Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
File: mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json)
Hash identifier: Km5bXW3lLidHxQ7zOSQxP6NkoU9Aoa82bz6z/tT+Vh4=
Subject key identifier: 3B:82:9E:03:0B:3C:8B:CD:CD:94:17:9D:C6:1A:58:26:9B:EA:08:8C
Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
Certificate issuer: /CN=98907806ddacb48430bdd0254898019e413a2bde
Certificate serial: 01951090082B40A162F4C2327BEBEAF6959D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
Manifest number: 0B3C
Signing time: Sun 16 Feb 2025 21:00:29 +0000
Manifest this update: Sun 16 Feb 2025 21:00:29 +0000
Manifest next update: Mon 17 Feb 2025 21:00:29 +0000
Files and hashes: 1: acpHH_CaNcRdqw7JD1HuBSlb_jE.roa (hash: Wxjj/iVVVmCvZCfA0I7IDXleX19TKp07yCUTpeGLxQk=)
2: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: WEmyPJHfX6q5+LN0Qusqu6g49M8IzUu4LhleTGbCvmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:08:2b:40:a1:62:f4:c2:32:7b:eb:ea:f6:95:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde
Validity
Not Before: Feb 16 21:00:29 2025 GMT
Not After : Feb 17 21:00:29 2025 GMT
Subject: CN=3b829e030b3c8bcdcd94179dc61a58269bea088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:c4:14:90:e4:5b:0f:d5:50:3a:21:81:96:
66:70:8e:ca:b5:a3:20:c2:3c:f8:a5:9b:5c:f0:67:
c0:27:c7:c4:6e:9f:d8:4c:04:9d:9d:31:f7:48:69:
3c:c8:cf:d1:36:a2:f4:fa:c3:41:22:db:51:3a:e4:
25:31:83:5b:10:a6:6f:91:53:c1:da:ef:65:26:53:
6a:c8:2b:a6:ad:51:80:38:7e:74:90:d0:d5:a5:52:
1d:19:ff:f2:3d:5d:d6:4b:35:a6:44:e8:46:21:b1:
72:ff:01:b0:d1:68:e0:37:7b:c2:46:1b:77:ba:4e:
ae:53:0d:0a:84:87:1b:a2:0e:35:6d:a5:93:0a:3f:
c1:da:de:93:19:02:e1:bb:52:ee:ec:4e:12:6b:5d:
df:7b:1a:24:00:d4:22:f6:02:44:a4:8c:3e:38:dd:
7e:94:e4:40:f6:62:fb:3f:be:61:27:7e:bb:79:08:
07:a5:ea:cc:39:e8:c2:d6:2c:00:01:10:cd:62:f9:
04:6c:76:fc:8c:f5:ac:2f:39:46:c1:4d:df:a3:5e:
ce:9e:88:e1:48:84:4b:5a:44:60:b4:ec:91:68:0e:
b8:66:f0:ba:2e:a9:52:f0:c5:f8:5d:92:3a:75:03:
8c:7e:9f:68:89:55:66:78:6d:81:20:b9:eb:97:6d:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:9E:03:0B:3C:8B:CD:CD:94:17:9D:C6:1A:58:26:9B:EA:08:8C
X509v3 Authority Key Identifier:
keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a9:7d:7c:9a:c0:b2:68:03:36:99:80:8c:68:1c:30:52:85:
4a:61:a5:bc:aa:c7:71:26:e4:0f:fb:9c:cc:07:ce:7c:7b:ca:
9d:2f:0f:d9:44:fe:69:c9:cb:d0:07:87:4d:15:d3:a7:ab:a8:
3b:b7:e2:4f:bd:ad:5a:f1:ae:25:a5:6f:36:e0:1f:96:50:26:
a5:34:f7:c5:06:d3:51:22:3a:f8:f0:4b:c2:61:38:ea:16:4c:
77:10:4b:a6:3b:af:26:25:63:cc:2f:dd:fb:3d:25:55:f2:f6:
45:39:da:0c:72:67:76:63:4b:3c:72:6d:87:f2:9b:0d:10:a6:
fa:e4:47:1e:1a:82:5f:6d:81:60:4e:8e:60:df:cd:c1:f0:9f:
e0:f9:a3:1c:c3:b0:33:a0:d0:63:3b:ce:9f:e3:42:c0:f8:b4:
f2:c9:fd:4a:21:b1:60:5f:c9:85:52:dc:29:f2:cd:21:0a:ab:
57:4a:8a:64:03:2b:f3:45:3c:c2:63:7b:c3:5f:ad:40:eb:07:
9d:5e:c2:21:a4:33:ce:fe:5d:4d:03:58:7d:2c:9e:07:a7:2d:
1e:42:be:f9:45:37:93:59:b3:da:8f:1b:72:1c:88:6b:9d:8d:
8c:f7:fd:bd:5b:1e:cf:32:96:f3:d2:36:4a:6a:13:26:c8:27:
55:6c:ea:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQkAgrQKFi9MIye+vq9pWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTA3ODA2ZGRhY2I0ODQzMGJkZDAyNTQ4OTgwMTllNDEz
YTJiZGUwHhcNMjUwMjE2MjEwMDI5WhcNMjUwMjE3MjEwMDI5WjAzMTEwLwYDVQQD
EygzYjgyOWUwMzBiM2M4YmNkY2Q5NDE3OWRjNjFhNTgyNjliZWEwODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgbEFJDkWw/VUDohgZZmcI7KtaMg
wjz4pZtc8GfAJ8fEbp/YTASdnTH3SGk8yM/RNqL0+sNBIttROuQlMYNbEKZvkVPB
2u9lJlNqyCumrVGAOH50kNDVpVIdGf/yPV3WSzWmROhGIbFy/wGw0WjgN3vCRht3
uk6uUw0KhIcbog41baWTCj/B2t6TGQLhu1Lu7E4Sa13fexokANQi9gJEpIw+ON1+
lORA9mL7P75hJ367eQgHperMOejC1iwAARDNYvkEbHb8jPWsLzlGwU3fo17Onojh
SIRLWkRgtOyRaA64ZvC6LqlS8MX4XZI6dQOMfp9oiVVmeG2BILnrl23EzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuCngMLPIvNzZQXncYaWCab6giMMB8GA1UdIwQY
MBaAFJiQeAbdrLSEML3QJUiYAZ5BOiveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMt
MTI2NzRlNjYxZTEzLzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMtMTI2NzRlNjYxZTEz
LzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHql9fJrA
smgDNpmAjGgcMFKFSmGlvKrHcSbkD/uczAfOfHvKnS8P2UT+acnL0AeHTRXTp6uo
O7fiT72tWvGuJaVvNuAfllAmpTT3xQbTUSI6+PBLwmE46hZMdxBLpjuvJiVjzC/d
+z0lVfL2RTnaDHJndmNLPHJth/KbDRCm+uRHHhqCX22BYE6OYN/NwfCf4PmjHMOw
M6DQYzvOn+NCwPi08sn9SiGxYF/JhVLcKfLNIQqrV0qKZAMr80U8wmN7w1+tQOsH
nV7CIaQzzv5dTQNYfSyeB6ctHkK++UU3k1mz2o8bchyIa52NjPf9vVsezzKW89I2
SmoTJsgnVWzqlA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:35 2025 by rpki-client