Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: Vt3u8HO3lO8XzXhZXEaLrF95ZM5FpwpkmaoL3/ToS+c=
Subject key identifier: 16:3E:C4:2B:6E:3D:AA:C6:56:1F:FC:48:CE:F4:83:53:61:73:C9:24
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 0195116BE84425B5D45F3E5FB810F6C55E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 01:00:39 +0000
Manifest this update: Mon 17 Feb 2025 01:00:39 +0000
Manifest next update: Tue 18 Feb 2025 01:00:39 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: xkmivN8buzcjF6820TWMvcVhu7RBeYRchjDnjH59Zhg=)
2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e8:44:25:b5:d4:5f:3e:5f:b8:10:f6:c5:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Feb 17 01:00:39 2025 GMT
Not After : Feb 18 01:00:39 2025 GMT
Subject: CN=163ec42b6e3daac6561ffc48cef483536173c924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:95:57:f5:b1:87:62:fd:e1:4c:38:76:50:
9e:e7:f8:74:28:f9:03:fb:b7:58:10:22:5f:7f:a7:
ea:2d:ea:d2:cd:93:44:f9:8b:33:66:7b:7c:9c:4a:
3c:51:a3:22:03:a4:f9:a1:a5:33:14:76:cd:c4:f5:
88:fb:fb:b8:e3:e1:04:97:98:b3:d7:eb:6a:98:ed:
6b:66:67:b9:87:dd:52:58:8c:0c:e2:97:82:16:5a:
b6:8e:5d:17:0f:18:42:83:b3:d4:19:73:cd:07:b2:
36:b1:cc:7f:6b:a6:a9:93:65:d0:5b:6f:99:c6:df:
8b:60:31:65:2b:96:43:49:3a:b9:68:8a:6d:e8:55:
88:be:62:f9:13:99:75:61:a5:62:c9:9e:2e:36:13:
66:1c:04:fe:a1:fa:ea:ee:9f:ec:21:58:9f:9b:cb:
ec:b2:22:ed:5a:d7:c0:82:c5:87:0f:9c:8e:1b:4d:
0c:dd:d6:04:77:45:0e:00:8b:46:aa:5e:bb:84:62:
19:fe:a8:26:da:ef:1c:e6:d1:55:cf:86:18:3f:41:
62:75:74:1c:5e:b9:bc:b1:c8:22:f7:d3:7b:9b:de:
fd:6d:99:6c:2f:4a:94:7b:d4:21:f5:20:7f:4a:e0:
56:10:25:ef:9b:6a:ce:f9:f3:7a:ea:3a:e6:ea:01:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:C4:2B:6E:3D:AA:C6:56:1F:FC:48:CE:F4:83:53:61:73:C9:24
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:06:66:cd:07:23:0e:4c:70:f4:59:e3:76:de:32:ff:66:b1:
01:12:23:dc:c3:ae:f1:51:19:54:5e:0c:93:9d:5a:1a:11:55:
ee:de:8b:72:03:69:47:58:35:ce:27:76:9a:4d:57:5c:13:88:
ce:a9:2a:9c:4a:5d:fd:88:21:50:fa:77:2e:e8:4a:bb:cc:3a:
9a:de:eb:36:0e:80:1c:c0:eb:e3:78:11:2a:c4:17:91:27:31:
14:25:32:f9:3d:0d:40:6d:6b:ca:1a:a5:c4:a2:f0:63:47:bd:
50:e8:bd:24:96:58:f8:6d:94:d0:a5:5c:a5:86:5e:73:a0:11:
dd:3d:01:f4:cf:32:fc:26:2f:63:4a:c5:7a:55:00:be:07:e1:
2b:ad:5b:bd:92:1f:84:2c:f9:6a:3e:fe:6e:d5:a9:f4:ce:35:
b3:f0:40:7b:a7:72:69:e1:02:e1:bb:04:c2:f7:a6:90:e1:b3:
09:91:20:26:1d:39:90:eb:d9:b4:19:26:72:77:f5:43:6e:32:
04:0e:e9:72:3e:13:03:19:c1:8f:12:6f:cf:21:91:23:7f:1c:
f3:e4:b5:73:22:82:79:e5:ca:76:06:6e:1b:d6:e7:3c:ef:ac:
a4:ea:3c:fe:d0:1d:30:6d:1c:06:da:8b:c4:2e:6b:57:07:29:
df:ab:a8:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa+hEJbXUXz5fuBD2xV4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjkwNDQ5NTA5ZWJmOWUzYjBmNDJjMWNkYzIyZTNlZjQw
MDc0MjYwHhcNMjUwMjE3MDEwMDM5WhcNMjUwMjE4MDEwMDM5WjAzMTEwLwYDVQQD
EygxNjNlYzQyYjZlM2RhYWM2NTYxZmZjNDhjZWY0ODM1MzYxNzNjOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEKVV/Wxh2L94Uw4dlCe5/h0KPkD
+7dYECJff6fqLerSzZNE+YszZnt8nEo8UaMiA6T5oaUzFHbNxPWI+/u44+EEl5iz
1+tqmO1rZme5h91SWIwM4peCFlq2jl0XDxhCg7PUGXPNB7I2scx/a6apk2XQW2+Z
xt+LYDFlK5ZDSTq5aIpt6FWIvmL5E5l1YaViyZ4uNhNmHAT+ofrq7p/sIVifm8vs
siLtWtfAgsWHD5yOG00M3dYEd0UOAItGql67hGIZ/qgm2u8c5tFVz4YYP0FidXQc
Xrm8scgi99N7m979bZlsL0qUe9Qh9SB/SuBWECXvm2rO+fN66jrm6gHTEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBY+xCtuParGVh/8SM70g1Nhc8kkMB8GA1UdIwQY
MBaAFNn5BElQnr+eOw9Cwc3CLj70AHQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUt
YmI0ODgyOGM5ZjA1LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUtYmI0ODgyOGM5ZjA1
LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwZmzQcj
Dkxw9Fnjdt4y/2axARIj3MOu8VEZVF4Mk51aGhFV7t6LcgNpR1g1zid2mk1XXBOI
zqkqnEpd/YghUPp3LuhKu8w6mt7rNg6AHMDr43gRKsQXkScxFCUy+T0NQG1ryhql
xKLwY0e9UOi9JJZY+G2U0KVcpYZec6AR3T0B9M8y/CYvY0rFelUAvgfhK61bvZIf
hCz5aj7+btWp9M41s/BAe6dyaeEC4bsEwvemkOGzCZEgJh05kOvZtBkmcnf1Q24y
BA7pcj4TAxnBjxJvzyGRI38c8+S1cyKCeeXKdgZuG9bnPO+spOo8/tAdMG0cBtqL
xC5rVwcp36uoYw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:54 2025 by rpki-client