Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
File: tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json)
Hash identifier: eT3p8oRbnQEVzK2+XSPyL2/RsXKaZlqyu34XTvsMut8=
Subject key identifier: 28:C7:A4:0D:A4:37:B0:C0:39:99:2C:AF:9C:17:BA:8E:C3:37:30:D1
Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Certificate serial: 019511D953AE152E5876D7C8CE715EA10EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
Manifest number: 1212
Signing time: Mon 17 Feb 2025 03:00:10 +0000
Manifest this update: Mon 17 Feb 2025 03:00:10 +0000
Manifest next update: Tue 18 Feb 2025 03:00:10 +0000
Files and hashes: 1: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: eiITWNmfa4I23dxhXkbsZFenrzbATP03hn7UhKq4pM0=)
2: vBSjooCv1VbYtFGvr_WsQil5zco.roa (hash: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:53:ae:15:2e:58:76:d7:c8:ce:71:5e:a1:0e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf
Validity
Not Before: Feb 17 03:00:10 2025 GMT
Not After : Feb 18 03:00:10 2025 GMT
Subject: CN=28c7a40da437b0c039992caf9c17ba8ec33730d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:83:b8:1b:df:57:42:6f:0d:e6:13:97:02:
99:f9:ef:81:fc:e6:f9:80:14:3e:ea:18:ce:59:f0:
f5:db:03:b2:4b:09:23:7c:7c:ac:0c:72:c4:bf:af:
94:f4:34:ee:49:0e:16:58:22:47:39:1d:6e:ad:7a:
ef:85:a9:a6:5c:21:70:4d:19:5c:e5:40:40:1d:3f:
d7:0b:da:e7:c4:92:6f:e8:5c:fc:29:3f:f0:40:c4:
c4:c7:07:96:4d:d8:a0:0d:05:5b:01:65:41:90:0d:
93:cd:14:c8:ae:ed:0e:ea:56:17:c0:4f:86:96:00:
89:f3:46:79:9f:a3:fa:48:42:28:ea:89:7b:21:54:
82:31:2d:79:a4:87:36:fd:e2:79:3b:87:3b:6b:e7:
4b:ec:b9:e6:d8:9a:50:5b:08:4c:ce:05:7a:ec:58:
c0:84:57:b2:e7:62:59:6f:4a:ad:97:d7:ef:9f:ab:
1f:3c:62:db:4d:1b:2a:19:50:0c:35:f9:dc:0f:4e:
b1:8e:80:83:4a:5e:fe:3d:fa:01:6b:b5:f9:c6:1c:
ac:3f:f1:70:2a:c2:56:cc:1d:29:85:95:07:ed:c5:
49:9c:57:27:d4:cf:a7:c2:97:0e:eb:0c:f9:48:ce:
df:c6:9d:ac:28:4a:09:61:bb:58:ce:12:ad:db:e5:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C7:A4:0D:A4:37:B0:C0:39:99:2C:AF:9C:17:BA:8E:C3:37:30:D1
X509v3 Authority Key Identifier:
keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bc:39:fe:fa:43:bb:c8:7d:c7:c3:67:64:d7:19:88:c4:ea:
36:73:41:75:66:09:2e:5f:c5:bd:ee:6a:7e:26:55:98:5f:c9:
e0:04:15:2d:3b:a3:7b:10:42:0b:2a:22:58:32:4f:8c:0d:5a:
7d:60:12:b2:58:d5:78:b0:57:8d:bd:65:a9:4d:f8:95:aa:fc:
f0:e0:aa:a3:81:5f:fe:66:0e:2e:b2:ad:c8:bc:6c:9a:49:30:
68:2c:aa:ad:cc:f9:8b:b5:20:78:78:ec:b8:71:34:19:32:17:
a3:c9:98:62:bc:5b:5e:9b:93:62:d8:7f:a8:d6:8d:f8:c1:e5:
18:cb:19:87:e9:83:b0:c6:f7:f1:14:8e:f1:02:81:c7:65:cf:
f1:9f:7c:7d:a4:37:18:98:4b:41:14:17:c8:e5:6a:ef:86:d7:
23:21:8d:d7:c7:c0:8e:f1:b1:17:7a:d0:bb:29:c6:b1:f9:fc:
9b:7b:da:3c:ad:c3:5e:57:1e:a4:f8:fc:54:a2:9a:67:a3:c4:
5f:5a:d7:c5:82:f4:6f:ec:34:95:b5:da:f2:14:20:a4:09:85:
03:70:3d:da:9b:51:7f:fd:a7:de:f3:c6:a3:e9:12:21:f6:d1:
5e:5b:e1:3d:df:27:e6:39:53:41:cb:31:dc:9f:83:76:05:70:
5c:78:fc:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2VOuFS5YdtfIznFeoQ6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTQwYzVmOGUzYzdiYzI0YTFhZDRjODQwNjQxNTI2M2Vi
NmJhYmYwHhcNMjUwMjE3MDMwMDEwWhcNMjUwMjE4MDMwMDEwWjAzMTEwLwYDVQQD
EygyOGM3YTQwZGE0MzdiMGMwMzk5OTJjYWY5YzE3YmE4ZWMzMzczMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxuDuBvfV0JvDeYTlwKZ+e+B/Ob5
gBQ+6hjOWfD12wOySwkjfHysDHLEv6+U9DTuSQ4WWCJHOR1urXrvhammXCFwTRlc
5UBAHT/XC9rnxJJv6Fz8KT/wQMTExweWTdigDQVbAWVBkA2TzRTIru0O6lYXwE+G
lgCJ80Z5n6P6SEIo6ol7IVSCMS15pIc2/eJ5O4c7a+dL7Lnm2JpQWwhMzgV67FjA
hFey52JZb0qtl9fvn6sfPGLbTRsqGVAMNfncD06xjoCDSl7+PfoBa7X5xhysP/Fw
KsJWzB0phZUH7cVJnFcn1M+nwpcO6wz5SM7fxp2sKEoJYbtYzhKt2+X0HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjHpA2kN7DAOZksr5wXuo7DNzDRMB8GA1UdIwQY
MBaAFLUUDF+OPHvCShrUyEBkFSY+trq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85NGI3M2EtYTNkNS00MGM0LTkyMjQt
Y2RjMjQ5MDM5M2E2LzEvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85NGI3M2EtYTNkNS00MGM0LTkyMjQtY2RjMjQ5MDM5M2E2
LzEvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLw5/vpD
u8h9x8NnZNcZiMTqNnNBdWYJLl/Fve5qfiZVmF/J4AQVLTujexBCCyoiWDJPjA1a
fWASsljVeLBXjb1lqU34lar88OCqo4Ff/mYOLrKtyLxsmkkwaCyqrcz5i7UgeHjs
uHE0GTIXo8mYYrxbXpuTYth/qNaN+MHlGMsZh+mDsMb38RSO8QKBx2XP8Z98faQ3
GJhLQRQXyOVq74bXIyGN18fAjvGxF3rQuynGsfn8m3vaPK3DXlcepPj8VKKaZ6PE
X1rXxYL0b+w0lbXa8hQgpAmFA3A92ptRf/2n3vPGo+kSIfbRXlvhPd8n5jlTQcsx
3J+DdgVwXHj8Ww==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:54 2025 by rpki-client