Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
File: Rl73vS6z3NurBJCDgNSKjy_rxiw.mft (raw, json)
Hash identifier: IqdrkvKuFWLMTJsk44jlRCenqTyrY71m/PtTbxcf8+M=
Subject key identifier: 17:FE:E3:C1:93:7B:67:31:A1:3A:E7:B1:9B:E7:9F:F7:62:CD:8B:EF
Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Certificate serial: 019510FDE8E883829E053B2E5692136606EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
Manifest number: 0E53
Signing time: Sun 16 Feb 2025 23:00:30 +0000
Manifest this update: Sun 16 Feb 2025 23:00:30 +0000
Manifest next update: Mon 17 Feb 2025 23:00:30 +0000
Files and hashes: 1: 0-c9PgPd1_wXhamWThnKHlQbGGs.roa (hash: t9blZuOAI0IrEr32bYa6e5eRP1KzQCe8vHG6m5RDWu8=)
2: Rl73vS6z3NurBJCDgNSKjy_rxiw.crl (hash: r0F1/RKbUPxqRI6tR8KVl9VzH7tUTTss71rNrhvZTcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:e8:e8:83:82:9e:05:3b:2e:56:92:13:66:06:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Validity
Not Before: Feb 16 23:00:30 2025 GMT
Not After : Feb 17 23:00:30 2025 GMT
Subject: CN=17fee3c1937b6731a13ae7b19be79ff762cd8bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:b4:1c:2d:7d:9d:05:d9:7b:9f:68:8d:ee:
e5:a7:a0:ea:27:e6:b6:fc:29:fb:86:bd:6b:58:1a:
95:2e:99:2e:fe:39:55:ab:93:23:5f:1e:d6:61:5b:
67:fb:38:1d:f4:07:f4:58:a5:6b:5e:d0:6e:07:99:
05:d7:6d:ee:d0:4b:c2:0b:c1:b0:89:a6:7c:13:1f:
4a:64:30:e6:2f:2f:40:1d:f4:77:ef:b3:97:9a:ac:
d0:80:b8:78:27:a8:36:e4:be:65:c7:fe:4f:d4:7f:
2f:a2:66:1e:a3:ab:64:9d:bc:30:b5:8a:c3:98:71:
e1:be:ee:4a:af:db:85:45:a5:3d:84:fe:6b:ba:ea:
49:bc:5f:2c:29:10:e9:9b:81:2f:39:a1:17:97:37:
09:0e:08:09:3c:a9:99:5b:5d:1f:14:cb:ed:4c:24:
10:d9:55:02:cc:a2:47:ab:94:68:7d:b4:40:99:95:
5d:84:8e:89:5c:82:34:79:34:9c:58:7f:3d:69:72:
1c:ed:a7:da:49:ba:0f:db:95:3e:5b:ef:ea:70:06:
6e:6a:72:9b:a8:94:ba:8e:5b:33:1a:41:e8:1d:08:
09:7b:ac:d1:54:a0:2f:f7:58:47:0f:f7:0a:43:27:
62:45:a7:76:3e:e1:95:b2:e2:35:d9:cd:63:11:aa:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FE:E3:C1:93:7B:67:31:A1:3A:E7:B1:9B:E7:9F:F7:62:CD:8B:EF
X509v3 Authority Key Identifier:
keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5f:81:18:cb:41:b0:73:99:d0:cc:64:b4:19:5d:64:95:c5:
7a:50:3d:ae:4a:20:61:7a:f7:eb:6d:38:86:a9:5a:4a:f1:83:
66:ea:0a:77:9c:83:10:e3:4b:ce:a2:cb:58:47:56:e7:9f:da:
69:b7:5c:20:20:42:a5:bd:80:44:e4:5b:b9:fd:14:0d:e4:a5:
ae:03:c4:a2:e7:2f:0e:9c:5a:d4:a7:91:ef:0d:3c:31:7e:6d:
a7:e4:ba:37:a3:f9:5c:0a:95:bf:2d:a8:2e:e5:ad:f8:57:5d:
67:e8:6b:ba:7e:18:09:7a:53:c6:09:b3:e3:6a:18:25:79:f7:
50:b8:61:27:57:f3:2c:68:9b:e7:54:4b:31:04:9d:a6:4a:4a:
2d:c7:7c:69:7f:e0:3b:80:aa:8d:90:b1:44:39:b5:85:2b:b3:
ff:be:44:bc:69:04:cf:0f:c0:84:91:16:b5:40:ac:d2:30:0f:
65:02:1a:e2:d5:87:cf:23:50:59:30:a9:82:f3:2a:59:18:06:
83:a1:e7:8c:e2:ef:a3:6d:85:72:95:a4:fa:48:1c:8d:db:50:
60:5d:00:62:8b:73:a3:dc:bb:9e:dc:bf:f7:c0:51:35:cd:bb:
14:2a:d6:d5:83:65:3c:9b:58:60:0d:f9:9d:be:ac:5b:f6:9c:
9d:d7:cb:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/ejog4KeBTsuVpITZgbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWVmN2JkMmViM2RjZGJhYjA0OTA4MzgwZDQ4YThmMmZl
YmM2MmMwHhcNMjUwMjE2MjMwMDMwWhcNMjUwMjE3MjMwMDMwWjAzMTEwLwYDVQQD
EygxN2ZlZTNjMTkzN2I2NzMxYTEzYWU3YjE5YmU3OWZmNzYyY2Q4YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2i0HC19nQXZe59oje7lp6DqJ+a2
/Cn7hr1rWBqVLpku/jlVq5MjXx7WYVtn+zgd9Af0WKVrXtBuB5kF123u0EvCC8Gw
iaZ8Ex9KZDDmLy9AHfR377OXmqzQgLh4J6g25L5lx/5P1H8vomYeo6tknbwwtYrD
mHHhvu5Kr9uFRaU9hP5ruupJvF8sKRDpm4EvOaEXlzcJDggJPKmZW10fFMvtTCQQ
2VUCzKJHq5RofbRAmZVdhI6JXII0eTScWH89aXIc7afaSboP25U+W+/qcAZuanKb
qJS6jlszGkHoHQgJe6zRVKAv91hHD/cKQydiRad2PuGVsuI12c1jEap//wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf+48GTe2cxoTrnsZvnn/dizYvvMB8GA1UdIwQY
MBaAFEZe970us9zbqwSQg4DUio8v68YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MDk5NDktZjIyOS00OThkLTkzMTUt
MzRiNjdkZjdjYjAzLzEvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80MDk5NDktZjIyOS00OThkLTkzMTUtMzRiNjdkZjdjYjAz
LzEvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV+BGMtB
sHOZ0MxktBldZJXFelA9rkogYXr36204hqlaSvGDZuoKd5yDEONLzqLLWEdW55/a
abdcICBCpb2ARORbuf0UDeSlrgPEoucvDpxa1KeR7w08MX5tp+S6N6P5XAqVvy2o
LuWt+FddZ+hrun4YCXpTxgmz42oYJXn3ULhhJ1fzLGib51RLMQSdpkpKLcd8aX/g
O4CqjZCxRDm1hSuz/75EvGkEzw/AhJEWtUCs0jAPZQIa4tWHzyNQWTCpgvMqWRgG
g6HnjOLvo22FcpWk+kgcjdtQYF0AYotzo9y7nty/98BRNc27FCrW1YNlPJtYYA35
nb6sW/acndfLkg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:15 2025 by rpki-client