Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
File: IB_mmB68vJI8jkn0hFJEHQgOZvA.mft (raw, json)
Hash identifier: cWyJADYX/4QkUERkL28uwsiZhUAXI4bUCftJreMDOGI=
Subject key identifier: 87:25:8C:3A:54:03:81:AC:0E:2C:B6:FD:85:AC:DD:8B:54:DF:F4:26
Authority key identifier: 20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
Certificate issuer: /CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Certificate serial: 01951134C4C9A2D8E88DA29CF9232860F4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
Manifest number: 0E51
Signing time: Mon 17 Feb 2025 00:00:25 +0000
Manifest this update: Mon 17 Feb 2025 00:00:25 +0000
Manifest next update: Tue 18 Feb 2025 00:00:25 +0000
Files and hashes: 1: GDKGeKleHqIsNhWuvQIPnj1S5ik.roa (hash: 027frokon21vo4MMUC96Z9OEZpQ3AsbdGWojRJwBl/8=)
2: IB_mmB68vJI8jkn0hFJEHQgOZvA.crl (hash: fQ8bBmiZUOKj62tV3os4iV35su/mghDZXEmi8Amnt7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c4:c9:a2:d8:e8:8d:a2:9c:f9:23:28:60:f4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Validity
Not Before: Feb 17 00:00:25 2025 GMT
Not After : Feb 18 00:00:25 2025 GMT
Subject: CN=87258c3a540381ac0e2cb6fd85acdd8b54dff426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:b2:1d:46:1d:e9:50:77:ca:23:f1:1e:31:
2f:ea:79:72:b1:da:cb:72:93:b8:26:ae:26:b4:b2:
4e:2d:bd:8d:ea:e8:30:4e:43:4a:18:8b:c8:4e:ab:
27:b1:73:98:e3:e3:1c:62:2a:c5:12:c7:d4:68:10:
52:93:86:ba:b3:78:ba:99:54:7b:cc:db:14:b8:8e:
40:f2:a9:4b:cf:da:73:ad:47:54:ad:88:91:73:1e:
18:9c:51:7c:f9:55:4f:d1:8c:d8:57:f9:6d:41:34:
e0:3e:7a:b1:f2:73:fb:c4:ad:2d:98:ba:70:6d:0a:
ec:d3:f9:32:78:e4:39:0d:5f:d7:da:6c:5e:cd:86:
21:4b:f8:94:b4:ae:93:d0:e9:0b:2a:f9:e5:91:d1:
88:7a:c2:c5:f8:92:d4:f5:b0:5c:25:35:3a:83:98:
da:80:0c:e8:77:4b:03:46:bd:54:57:38:62:7d:a6:
27:ce:0d:a6:a7:0f:ab:07:04:93:be:0f:ab:07:87:
f3:cb:ce:67:60:e9:65:d7:d3:89:a7:63:62:2d:44:
f2:db:4e:60:c7:eb:0c:89:bf:bc:65:8b:5d:6f:66:
64:50:a9:19:66:8f:b1:e0:92:42:f0:a9:42:32:09:
c9:50:e6:c3:b0:cf:87:9f:7a:08:e5:50:b2:ba:1b:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:25:8C:3A:54:03:81:AC:0E:2C:B6:FD:85:AC:DD:8B:54:DF:F4:26
X509v3 Authority Key Identifier:
keyid:20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:09:e9:11:1d:40:63:6f:12:2a:a5:9d:ca:24:a0:b5:ef:4d:
36:80:42:ea:b1:32:f0:f0:74:5b:3a:1c:52:70:e3:37:6b:dd:
