:f0:91:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Feb 2 02:00:57 2025 GMT
Not After : Feb 3 02:00:57 2025 GMT
Subject: CN=71f0bab8cf4e29e00cdaea2148bc9d221353dd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:f2:b3:c9:e4:80:ef:d4:5a:7b:d4:d7:24:
a8:84:9c:55:1b:aa:65:84:86:bd:40:21:bd:69:e7:
ba:85:49:66:af:83:a6:5a:1f:7e:5e:26:38:4f:80:
7b:29:82:16:0f:0b:b7:25:ea:16:66:a0:56:f6:98:
54:4f:46:10:8a:3c:3d:5c:aa:a7:3d:3b:19:a4:d4:
a3:b2:85:96:98:c0:e2:49:b0:6d:02:e4:b6:a7:e7:
b8:bd:e5:91:9f:6d:58:38:e0:b1:7e:1d:1c:47:ab:
94:19:66:9a:b4:fc:39:cd:14:a5:6a:c3:31:10:0a:
d6:fd:a2:fe:44:84:dd:81:45:bf:dc:e1:22:51:b1:
90:cd:21:ef:b9:45:b7:9f:d3:4e:8a:6f:91:53:15:
85:9b:a8:22:b2:8f:7a:a9:8b:e8:f0:0e:0d:63:7d:
15:56:18:dc:0e:6e:99:ec:d6:76:20:72:89:f7:d1:
55:1e:1d:21:d0:70:4a:88:a3:50:60:9d:a4:4e:9e:
f3:79:bb:1e:a4:ba:66:7f:bc:4a:87:86:28:09:d3:
3f:92:a5:4d:bb:41:03:bc:c3:b7:8b:dd:32:9b:2d:
08:f4:a5:9f:05:44:16:2e:fb:f2:d3:ff:0e:b6:30:
95:07:b3:cc:19:82:cb:59:c2:1f:79:3d:38:cf:64:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F0:BA:B8:CF:4E:29:E0:0C:DA:EA:21:48:BC:9D:22:13:53:DD:91
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f7:89:01:2d:8c:6e:51:43:d6:8d:20:18:e4:c6:d1:8f:d9:
ce:51:1c:7b:24:7e:41:95:6c:86:c9:1d:1f:32:7b:0d:10:ae:
fe:09:ed:e5:5d:01:17:34:0e:a1:e3:da:9b:6e:46:75:a6:f2:
d8:27:63:95:fe:08:9d:bf:d5:6a:af:0a:1d:44:dd:9c:80:44:
0e:27:24:60:40:c5:82:c7:7f:93:1e:ad:b9:e0:d0:6d:55:5d:
68:31:ec:1c:49:6a:01:4c:08:14:7b:30:1c:be:da:05:f6:25:
9d:a6:ad:fb:15:13:c8:d2:2d:51:3f:1a:62:b2:41:fc:d2:b5:
45:fc:de:23:9d:fc:ee:67:ac:7f:86:5f:77:f0:ca:e3:ad:27:
3f:f4:2c:14:fc:e6:05:ad:e9:01:d8:b5:85:6b:34:b8:ad:bb:
c7:b1:0b:db:06:f6:e1:17:dd:43:e8:f6:e6:12:4b:ab:58:ba:
3a:72:e5:15:e8:8b:e8:aa:9e:4e:50:f8:cf:87:2a:84:08:bb:
ba:ad:aa:0a:4d:bf:19:bc:0b:16:ec:c0:6a:51:43:72:ad:ae:
3c:15:2f:a8:91:97:01:4d:61:79:50:92:a4:2b:d1:89:28:bd:
e9:f1:3b:03:58:bd:dd:e2:16:6b:b9:7d:2d:80:6d:c2:0e:2e:
c6:31:ee:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY7mkztoFA4FvAEpX8JHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZGQyYTgxNTA2MGFhN2U2MjFhMjA5NDM0OTc1OGIyMDM2
ODk2ZjAwHhcNMjUwMjAyMDIwMDU3WhcNMjUwMjAzMDIwMDU3WjAzMTEwLwYDVQQD
Eyg3MWYwYmFiOGNmNGUyOWUwMGNkYWVhMjE0OGJjOWQyMjEzNTNkZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsDys8nkgO/UWnvU1ySohJxVG6pl
hIa9QCG9aee6hUlmr4OmWh9+XiY4T4B7KYIWDwu3JeoWZqBW9phUT0YQijw9XKqn
PTsZpNSjsoWWmMDiSbBtAuS2p+e4veWRn21YOOCxfh0cR6uUGWaatPw5zRSlasMx
EArW/aL+RITdgUW/3OEiUbGQzSHvuUW3n9NOim+RUxWFm6giso96qYvo8A4NY30V
VhjcDm6Z7NZ2IHKJ99FVHh0h0HBKiKNQYJ2kTp7zebsepLpmf7xKh4YoCdM/kqVN
u0EDvMO3i90ymy0I9KWfBUQWLvvy0/8OtjCVB7PMGYLLWcIfeT04z2Tx8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHwurjPTingDNrqIUi8nSITU92RMB8GA1UdIwQY
MBaAFK3dKoFQYKp+YhoglDSXWLIDaJbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYt
OGEwZDBiZjBiNTc3LzEvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYtOGEwZDBiZjBiNTc3
LzEvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfeJAS2M
blFD1o0gGOTG0Y/ZzlEceyR+QZVshskdHzJ7DRCu/gnt5V0BFzQOoePam25Gdaby
2Cdjlf4Inb/Vaq8KHUTdnIBEDickYEDFgsd/kx6tueDQbVVdaDHsHElqAUwIFHsw
HL7aBfYlnaat+xUTyNItUT8aYrJB/NK1RfzeI5387mesf4Zfd/DK460nP/QsFPzm
Ba3pAdi1hWs0uK27x7EL2wb24RfdQ+j25hJLq1i6OnLlFeiL6KqeTlD4z4cqhAi7
uq2qCk2/GbwLFuzAalFDcq2uPBUvqJGXAU1heVCSpCvRiSi96fE7A1i93eIWa7l9
LYBtwg4uxjHuXw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:41 2025 by rpki-client