Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: Zimj0NuLnH5oeS+JE0ik3GNtvNCupBcF/ILG/Ts7i4M=
Subject key identifier: 80:4C:4A:47:D9:64:33:29:AE:24:5D:00:DB:D8:4B:61:0A:45:7D:36
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 0194C350B44EA63405597E2BC1C77738ED05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 13B2
Signing time: Sat 01 Feb 2025 21:00:33 +0000
Manifest this update: Sat 01 Feb 2025 21:00:33 +0000
Manifest next update: Sun 02 Feb 2025 21:00:33 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: Rxv7xJLvYiSDNLCNFH+WFipdpTBNytOkU7uMWsPdDPM=)
2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:b4:4e:a6:34:05:59:7e:2b:c1:c7:77:38:ed:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Feb 1 21:00:33 2025 GMT
Not After : Feb 2 21:00:33 2025 GMT
Subject: CN=804c4a47d9643329ae245d00dbd84b610a457d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:bc:c2:fd:63:6f:aa:aa:c6:88:cb:c3:4b:
4a:93:da:aa:04:85:ce:c2:18:0a:aa:0c:85:1b:ce:
b2:66:ef:da:a6:ae:08:bf:51:08:cc:83:f0:95:20:
e9:2f:2d:c8:a3:bc:ef:36:56:27:8a:47:9d:4c:ff:
f8:d4:bd:bd:47:8a:23:f5:b8:67:40:e2:65:db:6c:
c4:83:32:59:33:2e:f8:b6:fe:45:23:2a:de:1f:b9:
ea:da:93:76:dd:f2:35:47:77:7a:46:69:5b:bc:61:
a3:35:68:f6:5d:fa:6b:dc:36:84:e8:79:9e:6d:c1:
0f:bd:f0:48:16:bb:50:fa:2a:d7:95:3e:e9:31:f7:
c1:ef:df:f1:3b:23:e3:ab:26:46:1c:83:19:44:9b:
c7:e5:3a:e9:a5:c4:b1:e5:5f:68:fd:78:87:a5:4f:
ee:60:8b:31:e5:22:60:a1:af:53:08:9a:d8:57:41:
74:dc:3d:27:98:f2:8f:58:c0:cd:c4:73:a4:0c:05:
8f:18:fe:82:2e:c5:3c:73:e7:43:5f:ef:b1:65:1f:
bc:2a:61:58:af:25:29:e0:15:4a:e9:f2:84:0d:89:
a3:24:8d:f5:29:ea:30:a9:f4:2c:90:72:27:d2:8a:
13:7d:4c:21:a1:d4:70:ba:78:22:73:72:73:3a:a7:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4C:4A:47:D9:64:33:29:AE:24:5D:00:DB:D8:4B:61:0A:45:7D:36
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:22:4d:79:b1:4f:40:0b:2f:1b:60:aa:56:e9:79:b0:8e:d5:
53:53:c7:e2:41:4e:68:e8:13:16:63:c0:cc:36:e1:19:47:cc:
e8:54:b7:d1:a5:b7:43:97:90:e6:44:17:6f:98:2e:19:ac:0a:
a2:76:7a:a9:a6:eb:18:0a:0a:b9:c3:2c:47:c3:6d:b8:b2:01:
70:05:1f:4e:06:d8:f4:2f:d9:02:58:a2:1b:4d:10:6e:82:22:
80:34:b6:62:f6:39:d7:ef:d6:78:81:6b:fb:8c:71:ac:39:16:
b7:8e:33:22:8c:90:ce:e4:5d:9d:55:d4:06:79:d9:1a:65:e6:
79:1c:ec:f0:2e:82:63:1e:0d:c6:80:b0:90:e1:b9:69:d6:8d:
3a:7d:81:56:33:d6:0e:9d:9a:09:85:2b:89:b9:1d:c7:52:4d:
f7:69:2d:c5:9b:c5:16:06:71:d7:13:0a:a1:c1:b2:56:3e:55:
c2:7f:03:e8:cf:64:e0:24:53:8c:c1:9b:46:84:82:c6:fc:1e:
29:5b:62:1d:2f:5a:b3:1b:e4:87:b2:87:9e:cb:3d:8f:7e:0a:
cb:1e:9e:2f:16:a2:ce:55:44:12:fd:fb:fe:25:b5:85:7f:45:
30:1b:1c:6b:a8:26:01:87:a1:9a:63:07:30:6b:a7:9f:95:ac:
7d:5c:37:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDULROpjQFWX4rwcd3OO0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZjc3ODkzNDZhOWY5MjkxNWYxZjc1YjEwYWY5NGY5N2I2
ZTI0ZmEwHhcNMjUwMjAxMjEwMDMzWhcNMjUwMjAyMjEwMDMzWjAzMTEwLwYDVQQD
Eyg4MDRjNGE0N2Q5NjQzMzI5YWUyNDVkMDBkYmQ4NGI2MTBhNDU3ZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuu8wv1jb6qqxojLw0tKk9qqBIXO
whgKqgyFG86yZu/apq4Iv1EIzIPwlSDpLy3Io7zvNlYnikedTP/41L29R4oj9bhn
QOJl22zEgzJZMy74tv5FIyreH7nq2pN23fI1R3d6RmlbvGGjNWj2Xfpr3DaE6Hme
bcEPvfBIFrtQ+irXlT7pMffB79/xOyPjqyZGHIMZRJvH5TrppcSx5V9o/XiHpU/u
YIsx5SJgoa9TCJrYV0F03D0nmPKPWMDNxHOkDAWPGP6CLsU8c+dDX++xZR+8KmFY
ryUp4BVK6fKEDYmjJI31KeowqfQskHIn0ooTfUwhodRwungic3JzOqfsLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBMSkfZZDMpriRdANvYS2EKRX02MB8GA1UdIwQY
MBaAFD/3eJNGqfkpFfH3WxCvlPl7biT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEt
YWUxMzA1MzEzM2NiLzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEtYWUxMzA1MzEzM2Ni
LzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiJNebFP
QAsvG2CqVul5sI7VU1PH4kFOaOgTFmPAzDbhGUfM6FS30aW3Q5eQ5kQXb5guGawK
onZ6qabrGAoKucMsR8NtuLIBcAUfTgbY9C/ZAliiG00QboIigDS2YvY51+/WeIFr
+4xxrDkWt44zIoyQzuRdnVXUBnnZGmXmeRzs8C6CYx4NxoCwkOG5adaNOn2BVjPW
Dp2aCYUribkdx1JN92ktxZvFFgZx1xMKocGyVj5Vwn8D6M9k4CRTjMGbRoSCxvwe
KVtiHS9asxvkh7KHnss9j34Kyx6eLxaizlVEEv37/iW1hX9FMBsca6gmAYehmmMH
MGunn5WsfVw3Gg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:59 2025 by rpki-client