Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
File: umwdlY_wlMrxNGzGb3FszrbcUAk.mft (raw, json)
Hash identifier: Aw7OWXLTiwjlXnjOtIhGGHLDOPa9EYogKTo1Gh176VQ=
Subject key identifier: 0B:72:47:F5:8D:1D:0B:35:18:7F:1E:18:28:97:CD:7D:0E:3A:C0:4C
Authority key identifier: BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
Certificate issuer: /CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Certificate serial: 019510C7B25B48C209BD844B603C340A6956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
Manifest number: 1118
Signing time: Sun 16 Feb 2025 22:01:17 +0000
Manifest this update: Sun 16 Feb 2025 22:01:17 +0000
Manifest next update: Mon 17 Feb 2025 22:01:17 +0000
Files and hashes: 1: qKek5ZOAt9w9vxEPh4zkLLlKVYI.roa (hash: gz7wbf7RuIAjOfumVR0HGG8azx+yCAuEY5X4YlBO90Q=)
2: umwdlY_wlMrxNGzGb3FszrbcUAk.crl (hash: a3WBUeyz2rMnkV1bUCqRDJcJtF8eeMVnV7ZI2UotCAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:b2:5b:48:c2:09:bd:84:4b:60:3c:34:0a:69:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Validity
Not Before: Feb 16 22:01:17 2025 GMT
Not After : Feb 17 22:01:17 2025 GMT
Subject: CN=0b7247f58d1d0b35187f1e182897cd7d0e3ac04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:2b:bd:1d:68:7f:0c:bf:b8:aa:8f:a5:b8:
c4:8c:ad:1c:4b:ab:0b:1b:12:61:3a:4a:1c:56:43:
82:fc:c4:aa:74:77:0c:cf:02:c7:cf:20:41:e3:eb:
56:73:46:30:19:17:a0:98:e0:37:68:99:fd:e8:0b:
01:55:75:67:a3:89:cf:14:2b:eb:c7:bf:52:2d:0d:
7f:3c:f8:1c:c8:b6:34:8c:f0:9f:3d:0a:cc:37:f9:
b2:03:13:5d:f1:ce:3d:89:33:80:7b:47:5e:e6:92:
c4:11:17:a1:6c:33:1a:83:cb:5e:dc:0a:06:f6:59:
24:a4:30:69:2d:c0:5c:97:4b:db:4f:0b:bb:6f:10:
81:7c:5a:9c:25:9a:9b:19:ed:f5:2e:86:14:b0:ad:
84:d3:e9:5a:d0:9f:7f:db:57:52:cd:6d:9e:3e:6d:
a9:77:16:02:27:ef:e7:ea:42:8c:5e:a9:50:9e:a3:
ac:12:7d:84:a9:d5:9e:9c:a6:6d:d0:e0:1f:ca:15:
4d:0a:a1:d0:d3:6e:5c:7c:fd:1a:67:a3:15:a6:22:
8f:77:9c:eb:c5:c6:b3:cb:5d:7f:fc:49:bb:29:52:
44:c2:18:9c:2c:a5:60:f5:62:a0:4d:42:31:06:5c:
df:92:76:a0:79:76:4c:ad:25:73:69:cb:4b:0e:98:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:72:47:F5:8D:1D:0B:35:18:7F:1E:18:28:97:CD:7D:0E:3A:C0:4C
X509v3 Authority Key Identifier:
keyid:BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:60:d6:e8:60:5f:54:5c:e2:7d:6d:b3:cf:ba:a9:ae:85:ff:
dd:5a:f8:0b:69:a6:5d:5c:3c:cd:38:e7:15:81:49:a4:62:83:
5c:99:76:39:8d:ea:9f:95:8c:36:7c:9f:ce:a7:df:cd:23:be:
f9:76:6a:7b:a5:53:ee:65:74:1e:eb:d6:47:89:31:e3:28:8f:
d5:23:77:25:b5:87:0c:9d:1d:47:5e:18:ac:4f:8a:be:a7:0e:
2b:85:70:ba:53:aa:01:df:15:1f:67:ad:20:0f:ab:7a:38:01:
f0:b9:2d:8a:2f:5f:ce:25:02:7b:ba:e8:3b:17:95:fb:a9:a5:
8c:6c:e3:a4:c3:91:f8:16:a3:8c:18:78:61:2c:4e:32:9a:35:
cd:8f:0a:e2:fb:82:e8:80:7c:86:37:1b:c3:b3:a8:8b:e5:4d:
bf:d7:17:73:f4:4e:c9:cf:35:51:1c:5b:3a:e8:71:d5:c7:ba:
0b:f7:e4:6a:08:b7:33:9c:89:90:e2:ff:e8:ec:76:a8:88:e0:
9f:48:74:3f:7d:87:4a:5c:e8:bc:86:5f:6b:9b:2c:b8:6e:ab:
18:2e:92:98:46:37:54:17:bb:f3:70:6b:af:a1:92:79:06:f9:
43:b6:01:74:c3:70:ae:e2:0c:64:cb:ca:b4:a4:1d:9a:f3:9d:
21:cd:8f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx7JbSMIJvYRLYDw0CmlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmMxZDk1OGZmMDk0Y2FmMTM0NmNjNjZmNzE2Y2NlYjZk
YzUwMDkwHhcNMjUwMjE2MjIwMTE3WhcNMjUwMjE3MjIwMTE3WjAzMTEwLwYDVQQD
EygwYjcyNDdmNThkMWQwYjM1MTg3ZjFlMTgyODk3Y2Q3ZDBlM2FjMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLwrvR1ofwy/uKqPpbjEjK0cS6sL
GxJhOkocVkOC/MSqdHcMzwLHzyBB4+tWc0YwGRegmOA3aJn96AsBVXVno4nPFCvr
x79SLQ1/PPgcyLY0jPCfPQrMN/myAxNd8c49iTOAe0de5pLEERehbDMag8te3AoG
9lkkpDBpLcBcl0vbTwu7bxCBfFqcJZqbGe31LoYUsK2E0+la0J9/21dSzW2ePm2p
dxYCJ+/n6kKMXqlQnqOsEn2EqdWenKZt0OAfyhVNCqHQ025cfP0aZ6MVpiKPd5zr
xcazy11//Em7KVJEwhicLKVg9WKgTUIxBlzfknageXZMrSVzactLDpgGMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtyR/WNHQs1GH8eGCiXzX0OOsBMMB8GA1UdIwQY
MBaAFLpsHZWP8JTK8TRsxm9xbM623FAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW13ZGxZX3dsTXJ4Tkd6R2IzRnN6cmJjVUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lMDIwMzUtNzNhZS00ZmQyLTgwYzEt
ZTE1MWQ0ZDM5YjQxLzEvdW13ZGxZX3dsTXJ4Tkd6R2IzRnN6cmJjVUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lMDIwMzUtNzNhZS00ZmQyLTgwYzEtZTE1MWQ0ZDM5YjQx
LzEvdW13ZGxZX3dsTXJ4Tkd6R2IzRnN6cmJjVUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmDW6GBf
VFzifW2zz7qproX/3Vr4C2mmXVw8zTjnFYFJpGKDXJl2OY3qn5WMNnyfzqffzSO+
+XZqe6VT7mV0HuvWR4kx4yiP1SN3JbWHDJ0dR14YrE+KvqcOK4VwulOqAd8VH2et
IA+rejgB8Lktii9fziUCe7roOxeV+6mljGzjpMOR+BajjBh4YSxOMpo1zY8K4vuC
6IB8hjcbw7Ooi+VNv9cXc/ROyc81URxbOuhx1ce6C/fkagi3M5yJkOL/6Ox2qIjg
n0h0P32HSlzovIZfa5ssuG6rGC6SmEY3VBe783Brr6GSeQb5Q7YBdMNwruIMZMvK
tKQdmvOdIc2PiA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:28 2025 by rpki-client