14:9c:61:10:94:12:d5:65:fb:30:ff:57:5b:f6:54:ee:27:b3:
77:f4:40:0e:e3:f9:78:4d:8f:c4:dc:23:a9:0a:8d:53:65:7d:
7a:11:44:e0:5e:1b:55:ed:a5:f3:dc:cf:6e:58:10:7d:1d:9d:
9b:92:b3:1c:8a:b9:57:78:ea:2e:21:eb:ab:88:41:52:a9:f0:
67:99:ee:7d:34:dc:18:73:b2:18:53:67:f9:e3:7e:0d:13:a0:
be:27:55:0b:99:02:6d:e0:01:10:f0:6c:1c:29:fc:e4:dd:9c:
ab:e0:ef:6c:73:c9:85:57:5e:eb:73:88:e4:e9:0e:b7:2d:96:
51:a1:ee:b2:ff:53:13:c9:f9:9a:32:df:5a:9f:81:cf:cf:d8:
4b:37:f9:f0:5d:81:e4:11:84:72:e6:9f:cb:b2:45:16:e4:c5:
9a:35:4c:b0:ea:4b:e0:47:3a:a2:bd:4b:34:50:c5:2e:ea:fa:
38:88:7a:70:4b:ef:53:89:b5:0b:5a:ec:3c:9c:0d:e1:bb:10:
2d:75:57:72:5e:e8:1b:04:aa:44:b5:d9:5d:b0:a2:89:a5:9f:
2b:92:0b:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNMTJotjojaKc+SMoYPTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlNjk4MWViY2JjOTIzYzhlNDlmNDg0NTI0NDFkMDgw
ZTY2ZjAwHhcNMjUwMjE3MDAwMDI1WhcNMjUwMjE4MDAwMDI1WjAzMTEwLwYDVQQD
Eyg4NzI1OGMzYTU0MDM4MWFjMGUyY2I2ZmQ4NWFjZGQ4YjU0ZGZmNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDGyHUYd6VB3yiPxHjEv6nlysdrL
cpO4Jq4mtLJOLb2N6ugwTkNKGIvITqsnsXOY4+McYirFEsfUaBBSk4a6s3i6mVR7
zNsUuI5A8qlLz9pzrUdUrYiRcx4YnFF8+VVP0YzYV/ltQTTgPnqx8nP7xK0tmLpw
bQrs0/kyeOQ5DV/X2mxezYYhS/iUtK6T0OkLKvnlkdGIesLF+JLU9bBcJTU6g5ja
gAzod0sDRr1UVzhifaYnzg2mpw+rBwSTvg+rB4fzy85nYOll19OJp2NiLUTy205g
x+sMib+8ZYtdb2ZkUKkZZo+x4JJC8KlCMgnJUObDsM+Hn3oI5VCyuhug3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcljDpUA4GsDiy2/YWs3YtU3/QmMB8GA1UdIwQY
MBaAFCAf5pgevLySPI5J9IRSRB0IDmbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfbW1CNjh2Skk4amtuMGhGSkVIUWdPWnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NGIyYjItYjQ1YS00MDUzLWJlMjkt
MjcyNGY5MmJkNTZlLzEvSUJfbW1CNjh2Skk4amtuMGhGSkVIUWdPWnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80NGIyYjItYjQ1YS00MDUzLWJlMjktMjcyNGY5MmJkNTZl
LzEvSUJfbW1CNjh2Skk4amtuMGhGSkVIUWdPWnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQnpER1A
Y28SKqWdyiSgte9NNoBC6rEy8PB0WzocUnDjN2vdFJxhEJQS1WX7MP9XW/ZU7iez
d/RADuP5eE2PxNwjqQqNU2V9ehFE4F4bVe2l89zPblgQfR2dm5KzHIq5V3jqLiHr
q4hBUqnwZ5nufTTcGHOyGFNn+eN+DROgvidVC5kCbeABEPBsHCn85N2cq+DvbHPJ
hVde63OI5OkOty2WUaHusv9TE8n5mjLfWp+Bz8/YSzf58F2B5BGEcuafy7JFFuTF
mjVMsOpL4Ec6or1LNFDFLur6OIh6cEvvU4m1C1rsPJwN4bsQLXVXcl7oGwSqRLXZ
XbCiiaWfK5ILzg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:20 2025 by rpki-client