Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: ob8ga5IvUN4EnjcqwKjzZY2BG+BryHYXkJPWWIUK868=
Subject key identifier: DA:FE:D7:9C:5A:49:18:BD:B8:5F:CD:AD:9B:E7:9A:81:49:BB:34:09
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 019511351EB906ACB159AAB8E4F84CAD9F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 0ABD
Signing time: Mon 17 Feb 2025 00:00:48 +0000
Manifest this update: Mon 17 Feb 2025 00:00:48 +0000
Manifest next update: Tue 18 Feb 2025 00:00:48 +0000
Files and hashes: 1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=)
2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: PGZfVhwiEkPZJtFtQOB60OqldfndUKSJ0C2YRsbyzdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:1e:b9:06:ac:b1:59:aa:b8:e4:f8:4c:ad:9f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Feb 17 00:00:48 2025 GMT
Not After : Feb 18 00:00:48 2025 GMT
Subject: CN=dafed79c5a4918bdb85fcdad9be79a8149bb3409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:78:16:db:e6:0a:98:f2:5e:d2:0b:b6:ee:
be:53:77:a2:2c:93:f2:8c:47:29:26:21:d4:e1:04:
6e:ed:38:a9:63:0c:07:fd:10:2d:22:53:84:ad:14:
57:1a:9a:3a:42:f0:33:7e:9c:84:20:5f:cd:b7:56:
73:af:62:7a:e1:10:fa:d7:57:a4:87:98:b0:ee:87:
d0:0f:69:66:fa:ee:18:41:ac:de:17:b6:54:aa:7d:
35:14:c6:6a:38:2f:04:ec:cc:eb:60:5a:e5:71:1c:
f9:b1:3a:c7:31:de:24:92:eb:a9:92:0b:69:05:de:
ed:6b:97:bb:33:9f:b1:be:cc:9f:23:c2:61:f9:1d:
e0:63:50:59:04:d1:c0:e5:f0:fb:54:48:39:ff:c5:
ad:d7:3c:1d:8d:0e:8c:74:f3:05:70:e1:8b:d4:ac:
fd:52:e2:07:ac:32:7e:6e:a9:44:82:54:26:35:89:
20:73:a0:4d:2a:8c:23:9f:de:dd:e4:19:f4:bd:dc:
1e:b3:26:78:cf:60:55:ee:3f:51:70:d8:73:aa:05:
b3:a5:99:7a:41:a6:4b:03:b0:90:5e:1a:5a:56:20:
9a:89:ab:29:71:7c:57:2c:78:8e:86:04:9b:9d:05:
8d:8b:ec:7c:24:48:9a:ca:46:c6:1b:8e:27:c0:2e:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FE:D7:9C:5A:49:18:BD:B8:5F:CD:AD:9B:E7:9A:81:49:BB:34:09
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f1:57:90:a2:00:8b:79:09:0b:5e:5b:cd:49:ed:73:02:d1:
a3:a4:9c:e9:95:12:56:aa:2b:b6:da:9f:51:d2:eb:05:58:8c:
45:2f:ba:3f:99:f5:26:4d:4f:12:ea:38:00:02:5c:01:b6:6d:
9c:f2:37:5d:46:96:46:30:2e:bd:8e:d2:cb:e2:b7:4e:be:b4:
10:4a:04:3c:54:cb:b0:1e:39:33:a7:0c:a9:9f:6a:d8:6a:24:
3c:61:75:89:03:4b:a8:a4:be:83:91:aa:67:ca:8a:8f:dd:80:
22:d0:21:f5:c7:b6:73:25:27:66:95:c2:0f:a8:62:5c:5f:fb:
d2:b6:d7:3f:19:f5:a5:5d:00:ef:f1:80:12:35:4b:ab:50:d3:
6a:4e:f2:cb:0f:ed:52:8e:35:19:a4:25:a1:4b:91:01:78:5a:
b6:63:ce:10:c2:6f:76:b4:eb:1a:89:45:94:03:f9:e6:18:86:
d1:83:18:d5:74:f6:0c:45:b2:78:7e:50:96:ec:cb:cc:48:e8:
b4:46:12:ca:37:b2:51:f7:08:72:e5:b5:89:ff:29:77:ec:19:
9e:38:b0:37:c3:b3:1a:27:6e:20:7b:36:21:af:57:93:83:52:
e3:2c:40:09:3d:c0:d6:37:59:f2:ed:36:93:dd:a0:f6:31:42:
9e:0d:ad:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNR65BqyxWaq45PhMrZ+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YzNiYzA1YWE1MmFiOWViNWQxODRmNTA4ODlmMWZmMGM5
MGNlNzgwHhcNMjUwMjE3MDAwMDQ4WhcNMjUwMjE4MDAwMDQ4WjAzMTEwLwYDVQQD
EyhkYWZlZDc5YzVhNDkxOGJkYjg1ZmNkYWQ5YmU3OWE4MTQ5YmIzNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v14FtvmCpjyXtILtu6+U3eiLJPy
jEcpJiHU4QRu7TipYwwH/RAtIlOErRRXGpo6QvAzfpyEIF/Nt1Zzr2J64RD611ek
h5iw7ofQD2lm+u4YQazeF7ZUqn01FMZqOC8E7MzrYFrlcRz5sTrHMd4kkuupkgtp
Bd7ta5e7M5+xvsyfI8Jh+R3gY1BZBNHA5fD7VEg5/8Wt1zwdjQ6MdPMFcOGL1Kz9
UuIHrDJ+bqlEglQmNYkgc6BNKowjn97d5Bn0vdwesyZ4z2BV7j9RcNhzqgWzpZl6
QaZLA7CQXhpaViCaiaspcXxXLHiOhgSbnQWNi+x8JEiaykbGG44nwC46NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr+15xaSRi9uF/NrZvnmoFJuzQJMB8GA1UdIwQY
MBaAFMTDvAWqUquetdGE9QiJ8f8MkM54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE1POEJhcFNxNTYxMFlUMUNJbnhfd3lRem5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kMjM3ZmEtYjEwNS00MzJlLTgzY2It
NmQzNWI3OTU2ZmNlLzEveE1POEJhcFNxNTYxMFlUMUNJbnhfd3lRem5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kMjM3ZmEtYjEwNS00MzJlLTgzY2ItNmQzNWI3OTU2ZmNl
LzEveE1POEJhcFNxNTYxMFlUMUNJbnhfd3lRem5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvFXkKIA
i3kJC15bzUntcwLRo6Sc6ZUSVqorttqfUdLrBViMRS+6P5n1Jk1PEuo4AAJcAbZt
nPI3XUaWRjAuvY7Sy+K3Tr60EEoEPFTLsB45M6cMqZ9q2GokPGF1iQNLqKS+g5Gq
Z8qKj92AItAh9ce2cyUnZpXCD6hiXF/70rbXPxn1pV0A7/GAEjVLq1DTak7yyw/t
Uo41GaQloUuRAXhatmPOEMJvdrTrGolFlAP55hiG0YMY1XT2DEWyeH5QluzLzEjo
tEYSyjeyUfcIcuW1if8pd+wZnjiwN8OzGiduIHs2Ia9Xk4NS4yxACT3A1jdZ8u02
k92g9jFCng2tTw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:51 2025 by rpki-client