Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File: rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier: c/4sWLZAOUrNjF491fs2cAQUoLajdvqEVkqa0zwbbY4=
Subject key identifier: FA:4C:08:77:FC:4F:21:68:94:E4:AA:5D:77:C6:7E:A6:EC:43:6E:A9
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 0194C3F5D037FDFCFCBBA2F9EAAACF63FDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 00:00:54 +0000
Manifest this update: Sun 02 Feb 2025 00:00:54 +0000
Manifest next update: Mon 03 Feb 2025 00:00:54 +0000
Files and hashes: 1: fEfLOGBVJeUecVVlEjapZ06Oj8U.roa (hash: OleUOgz+9pFvUxQajAS7ULw6aOZyzyIU0DZD60L7Tws=)
2: kM5CulzBTgjqTdxC0kA20nIBInM.roa (hash: 4mPvZr8lZjvljhR4YU0MwI6WkG6rsEag6Ecnz4z85HY=)
3: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: gGtTmdhpTDQkatvR4JBYF3mdhhMRUlNtU5p4WJaTovc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:d0:37:fd:fc:fc:bb:a2:f9:ea:aa:cf:63:fd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Feb 2 00:00:54 2025 GMT
Not After : Feb 3 00:00:54 2025 GMT
Subject: CN=fa4c0877fc4f216894e4aa5d77c67ea6ec436ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:34:d5:e7:ed:53:6d:4e:de:3c:94:4b:48:
75:27:da:5b:9f:5f:58:43:ac:92:1f:36:37:96:1b:
11:87:00:05:c9:46:be:e4:40:0d:9b:8b:c9:61:3f:
5e:68:d0:92:81:19:2e:19:6e:5c:92:ec:c3:4c:e6:
87:6f:c3:ef:33:26:4e:2e:ba:50:e5:af:5a:2b:98:
13:02:d5:9a:9e:f9:f3:23:aa:9e:4b:b8:11:65:19:
67:70:cf:32:72:f1:b6:22:27:f3:5d:b1:fc:4c:fb:
58:79:20:73:45:c7:98:31:38:36:fb:aa:90:71:9b:
f0:9b:1e:df:3d:17:51:c7:9c:df:98:7a:e6:4e:8f:
70:fc:07:a6:22:82:30:23:52:e3:b8:bb:3b:11:9f:
6a:a4:29:a0:ee:49:b5:fc:5d:5e:fc:6a:89:75:11:
cc:ee:69:26:bb:e7:fe:41:62:09:a3:f4:58:9e:be:
2d:ec:22:7d:7b:e3:3f:10:f7:cc:a5:86:da:e7:91:
53:a8:53:01:06:52:17:5f:7a:d3:9d:13:4a:4e:a1:
6c:40:4a:57:36:71:23:35:22:7d:4a:ac:25:1c:f5:
4d:77:e6:f3:d9:61:a9:65:f1:8a:96:ac:8f:be:a6:
70:77:8d:cf:7b:c0:55:6d:ee:29:23:bc:4c:a4:c8:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4C:08:77:FC:4F:21:68:94:E4:AA:5D:77:C6:7E:A6:EC:43:6E:A9
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3c:d9:a2:b5:03:12:8c:40:52:21:b2:62:22:e5:ed:14:a5:
80:99:1f:5e:b3:af:b9:fd:29:8e:33:b0:d3:30:62:4a:b4:ef:
2d:23:39:d9:f8:54:65:3f:44:db:8d:a5:ca:1f:0a:2c:c0:49:
b3:19:52:20:88:32:b2:1f:bb:53:3c:42:47:0e:9f:f6:bd:1b:
78:61:85:4b:46:d0:3e:bb:5a:2a:61:3b:f6:3a:30:94:95:d6:
20:6f:7b:61:7c:6f:ea:85:76:32:d3:6e:0d:1b:29:95:08:83:
40:a2:eb:26:a6:58:66:07:55:ea:6b:50:6c:6e:97:83:05:92:
41:91:02:fa:2b:8b:21:0b:84:9c:ea:15:94:82:fb:7c:0a:da:
c7:09:da:a5:43:70:6d:38:e0:4a:6a:01:d5:49:f0:bc:97:30:
c3:10:fd:bb:2b:e8:b7:f5:0f:42:8d:db:1f:f1:2a:99:21:a4:
46:2a:bb:32:2e:a0:af:b7:01:43:81:ba:45:24:9d:99:ac:0c:
b5:20:d1:f0:b6:e7:9f:25:2b:90:d3:bb:c8:3e:3b:24:e6:d7:
40:1e:b3:46:92:87:23:c3:92:90:d3:1f:6a:1a:3d:cc:cd:f0:
1d:ef:1d:77:25:da:b3:07:09:c2:e6:cc:f2:50:80:b8:9d:cc:
c5:df:24:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9dA3/fz8u6L56qrPY/31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmUyMTJhMmYxYTExOWVmNjRhYjYyZTFhOTZkNzExNTI0
YzhiYzcwHhcNMjUwMjAyMDAwMDU0WhcNMjUwMjAzMDAwMDU0WjAzMTEwLwYDVQQD
EyhmYTRjMDg3N2ZjNGYyMTY4OTRlNGFhNWQ3N2M2N2VhNmVjNDM2ZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS801eftU21O3jyUS0h1J9pbn19Y
Q6ySHzY3lhsRhwAFyUa+5EANm4vJYT9eaNCSgRkuGW5ckuzDTOaHb8PvMyZOLrpQ
5a9aK5gTAtWanvnzI6qeS7gRZRlncM8ycvG2IifzXbH8TPtYeSBzRceYMTg2+6qQ
cZvwmx7fPRdRx5zfmHrmTo9w/AemIoIwI1LjuLs7EZ9qpCmg7km1/F1e/GqJdRHM
7mkmu+f+QWIJo/RYnr4t7CJ9e+M/EPfMpYba55FTqFMBBlIXX3rTnRNKTqFsQEpX
NnEjNSJ9SqwlHPVNd+bz2WGpZfGKlqyPvqZwd43Pe8BVbe4pI7xMpMhQDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpMCHf8TyFolOSqXXfGfqbsQ26pMB8GA1UdIwQY
MBaAFKy+ISovGhGe9kq2LhqW1xFSTIvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYt
MjNjMzM4NjgwNzcxLzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYtMjNjMzM4NjgwNzcx
LzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDzZorUD
EoxAUiGyYiLl7RSlgJkfXrOvuf0pjjOw0zBiSrTvLSM52fhUZT9E242lyh8KLMBJ
sxlSIIgysh+7UzxCRw6f9r0beGGFS0bQPrtaKmE79jowlJXWIG97YXxv6oV2MtNu
DRsplQiDQKLrJqZYZgdV6mtQbG6XgwWSQZEC+iuLIQuEnOoVlIL7fAraxwnapUNw
bTjgSmoB1UnwvJcwwxD9uyvot/UPQo3bH/EqmSGkRiq7Mi6gr7cBQ4G6RSSdmawM
tSDR8LbnnyUrkNO7yD47JObXQB6zRpKHI8OSkNMfaho9zM3wHe8ddyXaswcJwubM
8lCAuJ3Mxd8kTA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:47:06 2025 by rpki-client