Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
File: EADA16WawvWYBOfDUV8UzS_VDZc.mft (raw, json)
Hash identifier: R3DOFAvtilSh/BhaBwle0zIDZl7geI4egldj6fjrWhM=
Subject key identifier: C0:7B:C2:58:ED:80:BE:CF:81:7B:DD:8D:0A:71:A1:C5:56:09:D8:17
Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
Certificate issuer: /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Certificate serial: 019511A24979744858193F68029397DD11EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:03 +0000
Manifest this update: Mon 17 Feb 2025 02:00:03 +0000
Manifest next update: Tue 18 Feb 2025 02:00:03 +0000
Files and hashes: 1: EADA16WawvWYBOfDUV8UzS_VDZc.crl (hash: RNtre7QLbQfEta/Kym6Ln6GMd/CtHJteSvK9oTl66IU=)
2: Pjo3RDAsopUeM78b85_QPN1-7VI.roa (hash: I/2zLP79cKW8Js/ksFDd8QdVZcG00HVdVbP2kBa1g/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:49:79:74:48:58:19:3f:68:02:93:97:dd:11:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Validity
Not Before: Feb 17 02:00:03 2025 GMT
Not After : Feb 18 02:00:03 2025 GMT
Subject: CN=c07bc258ed80becf817bdd8d0a71a1c55609d817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:6f:e2:cb:38:86:22:18:20:b1:b4:3d:4c:
da:52:19:f6:64:90:29:6b:b4:12:21:ae:0f:48:f2:
59:cf:c9:73:28:ae:eb:fc:73:9b:7d:fe:b3:8b:e6:
cf:b1:81:8c:a6:cd:d4:3e:17:fc:04:13:c1:99:a3:
0b:a8:f9:a2:70:c7:34:54:c2:13:ac:1a:69:8c:2e:
58:ad:fb:6b:10:12:c3:cf:c3:1f:bf:8c:e1:a6:41:
88:84:76:5d:0f:46:0c:7b:cd:39:aa:4e:ba:65:fd:
3b:e5:27:7d:a8:46:07:35:9f:bc:a1:0a:82:43:4e:
51:ef:2b:5c:64:a3:3f:92:2a:1c:1d:0d:cf:e8:da:
d1:de:f3:30:23:cf:aa:db:59:38:7e:64:50:65:cb:
aa:3e:02:fa:e9:85:76:9f:fc:be:4e:b6:13:93:ef:
94:17:c7:66:80:b4:5c:b9:56:7e:d0:48:95:b6:4e:
2e:35:84:18:de:32:35:32:0d:20:a4:12:53:fe:e6:
ba:79:75:87:74:39:18:2f:1e:34:ef:6b:1b:1f:1e:
d1:55:ce:26:62:2c:91:e4:a6:a8:e0:f5:d0:4b:eb:
ff:d8:de:32:10:1e:17:df:a9:e2:b1:38:94:fe:96:
8e:cc:ac:e1:eb:30:78:05:37:d9:0f:28:6c:83:8e:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7B:C2:58:ED:80:BE:CF:81:7B:DD:8D:0A:71:A1:C5:56:09:D8:17
X509v3 Authority Key Identifier:
keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:59:52:15:41:a1:cb:1a:f9:26:e3:5a:bb:29:ed:28:7e:83:
b3:c4:80:f0:b3:46:cb:a8:8e:5d:6f:22:c4:73:e7:64:5e:26:
02:af:63:da:2b:7c:53:65:ee:4c:13:1e:5e:e7:e2:59:90:12:
ab:5a:b7:11:c6:fa:3e:fe:24:e9:5e:46:dc:cb:9b:20:a4:f3:
e6:f0:e7:d4:37:55:a9:68:11:c9:0f:0a:5d:b9:6a:26:b7:f8:
33:5e:ee:89:9d:6d:a4:80:f9:71:07:d2:f1:f8:16:e2:27:7c:
b3:50:28:a2:0d:b7:98:75:53:92:b8:54:46:27:da:29:aa:c9:
da:d8:40:99:e8:c3:a6:2f:20:e7:9d:97:3c:a6:e6:06:48:8a:
ec:a1:8c:5a:3a:06:80:f8:d2:4d:6d:92:06:f2:b8:92:b7:68:
01:9a:e9:4d:90:07:db:55:85:56:7a:8a:b6:a3:75:15:fc:74:
fc:57:3e:6b:6e:57:46:53:8a:3c:4f:5b:3d:bc:18:cc:7b:a0:
33:46:56:60:bf:a9:68:07:ef:2f:e2:87:35:86:05:72:92:78:
6c:57:a9:e6:2c:5c:d5:ad:87:cc:ac:14:b2:c4:06:9e:c9:11:
0f:e6:04:a0:6b:f7:75:24:c9:e1:0a:ad:9f:65:55:e0:1e:f5:
68:f3:79:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURokl5dEhYGT9oApOX3RHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDBjMGQ3YTU5YWMyZjU5ODA0ZTdjMzUxNWYxNGNkMmZk
NTBkOTcwHhcNMjUwMjE3MDIwMDAzWhcNMjUwMjE4MDIwMDAzWjAzMTEwLwYDVQQD
EyhjMDdiYzI1OGVkODBiZWNmODE3YmRkOGQwYTcxYTFjNTU2MDlkODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLpv4ss4hiIYILG0PUzaUhn2ZJAp
a7QSIa4PSPJZz8lzKK7r/HObff6zi+bPsYGMps3UPhf8BBPBmaMLqPmicMc0VMIT
rBppjC5YrftrEBLDz8Mfv4zhpkGIhHZdD0YMe805qk66Zf075Sd9qEYHNZ+8oQqC
Q05R7ytcZKM/kiocHQ3P6NrR3vMwI8+q21k4fmRQZcuqPgL66YV2n/y+TrYTk++U
F8dmgLRcuVZ+0EiVtk4uNYQY3jI1Mg0gpBJT/ua6eXWHdDkYLx4072sbHx7RVc4m
YiyR5Kao4PXQS+v/2N4yEB4X36nisTiU/paOzKzh6zB4BTfZDyhsg44baQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB7wljtgL7PgXvdjQpxocVWCdgXMB8GA1UdIwQY
MBaAFBAAwNelmsL1mATnw1FfFM0v1Q2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2It
ZWEzODQyMGIyNTc5LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2ItZWEzODQyMGIyNTc5
LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVlSFUGh
yxr5JuNauyntKH6Ds8SA8LNGy6iOXW8ixHPnZF4mAq9j2it8U2XuTBMeXufiWZAS
q1q3Ecb6Pv4k6V5G3MubIKTz5vDn1DdVqWgRyQ8KXblqJrf4M17uiZ1tpID5cQfS
8fgW4id8s1Aoog23mHVTkrhURifaKarJ2thAmejDpi8g552XPKbmBkiK7KGMWjoG
gPjSTW2SBvK4krdoAZrpTZAH21WFVnqKtqN1Ffx0/Fc+a25XRlOKPE9bPbwYzHug
M0ZWYL+paAfvL+KHNYYFcpJ4bFep5ixc1a2HzKwUssQGnskRD+YEoGv3dSTJ4Qqt
n2VV4B71aPN5+w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:25 2025 by rpki-client