Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
File: tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json)
Hash identifier: OnKH9QxpMMDEF/FYtMPbaFrRsAPoTkRpPOil1gNc6D0=
Subject key identifier: 89:3C:3C:C2:EF:43:22:7B:32:75:B9:62:00:32:4D:5B:4B:D9:05:2B
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial: 0194C4D12E2B2ADAF65E9E8C49C716345EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
Manifest number: 0A1B
Signing time: Sun 02 Feb 2025 04:00:30 +0000
Manifest this update: Sun 02 Feb 2025 04:00:30 +0000
Manifest next update: Mon 03 Feb 2025 04:00:30 +0000
Files and hashes: 1: Y7rbDno7w__NNU8_Y1vybLh8QhU.roa (hash: JcJWoK6XwWQ+PAZZ9rS/dpHArel2kscu87IT6w7P4BM=)
2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: gYErcjEz28HoMvMm+wC5nV29cUd6fHvS6gcdY+GDqSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:2e:2b:2a:da:f6:5e:9e:8c:49:c7:16:34:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Validity
Not Before: Feb 2 04:00:30 2025 GMT
Not After : Feb 3 04:00:30 2025 GMT
Subject: CN=893c3cc2ef43227b3275b96200324d5b4bd9052b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:1b:00:42:44:d3:b5:eb:9a:86:7a:b8:45:
8d:aa:a1:97:d3:2f:b0:eb:95:0c:d3:cc:4a:17:2e:
8f:1d:18:e4:67:62:f5:72:9a:0a:9c:02:19:95:c0:
27:cd:0b:30:c2:b1:56:e5:a2:b8:64:17:94:d8:c4:
95:cc:8e:86:19:d2:33:cd:ea:e2:74:70:e4:35:63:
2e:14:92:23:59:69:a7:e4:63:5f:a8:b5:08:88:21:
85:8b:78:3e:e0:d5:a4:7b:63:b2:cb:46:bd:d8:fc:
2b:2d:29:35:52:e0:8a:c3:df:25:4c:b1:fb:bc:77:
0d:07:2a:a4:48:2e:7f:f8:7d:8b:35:54:75:46:af:
19:86:39:da:60:8d:e0:77:4f:c5:8f:43:97:25:e6:
45:b5:60:91:9d:70:78:b6:29:19:71:ec:ad:5a:92:
e9:38:d6:67:7d:5d:49:e2:5d:d3:16:b5:dc:fc:2f:
17:9f:5c:1e:02:4a:65:2d:2c:5a:04:7d:57:81:b9:
ef:9a:ae:a7:cd:22:09:2c:c2:55:97:42:2e:f4:d0:
de:d6:4f:81:57:b0:29:e8:5b:b0:ae:57:01:1c:de:
07:a1:cc:20:4a:47:7a:33:fc:5c:62:f5:10:99:19:
15:61:27:bd:06:e6:94:c8:b4:08:25:76:8d:b4:bc:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3C:3C:C2:EF:43:22:7B:32:75:B9:62:00:32:4D:5B:4B:D9:05:2B
X509v3 Authority Key Identifier:
keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c6:a3:83:52:68:59:3e:f2:53:63:02:1b:b5:02:aa:b2:9a:
5f:1f:6a:44:9a:1b:ad:66:89:16:95:82:9f:7a:bb:be:10:fd:
90:d1:6a:31:93:6b:5e:07:3a:1f:5c:40:f7:03:65:71:33:78:
0b:0d:2b:0e:cd:f8:90:2a:88:5d:e4:dc:0c:cf:1f:68:b0:cd:
7a:4c:6f:f8:2a:3c:5c:f6:0b:99:48:97:88:2b:d4:fd:5e:43:
f3:55:fe:97:5f:ef:cf:82:ba:35:34:2d:8a:59:5e:e2:f2:78:
0f:c4:12:50:da:12:f0:98:95:52:ee:dd:c8:0a:14:26:d8:04:
9b:d5:14:84:c7:96:bb:88:b9:27:fe:d3:08:69:dd:23:58:49:
01:f5:57:03:56:43:bf:6c:10:ba:bf:6b:f5:aa:1e:be:52:db:
29:a5:df:69:cb:14:fe:d6:7d:d7:17:dc:f7:ae:7b:04:a4:2c:
43:ac:2a:f1:57:f3:7f:3c:52:8a:44:9d:85:fa:95:75:fc:e2:
6a:68:d8:79:66:50:c7:a5:2a:93:dd:ae:42:7c:8d:f8:35:85:
64:12:02:e7:b7:48:e5:82:fd:7a:62:58:d0:2a:de:40:00:82:
17:9e:1c:17:04:3f:32:8f:c2:06:03:e4:5d:2d:8f:68:77:c2:
00:7e:1d:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0S4rKtr2Xp6MSccWNF7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDJiYzBkOGNjMjhmNTU4NjE1ZWQzZmFlNTNjYWNlNGE2
ZWYwODEwHhcNMjUwMjAyMDQwMDMwWhcNMjUwMjAzMDQwMDMwWjAzMTEwLwYDVQQD
Eyg4OTNjM2NjMmVmNDMyMjdiMzI3NWI5NjIwMDMyNGQ1YjRiZDkwNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCwbAEJE07XrmoZ6uEWNqqGX0y+w
65UM08xKFy6PHRjkZ2L1cpoKnAIZlcAnzQswwrFW5aK4ZBeU2MSVzI6GGdIzzeri
dHDkNWMuFJIjWWmn5GNfqLUIiCGFi3g+4NWke2Oyy0a92PwrLSk1UuCKw98lTLH7
vHcNByqkSC5/+H2LNVR1Rq8ZhjnaYI3gd0/Fj0OXJeZFtWCRnXB4tikZceytWpLp
ONZnfV1J4l3TFrXc/C8Xn1weAkplLSxaBH1Xgbnvmq6nzSIJLMJVl0Iu9NDe1k+B
V7Ap6FuwrlcBHN4HocwgSkd6M/xcYvUQmRkVYSe9BuaUyLQIJXaNtLw0PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk8PMLvQyJ7MnW5YgAyTVtL2QUrMB8GA1UdIwQY
MBaAFLVCvA2Mwo9VhhXtP65Tys5KbvCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUt
N2Y2ZTQ5MzBmMjVhLzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUtN2Y2ZTQ5MzBmMjVh
LzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcajg1Jo
WT7yU2MCG7UCqrKaXx9qRJobrWaJFpWCn3q7vhD9kNFqMZNrXgc6H1xA9wNlcTN4
Cw0rDs34kCqIXeTcDM8faLDNekxv+Co8XPYLmUiXiCvU/V5D81X+l1/vz4K6NTQt
ille4vJ4D8QSUNoS8JiVUu7dyAoUJtgEm9UUhMeWu4i5J/7TCGndI1hJAfVXA1ZD
v2wQur9r9aoevlLbKaXfacsU/tZ91xfc9657BKQsQ6wq8VfzfzxSikSdhfqVdfzi
amjYeWZQx6Uqk92uQnyN+DWFZBIC57dI5YL9emJY0CreQACCF54cFwQ/Mo/CBgPk
XS2PaHfCAH4dNg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:02 2025 by rpki-client