Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
File: RuUyMK589oaKpoO2JLWagRiI8Lo.mft (raw, json)
Hash identifier: FjrlaGtLIqcvUJQrco1QwxE4NL+oNS5gY0JGDQMxHtg=
Subject key identifier: 4C:6B:4B:E6:BB:2D:F1:7A:B6:D7:65:C9:45:5A:41:D3:78:FA:83:79
Authority key identifier: 46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
Certificate issuer: /CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Certificate serial: 0194C50816A659A1ED4816F6610745F6F4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
Manifest number: AF
Signing time: Sun 02 Feb 2025 05:00:29 +0000
Manifest this update: Sun 02 Feb 2025 05:00:29 +0000
Manifest next update: Mon 03 Feb 2025 05:00:29 +0000
Files and hashes: 1: 2yUVHb7bKQBM4p7hGq3iiZimEbc.roa (hash: a9OMpn99so26tcAAD5Nx55fldNYwi9TBv8dYukEeMlU=)
2: RuUyMK589oaKpoO2JLWagRiI8Lo.crl (hash: U+tARHwnNjyW32FhEb4XLlzUYUP367jp3l4r1oYRjoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:16:a6:59:a1:ed:48:16:f6:61:07:45:f6:f4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Validity
Not Before: Feb 2 05:00:29 2025 GMT
Not After : Feb 3 05:00:29 2025 GMT
Subject: CN=4c6b4be6bb2df17ab6d765c9455a41d378fa8379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:27:d6:d0:73:c3:d3:51:51:08:40:1f:28:
a6:bd:1c:5a:35:9d:f0:b4:39:6b:3c:a6:d3:1e:63:
4a:c9:f1:05:33:9c:32:ca:36:c2:99:58:02:d7:30:
cd:c8:87:1f:e0:e6:65:9d:0d:67:40:bc:01:e0:f1:
2b:83:17:8f:21:b1:b3:c7:a8:78:5a:bc:b7:92:50:
41:19:08:f6:20:a0:b2:13:0b:d2:12:8a:03:a6:5f:
a6:c0:b9:84:2e:a3:d9:e9:44:e9:cc:0e:59:b1:b3:
89:64:ac:90:82:cc:96:a1:eb:b2:2c:6b:4e:4d:73:
92:17:cb:60:2c:75:a3:e2:40:12:f9:5b:e3:65:27:
2f:70:ab:9b:38:2a:e2:6b:76:6d:8d:d0:de:be:40:
6f:a6:9b:dc:c3:19:08:d8:af:8d:12:13:0b:4f:83:
9e:9e:9f:1c:be:18:c0:7b:f4:b9:2a:4d:8d:37:c6:
ed:08:07:f2:cc:d7:35:38:6d:62:90:9e:35:ad:77:
0e:79:62:0d:cd:c4:55:37:d2:c9:31:56:32:5c:8e:
8c:4d:8c:23:a3:8d:0b:87:b9:d9:fa:e2:36:0b:1f:
6e:e7:41:40:c5:9b:6e:5d:bc:99:af:fb:58:29:d9:
6a:59:37:02:a8:5f:7c:81:de:5c:91:ed:25:15:b6:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6B:4B:E6:BB:2D:F1:7A:B6:D7:65:C9:45:5A:41:D3:78:FA:83:79
X509v3 Authority Key Identifier:
keyid:46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:41:aa:bd:47:d1:e2:20:51:58:11:70:dc:ab:9d:e9:4a:8a:
98:b2:cb:e0:6e:f1:a2:28:90:1e:81:42:a5:cb:cb:ae:84:43:
89:a0:56:7b:72:3d:d2:7c:92:73:67:c6:b2:42:0a:77:cc:6d:
b7:c3:2f:88:c5:df:2a:a9:24:3c:46:89:17:0e:19:19:0b:0c:
a2:21:93:06:5e:54:9f:f6:9c:a0:01:93:44:c2:54:94:ac:b4:
0b:09:12:ea:a5:5b:30:0d:34:51:ae:e5:90:6a:1f:c8:9c:6f:
8c:a8:37:fc:a0:29:db:a2:93:d7:16:e8:13:f6:03:55:5b:50:
1b:65:5a:7f:18:5c:b2:83:af:85:cf:00:29:ae:08:8e:87:22:
41:ba:5e:ff:22:a7:94:f6:39:4c:dc:b3:ec:0b:a6:f3:a2:31:
7b:c4:ce:3f:f2:01:b2:78:14:6d:95:09:d3:c0:0b:cd:47:ec:
ef:a8:b2:d3:a1:96:20:84:4a:55:ac:06:04:76:dc:fb:ea:26:
50:0a:2b:77:bc:b2:80:ad:50:02:7e:ef:6e:e8:86:95:a2:1f:
e7:f0:a9:d6:dd:bd:24:e0:fb:7a:68:f9:8b:5b:fc:d5:90:5f:
88:84:c1:f6:27:8c:82:28:cb:5c:6a:c5:fb:58:4b:49:28:b6:
d6:c7:f0:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTFCBamWaHtSBb2YQdF9vTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZTUzMjMwYWU3Y2Y2ODY4YWE2ODNiNjI0YjU5YTgxMTg4
OGYwYmEwHhcNMjUwMjAyMDUwMDI5WhcNMjUwMjAzMDUwMDI5WjAzMTEwLwYDVQQD
Eyg0YzZiNGJlNmJiMmRmMTdhYjZkNzY1Yzk0NTVhNDFkMzc4ZmE4Mzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTQn1tBzw9NRUQhAHyimvRxaNZ3w
tDlrPKbTHmNKyfEFM5wyyjbCmVgC1zDNyIcf4OZlnQ1nQLwB4PErgxePIbGzx6h4
Wry3klBBGQj2IKCyEwvSEooDpl+mwLmELqPZ6UTpzA5ZsbOJZKyQgsyWoeuyLGtO
TXOSF8tgLHWj4kAS+VvjZScvcKubOCria3ZtjdDevkBvppvcwxkI2K+NEhMLT4Oe
np8cvhjAe/S5Kk2NN8btCAfyzNc1OG1ikJ41rXcOeWINzcRVN9LJMVYyXI6MTYwj
o40Lh7nZ+uI2Cx9u50FAxZtuXbyZr/tYKdlqWTcCqF98gd5cke0lFbaz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExrS+a7LfF6ttdlyUVaQdN4+oN5MB8GA1UdIwQY
MBaAFEblMjCufPaGiqaDtiS1moEYiPC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jMzNhMmItMzlhMC00OTIwLWE0NDEt
MjMyMjQwM2VjNzg3LzEvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jMzNhMmItMzlhMC00OTIwLWE0NDEtMjMyMjQwM2VjNzg3
LzEvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0GqvUfR
4iBRWBFw3Kud6UqKmLLL4G7xoiiQHoFCpcvLroRDiaBWe3I90nySc2fGskIKd8xt
t8MviMXfKqkkPEaJFw4ZGQsMoiGTBl5Un/acoAGTRMJUlKy0CwkS6qVbMA00Ua7l
kGofyJxvjKg3/KAp26KT1xboE/YDVVtQG2VafxhcsoOvhc8AKa4IjociQbpe/yKn
lPY5TNyz7Aum86Ixe8TOP/IBsngUbZUJ08ALzUfs76iy06GWIIRKVawGBHbc++om
UAord7yygK1QAn7vbuiGlaIf5/Cp1t29JOD7emj5i1v81ZBfiITB9ieMgijLXGrF
+1hLSSi21sfw+Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:45 2025 by rpki-client