Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier: RvSMItLEuQYsowm2Al8IDRXz2f1a2WOKutgFPGj9YoE=
Subject key identifier: E2:BF:ED:EF:F5:EE:EA:3A:9A:D2:D6:C0:EF:88:F7:4A:70:D4:48:D9
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial: 0195108FF83083836651B570C04E2DEA958D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number: F3
Signing time: Sun 16 Feb 2025 21:00:25 +0000
Manifest this update: Sun 16 Feb 2025 21:00:25 +0000
Manifest next update: Mon 17 Feb 2025 21:00:25 +0000
Files and hashes: 1: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: kYdkgnzRb0LqKWjR3AEEYlc7CE7coS8vw8viEdFok4c=)
2: zJVAm_Aoh0U8gwZ5WRQsBP3hX6A.roa (hash: +sPk6LCRSFLjFRp6ZIQ4HhKiMmXE+FxNLLLGnfyG87E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:f8:30:83:83:66:51:b5:70:c0:4e:2d:ea:95:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Validity
Not Before: Feb 16 21:00:25 2025 GMT
Not After : Feb 17 21:00:25 2025 GMT
Subject: CN=e2bfedeff5eeea3a9ad2d6c0ef88f74a70d448d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:1c:f9:2f:fb:5e:a3:7d:b6:80:3f:8e:08:
a8:83:74:7e:f1:9f:40:a7:3d:5b:ca:c2:c1:73:a6:
20:c3:78:bc:2d:75:ac:ee:bf:9e:6a:61:e1:27:ba:
a4:2d:4c:c0:d4:a5:fa:01:00:a3:9b:42:85:92:fa:
e8:f7:7a:87:c1:19:12:54:ff:2b:f9:58:bc:15:04:
3f:38:66:7a:9b:cb:01:7e:b9:4b:46:fd:32:6b:b2:
43:31:35:6f:a2:30:15:c1:a6:7a:6e:be:11:e0:bc:
0f:04:ac:93:36:92:5b:df:e4:4c:9d:83:84:32:71:
7d:f2:9c:8d:91:cb:27:a4:9e:ef:70:72:01:35:41:
4e:f2:af:39:e1:92:20:9a:bb:61:36:db:f7:79:e1:
27:54:dc:84:3c:85:2f:c5:1c:1f:23:c8:38:5d:81:
7c:ba:f8:0c:4a:8d:0b:a2:66:b6:05:7e:aa:76:ee:
32:03:28:c5:d6:a1:b3:ca:12:de:d1:85:9d:e7:0b:
2a:bf:4c:ea:0d:8a:c4:70:f5:ea:17:31:bb:dc:16:
dc:1b:63:1f:c8:98:0e:49:e2:be:1e:45:6a:09:26:
5e:2d:6b:d8:33:11:24:76:96:6c:55:4b:3d:83:3d:
7b:50:67:f8:fd:e5:7c:25:45:af:45:a4:93:b2:87:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BF:ED:EF:F5:EE:EA:3A:9A:D2:D6:C0:EF:88:F7:4A:70:D4:48:D9
X509v3 Authority Key Identifier:
keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c4:f6:12:5c:ec:f2:11:e9:ca:ad:b9:53:bb:c1:ca:a9:dc:
ef:d0:af:16:2b:7a:b7:1a:69:08:63:50:f1:0f:8c:1c:33:ca:
ce:46:a8:4d:3e:f7:c2:ca:fd:ff:8f:45:39:a5:9a:8a:a5:77:
5a:e4:b3:4a:88:a8:2c:a4:d5:5a:96:1b:6e:7c:42:4f:1e:85:
87:02:4b:c9:30:34:dd:5a:66:51:d1:69:8b:be:1f:cc:c1:db:
8f:9d:84:fc:8c:06:e0:e7:e0:09:6f:e4:e9:65:d9:f8:01:05:
f0:0a:46:25:21:b4:91:bc:d6:14:ed:85:c2:28:05:5a:69:49:
09:76:6a:47:2a:e5:1c:97:b0:59:08:c2:0d:56:52:c3:7e:49:
4f:58:65:de:93:8e:ab:bf:77:8e:24:b1:4a:90:7f:8e:8e:76:
96:5b:cb:8b:78:57:45:29:27:de:20:62:d0:c0:0d:c6:cb:9c:
4b:4c:3a:01:75:5a:b8:d4:93:21:87:ce:ce:d6:fa:04:1b:c3:
b8:bb:78:7c:74:db:44:d8:db:ec:6b:3b:3e:fb:16:5c:c1:ef:
21:12:fa:a7:b5:3b:79:f2:4a:22:ab:1e:9c:00:d7:72:aa:34:
4e:f0:c0:cb:fc:dd:92:44:a8:74:27:48:71:1c:1d:01:fb:e9:
be:84:09:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQj/gwg4NmUbVwwE4t6pWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2U1Yzc1ZjY0OGFjNjkyYjE0YmMyMjJlMmMxODBjODYz
YjQ1ZTIwHhcNMjUwMjE2MjEwMDI1WhcNMjUwMjE3MjEwMDI1WjAzMTEwLwYDVQQD
EyhlMmJmZWRlZmY1ZWVlYTNhOWFkMmQ2YzBlZjg4Zjc0YTcwZDQ0OGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYkc+S/7XqN9toA/jgiog3R+8Z9A
pz1bysLBc6Ygw3i8LXWs7r+eamHhJ7qkLUzA1KX6AQCjm0KFkvro93qHwRkSVP8r
+Vi8FQQ/OGZ6m8sBfrlLRv0ya7JDMTVvojAVwaZ6br4R4LwPBKyTNpJb3+RMnYOE
MnF98pyNkcsnpJ7vcHIBNUFO8q854ZIgmrthNtv3eeEnVNyEPIUvxRwfI8g4XYF8
uvgMSo0Loma2BX6qdu4yAyjF1qGzyhLe0YWd5wsqv0zqDYrEcPXqFzG73BbcG2Mf
yJgOSeK+HkVqCSZeLWvYMxEkdpZsVUs9gz17UGf4/eV8JUWvRaSTsocpKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOK/7e/17uo6mtLWwO+I90pw1EjZMB8GA1UdIwQY
MBaAFO9+XHX2SKxpKxS8Ii4sGAyGO0XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYt
ZTZiMjBiMDlmODY2LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYtZTZiMjBiMDlmODY2
LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMT2Elzs
8hHpyq25U7vByqnc79CvFit6txppCGNQ8Q+MHDPKzkaoTT73wsr9/49FOaWaiqV3
WuSzSoioLKTVWpYbbnxCTx6FhwJLyTA03VpmUdFpi74fzMHbj52E/IwG4OfgCW/k
6WXZ+AEF8ApGJSG0kbzWFO2FwigFWmlJCXZqRyrlHJewWQjCDVZSw35JT1hl3pOO
q793jiSxSpB/jo52llvLi3hXRSkn3iBi0MANxsucS0w6AXVauNSTIYfOztb6BBvD
uLt4fHTbRNjb7Gs7PvsWXMHvIRL6p7U7efJKIqsenADXcqo0TvDAy/zdkkSodCdI
cRwdAfvpvoQJXw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:55 2025 by rpki-client