Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
File: DS7-O2P6myp5MsW17IVLcMPxiDk.mft (raw, json)
Hash identifier: pRfPe30/huRT8/JNQs2SfWA4mh7EmwjrA+99WJs8CYE=
Subject key identifier: F2:E1:2C:2D:60:48:03:6A:B7:1D:4D:87:DB:F6:F0:21:AA:EF:F3:49
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 01951058E4A146628F9C864A0B800D4981D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
Manifest number: 0342
Signing time: Sun 16 Feb 2025 20:00:15 +0000
Manifest this update: Sun 16 Feb 2025 20:00:15 +0000
Manifest next update: Mon 17 Feb 2025 20:00:15 +0000
Files and hashes: 1: DS7-O2P6myp5MsW17IVLcMPxiDk.crl (hash: hHf0cNWajYN3J4isET+ZASgRojDO2q+wRqSnjHEdeOs=)
2: mQBN2-oU2oudork8oow4c77Beac.roa (hash: FsVN//20JFkmpyNtdeWnGtk0kBJNGpFrlCSP7YEmOqY=)
3: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (hash: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:58:e4:a1:46:62:8f:9c:86:4a:0b:80:0d:49:81:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Feb 16 20:00:15 2025 GMT
Not After : Feb 17 20:00:15 2025 GMT
Subject: CN=f2e12c2d6048036ab71d4d87dbf6f021aaeff349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:3c:5d:4d:11:f9:36:a5:ff:b8:c9:58:e4:
f0:99:c0:1d:61:4e:d1:d6:a0:3f:6e:c0:23:82:07:
e0:fa:51:41:f6:43:17:3f:5c:68:43:86:78:87:a9:
cc:fa:4b:e2:1c:f0:d3:79:b0:e7:cc:b6:8a:5a:23:
7c:ff:a0:86:17:7d:90:bf:fc:c0:3e:1e:8d:1f:4a:
8e:65:ac:59:5b:a8:14:09:78:8f:2f:0b:33:67:1b:
bb:6a:ef:44:06:3b:5e:7d:5f:a3:23:1a:6b:4f:89:
e1:69:4d:18:90:91:e4:d3:14:4b:d9:20:75:64:1e:
d4:f4:af:7a:a7:23:9f:1e:67:77:eb:ce:63:7e:8a:
75:71:4f:60:27:48:9f:36:5c:97:b3:c3:e9:96:75:
65:dc:ec:18:85:7d:bd:d9:e1:c6:af:53:3c:bd:c2:
9a:77:23:0b:47:8a:b0:13:e1:ae:8e:65:95:c3:f7:
77:4d:13:11:a2:9b:20:93:ed:40:e2:3c:cd:ed:32:
b5:cb:d1:5f:0a:f1:14:a3:16:52:e2:2b:e1:27:a8:
02:fd:73:2f:1f:22:9d:51:11:c6:22:e0:3a:2e:3f:
51:46:39:f9:39:57:56:5a:43:d8:d9:94:bd:80:99:
68:41:2d:6b:b1:59:ed:2c:17:73:3b:d8:e2:10:d5:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:2C:2D:60:48:03:6A:B7:1D:4D:87:DB:F6:F0:21:AA:EF:F3:49
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:c1:2e:5e:a3:e7:85:b7:3e:4a:72:26:d0:37:06:8c:b6:
6e:42:21:e1:c5:b6:48:59:65:10:07:6d:ef:60:85:a7:a8:d9:
a3:b2:db:93:b1:da:f5:ec:c0:5d:d4:b5:88:7a:ed:f3:ed:35:
01:f8:ee:9f:3b:a3:dc:fd:ae:6b:d2:4c:12:f8:7b:d5:f3:83:
19:8b:30:da:ad:26:96:cd:bd:bd:58:6f:eb:b7:66:c5:95:f9:
e2:7a:60:86:da:9a:b7:50:87:ae:22:4b:42:19:5f:6e:2e:9a:
f5:16:68:ad:98:a4:57:84:c5:b3:9d:5e:8a:0a:f8:37:3a:7e:
e1:25:4a:30:67:82:76:a2:c1:e7:70:b1:ff:d8:83:5b:21:17:
77:3f:91:07:f8:c6:2e:23:43:cf:51:c1:60:9f:8b:aa:91:15:
52:e5:ff:e3:5b:2f:76:28:cb:42:eb:fe:d9:07:c5:b2:b4:5a:
a7:bb:08:af:fa:39:47:fd:51:b2:e1:7e:31:3e:a6:98:f9:ef:
79:52:8a:7b:60:9a:70:92:e2:9b:2e:17:7e:b0:2e:3f:19:c8:
b9:ee:b4:1e:b1:15:8c:d3:ba:bb:e8:b0:f7:c7:dc:fa:11:a9:
d0:b4:f2:1c:55:84:3a:f4:ab:b8:d4:9d:82:62:bd:45:1d:9b:
1b:6f:95:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQWOShRmKPnIZKC4ANSYHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMmVmZTNiNjNmYTliMmE3OTMyYzViNWVjODU0YjcwYzNm
MTg4MzkwHhcNMjUwMjE2MjAwMDE1WhcNMjUwMjE3MjAwMDE1WjAzMTEwLwYDVQQD
EyhmMmUxMmMyZDYwNDgwMzZhYjcxZDRkODdkYmY2ZjAyMWFhZWZmMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKA8XU0R+Tal/7jJWOTwmcAdYU7R
1qA/bsAjggfg+lFB9kMXP1xoQ4Z4h6nM+kviHPDTebDnzLaKWiN8/6CGF32Qv/zA
Ph6NH0qOZaxZW6gUCXiPLwszZxu7au9EBjtefV+jIxprT4nhaU0YkJHk0xRL2SB1
ZB7U9K96pyOfHmd3685jfop1cU9gJ0ifNlyXs8PplnVl3OwYhX292eHGr1M8vcKa
dyMLR4qwE+GujmWVw/d3TRMRopsgk+1A4jzN7TK1y9FfCvEUoxZS4ivhJ6gC/XMv
HyKdURHGIuA6Lj9RRjn5OVdWWkPY2ZS9gJloQS1rsVntLBdzO9jiENVpuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLhLC1gSANqtx1Nh9v28CGq7/NJMB8GA1UdIwQY
MBaAFA0u/jtj+psqeTLFteyFS3DD8Yg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFM3LU8yUDZteXA1TXNXMTdJVkxjTVB4aURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hZTBhOTMtZjY5MC00ZTM2LWJlZmEt
OTFhMzQ5ZTc3NDc4LzEvRFM3LU8yUDZteXA1TXNXMTdJVkxjTVB4aURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hZTBhOTMtZjY5MC00ZTM2LWJlZmEtOTFhMzQ5ZTc3NDc4
LzEvRFM3LU8yUDZteXA1TXNXMTdJVkxjTVB4aURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj7BLl6j
54W3PkpyJtA3Boy2bkIh4cW2SFllEAdt72CFp6jZo7Lbk7Ha9ezAXdS1iHrt8+01
Afjunzuj3P2ua9JMEvh71fODGYsw2q0mls29vVhv67dmxZX54npghtqat1CHriJL
Qhlfbi6a9RZorZikV4TFs51eigr4Nzp+4SVKMGeCdqLB53Cx/9iDWyEXdz+RB/jG
LiNDz1HBYJ+LqpEVUuX/41svdijLQuv+2QfFsrRap7sIr/o5R/1RsuF+MT6mmPnv
eVKKe2CacJLimy4XfrAuPxnIue60HrEVjNO6u+iw98fc+hGp0LTyHFWEOvSruNSd
gmK9RR2bG2+VDg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:10 2025 by rpki-client